{"id":1370,"date":"2021-09-10T14:43:10","date_gmt":"2021-09-10T06:43:10","guid":{"rendered":"https:\/\/blog.billows.com.tw\/?p=1370"},"modified":"2021-09-12T10:39:34","modified_gmt":"2021-09-12T02:39:34","slug":"%e6%b3%a8%e6%84%8f%e4%ba%86revil%e6%ad%a3%e5%bc%8f%e5%9b%9e%e6%ad%b8%ef%bc%81%e7%a0%94%e7%a9%b6%e4%ba%ba%e5%93%a1%e5%b7%b2%e7%99%bc%e7%8f%berevil%e7%9a%84%e6%9c%80%e6%96%b0%e6%a8%a3%e6%9c%ac%ef%bc%8c","status":"publish","type":"post","link":"https:\/\/blog.billows.com.tw\/?p=1370","title":{"rendered":"\u6ce8\u610f\u4e86~REvil\u6b63\u5f0f\u56de\u6b78\uff01\u7814\u7a76\u4eba\u54e1\u5df2\u767c\u73feREvil\u7684\u6700\u65b0\u6a23\u672c\uff0c\u6700\u65b0\u5bb3\u8005\u53ea\u67096\u5929\u6642\u9593\u8207REvil\u806f\u7e6b\u9032\u884c\u8ac7\u5224"},"content":{"rendered":"\n<p>Key Points:<\/p>\n\n\n\n<p>*Virus Total\u4e0a\u5df2\u51fa\u73feREvil\u7684\u6700\u65b0\u60e1\u610f\u6a23\u672c<\/p>\n\n\n\n<p>*\u4e0d\u50c5\u4f3a\u670d\u5668\u91cd\u65b0\u4e0a\u7dda\uff0c\u5df2\u51fa\u73fe\u6700\u65b0\u53d7\u5bb3\u8005\uff0c\u88ab\u52d2\u7d2260\u842c\u7f8e\u5143<\/p>\n\n\n\n<p>*\u70ba\u4f55\u6d88\u5931\u4e86\u5169\u500b\u6708\uff0cREvil\u7a31\u4ed6\u5011\u53ea\u662f\u653e\u5047\u53bb<\/p>\n\n\n\n<p>9\u67088\u65e5REvil\u5728\u6697\u7db2<a href=\"https:\/\/blog.billows.com.tw\/?p=1364\">\u91cd\u65b0\u4e0a\u4e0a\u7dda<\/a>\uff0c\u4eca\u5929\uff0c\u6377\u514b\u8cc7\u5b89\u516c\u53f8Avast\u7684\u60e1\u610f\u8edf\u9ad4\u7814\u7a76\u7e3d\u76e3Mr. Kroustek\u8868\u793a\uff0c \u57289\u67089\u65e5\uff0c\u5728\u514d\u8cbb\u7dda\u4e0a\u75c5\u6bd2\u5206\u6790\u670d\u52d9\u5e73\u81fa<a href=\"https:\/\/www.virustotal.com\/gui\/file\/ab0aa003d7238940cbdf7393677f968c4a252516de7f0699cd4654abd2e7ae83\/details\">VirusTotal<\/a>\u4e0a\uff0c\u51fa\u73fe\u4e86\u4e00\u652f\u7684\u52d2\u7d22\u8edf\u9ad4REvil\u6700\u65b0\u7684\u6a23\u672c(SHA-256: ab0aa003d7238940cbdf7393677f968c4a252516de7f0699cd4654abd2e7ae83)<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"554\" height=\"310\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-7.png\" alt=\"\" class=\"wp-image-1371\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-7.png 554w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-7-300x168.png 300w\" sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><\/figure>\n\n\n\n<p>\u6b64\u5916\uff0cMr. Kroustek\u4e5f\u516c\u958b\u4e86\u6709\u95dcREvil\u6700\u65b0\u53d7\u5ba4\u8005\u7684\u52d2\u7d22\u4fe1\u548c\u8d16\u91d1\u9801\u9762\u7684\u622a\u5716\uff0c\u64da\u4e86\u89e3\uff0c\u53d7\u5bb3\u8005\u7cfb\u7d71\u7684\u6a94\u6848\u5df2\u88ab\u52a0\u5bc6\u6210<strong><em>.qt1b68hi6e<\/em><\/strong>\u7684\u526f\u6a94\u540d\u3002\u6b64\u6b21\u53d7\u5bb3\u8005\u67096\u5929\u7684\u6642\u9593\u6c7a\u5b9a\u662f\u5426\u4ed860\u842c\u7f8e\u5143\u7684\u8d16\u91d1\uff0c\u5982\u903e\u6642\u672a\u4ed8\uff0c\u5247\u8d16\u91d1\u6703\u57289\u670816\u65e5\u6f32\u50f9\u4e00\u500d\uff0c\u76ee\u524d\u6c92\u6709\u770b\u5230\u6709\u95dc\u53d7\u5bb3\u5728REvil\u652f\u63f4\u7684\u804a\u5929\u5ba4\u8207\u5176\u9032\u884c\u5c0d\u8a71\u8ac7\u5224\u7684\u8cc7\u8a0a\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"554\" height=\"450\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-8.png\" alt=\"\" class=\"wp-image-1372\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-8.png 554w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-8-300x244.png 300w\" sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"554\" height=\"445\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-9.png\" alt=\"\" class=\"wp-image-1373\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-9.png 554w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-9-300x241.png 300w\" sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"554\" height=\"320\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-10.png\" alt=\"\" class=\"wp-image-1374\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-10.png 554w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-10-300x173.png 300w\" sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><\/figure>\n\n\n\n<p>Photo Credit: Mr. Kroustek<\/p>\n\n\n\n<p>\u6b64\u6b21\u56de\u6b78\uff0cREvil\u7684\u52d2\u7d22\u91d1\u984d\u6bd4\u4ee5\u5f80\u4f4e\u8a31\u591a\u800c\u5f15\u8d77\u71b1\u8b70\uff0c\u904e\u53bbREvil\u4ee5\u52d2\u7d22\u5929\u50f9\u800c\u81ed\u540d\u9060\u64ad\uff0c\u7576\u4e2d\u5305\u62ec\uff1a<\/p>\n\n\n\n<p>*\u65e5\u6708\u5149\u96c6\u5718\u65d7\u4e0b\u5b50<a href=\"https:\/\/blog.billows.com.tw\/?p=996\">Asteelflash Group<\/a>\u66fe\u906d\u52d2\u7d222400\u842c\u7f8e\u5143<\/p>\n\n\n\n<p>*<a href=\"https:\/\/www.ithome.com.tw\/news\/143355\">Acer<\/a>\u66fe\u906d\u52d2\u7d22<a>5<\/a>\u5343\u842c\u7f8e\u5143<\/p>\n\n\n\n<p>*<a href=\"https:\/\/blog.billows.com.tw\/?p=1028\">\u5ee3\u9054<\/a>\u66fe\u906d\u52d2\u7d225\u5343\u842c\u7f8e\u5143<\/p>\n\n\n\n<p>*\u7f8e\u570b<a href=\"https:\/\/blog.billows.com.tw\/?p=1146\">JBS Food<\/a>\u627f\u8a8d\u652f\u4ed81100 \u842c\u7f8e\u5143<\/p>\n\n\n\n<p>*<a href=\"https:\/\/news.cnyes.com\/news\/id\/4686603\">Kaseya<\/a>\u88abREvil\u52d2\u7d227\u5343\u842c\u7f8e\u5143<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"554\" height=\"276\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-11.png\" alt=\"\" class=\"wp-image-1375\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-11.png 554w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/09\/image-11-300x149.png 300w\" sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><\/figure>\n\n\n\n<p>\u53e6\u5916\uff0c\u6839\u64daDarkFeed\u53d6\u5f97REvil\u8207\u67d0\u8cc7\u5b89\u4eba\u54e1\u7684\u5c0d\u8a71\uff0cREvil\u7684operator \u8868\u793a\uff0c\u4ed6\u5011\u5b89\u7136\u7121\u6059 \uff0c\u6c88\u5bc2\u4e862\u500b\u6708\u53ea\u662f\u53bb\u4f11\u606f \uff0c\u73fe\u5728\u8981\u91cd\u56de\u5de5\u4f5c\uff0c \u5f9e9\u67088\u65e5\u767c\u73feREvil\u7684\u57fa\u790e\u5efa\u8a2d\u91cd\u65b0\u555f\u52d5\u8d77\uff0c\u4e0d\u5230\u5169\u5929\u5df2\u51fa\u73fe\u65b0\u7684\u53d7\u5bb3\u8005\uff0c\u76f8\u4fe1REvil\u7684\u56de\u6b78\u503c\u5f97\u6211\u5011\u6301\u7e8c\u7684\u5bc6\u5207\u95dc\u6ce8\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Key Points: *Virus Total\u4e0a\u5df2\u51fa\u73feREvil\u7684\u6700\u65b0\u60e1\u610f\u6a23\u672c *\u4e0d\u50c5\u4f3a\u670d\u5668\u91cd\u65b0\u4e0a\u7dda\uff0c\u5df2\u51fa\u73fe <a class=\"read-more\" href=\"https:\/\/blog.billows.com.tw\/?p=1370\">READ MORE<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[100],"class_list":["post-1370","post","type-post","status-publish","format-standard","hentry","category-6","tag-revilransomware"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1370","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1370"}],"version-history":[{"count":3,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1370\/revisions"}],"predecessor-version":[{"id":1379,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1370\/revisions\/1379"}],"wp:attachment":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1370"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1370"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1370"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}