DearCry使用ProxyLogon误差攻击Exchange；；Check Point宣布2月全球威胁指数报告

宣布时间 2021-03-13

【威胁情报】


新勒索软件DearCry使用ProxyLogon误差攻击Exchange

https://www.bleepingcomputer.com/news/security/ransomware-now-attacks-microsoft-exchange-servers-with-proxylogon-exploits/


Intezer研究职员发明针对Linux系统的新后门RedXOR 

https://threatpost.com/linux-systems-redxor-malware/164689/


Trustwave发明使用图标文件分发NanoCore的垂纶活动

https://www.zdnet.com/article/icon-files-abused-in-malspam-to-spread-nanocore-trojan/


【误差补丁】


Claroty披露施耐德电气PowerLogic智能电表中的误差

https://www.securityweek.com/serious-vulnerabilities-found-schneider-electric-power-meters


【剖析报告】


Check Point宣布2021年2月全球威胁指数的报告

https://blog.checkpoint.com/2021/03/11/february-2021s-most-wanted-malware-trickbot-takes-over-following-emotet-shutdown/