注册
登录
安全研究人员近日发现黑客目前针对中东地区展开了新一波的攻击。黑客们利用普遍适用的第三方服务，如Google+、Pastebin、bit.ly等。根据研究人员的发现称，黑客使用与当地政治事件有关的阿拉伯语文件作为诱饵，诱导好奇的网友下载文件。用户下载到本地后，就会运行黑客暗藏其中的恶意软件。  网络安全攻击层出不穷（图片来源：互联网） 通过解析恶意软件的源代码，研究人员发现这是一个新的恶意软件家族，从样本中发现它名字叫做Scote。Scote恶意软件为攻击者提供后门访问，收集用户访问Pastebin链接以及Google+的个人资料。这一恶意软件从2017年9月份开始传播，最开始在巴勒斯坦和阿联酋活动。  通过Google+关键词诱导用户下载恶意软件（图片来源：Palo Alto Network） 恶意软件利用了微软在2017年9月修补的Microsoft Office /写字板远程代码执行（RCE）漏洞 CVE-2017-0199 。用户一旦打开了RTF文件，就会弹出一个与阿拉伯语相关的有诱导性的信息。当恶意软件运行的时候，它会创建一个原始文件名为”abbas.rtf“的文件，这一事件是2017年8月份的政治事件。  流行趋势引起人民的好奇心（图片来源：iStock） 根据所使用的技术和可疑文件的内容，研究人员认为目标受害者大多数可能位于巴勒斯坦领土。目前，新的Scote恶意软件家族使用各种技巧和手段来逃避检测。黑客通常利用对当前事件和流行趋势发动网络攻击，特别是针对全球用户的网络攻击。在这个实践中中，用于传播恶意软件的一些Google+个人资料包含名称“唐纳德·特朗普”，还有“阿巴斯总统”等。 , groupId: 6516956993645707789, itemId: 6516956993645707789, type: 1, subInfo: { isOriginal: false, source: 中关村在线, time: 2018-01-31 05:17:00 }, tagInfo: { tags: [{"name":"网络安全"},{"name":"黑客"},{"name":"软件"},{"name":"Google+"},{"name":"中东局势"}], groupId: 6516956993645707789, itemId: 6516956993645707789, repin: 0, }, has_extern_link: 0 }, commentInfo: { groupId: 6516956993645707789, itemId: 6516956993645707789, comments_count: 0, ban_comment: 0 }, mediaInfo: { uid: 3539965816, name: 中关村在线, avatar: //p3.pstatp.com/large/97e001ee6c3f18d01cc, openUrl: /c/user/3539965816/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/3539965816/","avatar_url":"https://p3.pstatp.com/large/97e001ee6c3f18d01cc","media_id":3235378711,"name":"中关村在线","user_verified":false},"articles":[{"item_id":"6517055173502697987","url":"/item/6517055173502697987","title":"解锁的未来属于屏幕指纹 FaceID就省省吧"},{"item_id":"6517050617238651399","url":"/item/6517050617238651399","title":"慧聪 嘉楠耘智等六大名企成立区块链产业基金"},{"item_id":"6517055003666940420","url":"/item/6517055003666940420","title":"亚马逊西雅图总部建筑亮眼 室内热带雨林"},{"item_id":"6517055010268774919","url":"/item/6517055010268774919","title":"纯白色限量版坚果Pro 2开启预约 2299元"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":0,"media_avatar_url":"//p3.pstatp.com/large/46e80003c98b9bfd77be","is_feed_ad":false,"is_diversion_page":false,"title":"TopHat“礼帽”：利用受欢迎的第三方服务向中东地区发起网络攻击","single_mode":true,"gallary_image_count":6,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6516272709469471246/","source":"黑客视界","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b5a0002df148eda353a","group_id":"6516272709469471246","is_related":true,"media_url":"/c/user/76207630046/"},{"comments_count":151,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"遨游浏览器能挖矿了，收益怎么样？","single_mode":true,"gallary_image_count":7,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516473791579685127/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5517000aa172b01585ba","group_id":"6516473791579685127"},{"comments_count":21,"media_avatar_url":"//p7.pstatp.com/large/5b510001050b17e7ab6b","is_feed_ad":false,"is_diversion_page":false,"title":"不论你的手机型号是什么，这些事都将使邮件威胁随处可见","single_mode":true,"gallary_image_count":3,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6516281437723820552/","source":"科技新作品","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5e710001b55a8c63ea9c","group_id":"6516281437723820552","is_related":true,"media_url":"/c/user/84838288111/"},{"comments_count":480,"media_avatar_url":"//p3.pstatp.com/large/470e0000f379df0ab103","is_feed_ad":false,"is_diversion_page":false,"title":"市值等于23个百度、4个阿里、估值2万亿美元：全球最大IPO将诞生","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516733996305482247/","source":"K涛资本","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":625,"image_url":"//p3.pstatp.com/list/190x124/5e740001ea765be475e3","group_id":"6516733996305482247","is_related":true,"media_url":"/c/user/6318472691/"},{"comments_count":0,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"百度网盘的作用是什么？","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6512571678478827784/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/55180005e3b2bc5771f7","group_id":"6512571678478827784"},{"comments_count":67,"media_avatar_url":"//p3.pstatp.com/large/594c0000a407a63b2cf5","is_feed_ad":false,"is_diversion_page":false,"title":"各大视频网站的VIP视频，都被这些技术宅破解了，可以免费看电影","single_mode":true,"gallary_image_count":11,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516513524099842574/","source":"诸葛商学院","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5e72000057a84c89a30f","group_id":"6516513524099842574","is_related":true,"media_url":"/c/user/87038932541/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/group/6516956993645707789/, abstract: 2018-01-3105:17:00作者：陈赫安全研究人员近日发现黑客目前针对中东地区展开了新一波的攻击。 |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
