資安事件新聞週報 2021/4/19 ~ 2021/4/23
1.重大弱點漏洞/後門/Exploit/Zero Day
Juniper 多個產品存在安全性弱點
https://us-cert.cisa.gov/ncas/current-activity/2021/04/15/juniper-networks-releases-security-updates
Juniper 近日發布更新以解決 Junos OS 多項版本中的安全性弱點
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11147&cat=SIRT_1&actp=LIST
Cisco Security Advisories April 21 2021
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-info-disclos-gGvm9Mfu
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-cql-inject-c7z9QqyB
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-xml-ext-entity-q6Z7uVUg
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-cmdinj-nRHKgfHX
https://tools.cisco.com/security/center/Search.x?publicationTypeIDs=1&firstPublishedStartDate=2021%2F04%2F21&firstPublishedEndDate=2021%2F04%2F21
趨勢科技軟體舊漏洞遭駭客攻擊
https://www.ithome.com.tw/news/144011
趨勢科技Apex One
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-25250
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-25253
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2021-28645
SonicWall警告電子郵件安全產品有3項遭開採的零時差漏洞
https://www.ithome.com.tw/news/143987
VMware 發布 NSX-T 的安全性更新
https://www.vmware.com/security/advisories/VMSA-2021-0006.html
Severe Bugs Reported in EtherNet/IP Stack for Industrial Systems
https://thehackernews.com/2021/04/severe-bugs-reported-in-ethernetip.html
Google Chrome再緊急修補已有攻擊的零時差漏洞
https://www.ithome.com.tw/news/143989
Update Your Chrome Browser ASAP to Patch a Week Old Public Exploit
https://thehackernews.com/2021/04/update-your-chrome-browser-immediately.html
3 Zero-Day Exploits Hit SonicWall Enterprise Email Security Appliances
https://thehackernews.com/2021/04/3-zero-day-exploits-hit-sonicwall.html
WARNING: Hackers Exploit Unpatched Pulse Secure 0-Day to Breach Organizations
https://thehackernews.com/2021/04/warning-hackers-exploit-unpatched-pulse.html
2.銀行/金融/保險/證券/支付系統/ 新聞及資安
花旗信用卡有誰來接？前4大銀行搶食大力丸
https://reurl.cc/1gV8XX
純網銀大比拚！ 一張圖看懂樂天商銀、LINE Bank優惠
https://finance.ettoday.net/news/1967879?redirect=1
展望金融科技發展 勤業眾信：當心法遵及資安要求
https://udn.com/news/story/7239/5401475
強化金融資訊服務 行庫拓資安團隊 鼓勵考證照
https://www.chinatimes.com/newspapers/20210406000172-260205?chdtv
開業就當機 純網銀陣痛多
https://udn.com/news/story/7239/5410085
純網銀開戰！Line「一鍵分帳」PK樂天「行動支付」
https://reurl.cc/WEmbm5
兩大信用卡組織樂觀其成 看好3大商機
https://ec.ltn.com.tw/article/paper/1445071
3.電子支付/行動支付/pay/資安
非現金支付、行動支付、電子支付
https://ec.ltn.com.tw/article/paper/1445073
靠60人IT團隊衝刺業務擴張，電子支付龍頭揭平臺化秘訣
https://www.ithome.com.tw/people/143882
電子支付1年增500萬人 2月儲值金再破百億
https://www.cardu.com.tw/news/detail.php?43033
兩大信用卡組織樂觀其成 看好3大商機
https://ec.ltn.com.tw/article/paper/1445071
電支專法修法上路 非現金支付最強助攻利器
https://ec.ltn.com.tw/article/paper/1445072
行動支付大戰 OPEN錢包可綁定LINE Bank結帳
https://ec.ltn.com.tw/article/breakingnews/3508380
一卡通董座李懷仁 3大方向電支爭霸
https://times.hinet.net/topic/23304559
4.加密貨幣/挖礦/區塊鍊/智能合約 資安
手機突然沒信號 200餘萬虛擬貨幣被駭客團伙盜走
https://kirokiro.cc/life/84606
土耳其加密貨幣交易所Thodex突然關門 執行長潛逃海外
https://reurl.cc/l0Wplq
土國加密交易所倒閉 投資人560億恐泡湯
https://news.ustv.com.tw/newsdetail/20210424A027
比特幣疲軟也不怕 撼訊、麗臺、映泰早盤亮燈漲停
https://udn.com/news/story/7251/5408136
比特幣疲軟沒關係！礦工還有奇亞幣可挖 硬碟概念股樂歪
https://money.udn.com/money/story/5607/5408136
無法對沖通膨！黑天鵝作者：比特幣是公然龐氏騙局
https://ec.ltn.com.tw/article/breakingnews/3510926
比特幣被套50萬！他心態崩潰「根本睡不著」 網教1招：2年財富自由
https://finance.ettoday.net/news/1967517
台灣人最熱議的加密貨幣TOP 10！狗狗幣年漲8000%、比特幣鬧雙胞，你還關注了誰
https://www.bnext.com.tw/article/62466/bitcoin-dogecoin-top-10
Chia奇亞幣正夯！礦工瘋搶SSD、HDD硬碟 「這2檔」挖礦概念股走強
https://www.wealth.com.tw/home/articles/31270
比特幣崩10％帶頭跳水！加密貨幣總市值24小時內蒸發逾7.3兆
https://ec.ltn.com.tw/article/breakingnews/3509427
5.資安事件新聞
A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC
勒索軟體頻攻擊科技廠 立委籲政府協力防護
https://www.cna.com.tw/news/aipl/202104210115.aspx
調查：勒索軟體攻擊，全球平均每10秒新增一企業受駭
https://ec.ltn.com.tw/article/breakingnews/3509621
駭客利用Telegram頻道散布惡意軟體HackBoss，來洗劫受害人加密貨幣錢包
https://www.ithome.com.tw/news/143965
威聯通NAS遭勒索軟體Qlocker攻擊，疑似甫修補的重大漏洞惹禍
https://www.ithome.com.tw/news/144004
威聯通（QNAP）回應 Qlocker 勒索病毒攻擊事件：立即採取行動，保護 QNAP NAS
https://news.sina.com.tw/article/20210425/38346826.html
北韓駭客Lazarus使用新後門程式Vyveva
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9178
又是REvil！廣達遭駭客竊取機密資料、勒索5000萬美元，公司：與多位資安專家合作中
https://www.bnext.com.tw/article/62421/revil-quanta-hacker-macbook-air-leak
藏匿惡意程式的手法越來越繁複！北韓駭客Lazarus濫用BMP圖檔及內嵌壓縮檔案，並搭配圖檔格式轉換等多重手法，來藏匿木馬程式
https://www.ithome.com.tw/news/143981
Lazarus BTC Changer
https://www.group-ib.com/blog/btc_changer
HabitsRAT Used to Target Linux and Windows Servers
https://www.intezer.com/blog/malware-analysis/habitsrat-used-to-target-linux-and-windows-servers/
Lazarus APT conceals malicious code within BMP image to drop its RAT
https://blog.malwarebytes.com/malwarebytes-news/2021/04/lazarus-apt-conceals-malicious-code-within-bmp-file-to-drop-its-rat/
Carbine Loader Cryptojacking Campaign
https://www.lacework.com/carbine-loader-cryptojacking-campaign/
https://github.com/lacework/lacework-labs/blob/master/blog/carbine_loader_iocs.csv
Primitive Bear (Gamaredon) Targets Ukraine with Timely Themes
https://www.anomali.com/blog/primitive-bear-gamaredon-targets-ukraine-with-timely-themes
Iron Tiger APT Spotted Using Enhanced SysUpdate Malware
https://www.trendmicro.com/en_us/research/21/d/iron-tiger-apt-updates-toolkit-with-evolved-sysupdate-malware-va.html
Malicious Android Apps Targeting Users of JIO Telecom in India
https://www.zscaler.com/blogs/security-research/android-apps-targeting-jio-users-india
Malware That Spreads Via Xcode Projects Now Targeting Apple's M1-based Macs
https://thehackernews.com/2021/04/malware-spreads-via-xcode-projects-now.html
Prometei Botnet Exploiting Unpatched Microsoft Exchange Servers
https://thehackernews.com/2021/04/prometei-botnet-exploiting-unpatched.html
Cybercriminals Using Telegram Messenger to Control ToxicEye Malware
https://thehackernews.com/2021/04/cybercriminals-using-telegram-messenger.html
Facebook Busts Palestinian Hackers' Operation Spreading Mobile Spyware
https://thehackernews.com/2021/04/facebook-busts-palestinian-hackers.html
Hackers threaten to leak stolen Apple blueprints if $50 million ransom isn't paid
https://thehackernews.com/2021/04/hackers-threaten-to-leak-stolen-apple.html
Malware That Spreads Via Xcode Projects Now Targeting Apple's M1-based Macs
https://thehackernews.com/2021/04/malware-spreads-via-xcode-projects-now.html
B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊
Signal在神展開的劇情下，破解了Cellebrite提供給極權政府的駭客工具
https://www.ithome.com.tw/news/143991
NCC公佈全台4G網速！疫情影響上傳速率微幅下降
https://reurl.cc/NXM2le
小心駭客！46%企業至少一名員工手機下載惡意軟體
https://money.udn.com/money/story/5648/5409041?from=edn_breaknewstab_index
別用公共「USB插座」充電！ 美檢察官警告：手機個資恐遭竊
https://www.ettoday.net/news/20210423/1966622.htm
Clubhouse 130 萬用戶個資，是「公開資訊」還是「外洩資料」
https://www.inside.com.tw/article/23285-Clubhouse-API-Information-Security
C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件
Google密碼匙雖可旁路攻陷 超高難度證實仍最安全 監測電磁場反推晶片內碼 Titan硬體金鑰慘遭破解
https://www.netadmin.com.tw/netadmin/zh-tw/technology/1F5C581FAE13437DACFEB430F2CD68F7
有130萬個Windows RDP登入憑證流入黑市
https://www.ithome.com.tw/news/144025
黑澀會美眉成啦啦隊女神！駭客勒索不從「帳號被賣土耳其」
https://star.setn.com/news/930132
網絡不安全？入侵系統軟件供應商盜數據
https://reurl.cc/9ZkWxY
美國第二大汽車保險業者Geico官網含漏洞，允許駭客竊取客戶駕照號碼
https://www.ithome.com.tw/news/143947
全球筆電代工一哥遭駭 蘋果機密被洩露 勒索鉅額贖金
https://www.xfastest.com/thread-249853-1-1.html
傳駭客勒索14億 廣達證實遭攻擊不影響營運
https://www.cna.com.tw/news/firstnews/202104215006.aspx
廣達、蘋果遭勒索軟體攻擊 立委促資安國家隊提解決方案
https://news.cnyes.com/news/id/4632205?exp=a
廣達MacBook組件圖傳遭駭 高虹安：恐成我國科技業危機
https://ec.ltn.com.tw/article/breakingnews/3506582
蘋果「產品設計圖」被偷！廣達遭威脅：營運未受影響
https://finance.ettoday.net/news/1965088?redirect=1
廣達被駭洩蘋果設計圖，MacBook Pro 2021 確認多三新連接埠
https://ccc.technews.tw/2021/04/22/macbook-pro-2021-revil/
Codecov被駭，殃及數百家企業客戶及IBM等科技公司
https://www.ithome.com.tw/news/143963
駭客勒索廣達一億美元 立委促資安國家隊解決
https://udn.com/news/story/6656/5403116?from=udn-catelistnews_ch2
Capcom被駭洩密 SONY阻MHW跨機連線獨佔
https://reurl.cc/e92pmL
脫北14年沒放過！ 朴延美爆駭客侵入日常 遭金正恩列「暗殺黑名單」
https://reurl.cc/bzrdeX
金正恩令「穿短裙工作」送勞改 脫北辣妹自曝恐被暗殺
https://udn.com/news/story/6809/5408701
北韓正妹大方露奶 再爆被金正恩盯上！遭駭客入侵怕隨時暗殺亡
https://tw.appledaily.com/international/20210422/SMSVCEJ5DFHHPFXDCNHOO4FP4U/
放任中資監視器，就是讓解放軍在台灣架設槍砲
https://reurl.cc/5ox3aq
疑似來自中國的駭客對歐美進行間諜活動
https://news.cts.com.tw/dw/international/202104/202104212039463.html
美國防工業遭VPN漏洞入侵數月 疑中國駭客所為
https://ec.ltn.com.tw/article/breakingnews/3506724
中國駭客利用VPN裝置漏洞鎖定美國國防產業展開攻擊
https://www.ithome.com.tw/news/143971
被指駭入侵歐美多個機構 中斥指控用心不良
https://reurl.cc/qmRp1R
海底撈遭疑監視影像傳中國 徐國勇：這店絕對不去
https://www.cna.com.tw/news/aipl/202104220096.aspx
日本近200家研究機構及國防企業遭中共軍方駭客
https://www.gnews.org/zh-hant/1137209/
日媒：黑客疑在中國解放軍指示下攻擊約200機構 包括JAXA
https://reurl.cc/xgmWE5
日本航太重要機構 疑遭中共網攻.警揪61419部隊
https://www.ntdtv.com.tw/b5/20210420/video/293486.html
美國防企業電腦網路遭入侵 疑中國駭客所為
https://www.cna.com.tw/news/aopl/202104210038.aspx
中國駭客透過美國VPN軟體 監控美軍工業及全球組織
https://reurl.cc/NXM2Qe
美國再遭大規模網路攻擊 中共難逃責任
https://reurl.cc/g8Ar6R
日媒揭共軍指示網攻 中國外交部：反對潑髒水
http://www.ksnews.com.tw/index.php/news/contents_page/0001478079
美國缺乏半導體生產能力 商務部長：國安面臨危機
https://news.cnyes.com/news/id/4632141
美商務部長：缺自產晶片能力 危及美國安
https://ec.ltn.com.tw/article/paper/1444469
美國指控兩名中國駭客到處竊取商業機密與研發資訊
https://www.ptt.cc/bbs/IA/M.1595477641.A.4EF.html
英國情報總監警告西方正在丟失科技主控權 放任中俄超越會有嚴重後果
https://reurl.cc/2b9aNr
為找出潛在漏洞，五角大廈讓一家神秘小公司控制 1.75 億 IP 位址
https://technews.tw/2021/04/25/the-pentagon-reportedly-gave-a-small-company-control-of-its-ip-addresses-to-find-security-issues/
俄軍突撤離烏克蘭 英媒：普丁已達成三大目的
https://tw.appledaily.com/international/20210423/J7YLU6PFVZA3JKGCE2WZ5PAS5Q/
Codecov Supply-Chain Attack Hacked
https://www.bleepingcomputer.com/news/security/popular-codecov-code-coverage-tool-hacked-to-steal-dev-credentials/
https://www.reuters.com/technology/us-investigators-probing-breach-san-francisco-code-testing-company-firm-2021-04-16/
https://www.reuters.com/article/us-usa-cyber-codecov-idUSKBN2C62XI
https://www.bleepingcomputer.com/news/security/hundreds-of-networks-reportedly-hacked-in-codecov-supply-chain-attack/
SysAdmin of Billion-Dollar Hacking Group Gets 10-Year Sentence
https://thehackernews.com/2021/04/sysadmin-of-billion-dollar-hacking.html
Hackers Exploit VPN to Deploy SUPERNOVA malware on SolarWinds Orion
https://thehackernews.com/2021/04/hackers-exploit-vpn-flaw-to-deploy.html
Researchers Find Additional Infrastructure Used By SolarWinds Hackers
https://thehackernews.com/2021/04/researchers-find-additional.html
Cost of Account Unlocks, and Password Resets Add Up
https://thehackernews.com/2021/04/cost-of-account-unlocks-and-password.html
120 Compromised Ad Servers Target Millions of Internet Users
https://thehackernews.com/2021/04/120-compromised-ad-servers-target.html
Improve Your Cyber Security Posture by Combining State of the Art Security Tools
https://thehackernews.com/2021/04/improve-your-cyber-security-posture-by.html
D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞
駭客組織冒用線上服務網站，鎖定南美洲民眾意圖竊取資料
https://www.ithome.com.tw/news/143986
遭控非法蒐集大量兒童個資 TikTok恐面臨數十億英鎊賠償
https://reurl.cc/R6V2LZ
台灣網購平台個資外洩事件頻傳，消費者與平台方該如何自保
https://www.inside.com.tw/article/23257-Information-Security-Taiwan
E.研究報告
[ MYSQL數據庫 ] 駭客一定要會的倉儲方式
https://huijou.com/mysqldb/
Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)
https://content.fireeye.com/nl-gc-apr-21/website-shining-a-light-on-solarcity-practical-exploitation-of-the-x2e-iot-device-part-one
Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part Two)
https://content.fireeye.com/nl-gc-apr-21/website-shining-a-light-on-solarcity-practical-exploitation-of-the-x2e-iot-device-part-two
Training Transformers for Cyber Security Tasks: A Case Study on Malicious URL Prediction
https://content.fireeye.com/nl-gc-apr-21/website-training-transformers-for-cyber-security-tasks-a-case-study-on-malicious-url-prediction
Back in a Bit: Attacker Use of the Windows Background Intelligent Transfer Service
https://content.fireeye.com/nl-gc-apr-21/website-attacker-use-of-the-windows-background-intelligent-transfer-service
M-TRENDS 2021
https://www.fireeye.com/current-threats/annual-threat-report/mtrends.html
Passwordless: More Mirage Than Reality
https://thehackernews.com/2021/04/passwordless-more-mirage-than-reality.html
Check Your Pulse: Suspected APT Actors Leverage Authentication Bypass Techniques and Pulse Secure Zero-Day
https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html
Introducing Mandiant Automated Defense: Rounding Out Mandiant Advantage With Automated Triage at Machine Speed
https://www.fireeye.com/blog/products-and-services/2021/04/introducing-mandiant-automated-defense-triage-at-machine-speed.html
Deep Analysis: New FormBook Variant Delivered in Phishing Campaign – Part I
https://www.fortinet.com/blog/threat-research/deep-analysis-new-formbook-variant-delivered-phishing-campaign-part-I
Deep Analysis: FormBook New Variant Delivered in Phishing Campaign – Part II
https://www.fortinet.com/blog/threat-research/deep-analysis-formbook-new-variant-delivered-phishing-campaign-part-ii
F.商業
趨勢科技Vision One在MITRE ATT&CK評測中偵測到96%攻擊步驟
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9174
趨勢科技陳怡樺：躋身電動車大國，台灣要搞懂這三件事
https://www.gvm.com.tw/article/79072
最新MITRE ATT&CK評估計畫結果出爐，第三輪29家資安業者較勁
https://www.ithome.com.tw/news/143990
勤業眾信攜手政大發布《2021 台灣金融科技趨勢展望》 驅動產業創新三建議 共譜台灣金融科技發展前景
https://times.hinet.net/topic/23300138
科技大廠驚傳客戶研發機密外洩！Openfind 提供檔案 DLP 方案
https://www.netadmin.com.tw/netadmin/zh-tw/snapshot/375E7AF1C7AF42489E58FA60DD84A94F
G.政府
防再遭駭客入侵 調查局與中油秘密簽署資安備忘錄
https://udn.com/news/story/7321/5407315
台灣青年女力「資安闖天關」 高志明籲數發部設台南沙崙
https://www.taiwannews.com.tw/ch/news/4185971
沙崙科學城資安暨智慧科技產業研發大樓開幕
https://news.586.com.tw/2021/04/393032/
有關個資與一般公務機密洩漏之資安通報等級說明，敬請留意避免遭受懲處
https://cnc.ntut.edu.tw/p/404-1004-108816.php?Lang=zh-tw
輕忽個資保護 奢談數位發展
https://tw.appledaily.com/forum/20210425/NLVPT7VJZBFEHDW73SW5H7FLYU/
H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車 相關資安
英國政府正制訂新法，以確保未來境內所有智慧裝置皆符合全新安全性規範
https://www.moneydj.com/kmdj/news/newsviewer.aspx?a=6a4287ae-64e7-46d0-a558-ae7843a3383b
ICS-CERT Advisories April 15 2021
https://us-cert.cisa.gov/ics/advisories/icsa-21-105-01
https://us-cert.cisa.gov/ics/advisories/icsa-21-105-02
ICS-CERT Advisories April 20 2021
https://us-cert.cisa.gov/ics/advisories/icsa-21-110-01
https://us-cert.cisa.gov/ics/advisories/icsa-21-110-02
https://us-cert.cisa.gov/ics/advisories/icsa-21-110-03
https://us-cert.cisa.gov/ics/advisories/icsa-21-110-04
https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05
https://us-cert.cisa.gov/ics/advisories/icsa-21-110-06
https://us-cert.cisa.gov/ics/advisories/icsa-21-110-07
ICS-CERT Advisories April 22 2021
https://us-cert.cisa.gov/ics/advisories/icsa-21-112-01
https://us-cert.cisa.gov/ics/advisories/icsa-21-112-02
I.教育訓練
How To Avoid the Costly Risks of Cloud Misconfigurations
https://content.fireeye.com/nl-gc-apr-21/website-how-to-avoid-the-costly-risks-of-cloud-misconfigurations
What are the different roles within cybersecurity
https://thehackernews.com/2021/04/what-are-different-roles-within.html
ossu / computer-science
https://github.com/ossu/computer-science
J.人工智慧/AI/ML/人臉辨識
想訓練 AI 協助寫程式？駭客能改造程式，讓模型做出誤判
https://buzzorange.com/techorange/2021/04/21/code-model-flaw/
6.近期資安活動及研討會
工業控制系統資通安全論壇 4/26
https://acfd2019.kktix.cc/events/831e3194
MLDM Monday @ 三創育成 | TBD (可能與機器人相關主題) 4/26
https://www.meetup.com/Taiwan-R/events/277082078/
國家高速網路與計算中心 教育訓練 【資安中階課程】你被已毒了嗎? - 初探行動應用APP安全風險檢驗 4/27
https://reurl.cc/6y74ly
How to Improve, Continuously? 如何能夠「持續地」改進 4/28
https://www.meetup.com/the-liberators-network-taiwan-user-group-taipei-taiwan/events/276003453/
Why Self-Organization Matters For Scrum Teams 5/20
https://www.meetup.com/the-liberators-network-taiwan-user-group-taipei-taiwan/events/276003653/
國家高速網路與計算中心 教育訓練 「大數據程式開發平台(VM版本)」建置與開發實務課程 5/21
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3945&from_course_list_url=course_index
學生計算機年會 SITCON 2021
https://sitcon.org/2021/
2021製造業資安論壇 6/10
https://docs.google.com/forms/d/e/1FAIpQLSeJEpc_ePmJGx2RO6hlSJQnmsFTzBT-2zkzjcnPHbdYS2UAhQ/viewform
行動應用APP安全檢測與實務(可抵內稽) 6/11
https://www.caa.org.tw/coursedetail-3515.html
Maximize the Output, or Optimize the Outcome 6/24
https://www.meetup.com/the-liberators-network-taiwan-user-group-taipei-taiwan/events/276003947/
元智資工夏令營-由programming邁入AI大數據與資安世界 7/15
https://cse-yzu.kktix.cc/events/yzcsapcs5
沒有留言:
張貼留言