2018年1月第4周舆情周报

Android最强监控力恶意软件Skygofree现身

https://securelist.com/skygofree-following-in-the-footsteps-of-hackingteam/83603/

一个新的勒索软件，只接受Monero付款已经出现

https://blog.fortinet.com/2018/01/22/spritecoin-another-new-cryptocurrency-or-not?pk_source=social&pk_medium=twitter&pk_content=FortiGuard%20Labs&pk_campaign=sprinklr&pk_kwd=twitter

意大利公司和内政部受到攻击，专家发现了一个巨大的僵尸网络

https://securityaffairs.co/wordpress/67997/cyber-crime/botnet-attacking-italian-firms.html

DESUCRYPT和Insane（已有解密器）变种的Ransomware解析

https://www.bleepingcomputer.com/news/security/desucrypt-ransomware-in-the-wild-with-deuscrypt-and-decryptable-insane-variants/

绿盟科技网络安全威胁周报2018.03 WebEx组件远程代码执行漏洞CVE-2018-0104

https://toutiao.secjia.com/nsfocus-internet-security-threats-weekly-201803#

施耐德确认Triconex安全仪表系统SIS 0Day漏洞,Triton工控恶意软件致系统关闭

https://toutiao.secjia.com/triconex-sis-0day-triton

假加密货币应用程序在您的计算机上安装勒索软件

https://www.cnet.com/news/fake-cryptocurrency-spritecoin-ransomware-malware/

Rapid Ransomware分析报告

https://www.bleepingcomputer.com/news/security/rapid-ransomware-continues-encrypting-new-files-as-they-are-created/

根据安全公司TrendMicro发布的报告，2018年企业电子邮件妥协（BEC）攻击可能达到90亿美元

https://securityaffairs.co/wordpress/68132/cyber-crime/business-email-compromise.html

黑客利用恶意软件窃取来自付费客户的汽油

https://www.bleepingcomputer.com/news/security/hacker-uses-malware-to-steal-gas-from-paying-customers/

Electron桌面应用开发平台爆出远程代码执行漏洞CVE-2018-1000006

https://toutiao.secjia.com/cve-2018-1000006

暴雪游戏存在DNS重绑定漏洞可导致玩家电脑被远程劫持

https://www.freebuf.com/news/161206.html

Masuta僵尸网络使用默认凭据作为目标路由器，被分析的一个版本称为“PureMasuta”，依赖于旧的网络管理EDB 38722 D-Link漏洞利用

https://securityaffairs.co/wordpress/68153/malware/masuta-botnet.html

卡巴斯基对使用 DNS 隧道通信的后门的分析报告

https://securelist.com/denis-and-company/83671/

针对中东政府的 RGDoor IIS 后门分析

https://researchcenter.paloaltonetworks.com/2018/01/unit42-oilrig-uses-rgdoor-iis-backdoor-targets-middle-east/

橘皮秒破手机指纹锁 工信部、质检总局介入调查

https://view.inews.qq.com/a/TEC2018012502331700

针对跨平台后门 CrossRAT 的分析 

https://objective-see.com/blog/blog_0x28.html

趋势科技对 Lazarus 团队的RATANKBA 后门工具的详细分析 

https://blog.trendmicro.com/trendlabs-security-intelligence/lazarus-campaign-targeting-cryptocurrencies-reveals-remote-controller-tool-evolved-ratankba/

Exposing fileless malware分析

https://cloudblogs.microsoft.com/microsoftsecure/2018/01/24/now-you-see-me-exposing-fileless-malware/

MyKings: 一个大规模多重僵尸网络

https://www.anquanke.com/post/id/96024

暴雪游戏存在严重远程控制漏洞，数亿用户受影响

https://www.4hou.com/info/news/10096.html