2017年12月第四周舆情周报

Lurk团伙的成员承认为情报机构创建WannaCry勒索软件

https://securityaffairs.co/wordpress/67262/cyber-crime/wannacry-lurk-group.html

PandaZeuS的圣诞礼物：在加密方案的变化

https://www.spamhaus.org/news/article/771/

2017年五大网络安全事件

https://safeandsavvy.f-secure.com/2017/12/29/five-biggest-cyber-security-stories-of-2017/

广告目标者正在从浏览器的密码管理器中提取数据

https://flipboard.com/@flipboard/-ad-targeters-are-pulling-data-from-your/f-1775c6c6f3%2Ftheverge.com

MQA-一个聪明的隐形DRM-Trojan

https://media.ccc.de/v/34c3-9113-mqa_-_a_clever_stealth_drm-trojan#t=2793

用户身份没有界限：网络追踪者利用浏览器登录管理器

https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/

浏览器数据泄露漏洞 - Mozilla删除信息以防万一

https://nakedsecurity.sophos.com/2017/12/30/browser-data-leakage-bug-mozilla-to-delete-info-just-in-case/

CryptoMix勒索新变种使用“ .tastylock”扩展名

https://www.scmagazine.com/cryptomix-ransomware-variant-carries-new-tastylock-extension/article/733651/

华为路由器0day使用的代码攻击事件公开

https://threatpost.com/code-used-in-zero-day-huawei-router-attack-made-public/129260/

又有三个WordPress插件被发现隐藏在后门

https://www.bleepingcomputer.com/news/security/three-more-wordpress-plugins-found-hiding-a-backdoor/

无缝战役继续使用Riek发送Ramnit银行特洛伊木马 

https://malware-traffic-analysis.net/2017/12/28/index.html

Emotet Malspam 

https://twitter.com/malware_traffic/status/946123445351407618

黑客瞄准华为路由器0day试图创建新的mirai僵尸网络 

https://www.darkreading.com/vulnerabilities---threats/hacker-targeted-huawei-router-0-day-in-attempt-to-create-new-mirai-botnet/d/d-id/1330715?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

加拿大日产被黑,110万客户数据泄露 

https://www.darkreading.com/perimeter/nissan-canada-finance-alerts-113-million-customers-of-data-breach/d/d-id/1330717?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

对硬盘的声音攻击可能会破坏PC，视频系统，ATM等 

https://www.bleepingcomputer.com/news/security/acoustic-attacks-on-hdds-can-sabotage-pcs-cctv-systems-atms-more/

necurs僵尸网络发送垃圾邮件

https://twitter.com/malware_traffic/status/945734603448471552

McFee Q3 安全报告

https://www.mcafee.com/us/resources/reports/rp-quarterly-threats-dec-2017.pdf#sf177243846

仍然有数百网站使用带有后门的wordpress插件

https://www.bleepingcomputer.com/news/security/three-years-later-hundreds-of-sites-still-use-backdoored-wordpress-plugins/

专家发现了一个新的GlobeImposter Ransomware malspam活动

https://securityaffairs.co/wordpress/67071/malware/globeimposter-ransomware-malspam-campaign.html

来自Bleeping Computer的专家发现了一个新的Cryptomix Ransomware变种

https://securityaffairs.co/wordpress/67103/malware/file-cryptomix-ransomware.html

McAfee2017年12月威胁报告

https://www.mcafee.com/us/resources/misc/infographic-threats-report-dec-2017.pdf#sf177243192

专家在GoAhead发现了一个影响数十万物联网设备的漏洞

https://securityaffairs.co/wordpress/67113/iot/goahead-flaws.html

微软漏洞CVE-2017-11882被利用来提供Loki信息窃取器

https://www.scmagazine.com/microsoft-bug-cve-2017-11882-exploited-to-deliver-loki-information-stealer/article/720224/

Digmine加密货币僵尸网络通过Facebook Messenger传播

https://www.scmagazine.com/digmine-cryptocurrency-botnet-spreading-through-facebook-messenger/article/720451/

假的“您的UPS发票准备就绪”，malspam提供Java Adwind / Java JRAT木马

https://myonlinesecurity.co.uk/fake-your-ups-invoice-is-ready-malspam-delivers-java-adwind-java-jrat-trojan/

绿盟科技网络安全威胁周报2017.50 Weblogic WLS组件漏洞CVE-2017-10271

https://toutiao.secjia.com/nsfocus-internet-security-threats-weekly-201750