Å·ÖÞÒøÐйÜÀí¾ÖµÄExchange·þÎñÆ÷Ôâµ½¹¥»÷£»FlagstarÒøÐеĿͻ§ÐÅϢй¶£¬²¢ÓÀ¾ÃֹͣʹÓÃAccellio
Ðû²¼Ê±¼ä 2021-03-091.FlagstarÒøÐеĿͻ§ÐÅϢй¶£¬²¢ÓÀ¾ÃֹͣʹÓÃAccellion
×ܲ¿Î»ÓÚÃÜЪ¸ùÖݵÄFlagstarÒøÐеĿͻ§ÐÅϢй¶£¬²¢Ðû²¼½«ÓÀ¾ÃֹͣʹÓÃAccellion¡£¸ÃÒøÐÐÊÇFlagstar BancorpµÄ×Ó¹«Ë¾£¬ÎªÃÀ¹ú¿Í»§ÌṩµÖѺºÍÆäËû½ðÈÚ·þÎñ¡£´Ë´ÎÊý¾Ýй¶ÊÇÓÉÓÚÆäʹÓõĴ«Êä´óÎļþµÄAccellion FTAÎļþ¹²Ïí·¨Ê½´æÔÚÒѱ»ÔÚÒ°ÀûÓõÄ0day¶øµ¼Öµġ£¸Ã×éÖ¯³ÆÆäÓÚ2021Äê1ÔÂ22ÈÕµÃÖª´Ëʼþ£¬Ä¿Ç°²¢Î´Í¸Â¶Ó°ÏìµÄ¿Í»§ÊýÁ¿ÒÔ¼°Ð¹Â¶Êý¾ÝµÄÖÖÀ࣬µ«ÌåÏÖFlagstar½«ÓÀ¾ÃֹͣʹÓÃAccellionÎļþ¹²ÏíÆ½Ì¨¡£
ÔÎÄÁ´½Ó£º
https://www.zdnet.com/article/flagstar-bank-customer-data-breached-through-accellion-hack/
2.ÃÀ¹ú˾·¨²¿¾¯¸æÃ°³äÖÝÀ͹¤¾ÖÇÔÈ¡¹«ÃñÐÅÏ¢µÄ»î¶¯
ÃÀ¹ú˾·¨²¿¾¯¸æÃ°³äÖÝÀ͹¤¾Ö£¨SWA£©ÇÔÈ¡¹«ÃñµÄ¸öÈËÐÅÏ¢ºÍÆäËûÃô¸ÐÊý¾ÝµÄ»î¶¯¡£ÔÚ´ËÀà»î¶¯ÖУ¬ºÚ¿Í´î½¨ÁËαÔìµÄSWAÍøÕ¾£¬²¢·¢ËͰüÂÞαÔìSWAÍøÕ¾Á´½ÓµÄÀ¬»ø¶ÌÐź͵ç×ÓÓʼþ£¬À´Òýµ¼Êܺ¦Õß·ÃÎÊÕâÐ©ÍøÕ¾¡£Ö®ºóÓÕʹ¹«ÃñÔÚ¸ÃÍøÕ¾ÉêÇëʧҵ¾È¼Ã£¬ÒÔÇÔÈ¡Æä¸öÈËÉí·ÝÐÅÏ¢µÈÊý¾Ý¡£×îºó£¬ºÚ¿Í»áÀûÓÃÊÕ¼¯µ½µÄÐÅÏ¢À´½øÐÐÉí·ÝµÁÓá£ÃÀ¹ú˾·¨²¿ÌåÏÖÔÚÃÀ¹úÓÐ1000ÍòʧҵÕߣ¬ÌáÐÑËûÃÇÓ¦µ±×¢ÒâÍøÂçµöÓã¹¥»÷¡£
ÔÎÄÁ´½Ó£º
https://www.hackread.com/u-s-doj-unemployment-benefit-websites-steal-data/
3.½Ý¿ËÊ×¶¼¹«¹²¹ÜÀíϵͳÔâ´ó¹æÄ£¹¥»÷£¬Ê¼þÔÚÊÓ²ìÖÐ
½Ý¿ËµÄÊ×¶¼²¼À¸ñÊеĹ«¹²¹ÜÀíϵͳÔâ´ó¹æÄ£¹¥»÷£¬Ê¼þÔÚÊÓ²ìÖС£¸ÃÊÐÊг¤den¨§k H?ibÌåÏÖ£¬Æä¹«¹²¹ÜÀíϵͳÔâµ½¹¥»÷£¬·þÎñÆ÷¼¸ºõûÓÐÊܵ½Ë𺦣¬µ«µç×ÓÓʼþϵͳÒѱ»¹Ø±Õ¡£½Ý¿ËÀ͹¤ºÍÉç»áÊÂÎñ²¿³¤JanaMal¨¢?ov¨¢ÌåÏָò¿Ò²Ôâµ½ÁËÏ®»÷£¬µ«²¢Î´Ìṩ¸ü¶àϸ½Ú¡£¾Ý±¨µÀ£¬¸ÃÊйÙÔ±ÒÑÏò½Ý¿Ë¹ú¼ÒÍøÂçºÍÐÅÏ¢¾Ö£¨NUKIB£©³ÂËß´Ëʼþ£¬Ä¿Ç°ÉÐÎÞ¼£Ïó±íÃ÷ÊÇ˽øÐÐÁ˴˴ι¥»÷¡£
ÔÎÄÁ´½Ó£º
https://www.euronews.com/2021/03/05/czech-officials-in-prague-hit-by-massive-cyber-attack
4.Å·ÖÞÒøÐйÜÀí¾ÖµÄExchange·þÎñÆ÷Ôâµ½¹¥»÷£¬Óʼþϵͳ¹Ø±Õ
Å·ÖÞÒøÐйÜÀí¾Ö£¨EBA£©³ÆÆäExchange·þÎñÆ÷Ôâµ½¹¥»÷£¬ËùÓÐÓʼþϵͳÒѾ¹Ø±Õ¡£EBAÊÇÅ·ÖÞ½ðÈÚ¼à¹ÜÌåϵµÄÒ»²¿ÃÅ£¬ËüÂôÁ¦¼à¶½Å·ÃËÒøÐÐÒµµÄÕûÌåÓÐÐòÔË×÷¡£Ä¿Ç°£¬¸ÃʼþÈÔÔÚÊÓ²ìÖУ¬Éв»È·¶¨ºÚ¿Í·ÃÎÊÁËʲôÊý¾Ý¡£¸Ã×éÖ¯ÔÚÉÏÖÜÈյijõ·¨Ê½²é³Æ£¬¹¥»÷Õß¿ÉÄÜÒѾ·ÃÎÊÁË´æ´¢ÔÚµç×ÓÓʼþ·þÎñÆ÷ÉϵĸöÈËÐÅÏ¢¡£µ«ÔÚ±¾ÖÜÒ»µÄÔö²¹¸üÐÂÖÐÌåÏÖ£¬µç×Óȡ֤¹ý³ÌÖÐûÓз¢ÏÖÊý¾Ýй¶µÄ¼£Ïó¡£
ÔÎÄÁ´½Ó£º
https://www.bleepingcomputer.com/news/security/european-banking-authority-discloses-exchange-server-hack/
5.MotusÐû²¼ÓйØ2021ÄêÒÔºóÔ¶³ÌÊÂÇéÇ÷ÊÆµÄ·ÖÎö³ÂËß
MotusÐû²¼ÁËÓйØ2021ÄêÒÔºóÔ¶³ÌÊÂÇéÇ÷ÊÆµÄ·ÖÎö³ÂËß¡£³ÂËß·¢ÏÖ£¬Èç½ñ£¬½«½ü56£¥µÄÔ±¹¤ÕýÔÚ½øÐÐÓëÔ¶³Ì¼æÈݵÄÊÂÇ飬67£¥µÄÆóҵϣÍû¾Ó¼ÒÊÂÇéµÄÕþ²ßÄܹ»ºã¾Ã»òÓÀ¾ÃµØ±£³ÖÏÂÈ¥¡£¸Ã³ÂËß»¹ÏÔʾ£¬ÓÐ83£¥µÄ¹«Ë¾Áìµ¼ÕßÌåÏÖËûÃǵÄ×éÖ¯ÒÑÀÖ³É×ªÒÆµ½Ô¶³ÌÊÂÇé¡£¶ø68%µÄÕÐÆ¸¾ÀíÈÏΪ£¬Ëæ×Åʱ¼äµÄÍÆÒÆ£¬Ô¶³ÌÊÂÇé±äµÃÔ½À´Ô½ÈÝÒ×£¬³ÖÕâÖÖ¿´·¨µÄÈËÊýÏà½Ï2020Äê6ÔÂÔö³¤ÁË14%¡£
ÔÎÄÁ´½Ó£º
https://www.motus.com/remote-work-policies-to-remain/
6.Group-IBÐû²¼2020-2021ÄêÀÕË÷Èí¼þµÄ·ÖÎö³ÂËß
Group-IBÐû²¼ÁË2020-2021ÄêÀÕË÷Èí¼þµÄ·ÖÎö³ÂËß¡£³ÂËßÖ¸³ö£¬ÀÕË÷Èí¼þ¹¥»÷ÔÚÈ¥ÄêÔö¼ÓÁËÒ»±¶ÒÔÉÏ£¬¹æÄ£ºÍÅÓ´óÐÔ¾ù³ÊÉÏÉýÇ÷ÊÆ¡£ÀÕË÷Èí¼þÍÅ»ïµÄÖ§³öƽ¾ùÔÚ1µ½200ÍòÃÀÔªÖ®¼ä£¬·ºÆðÁËÐí¶àеÄ×éÖ¯£¬ÀýÈçonti¡¢EgregorºÍDarkSide£¬ËûÃÇÖ÷ÒªÕë¶Ô±±ÃÀºÍÅ·Ö޵ĴóÐ͹«Ë¾¡£´ËÍ⣬ȥÄêµÄ¹¥»÷ÊýÁ¿Ôö¼ÓÁË150£¥£¬Æ½¾ùÊê½ðÔö³¤ÁËÁ½±¶£¬µ½´ï170000ÃÀÔª£¬Æ½¾ùÔì³ÉÁË18ÌìµÄÍ£»úʱ¼ä¡£
ÔÎÄÁ´½Ó£º
https://www.group-ib.com/resources/threat-research/ransomware-2021.html