Proofpoint披露朝鲜TA406针对多国当局的攻击细节

颁布功夫 2021-11-23

【威胁谍报】


Android木马BrazKing回归重要针对巴西的金融行业


https://securityintelligence.com/posts/brazking-android-malware-upgraded-targeting-brazilian-banks/


Microsoft发现伊朗黑客针对IT行业的攻击趋向增长


https://www.microsoft.com/security/blog/2021/11/18/iranian-targeting-of-it-sector-on-the-rise/


DomainTools发现针对与中东合作的公司的垂钓活动


https://www.bleepingcomputer.com/news/security/glitch-service-abused-to-host-short-lived-phishing-sites/


Proofpoint披露朝鲜TA406针对多国当局的攻击细节


https://www.proofpoint.com/us/blog/threat-insight/triple-threat-north-korea-aligned-ta406-scams-spies-and-steals


【缝隙补丁】


FBI称FatPipe产品中的一个提权缝隙已被积极利用


https://securityaffairs.co/wordpress/124742/security/zero-day-fatpipe.html