DearCry利用ProxyLogon缝隙攻击Exchange；Check Point颁布2月全球威胁指数汇报

颁布功夫 2021-03-13

【威胁谍报】


新勒索软件DearCry利用ProxyLogon缝隙攻击Exchange

https://www.bleepingcomputer.com/news/security/ransomware-now-attacks-microsoft-exchange-servers-with-proxylogon-exploits/


Intezer钻研人员发现针对Linux系统的新后门RedXOR 

https://threatpost.com/linux-systems-redxor-malware/164689/


Trustwave发现利用图标文件分发NanoCore的垂钓活动

https://www.zdnet.com/article/icon-files-abused-in-malspam-to-spread-nanocore-trojan/


【缝隙补丁】


Claroty披露施耐德电气PowerLogic智能电表中的缝隙

https://www.securityweek.com/serious-vulnerabilities-found-schneider-electric-power-meters


【分析汇报】


Check Point颁布2021年2月全球威胁指数的汇报

https://blog.checkpoint.com/2021/03/11/february-2021s-most-wanted-malware-trickbot-takes-over-following-emotet-shutdown/