ij¿ç¹ú¹«Ë¾Òò50ÒÚ´Î×Ô¶¯²¦ºÅµç»°±»FCC·£¿î½ü3ÒÚÃÀÔª

°ä²¼¹¦·ò 2023-08-08

1¡¢Ä³¿ç¹ú¹«Ë¾Òò50ÒÚ´Î×Ô¶¯²¦ºÅµç»°±»FCC·£¿î½ü3ÒÚÃÀÔª


¾ÝýÌå8ÔÂ4ÈÕ±¨µÀ£¬ÃÀ¹úFCC¶ÔÒ»¼Ò¿ç¹úÍøÂ繫˾·£¿î299997000ÃÀÔª£¬Ô­ÒòÊǸù«Ë¾ÔÚ2021ÄêÈý¸öÔÂÄÚÏò³¬¹ý5ÒÚ¸öµç»°ºÅÂ벦´òÁË50ÒÚ´Î×Ô¶¯²¦ºÅµç»°¡£¡£¡£FCC³Æ£¬¸Ã¹«Ë¾Î¥·´Á˶àÏî×Ô¶¯É§Èŵ绰½ûÁÔ̺¬Î´¾­ÊÂÏÈÃ÷È·Ô޳ɾÍÏòÊÖ»ú²¦´òÔ¤ÏÈÂ¼ÖÆµÄÓïÒôµç»°¡¢Î´¾­ÊéÃæÔ޳ɲ¦´òµç»°ÓªÏúµç»°¡¢²¦´ò¹ú¶È²»Èݺô½ÐµÇ¼Ç²áÉϵĺÅÂëÒÔ¼°Î´ÄÜÔÚÆðͷʱ¼ø±ðÀ´µçÕßµÄÉí·ÝµÈ¡£¡£¡£´ËÍ⣬ÕâЩµç»°ÓªÏúʹÓÃÀ´µçÏÔʾºýŪ¹¤¾ßÀ´¸²¸ÇÆäÏÖʵÆðÔ´£¬ÕâҲΥ·´ÁË˾·¨¡£¡£¡£ÈôÊÇÊÜÖÆ²ÃʵÌåδÄÜÊµÊ±ÍÆ¹ã¸¶¿îʹÃü£¬ÃÀ¹ú˾·¨²¿½«È¾Ö¸¡£¡£¡£


https://www.bleepingcomputer.com/news/security/extended-warranty-robocallers-fined-300-million-after-5-billion-scam-calls/


2¡¢ÃÀ¹úÏÄÍþÒÄË«×Ó×ù±±ÌìÎĄ̈Ôâµ½¹¥»÷µ¼ÖÂÔËÓªÁÙʱÖжÏ


ýÌå8ÔÂ3ÈÕ±¨µÀ³Æ£¬ÃÀ¹ú¹ú¶ÈÌìÎÄѧÖÐÐÄÔâµ½¹¥»÷£¬µ¼ÖÂÏÄÍþÒÄÒ»¸öÌìÎĄ̈µÄÔËÓªÊܵ½Ó°Ïì¡£¡£¡£ÃÀ¹ú¹ú¶È¿ÆÑ§»ù½ð»áµÄ¹ú¶È¹âѧºìÍâÌìÎÄѧ×êÑг¢ÊÔÊÒ£¨NOIRLab£©³ÆÆä·¢ÏÖ¹¥»÷ºóÁ¢¼´²ÉÈ¡´ëÊ©£¬²¢³öÓÚÉóÉ÷˼¿¼¹Ø±ÕÁËË«×Ó×ùÌìÎÄÌ¨ÍÆËã»úϵͳ¡£¡£¡£Ä¿Ç°£¬Ë«×Ó×ùÍøÕ¾ºÍÌá°¸¹¤¾ßÒÑÀëÏߣ¬µ«NOIRLabÍøÕ¾ÈÔά³ÖÔÚÏß״̬¡£¡£¡£¸Ã³¢ÊÔÊÒûÓÐй©ÕâÊÇ·ñÊÇÀÕË÷¹¥»÷£¬µ«°µÊ¾Õâ¶ÔNOIRLabÖÐÐĵįäËü»ù´¡ÉèʩûÓÐÓ°Ïì¡£¡£¡£


https://therecord.media/gemini-north-observatory-cyberattack


3¡¢Î÷°àÑÀµÄÖÁÉÙ72¸öÍøÕ¾Ôâµ½NoName057µÄDDoS¹¥»÷


¾Ý8ÔÂ7ÈÕ±¨µÀ£¬Î÷°àÑÀÖÁÉÙ72¸öÍøÕ¾Ôâµ½¶íÂÞ˹ºÚ¿ÍÍÅ»ïNoName057µÄDDoS¹¥»÷¡£¡£¡£¹¥»÷²úÉúÔÚ7ÔÂ19ÈÕÖÁ30ÈÕÖ®¼ä£¬Ó°ÏìÁËÒøÐС¢µçÐÅÌṩÉÌ¡¢Ã½ÌåºÍÓÎÀÀ¹«Ë¾¡£¡£¡£±»¹¥»÷ÍøÕ¾»¹Ô̺¬×ÜÀí¹ÙÛ¡La Moncloa¡¢·¨Ôº¡¢Ë¾·¨²¿¡¢ºÓɽÕþ²ß²¿ÒÔ¼°¹ú·À²¿»ú¹¹Isdefe¡£¡£¡£¾ÝϤ£¬Õâ´Î¹¥»÷²¢Î´µ¼ÖÂÈκÎÃô¸ÐÊý¾Ýй¶¡£¡£¡£NoName057»¹Ôø²Î¼ÓÁËÓ벨À¼¡¢Á¢ÌÕÍðÒÔ¼°½Ý¿Ë¹²ºÍ¹ú×ÜͳºòÑ¡ÈËÓйصĹ¥»÷¡£¡£¡£


https://www.infosecurity-magazine.com/news/russian-hacktivists-overwhelm/


4¡¢PhylumÔÚNPMÖмì²âµ½¶à¸öÇÔÈ¡¿ª·¢ÈËÔ±Êý¾ÝµÄ¶ñÒâ°ü


8ÔÂ4ÈÕ±¨µÀ³Æ£¬PhylumÔÚnpm°üÖÎÀíÆ÷Éϼì²âµ½Á˶à¸ö·ÖÆçµÄ¡°test¡±°ü£¬Ö¼ÔÚй¶¿ª·¢ÈËÔ±µÄÔ´´úÂëºÍÆäËü»úÃÜÐÅÏ¢¡£¡£¡£ÕâЩ°ü¾ùÓÉͳһ¸önpmÓû§malikrukd4732°ä²¼£¬²¢Ô̺¬Èý¸öÎļþ¡£¡£¡£ÕâЩÄ£¿éÆô¶¯JavaScript£¨¡°index.js¡±£©£¬ÆäÖÐÔ̺¬½«ÐÅϢй¶µ½Ô¶³Ì·þÎñÆ÷µÄ´úÂë¡£¡£¡£¶ñÒâ´úÂëÕë¶ÔµÄÎļþºÍĿ¼¿ÉÄÜÔ̺¬Ãô¸ÐÊý¾Ý£¬ÀýÈçÖÚ¶àÀûÓúͷþÎñµÄÍ´´¦¡£¡£¡£×êÑÐÈËÔ±´§Ä¦ÕâÊÇÒ»Â·ÖØÒªÕë¶Ô¼ÓÃÜÇ®±ÒÁìÓòµÄ¹¥»÷»î¶¯¡£¡£¡£


https://securityaffairs.com/149165/hacking/npm-highly-targeted-attacks.html


5¡¢TrustwaveÅû¶Chrome¶ñÒâÈí¼þRilideµÄ¶àÆð¹¥»÷»î¶¯


8ÔÂ3ÈÕ£¬TrustwaveÅû¶ÁËRilideбäÌåµÄ¶àÆð¹¥»÷»î¶¯¡£¡£¡£RilideÕë¶Ô»ùÓÚChromiumµÄä¯ÀÀÆ÷£¬Ö¼ÔÚÇÔÈ¡Ãô¸ÐÊý¾ÝºÍ¼ÓÃÜÇ®±Ò£¬Ð°汾¿ÉÈÆ¹ýGoogleµÄChrome Extension Manifest V3¡£¡£¡£½üÆÚ·¢ÏֵĵÚÒ»¸ö»î¶¯Ê¹ÓÃPowerPointµö¶üºÍαÔìµÄPalo Alto GlobalProtect²å¼þÀ´Õë¶ÔÆóÒµÓû§¡£¡£¡£µÚ¶þ¸ö»î¶¯Ê¹ÓÃTwitterÐû´«Î±ÔìµÄP2EÓÎÏ·£¬×îÖÕ»á·Ö·¢RilideºÍRedline Stealer¡£¡£¡£µÚÈý¸ö»î¶¯ÖØÒªÕë¶Ô°Ä´óÀûÑǺÍÓ¢¹úÖ¸±êµÄÒøÐÐÊý¾Ý£¬Ñ¡È¡¹ÖÒìµÄ²½Öè¼ÓÔØÀ©´ó·¨Ê½¡£¡£¡£


https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/new-rilide-stealer-version-targets-banking-data-and-works-around-google-chrome-manifest-v3/


6¡¢BlackBerry°ä²¼2023ÄêQ2ÍþÐ²Ì¬ÊÆµÄ·ÖÎö»ã±¨


8ÔÂ3ÈÕ±¨µÀ£¬BlackBerry°ä²¼ÁË2023ÄêQ2ÍþÐ²Ì¬ÊÆµÄ·ÖÎö»ã±¨¡£¡£¡£»ã±¨º­¸ÇÁË3ÔÂÖÁ5Ô¹۲쵽µÄ¹¥»÷£¬¸Ã¹«Ë¾Ðû³ÆÔÚ´ËÆÚ¼äÄÚ×èÖ¹ÁË150Íò´Î¹¥»÷£¬ÆäÖÐ55000´Î¹¥»÷Õë¶Ô¹«¹²ÐÐÒµ¡£¡£¡£¹¥»÷Õß¾ùÔÈÿ·ÖÖÓÖ´ÐÐÔ¼11.5´Î¹¥»÷£¬Ã¿·ÖÖÓÔ¼1.7¸öеĶñÒâÈí¼þÑù±¾¡£¡£¡£Ò½ÁƱ£½¡ºÍ½ðÈÚ·þÎñÐÐÒµÊÇÊܵ½¹¥»÷×î¶àµÄÐÐÒµÖ®Ò»¡£¡£¡£´ËÍ⣬APT28ºÍLazarus Group·Ç³£»îÔ¾£¬ËûÃÇ֮ǰµÄ¹¥»÷ÖØÒªÕë¶ÔÃÀ¹ú¡¢Å·Ö޺ͺ«¹ú¡£¡£¡£


https://www.blackberry.com/us/en/solutions/threat-intelligence/2023/threat-intelligence-report-august