ÃÀ·¨ÔºÊÚȨ΢Èí½ÓÊܳ¯ÏÊAPT37¿ØÖƵÄ50¸öÓòÃû£»£»£»£»£»haveibeenpwnedÊÕ¼Factualй¶µÄ250ÍòÓû§Êý¾Ý
Ðû²¼Ê±¼ä 2019-12-311.ÃÀ¹ú»á¼ÆÊ¦ÊÂÎñËùMoss AdamsÔâºÚ¿ÍÈëÇÖ£¬£¬£¬£¬¿Í»§Êý¾Ý±»µÁ
ÃÀ¹ú×î´óµÄ¹«¹²»á¼ÆÊ¦ÊÂÎñËùÖ®Ò»Moss AdamsÅû¶Êý¾Ýй¶ÊÂÎñ£¬£¬£¬£¬ÏêϸÀ´Ëµ£¬£¬£¬£¬ºÚ¿ÍÓÚ2019Äê10ÔÂ10ÈÕÀֳɽÓÊÜÁËÒ»ÃûÔ±¹¤µÄµç×ÓÓÊÏäÕË»§£¬£¬£¬£¬²¢»á¼ûÁ˰üÀ¨¿Í»§ÐÕÃûºÍÉç»áÇå¾²ºÅÂëÔÚÄÚµÄÃô¸ÐÐÅÏ¢£¨PII£©¡£¡£¡£¡£Æ¾Ö¤¸Ã¹«Ë¾Ðû²¼µÄÊý¾Ýй¶֪ͨ£¬£¬£¬£¬Ã»ÓÐÆäËüÐÅÏ¢Êܵ½Ó°Ï죬£¬£¬£¬ºÚ¿ÍҲûÓлá¼û¹«Ë¾µÄÄÚ²¿ÍøÂç¡£¡£¡£¡£¸Ã¹«Ë¾Ã»ÓÐÅû¶ÊÜÓ°Ïì¼òÖ±ÇÐÈËÊý£¬£¬£¬£¬Ò²¿ÉÄÜÊǸÃÊý×ÖÉÐδȷ¶¨¡£¡£¡£¡£¸Ã¹«Ë¾ÌåÏÖÒѽÓÄÉÊʵ±µÄÇå¾²ºÍЧÀͻָ´°ì·¨£¬£¬£¬£¬²¢ÎªÊÜÓ°ÏìµÄ¿Í»§ÆôÓÃÉí·Ý͵ÇÔ°ü¹ÜÍýÏë¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://www.technadu.com/moss-adams-discloses-data-breach-exposing-names-social-security-numbers/88684/
2.haveibeenpwnedÊÕ¼Factualй¶µÄ250ÍòÓû§Êý¾Ý
haveibeenpwnedÍøÕ¾ÊÕ¼ÁËFactualй¶µÄ250ÍòÓû§Êý¾Ý£¬£¬£¬£¬¾Ý³ÆÕâЩÊý¾ÝµÄй¶ÈÕÆÚΪ2017Äê3ÔÂ22ÈÕ£¬£¬£¬£¬ÔʼÊý¾Ý¼¯¹²°üÀ¨800ÍòÐÐÊý¾Ý£¬£¬£¬£¬µ«È¥ÖغóΪԼ250Íò£¨2461696£©£¬£¬£¬£¬Êý¾Ý°üÀ¨Óû§µÄµç×ÓÓʼþµØµã¡¢¹«Ë¾Ãû³Æ¡¢µØµãºÍµç»°ºÅÂë¡£¡£¡£¡£Factual»ØÓ¦³ÆÕâЩÊý¾ÝÊÇÓëÉÌÒµºÍÆäËüÐËȤµãÓйصĹûÕæÊý¾Ý¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://haveibeenpwned.com/PwnedWebsites#Factual
3.HelloTech¹«Ë¾ÒâÍâй¶²¿·Ö³Ð°üÉÌÒþ˽ÐÅÏ¢
HelloTech¹«Ë¾Ðû²¼Êý¾Ýй¶֪ͨ³Æ£¬£¬£¬£¬¸Ã¹«Ë¾²¿·Ö×ÔÁ¦³Ð°üÉ̵ÄÃô¸ÐÐÅÏ¢±»ÒâÍâÐû²¼ÔÚ¹«ÍøÉÏ£¬£¬£¬£¬¸Ã¹«Ë¾ÔÚ½Óµ½±¨¸æºóÁ¬Ã¦¶ÔÕâЩÊý¾Ý½ÓÄÉÁ˱£»£»£»£»£»¤²½·¥£¬£¬£¬£¬µ«²»¿ÉÈ·¶¨ËüÃÇÊÇ·ñÒÑÔâ»á¼û¡£¡£¡£¡£¸ÃÊÂÎñ±¬·¢ÔÚ11ÔÂ15ÈÕ£¬£¬£¬£¬¿ÉÄÜй¶µÄÊý¾Ý°üÀ¨ÐÕÃû¡¢µØµã¡¢¼ÝÕÕÐÅÏ¢¡¢ÕÕÆ¬µÈ£¬£¬£¬£¬µ«²»°üÀ¨ÈκÎÉç»áÇå¾²ºÅÂëºÍ²ÆÎñÐÅÏ¢¡£¡£¡£¡£¸Ã¹«Ë¾Î´Í¸Â¶ÊÜÓ°ÏìµÄÏêϸÈËÊý£¬£¬£¬£¬µ«ÌåÏÖ½«ÎªÊÜÓ°ÏìµÄÈËÌṩһÄêµÄÃâ·ÑÐÅÓÃ¼à¿ØÐ§ÀÍ¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://oag.ca.gov/system/files/General%20Notice%20Z507_v02.PDF
4.Lumber LiquidatorsÔâÀÕË÷Èí¼þ¹¥»÷£¬£¬£¬£¬ÊÕÈëËðʧ´ï800ÍòÃÀÔª
Lumber Liquidators¹«Ë¾ÔÚ8ÔÂ21ÈÕÔâµ½¶ñÒâÈí¼þ¹¥»÷£¬£¬£¬£¬ÆäÅÌËã»úϵͳ¹Ø±Õ¡£¡£¡£¡£¸Ã¹«Ë¾µÄÁãÊÛÔ±¹¤ÎÞ·¨Éó²é²úÆ·¼ÛÇ®»ò¿â´æ£¬£¬£¬£¬ËûÃDZØÐèͨ¹ýµç»°»ò´ÓÆäСÎÒ˽¼Òµç×ÓÓʼþÕÊ»§ÏòÅäËÍÖÐÐÄ·¢ËͶ©µ¥£¬£¬£¬£¬²¢ÔÚÖ½Éϼͼ¿Í»§µÄÐÅÓÿ¨ÐÅÏ¢£¬£¬£¬£¬Ã¿´ÎÉúÒâ×î¶àÆÆ·Ñ°ëСʱµÄʱ¼ä¡£¡£¡£¡£¸Ã¹«Ë¾ÔÚ11ÔµÄÊÓ²ìÎļþÖÐÌåÏÖ£¬£¬£¬£¬´Ë´Î¹¥»÷Ô¤¼ÆÔì³ÉÁË600ÍòÖÁ800ÍòÃÀÔªµÄÊÕÈëËðʧ¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://www.salon.com/2019/12/29/like-voldemort-ransomware-is-too-scary-to-be-named_partner/
5.Ñо¿ÍŶÓÐû²¼APT×éÖ¯BRONZE PRESIDENTµÄÆÊÎö±¨¸æ
SecureworksÍþвÇ鱨ÖÐÐÄÐû²¼¹ØÓÚAPT×éÖ¯BRONZE PRESIDENTµÄÆÊÎö±¨¸æ¡£¡£¡£¡£BRONZE PRESIDENTÖ÷ÒªÕë¶Ô·ÇÕþ¸®×éÖ¯ºÍÄÏÑǼ°¶«Ñǹú¼ÒµÄÕþ¸®ºÍÖ´·¨»ú¹¹£¬£¬£¬£¬¸Ã×éÖ¯¿ª·¢ÁË×Ô¼ºµÄÔ¶¿Ø¹¤¾ß£¬£¬£¬£¬²¢Ê¹ÓöàÖÖ¹ûÕæ¿ÉÓõŤ¾ß¼¯¡£¡£¡£¡£Ñо¿Ö°Ô±ÊӲ쵽¸Ã×é֯ʹÓùýµÄ¹¤¾ß°üÀ¨£ºCobalt Strike¡¢Ô¶¿ØÄ¾ÂíPlugX¡¢ORat¡¢RCSession¡¢Nbtscan¡¢Nmap¼°Wmiexec¡£¡£¡£¡£¸Ã×éÖ¯¿ÉÄÜÔçÔÚ2014Äê¾Í×îÏÈÁ˹¥»÷»î¶¯¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://www.secureworks.com/research/bronze-president-targets-ngos
6.ÃÀ·¨ÔºÊÚȨ΢Èí½ÓÊܳ¯ÏÊAPT37¿ØÖƵÄ50¸öÓòÃû
΢ÈíÀֳɽÓÊÜÁËÓɳ¯ÏʺڿÍ×éÖ¯APT37¿ØÖƵÄ50¸öÓòÃû£¬£¬£¬£¬ÕâЩÓòÃû±»¸Ã×éÖ¯ÓÃÀ´Ìá³«ÍøÂç¹¥»÷£¬£¬£¬£¬°üÀ¨·¢ËÍ´¹ÂÚÓʼþºÍÍйܴ¹ÂÚÒ³ÃæµÈ¡£¡£¡£¡£Î¢ÈíÌåÏÖÆäÊý×Ö·¸·¨²¿·Ö£¨DCU£©ºÍÍþвÇ鱨ÖÐÐÄ£¨MSTIC£©ÒѾ¼àÊÓAPT37³¤´ïÊýÔµÄʱ¼ä£¬£¬£¬£¬²¢ÓÚ12ÔÂ18ÈÕÔÚ¸¥¼ªÄáÑÇÖÝ·¨Ôº¶Ô¸Ã×éÖ¯ÌáÆðËßËÏ¡£¡£¡£¡£¸Ã·¨ÔºÊÚÓè΢ÈíȨÏÞÒÔ½ÓÊÜAPT37ÔÚ·¸·¨»î¶¯ÖÐʹÓõÄ50¸öÓòÃû¡£¡£¡£¡£Î¢Èí¸ß¹ÜÌåÏÖ¸Ã×éÖ¯µÄ´ó´ó¶¼Ä¿µÄ¶¼Î»ÓÚÃÀ¹ú¡¢ÈÕ±¾ÒÔ¼°º«¹ú¡£¡£¡£¡£
ÔÎÄÁ´½Ó£º
https://www.zdnet.com/article/microsoft-takes-down-50-domains-operated-by-north-korean-hackers/


¾©¹«Íø°²±¸11010802024551ºÅ