《维他命》每日安全简讯20190224

发布时间 2019-02-24

【攻击事件】


Intuit遭撞库攻击,部分TurboTax用户账户泄露

https://www.bleepingcomputer.com/news/security/tax-returns-exposed-in-turbotax-credential-stuffing-attacks/


UConn Health员工邮箱遭黑客入侵,32.6万患者信息泄露

http://www.hartfordbusiness.com/article/20190222/NEWS01/190229955/1002


【勒索软件】


新勒索软件Cr1ptT0r,主要针对D-Link NAS设备

https://www.bleepingcomputer.com/news/security/cr1ptt0r-ransomware-infects-d-link-nas-devices-targets-embedded-systems/


【威胁情报】


新网络间谍活动BabyShark,针对美国智库和学术机构

https://www.zdnet.com/article/phishing-campaign-attempts-to-spread-a-new-brand-of-snooping-malware/


针对求职者的新钓鱼攻击活动,主要分发More_eggs后门
https://www.darkreading.com/threat-intelligence/new-malware-campaign-targets-job-seekers/d/d-id/1333948?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple


声明:本资讯由启明星辰维他命安全小组翻译和整理