英国牵头的行动摧毁了规模庞大的俄罗斯黑帮网络

今日安全资讯速递

俄罗斯 APT Turla 组织被发现窃取巴基斯坦 APT 的数据

https://www.securityweek.com/spy-v-spy-russian-apt-turla-caught-stealing-from-pakistani-apt/

黑客利用 MOONSHINE 漏洞和 DarkNimbus 后门攻击

https://thehackernews.com/2024/12/hackers-target-uyghurs-and-tibetans.html

赛门铁克研究人员发现美国公司遭受长达四个月的网络攻击

https://thehackernews.com/2024/12/researchers-uncover-4-month-cyberattack.html

ANEL 和 NOOPDOOR 后门被用作针对日本的MirrorFace 攻击活动的武器

https://thehackernews.com/2024/12/anel-and-noopdoor-backdoors-weaponized.html

亲俄黑客组织声称对欧洲发动了 6600 次攻击

https://www.infosecurity-magazine.com/news/pro-russian-hacktivist-attacks/

Kimsuky 的网络钓鱼攻击策略日趋复杂

https://dailydarkweb.net/kimsukys-phishing-attacks-evolve-with-sophisticated-strategies/

APT-C-60 黑客在 SpyGlace 恶意软件活动中利用 StatCounter 和 Bitbucket

https://thehackernews.com/2024/11/apt-c-60-exploits-wps-office.html

英国牵头的行动摧毁了规模庞大的俄罗斯洗钱网络

https://cybernews.com/security/nca-dismantles-huge-russian-cybercrime-network/

一名俄罗斯程序手机被当局没收之后返还，发现安装新型 Android 间谍软件

https://www.bleepingcomputer.com/news/security/new-android-spyware-found-on-phone-seized-by-russian-fsb/

Solana Web3.js库在供应链攻击中被植入后门

https://www.securityweek.com/solana-web3-js-library-backdoored-in-supply-chain-attack/

德勤英国遭遇网络攻击，超过 1TB 数据被盗

https://www.cyberdaily.au/security/11450-deloitte-uk-suffers-alleged-cyber-incident-over-1tb-stolen

勒索软件组织声称窃取敏感数据后，英国电信开始调查黑客事件

https://www.securityweek.com/bt-investigating-hack-after-ransomware-group-claims-theft-of-sensitive-data/

Chemonics International 数据泄露影响 260,000 人

https://www.securityweek.com/chemonics-international-data-breach-impacts-260000-individuals/

欧洲刑警组织查获 50 台与网络犯罪市场和钓鱼网站相关的服务器

https://www.securityweek.com/50-servers-linked-to-cybercrime-marketplace-and-phishing-sites-seized-by-law-enforcement/

价值 3,000 美元的 Android 木马病毒针对银行和加密货币交易所

https://thehackernews.com/2024/12/this-3000-android-trojan-targeting.html

美国当局逮捕一名与 Scattered Spider 网络犯罪团伙有关的 19 岁少年

https://www.bleepingcomputer.com/news/security/us-arrests-scattered-spider-suspect-linked-to-telecom-hacks/

德国最大犯罪市场Crimenetwork 被取缔，管理员被捕

https://www.securityweek.com/largest-german-crime-marketplace-taken-down-administrator-arrested/

加密聊天服务 Matrix 遭查封，230 多万条信息被解密

https://www.pcmag.com/news/encrypted-chat-service-seized-2m-messages-read

日本设备制造商IO Data 确认路由器存在零日攻击，完整补丁尚待发布

https://www.securityweek.com/i-o-data-confirms-zero-day-attacks-on-routers-full-patches-pending/

引导加载程序漏洞影响超过 100 款思科交换机

https://www.securityweek.com/bootloader-vulnerability-impacts-over-100-cisco-switches/

Mitel MiCollab 严重漏洞导致系统遭受未经授权的访问

https://thehackernews.com/2024/12/critical-mitel-micollab-flaw-exposes.html

CISA 警告 Zyxel、ProjectSend 和 CyberPanel 中的漏洞可能被积极利用

https://thehackernews.com/2024/12/cisa-warns-of-active-exploitation-of.html