安全研究 SECURITY SERVICE

APT组织利用CVE-2020-0688攻击Exchange服务器

发布时间: 2020-03-09
来源:
浏览数: 41

(2019-03-15)今日威胁情报


1、APT组织利用CVE-2020-0688攻击Exchange服务器

https://redqueen.tj-un.com/InfoDetails.html?id=eb41b281e524461695fca92d9ac238ea


2、美国DHS前官员被控盗窃政府机密软件和数据

https://redqueen.tj-un.com/InfoDetails.html?id=7bfe07c972074a7ea0ce1a418edaad1a


3、攻击者利用过期证书传播恶意软件Buerak和Mokes

https://redqueen.tj-un.com/InfoDetails.html?id=99f8294ed6a34e9caa98bb4b1993ee90


4、印度虚假技术支持公司诈骗4万受害者获利800万美元

https://redqueen.tj-un.com/InfoDetails.html?id=4116113f64f1426e91655a666b7598bd


5、澳大利亚隐私保护机构对Facebook数据泄露提起诉讼

https://redqueen.tj-un.com/InfoDetails.html?id=d4d17432a6a34a15aafe075c61f6991f


分享到:
  • 相关推荐 RELATED TO RECOMMEND
  • 点击次数: 12
    2025 - 02 - 10
    Phorpiex作为下载器传播勒索软件 https://www.cybereason.com/blog/threat-analysis-phorpiex-downloader 伪装为DeepSeek AI客户端的恶意PyPI软件包窃取用户数据 https://cybersecuritynews.com/beware-of-fake-deepseek-pypi-packages/ 恶意软件Tiny FUD绕过杀毒软件攻击MacOS用户 https://cybersecuritynews.com/new-tiny-fud-attacking-macos-users/ APT37组织利用HWP文件攻击韩国多个组织
  • 点击次数: 14
    2025 - 01 - 20
    攻击者伪装业务协作邮件传播Remcos恶意软件 https://blog.alyac.co.kr/5511 恶意PyPI包窃取Discord身份令牌并展开后门攻击https://socket.dev/blog/malicious-pypi-package-targets-discord-developers-with-token-theft-and-backdoor 黑客利用加州火灾发起钓鱼攻击 https://cybersecuritynews.com/california-wildfire-exploited-by-hackers-to-launch-phishing-attacks/ Web Shell入侵事件导致用户数据泄露 https://www.trendmicro.com/en_us/research/25/a/investigating-a-web-shell-intrusion-with-trend-micro--managed-xd.html 微软补丁日通告:2025年1月版 https://msrc.microsoft.com/update-guide/releaseNote
  • 点击次数: 17
    2025 - 01 - 13
    东南亚APT组织OceanLotus利用GitHub传播木马 https://threatbook.io/blog/id/1100 冒充CrowdStrike招聘的网络钓鱼攻击 https://www.crowdstrike.com/en-us/blog/recruitment-phishing-scam-imitates-crowdstrike-hiring-process/ 黑客利用KerioControl防火墙漏洞窃取管理员CSRF令牌 https://www.bleepingcomputer.com/news/security/hackers-exploit-keriocontrol-firewall-flaw-to-steal-admin-csrf-tokens/ Gayfemboy僵尸网络利用0day漏洞传播样本,发起全球DDos攻击  https://blog.xlab.qianxin.com/gayfemboy/
  • 点击次数: 21
    2025 - 01 - 07
    Chrome扩展被劫持用来窃取用户数据 https://www.bleepingcomputer.com/news/security/cybersecurity-firms-chrome-extension-hijacked-to-steal-users-data/ Four Faith路由器新漏洞CVE-2024-12856影响多个行业 https://www.bleepingcomputer.com/news/security/over-31-million-fake-stars-on-github-projects-used-to-boost-rankings/ 攻击者利用谷歌域名请求执行恶意代码https://securityboulevard.com/2024/12/critical-alert-sophisticated-google-domain-exploitation-chain-unleashed/ 攻击活动利用虚假游戏网站下载信息窃取木马https://www.malwarebytes.com/blog/news/2025/01/can-you-try-a-game-i-made-fake-game-sites-lead-to-information-stealers
  • 点击次数: 8
    2025 - 01 - 02
    Chrome扩展被劫持用来窃取用户数据 https://www.bleepingcomputer.com/news/security/cybersecurity-firms-chrome-extension-hijacked-to-steal-users-data/ Horns&Hooves攻击活动传播NetSupport和BurnsRAT https://securelist.com/horns-n-hooves-campaign-delivering-netsupport-rat/114740/ 新型Android银行木马伪装成基本服务瞄准印度用户 https://www.mcafee.com/blogs/other-blogs/mcafee-labs/a-new-android-banking-trojan-masquerades-as-utility-and-banking-apps-in-india/ 新型恶意软件GOSAR针对中文地区开展攻击活动 https://www.elastic.co/security-labs/under-the-sadbridge-with-gosar
友情连接:
免费服务热线 ree service hotline 400-613-1868 手机端
法律声明 Copyright  西安交大捷普网络科技有限公司  陕ICP备18022218号-1

陕公网安备 61019002000857号

犀牛云提供云计算服务