注册
登录
网络安全专家最近发现互联网上出现了利用微软Office漏洞攻击个人PC的恶意软件，这种恶意软件能够探查用户隐私，中招电脑可能会被用来挖矿或者进行分布式拒绝服务（DDoS）攻击。  恶意软件通过邮件传播，以保险和金融行业用户为目标，通常以ZIP压缩文件为载体，当用户打开并访问内置的文档文件后，文件将利用Office漏洞运行基于PowerShell代码感染受害者。 被利用的漏洞之一代号CVE-2017-11882，该漏洞在去年12月被曝出，这是Microsoft Office中的一个安全漏洞，它允许在打开恶意修改的文件时运行任意代码。此漏洞允许使用附件中存储的URL触发下载。下载包含用于删除恶意软件的PowerShell脚本。 恶意软件还会尝试利用CVE-2017-8759Microsoft .NET Framework漏洞攻击PC，在钓鱼邮件中的Word文档文件包含嵌入OLE对象，该对象触发下载存储的URL以启动PowerShell进程。该漏洞在9月份被披露并修补。 如果PowerShell脚本运行成功，它将注入代码，并继续下载病毒运行文件，将恶意软件解包到目标计算机上，同时允许攻击者使用Tor网络隐藏自己的身份。恶意软件还包含各种插件，允许攻击者访问存储在PC上的几乎所有类型的数据。 另外，下载的恶意软件能够为攻击者窃取浏览器、电子邮件等账户密码，窃取加密货币钱包，盗取包括Office，SQL Server，Adobe和Nero在内的200多种流行软件应用程序的许可证密钥。 攻击者除了能够从受感染的用户身上窃取数据外，还可以将受感染的PC作为“肉鸡”，协助进行DDoS攻击，并将机器用作挖矿工具。 微软表示，在去年发布的安全更新修复了两个漏洞，启用自动更新的用户已经受到保护。 想看到更多这类内容？去APP商店搜IT之家，天天都有小欢喜。 , groupId: 6513126753588740616, itemId: 6513126753588740616, type: 2, subInfo: { isOriginal: false, source: IT之家, time: 2018-01-20 21:33:22 }, tagInfo: { tags: [{"name":"网络安全"},{"name":"微软"},{"name":"软件"},{"name":"Tor"},{"name":"脚本语言"}], groupId: 6513126753588740616, itemId: 6513126753588740616, repin: 0, }, has_extern_link: 0 }, commentInfo: { groupId: 6513126753588740616, itemId: 6513126753588740616, comments_count: 1, ban_comment: 0 }, mediaInfo: { uid: 3353880530, name: IT之家, avatar: //p10.pstatp.com/large/437100015b9da3522e7c, openUrl: /c/user/3353880530/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/3353880530/","avatar_url":"https://p10.pstatp.com/large/437100015b9da3522e7c","media_id":3355466186,"name":"IT之家","user_verified":false},"articles":[{"item_id":"6513707678735270408","url":"/item/6513707678735270408","title":"乐视控股隔空澄清乐视网还款金额"},{"item_id":"6513706630591283720","url":"/item/6513706630591283720","title":"全球首发！vivo X20 Plus屏幕指纹版来了"},{"item_id":"6513706358200599053","url":"/item/6513706358200599053","title":"【IT之家出品】海信H11手机开箱图赏"},{"item_id":"6513701287853294088","url":"/item/6513701287853294088","title":"看看你的显卡挖矿每月能赚多少钱"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":127,"media_avatar_url":"//p8.pstatp.com/large/59490005007a4b768ed1","is_feed_ad":false,"is_diversion_page":false,"title":"电脑装系统如此简单？U盘重做系统直接让你的电脑速度由慢变快？","single_mode":true,"gallary_image_count":15,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6513057995906089485/","source":"3C数码详解专家","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":143,"image_url":"//p3.pstatp.com/list/190x124/59490005dbec69a12d95","group_id":"6513057995906089485","is_related":true,"media_url":"/c/user/83980740560/"},{"comments_count":57,"media_avatar_url":"//p3.pstatp.com/large/16ab0006e1cdabac2d52","is_feed_ad":false,"is_diversion_page":false,"title":"这4个超实用的电脑必备黑科技软件，用过都不会卸载！","single_mode":true,"gallary_image_count":4,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6512312800126173700/","source":"科技Fun","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":12,"image_url":"//p1.pstatp.com/list/190x124/593f0005da1ecb588363","group_id":"6512312800126173700","is_related":true,"media_url":"/c/user/55766004812/"},{"comments_count":212,"media_avatar_url":"//p3.pstatp.com/large/78f001316cada92ee0f","is_feed_ad":false,"is_diversion_page":false,"title":"区块链挖矿高烧不退，细数行业四大最具潜力的矿机产品","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6511466460282356238/","source":"潮流科技范","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/593a0003461ce44fe3f0","group_id":"6511466460282356238","is_related":true,"media_url":"/c/user/6955538216/"},{"comments_count":62,"media_avatar_url":"//p1.pstatp.com/large/18a2000aace0b69211a6","is_feed_ad":false,"is_diversion_page":false,"title":"全球30%比特币算力都掌握在这个中国人手里，随时能让比特币崩盘","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6513367573235499523/","source":"币圈玩客","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":48,"image_url":"//p3.pstatp.com/list/190x124/59450005df8aca2dc1e0","group_id":"6513367573235499523","is_related":true,"media_url":"/c/user/55290850015/"},{"comments_count":38,"media_avatar_url":"//p7.pstatp.com/large/56840001b2cb36bca139","is_feed_ad":false,"is_diversion_page":false,"title":"Excel中，用数字1和0代替“√”、“×”的输入，数据录入必备！","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6512645231303721476/","source":"每日易学2018","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":3,"image_url":"//p1.pstatp.com/list/190x124/5948000263130783e778","group_id":"6512645231303721476","is_related":true,"media_url":"/c/user/15693819663/"},{"comments_count":71,"media_avatar_url":"//p4.pstatp.com/large/50aa000356b49be004a7","is_feed_ad":false,"is_diversion_page":false,"title":"不需要安装任何开发环境，在浏览器里面就能在线练习31种编程语言","single_mode":true,"gallary_image_count":9,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6512027159924572675/","source":"冰尘无极","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/59400003e4bc249987ac","group_id":"6512027159924572675","is_related":true,"media_url":"/c/user/74999065942/"},{"comments_count":15,"media_avatar_url":"//p3.pstatp.com/large/4e730003c577e572e799","is_feed_ad":false,"is_diversion_page":false,"title":"用Python3写一款轻量级的zip压缩的破解工具，一共25行代码","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513172911786820104/","source":"曝光黑客的那些小伎俩","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":19,"image_url":"//p9.pstatp.com/list/190x124/59450005303282f74934","group_id":"6513172911786820104","is_related":true,"media_url":"/c/user/52488504507/"},{"comments_count":2,"media_avatar_url":"//p10.pstatp.com/large/2c5d0007641ef31bef64","is_feed_ad":false,"is_diversion_page":false,"title":"Redis主从复制及其原理","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513426331147960835/","source":"Java修炼手册","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b430000232edb0a5e04","group_id":"6513426331147960835","is_related":true,"media_url":"/c/user/62773497840/"},{"comments_count":0,"media_avatar_url":"//p3.pstatp.com/large/47100001c00941d29399","is_feed_ad":false,"is_diversion_page":false,"title":"Flume定制实战&日志平台架构解析","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513420293082448388/","source":"互联网技术栈","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b3f00029ae07699cebb","group_id":"6513420293082448388","is_related":true,"media_url":"/c/user/3129123693/"},{"comments_count":16,"media_avatar_url":"//p3.pstatp.com/large/470c0004f7aad2b6f682","is_feed_ad":false,"is_diversion_page":false,"title":"python中if __name__ == \"__main__\"你真的知道吗？","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513347214717223432/","source":"从零开始学习Python","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":9,"image_url":"//p3.pstatp.com/list/190x124/59450005c381103915bf","group_id":"6513347214717223432","is_related":true,"media_url":"/c/user/6438756870/"},{"comments_count":2,"media_avatar_url":"//p1.pstatp.com/large/4ae50004fbe250060fc4","is_feed_ad":false,"is_diversion_page":false,"title":"JDBC、SQL注入攻击原理以及解决方案","single_mode":true,"gallary_image_count":15,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513420490428645891/","source":"java交流","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":4,"image_url":"//p9.pstatp.com/list/190x124/5b3f00029b71ee239750","group_id":"6513420490428645891","is_related":true,"media_url":"/c/user/79132029943/"},{"comments_count":135,"media_avatar_url":"//p3.pstatp.com/large/3ed10004380491dcdbba","is_feed_ad":false,"is_diversion_page":false,"title":"全球最牛逼的黑客，15岁攻破美国防空司令部，吹个口哨就能发核武器","single_mode":true,"gallary_image_count":25,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6511503796881850883/","source":"命苦不怪人","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":7,"image_url":"//p9.pstatp.com/list/190x124/59370004939c5c11bb1a","group_id":"6511503796881850883","is_related":true,"media_url":"/c/user/71890024493/"},{"comments_count":9,"media_avatar_url":"//p7.pstatp.com/large/56900005af0b4084136f","is_feed_ad":false,"is_diversion_page":false,"title":"知道这些Mysql数据库设计规范，让你的数据库效率更高","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513064764493529603/","source":"陶陶开心每一天","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":4,"image_url":"//p1.pstatp.com/list/190x124/594a0003cb079b64a025","group_id":"6513064764493529603","is_related":true,"media_url":"/c/user/85503244060/"},{"media_avatar_url":"//p9.pstatp.com/large/400e0001d11128a970d3","is_feed_ad":false,"is_diversion_page":false,"title":"全世界就活在这几种算法下面，速看","single_mode":false,"gallary_image_count":0,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6512007095930323464/","source":"五色帆","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"comments_count":6,"group_id":"6512007095930323464","is_related":true,"media_url":"/c/user/63545221775/"},{"comments_count":50,"media_avatar_url":"//p8.pstatp.com/large/567e0005eab85b5a0e97","is_feed_ad":false,"is_diversion_page":false,"title":"不需要任何代码知识的开发工具—GrapesJS","single_mode":true,"gallary_image_count":8,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6513199014341509635/","source":"大大里","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":81,"image_url":"//p3.pstatp.com/list/190x124/594500053d731ad15214","group_id":"6513199014341509635","is_related":true,"media_url":"/c/user/60795876833/"},{"comments_count":22,"media_avatar_url":"//p9.pstatp.com/large/382d000ef000dc52e3e4","is_feed_ad":false,"is_diversion_page":false,"title":"3分钟学会冻结单元格、列宽自动适应内容、提取数据快速填充数值","single_mode":true,"gallary_image_count":8,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6512646643509101059/","source":"联想商用服务","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/59470002c043db14e470","group_id":"6512646643509101059","is_related":true,"media_url":"/c/user/66204016996/"},{"comments_count":72,"media_avatar_url":"//p9.pstatp.com/large/50460015a1b8212625e5","is_feed_ad":false,"is_diversion_page":false,"title":"百度 ECharts 4.0.2 正式发布","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6513315111820591623/","source":"XiaoQi程序猿","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":157,"image_url":"//p3.pstatp.com/list/190x124/5b4000014f0bfd19cf2d","group_id":"6513315111820591623","is_related":true,"media_url":"/c/user/3264622131/"},{"comments_count":3,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"微软将要淘汰Windows的控制面板了吗？","single_mode":true,"gallary_image_count":1,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6511860756877672708/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5518000527c8996fba2d","group_id":"6511860756877672708"},{"comments_count":892,"media_avatar_url":"//p3.pstatp.com/large/1bf3000d9ff991ed4ac1","is_feed_ad":false,"is_diversion_page":false,"title":"工作再忙，也要学会这 10 个Excel快捷键","single_mode":true,"gallary_image_count":10,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6512593091097002500/","source":"巧谈人生","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":119,"image_url":"//p1.pstatp.com/list/190x124/594300059501338c831e","group_id":"6512593091097002500","is_related":true,"media_url":"/c/user/59180287803/"},{"comments_count":215,"media_avatar_url":"//p1.pstatp.com/large/5694000171df5c4cf6b3","is_feed_ad":false,"is_diversion_page":false,"title":"拿着这五张图，走哪都是计算机高手！bios中英文对照表","single_mode":true,"gallary_image_count":5,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6512704209710744072/","source":"熊小进","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":65,"image_url":"//p3.pstatp.com/list/190x124/59470003d0d639dc8dd2","group_id":"6512704209710744072","is_related":true,"media_url":"/c/user/82224069330/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/item/6513126753588740616/, abstract: IT之家1月20日消息 网络安全专家最近发现互联网上出现了利用微软Office漏洞攻击个人PC的恶意软件，这种恶意软件能够探查用户隐私，中招电脑可能会被用来挖矿或者进行分布式拒绝服务（DDoS）攻击。 |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
