首页 ›资讯› 安全 › 查看内容

WordPress插件后门影响30万个网站新型安卓木马2天销毁一部手机

2017-12-22 00:54 |来自: 互联网 8258 1

摘要: 1.预警：WordPress插件存在后门，30万个网站受影响　安全公司WordFence研究人员发现WordProcess验证码插件存有后门，可以让插件作者或恶意攻击者，在无需任何身份验证的情况下获得WordProcess网站的访问权限，目前有 ...

1.预警：WordPress插件存在后门，30万个网站受影响　

安全公司WordFence研究人员发现WordProcess验证码插件存有后门，可以让插件作者或恶意攻击者，在无需任何身份验证的情况下获得WordProcess网站的访问权限，目前有30万个网站受影响。

2.新型Android木马“Loapi”：2天可销毁一部手机!

近日，卡巴斯基实验室的研究人员发现了一种新型Android恶意软件“Loapi”，能够执行大量的恶意活动，挖掘Monero加密货币、发起分布式拒绝服务(DDOS)攻击。Loapi在感染手机后的两天内，就可能导致手机的电池凸出其外壳。

3.数据分析公司Alteryx因AWS S3配置不当，1.23亿信息在线泄露

据外媒报道，加利福尼亚网络安全公司UpGuard表示，美国加州数据分析公司Alteryx，因亚马逊AWS S3存储桶简单的配置错误问题，导致1.23亿美国家庭的敏感数据泄露。Alteryx公司泄露的这些数据，涉及美国家庭的住址、联系信息等，详细到抵押所有权和财务状况以及购买行为的分析，这些暴露的数据反映出美国消费者的真实生活。

4.美国公开宣布WannaCry幕后黑手，就是朝鲜！

据外媒报道，2017年12月18日，美国特朗普政府晚间公开发表声明，声称朝鲜就是此次WannaCry事件的幕后黑手，他们利用了泄漏的NSA黑客工具实施行动，在超过150个国家传播勒索软件，感染接近230000台计算机。目前朝方尚未对此事件作出任何回应。

5.Windows远程代码执行漏洞，可获取系统最高权限　

近日，谷歌的安全研究团队发现了一个Windows默认开启的WPAD服务的提权漏洞，攻击者可利用该漏洞远程控制Windows系统，并且能够获取系统的最高权限。

6.美加州选民4G容量、1900多万条信息泄露

一个新的、无保护的MongoDB数据库被发现了，内含4G多1900多万条加利福尼亚选民信息，包括每个注册选民的数据，攻击者删除了其中的数据，并向受害者要求0.2比特币的赎金。

7.新型工控恶意软件 Triton 首曝光，幕后团队疑有“国家资助”　

美国网络安全公司 FireEye 发现了一种专门针对工业控制系统( ICS )的新型恶意软件 Triton ，旨在破坏关键基础设施中广泛使用的 Triconex 安全控制器，通过扫描和映射工业控制系统环境，以便直接向 Tricon 安全控制器提供侦察和发布命令。相关专家推测，鉴于经济动机和攻击的复杂程度，可能有国家资助的相关群体参与其中。

8.17家网站用户信息遭暴力破解，Uber又出事了

英国一名25岁的男子上周承认曾对17个网站发起暴力破解攻击，窃取用户信息并在暗网销售。受影响的网站包括Uber、Groupon团购服务网站以及Just Eat外卖服务网站等，并且仅从Just Eat一家网站就获取了16.5万用户的信息。

, groupId: 6501915276060131853, itemId: 6501915276060131853, type: 1, subInfo: { isOriginal: false, source: 安胜ANSCEN, time: 2017-12-21 16:52:13 }, tagInfo: { tags: [{"name":"网络安全"},{"name":"WordPress"},{"name":"美国"},{"name":"Windows"},{"name":"Uber"}], groupId: 6501915276060131853, itemId: 6501915276060131853, repin: 0, }, has_extern_link: 0 }, commentInfo: { groupId: 6501915276060131853, itemId: 6501915276060131853, comments_count: 0, ban_comment: 0 }, mediaInfo: { uid: 52373192659, name: 安胜ANSCEN, avatar: //p3.pstatp.com/large/ef30014ad1f895e184e, openUrl: /c/user/52373192659/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/52373192659/","avatar_url":"https://p3.pstatp.com/large/ef30014ad1f895e184e","media_id":52410187052,"name":"安胜ANSCEN","user_verified":false},"articles":[{"item_id":"6501915276060131853","url":"/item/6501915276060131853","title":"WordPress插件后门影响30万个网站新型安卓木马2天销毁一部手机"},{"item_id":"6501269287590691342","url":"/item/6501269287590691342","title":"摄像头变“色”像头，你的隐私如何安放？"},{"item_id":"6501135650052375054","url":"/item/6501135650052375054","title":"知名论坛软件vBulletin曝两大严重漏洞，尚未修复！"},{"item_id":"6499677524115587597","url":"/item/6499677524115587597","title":"“百度知道”上的“周关”到底是什么？"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":219,"media_avatar_url":"//p1.pstatp.com/large/4d0000b0d8c0ae3a65","is_feed_ad":false,"is_diversion_page":false,"title":"原来以前的删除都是假的，这样做手机才能真正清空！","single_mode":true,"gallary_image_count":9,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6500020934890488334/","source":"手机教授","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":74,"image_url":"//p3.pstatp.com/list/190x124/4e6d0003851abdc647b9","group_id":"6500020934890488334","is_related":true,"media_url":"/c/user/5791036216/"},{"comments_count":0,"media_avatar_url":"//p3.pstatp.com/large/16ab001446f9235730c8","is_feed_ad":false,"is_diversion_page":false,"title":"漏洞预警｜TRITON病毒可渗透关键基础设施，导致工控系统关机","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6499632100331749902/","source":"安恒信息","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/4e690003331c5965d1a6","group_id":"6499632100331749902","is_related":true,"media_url":"/c/user/56816578595/"},{"comments_count":17,"media_avatar_url":"//p1.pstatp.com/large/3e5b0003e8b7bba867b3","is_feed_ad":false,"is_diversion_page":false,"title":"资深网络安全人员告诉你，到底谁是中国第一黑客","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6501539907071115789/","source":"海阳顶端","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/50940002d2ce8e49d3af","group_id":"6501539907071115789","is_related":true,"media_url":"/c/user/3668637589/"},{"comments_count":52,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"某成人视频网站上的视频，过半视频水印显示来自360摄像头，是360摄像头真的存在漏洞？还是有人蓄意抹黑360？","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6499997459052232974/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/4a3200080e9354a83dc9","group_id":"6499997459052232974"},{"comments_count":97,"media_avatar_url":"//p9.pstatp.com/large/289e001a387400ba9981","is_feed_ad":false,"is_diversion_page":false,"title":"插件界的良心黑科技Tampermonkey，让你的浏览器开启万能之路","single_mode":true,"gallary_image_count":8,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6499651069675569677/","source":"科技毒瘤","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/4e6d0000509985cff758","group_id":"6499651069675569677","is_related":true,"media_url":"/c/user/58197591159/"},{"comments_count":2,"media_avatar_url":"//p3.pstatp.com/large/2c640002496a93effe6f","is_feed_ad":false,"is_diversion_page":false,"title":"利用一个插件和Python脚本来给微信投票和刷票！找到刷票漏洞！","single_mode":true,"gallary_image_count":18,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6501891216584475149/","source":"sun菜菜","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/509800016c2884454240","group_id":"6501891216584475149","is_related":true,"media_url":"/c/user/5838461924/"},{"comments_count":25,"media_avatar_url":"//p1.pstatp.com/large/97d001b6d25752b2377","is_feed_ad":false,"is_diversion_page":false,"title":"听说微信号能修改了？微信官方：纯属是漏洞","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6501484000157106702/","source":"车钱China","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/50950001bfccc099fd96","group_id":"6501484000157106702","is_related":true,"media_url":"/c/user/6176228997/"},{"comments_count":0,"media_avatar_url":"//p2.pstatp.com/large/8105/444289872","is_feed_ad":false,"is_diversion_page":false,"title":"中国恶意软件三重奏：全面针对MSSQL与MySQL服务器","single_mode":true,"gallary_image_count":3,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6501874978621751821/","source":"E安全","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/509b0000963b4d9ec5bb","group_id":"6501874978621751821","is_related":true,"media_url":"/c/user/5499921668/"},{"media_avatar_url":"//p9.pstatp.com/large/e5800122a45cc13542c","is_feed_ad":false,"is_diversion_page":false,"title":"恶意软件—一种针对工业控制系统新型恶意软件已经研究人员发现","single_mode":false,"gallary_image_count":0,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6499690083472376334/","source":"51安全","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"comments_count":0,"group_id":"6499690083472376334","is_related":true,"media_url":"/c/user/51697408997/"},{"comments_count":46,"media_avatar_url":"//p1.pstatp.com/large/2b7001b59ed1c66aa78","is_feed_ad":false,"is_diversion_page":false,"title":"别只盯着安卓8.0升级，没有这功能升了也白升！","single_mode":true,"gallary_image_count":6,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6501232683807425037/","source":"三易生活","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":4,"image_url":"//p1.pstatp.com/list/190x124/50920002c4fc261a267a","group_id":"6501232683807425037","is_related":true,"media_url":"/c/user/4318169781/"},{"comments_count":45,"media_avatar_url":"//p3.pstatp.com/large/4af10003cc227dc2b5f6","is_feed_ad":false,"is_diversion_page":false,"title":"没有密码没关系！这神器可免输入百度网盘密码提取资源！","single_mode":true,"gallary_image_count":3,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6500459965759619598/","source":"素材兔","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/4e730002352fee2338fd","group_id":"6500459965759619598","is_related":true,"media_url":"/c/user/79464733924/"},{"comments_count":25,"media_avatar_url":"//p9.pstatp.com/large/3b110003f8cbd806a13d","is_feed_ad":false,"is_diversion_page":false,"title":"U盘启动哪个工具好用，没有广告和插件，老技术告诉你（附教程）","single_mode":true,"gallary_image_count":9,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6499692251583611406/","source":"技能资讯报告","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/4e6a00039313619a4203","group_id":"6499692251583611406","is_related":true,"media_url":"/c/user/69967776484/"},{"comments_count":5,"media_avatar_url":"//p1.pstatp.com/large/4ae00001120f99a0178a","is_feed_ad":false,"is_diversion_page":false,"title":"“比特币”买前功课2：Google验证","single_mode":true,"gallary_image_count":6,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6501178382393278990/","source":"币姐教你比特币","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/4e7a0004adb7e72875a5","group_id":"6501178382393278990","is_related":true,"media_url":"/c/user/78757155266/"},{"comments_count":6,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"iOS 11再曝安全漏洞，为什么苹果这次升级系统如此草率？真的只是为了让老机型卡顿换新机吗？","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6501837965658947854/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/4a3500099fd62f8568c6","group_id":"6501837965658947854"},{"comments_count":0,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"腾讯入侵语音通话，运营商有可能开放短信完全免费来还击吗？对于运营商而言目前最大的问题是什么？","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6501794584983503118/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/4a34000994acd1d7e725","group_id":"6501794584983503118"},{"comments_count":14,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"网贷逾期被爆通讯录了，你们觉得还应该还吗？","single_mode":true,"gallary_image_count":0,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6501122824340504845/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/503f000e6670b9ac6a36","group_id":"6501122824340504845"},{"comments_count":0,"media_avatar_url":"//p4.pstatp.com/large/509600019595fae42675","is_feed_ad":false,"is_diversion_page":false,"title":"中国网络犯罪关系：非我徒儿，不得从恶！","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6500713352837202445/","source":"信息安全搬运工","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/4e780001d0037b556654","group_id":"6500713352837202445","is_related":true,"media_url":"/c/user/16708401348/"},{"comments_count":199,"media_avatar_url":"//p2.pstatp.com/large/216c0002c58660e68f25","is_feed_ad":false,"is_diversion_page":false,"title":"每次输完银行卡密码，可别忘了这一步","single_mode":true,"gallary_image_count":5,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6501873135145452046/","source":"科技管家","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/509a0000ebe6493fff2f","group_id":"6501873135145452046","is_related":true,"media_url":"/c/user/5821904499/"},{"comments_count":0,"media_avatar_url":"//p3.pstatp.com/large/2c5e001b98f2e823aee0","is_feed_ad":false,"is_diversion_page":false,"title":"赛门铁克预测2018年新技术攻击将成为主流","single_mode":true,"gallary_image_count":4,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6500720630663479822/","source":"观科技HIGHTECH","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/4e750003a190305202a1","group_id":"6500720630663479822","is_related":true,"media_url":"/c/user/63267270693/"},{"comments_count":58,"media_avatar_url":"//p3.pstatp.com/large/43920001f9f7bfddcbfd","is_feed_ad":false,"is_diversion_page":false,"title":"无眠！量子计算机能够破解比特币，一旦破解比特币连废纸都不是？","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6501592097051640333/","source":"i极客","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/509500037c9d19cce5ac","group_id":"6501592097051640333","is_related":true,"media_url":"/c/user/73270910945/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/group/6501915276060131853/, abstract: 1.预警：WordPress插件存在后门，30万个网站受影响　安全公司WordFence研究人员发现WordProcess验证码插件存有后门，可以让插件作者或恶意攻击者，在无需任何身份验证的情况下获得WordProcess网站的访问权限，目前有30万个网站受影响。2.

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除