FBI×·»ØColonial PipelineÖ§¸¶µÄ230ÍòÃÀÔªÊê½ð£»¹È¸èÒòÀÄÓÃÆäÔÚ¹ã¸æÁìÓòµÄְλ±»·¨¹ú·£¿î2.2ÒÚÅ·Ôª

Ðû²¼Ê±¼ä 2021-06-09

1.FBI×·»ØColonial PipelineÖ§¸¶µÄ230ÍòÃÀÔªÊê½ð


1.jpg


ÃÀ¹úFBIºÍDOJÍŽá×·»ØÁËColonial PipelineÖ§¸¶µÄÌ©°ëÊê½ð¡£5ÔÂ7ÈÕ£¬¸Ã¹«Ë¾Ôâµ½ÁËDarkSideÀÕË÷Èí¼þ¹¥»÷ȼÁϹܵÀ¹Ø±Õ£¬Îª´ËÆäÖ§¸¶ÁË×ܼÆ440ÍòÃÀÔªµÄÊê½ð£¬´Ë´Î×·»ØÁËÆäÖеÄ230ÍòÃÀÔª¡£DOJÌåÏÖ£¬ËûÃÇͨ¹ýÉó²é±ÈÌØ±Ò¹«¹²·ÖÀàÕË£¬¸ú×ÙÁ˶à´Î±ÈÌØ±ÒתÕË£¬²¢È·¶¨Ô¼Äª63.7±ÈÌØ±ÒÒÑ×ªÒÆµ½Ìض¨µØµã£¬¶øFBIÓµÓиõصãµÄ˽Կ»ò´óÖµÈЧµÄµØµã¡£ÃÀ¹ú˾·¨²¿»¹³Æ£¬ÊÂʵÉÏÁª°îÊÓ²ì¾Ö´ÓÒ»×îÏȾÍÉèÁËȦÌס£


Ô­ÎÄÁ´½Ó£º

https://threatpost.com/fbi-claws-back-millions-darksides-ransom/166705/


2.¹È¸èÒòÀÄÓÃÆäÔÚ¹ã¸æÁìÓòµÄְλ±»·¨¹ú·£¿î2.2ÒÚÅ·Ôª


2.jpg


·¨¹ú¾ºÕùÖÎÀí»ú¹¹¶Ô¹È¸è´¦ÒÔ2.2ÒÚÅ·ÔªµÄ·£¿î£¬ÀíÓÉÊǹȸèÀÄÓÃÆäÔÚ¹ã¸æÁìÓòµÄÖ÷µ¼Ö°Î»²¢×óÌ»Æä·þÎñ¶ø¶ÔÆäËü³öÊéÉ̺;ºÕùµÐÊÖ²»¹«¡£GoogleûÓжԴ˴ÎÖ¸¿ØÌá³öÒìÒ飬ÔÞ³ÉÖ§¸¶·£¿î²¢ÔÊÐí½«¸ÄÉÆ¹È¸èAd Manager·þÎñ£¬ÒÔ¼°ÖÕÖ¹ÓÐÀûÓÚGoogleµÄÌõ¿î¡£ÔçÔÚ2017Äê6Ô£¬Å·ÃËίԱ»áÒòÆäʹÓÃÖ÷µ¼Ö°Î»µ÷½âËÑË÷Ч¹û¶øË𺦾ºÕùµÐÊÖµÄÀûÒæ£¬·£¿î27.2ÒÚÃÀÔª£»2019Äê3ÔÂÅ·ÃËίԱ»áÓÖÒòÆäÀÄÓÃÊг¡Ö§Åäְλ·£¿î17ÒÚÃÀÔª¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/google/google-fined-220-million-for-abusing-dominant-role-in-online-ads/


3.MicrosoftÇå¾²¸üУ¬ÐÞ¸´7¸ö0dayÔÚÄÚµÄ50¸öÎó²î


3.jpg


MicrosoftÐû²¼ÁË6Ô·ݵÄÖܶþÇå¾²¸üУ¬ÐÞ¸´Á˰üÀ¨7¸ö0dayÔÚÄÚµÄ50¸öÎó²î¡£´Ë´ÎÐÞ¸´µÄ0day°üÀ¨WindowsÄÚºËÐÅϢй¶Îó²î£¨CVE-2021-31955£©¡¢Windows NTFSÌáȨÎó²î£¨CVE-2021-31956£©¡¢Microsoft DWMÌáȨÎó²î£¨CVE-2021-33739£©¡¢Windows MSHTMLƽ̨RCEÎó²î£¨CVE-2021-33742£©¡¢MicrosoftÔöÇ¿ÐͼÓÃÜÌṩ³ÌÐòÌáȨÎó²î£¨CVE-2021-31199ºÍCVE-2021-31201£©ºÍWindowsÔ¶³Ì×ÀÃæ·þÎñ¾Ü¾ø·þÎñÎó²î£¨CVE-2021-31968£©¡£ÆäÖУ¬Ç°6¸ö0dayÒÑÔÚÒÑÍù±»Ê¹Óùý¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/microsoft/microsoft-june-2021-patch-tuesday-fixes-6-exploited-zero-days-50-flaws/


4.ÃÀ¹ú¾ü³µÖÆÔìÉÌNavistar³ÆÆäÔâµ½¹¥»÷£¬²¿·ÖÊý¾Ýй¶


4.jpg


ÃÀ¹ú¿¨³µºÍ¾üÓóµÁ¾ÖÆÔìÉÌNavistar International Corporation³ÆÆäÔâµ½¹¥»÷£¬²¿·ÖÊý¾Ýй¶¡£¸Ã¹«Ë¾ÌåÏÖÆäÔÚ2021Äê5ÔÂ20ÈÕ·¢Ã÷´Ë´ÎÊÂÎñ£¬²¢ÓÚ5ÔÂ31ÈÕÊÕµ½ÁËÒ»·ÝÉùÃ÷³ÆÄ³Ð©Êý¾ÝÒѱ»ÇÔÈ¡¡£µ±±»Îʼ°ÊÇ·ñÓëÀÕË÷¹¥»÷ÓйØÊ±£¬¸Ã¹«Ë¾½²»°È˳ÆÏÖÔÚÊÓ²ìÕýÔÚ¾ÙÐÐÖУ¬Ã»Óиü¶àϸ½Ú¿ÉÒÔ·ÖÏí¡£¸Ã¹«Ë¾»¹ÌåÏÖ£¬ÆäÔËÓª²¢Î´Êܵ½Ó°Ï죬ITϵͳҲÒÑÕý³£ÔËÐС£


Ô­ÎÄÁ´½Ó£º

https://www.securityweek.com/military-vehicles-maker-navistar-reports-data-theft-cyberattack


5.Unit42Åû¶Ê׸öÕë¶ÔWindowsÈÝÆ÷µÄ¶ñÒâÈí¼þSiloscape


5.jpg


Unit42Åû¶ÁËÊ׸öÕë¶ÔWindowsÈÝÆ÷µÄ¶ñÒâÈí¼þSiloscape¡£SiloscapeÊÇÒ»ÖÖ¾­Óɸ߶ȻìÏýµÄ¶ñÒâÈí¼þ£¬¿ÉÒÔͨ¹ýWindowsÈÝÆ÷Õë¶ÔKubernetes¼¯Èº£¬ÆäÖ÷ҪĿµÄÊÇÔÚÉèÖò»µ±µÄKubernetes¼¯ÈºÖÐÖ´ÐкóÃÅ£¬ÔËÐжñÒâÈÝÆ÷¡£¸Ã¶ñÒâÈí¼þʹÓÃTorÊðÀíºÍ.onionÓòÄäÃûÅþÁ¬µ½ÆäC2£¬Ñо¿Ö°Ô±Ïë·¨»á¼ûÁËÕą̂·þÎñÆ÷£¬È·¶¨ÁË23¸öSiloscapeµÄÊܺ¦Õß¡£±ðµÄ£¬»¹·¢Ã÷¸Ã·þÎñÆ÷ÍйÜÁË313¸öÓû§£¬ÕâÒâζ×ÅSiloscapeÖ»ÊǸü´ó¹æÄ£Ô˶¯µÄһС²¿·Ö¡£


Ô­ÎÄÁ´½Ó£º

https://unit42.paloaltonetworks.com/siloscape/


6.KasperskyÐû²¼ÓйضñÒâÈí¼þGootkitµÄÆÊÎö±¨¸æ


6.jpg


KasperskyÐû²¼ÓйضñÒâÈí¼þGootkitµÄÆÊÎö±¨¸æ¡£GootkitÊÇÖØ´óµÄÒøÐжñÒâÈí¼þ£¬ÓÉDoctor WebÓÚ2014ÄêÊ״η¢Ã÷¡£GootkitÄܹ»´Óä¯ÀÀÆ÷ÇÔÈ¡Êý¾Ý¡¢Ö´ÐÐä¯ÀÀÆ÷ÖÐÐÄÈ˹¥»÷¡¢¼Í¼¼üÅÌÊäÈëÄÚÈÝ¡¢½ØÈ¡ÆÁÄ»½ØÍ¼ºÍÐí¶àÆäËû¶ñÒâ²Ù×÷¡£2019Ä꣬GootkitÔÚ±¬·¢Êý¾Ýй¶ºó×èÖ¹ÔËÓª£¬µ«×Ô2020Äê11ÔÂÒÔÀ´ÔٴλîÔ¾¡£GootkitµÄÊܺ¦ÕßÖ÷ÒªÂþÑÜÔڵ¹úºÍÒâ´óÀûµÈÅ·ÓѰî¼Ò¡£


Ô­ÎÄÁ´½Ó£º

https://securelist.com/gootkit-the-cautious-trojan/102731/