{"id":1918,"date":"2022-05-13T12:04:30","date_gmt":"2022-05-13T04:04:30","guid":{"rendered":"https:\/\/blog.billows.com.tw\/?p=1918"},"modified":"2023-02-13T11:03:34","modified_gmt":"2023-02-13T03:03:34","slug":"%e5%8a%a0%e6%8b%bf%e5%a4%a7%e7%a9%ba%e6%88%b0%e8%a8%93%e7%b7%b4%e6%9c%8d%e5%8b%99%e6%89%bf%e5%8c%85%e5%95%86top-aces%e5%92%8c%e6%97%a5%e6%9c%ac%e6%b5%81%e8%a1%8c%e6%9c%8d%e9%a3%be%e3%81%97%e3%81%be","status":"publish","type":"post","link":"https:\/\/blog.billows.com.tw\/?p=1918","title":{"rendered":"\u52a0\u62ff\u5927\u7a7a\u6230\u8a13\u7df4\u670d\u52d9\u627f\u5305\u5546Top Aces\u548c\u65e5\u672c\u6d41\u884c\u670d\u98fe\u3057\u307e\u3080\u3089\u601d\u5922\u6a02\uff0c\u906dLockBit2.0\u653b\u64ca! Top Aces\u88ab\u76dc44GB\u7684\u6578\u64da\uff1b\u601d\u5922\u6a02\u65d7\u4e0b2200\u9593\u5e97\u8216\u53d7\u5f71\u97ff\uff0c\u7121\u6cd5\u8a02\u8cfc\u53ca\u96fb\u5b50\u4ed8\u6b3e"},"content":{"rendered":"\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"910\" height=\"619\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-6.png\" alt=\"\" class=\"wp-image-1919\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-6.png 910w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-6-300x204.png 300w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-6-768x522.png 768w\" sizes=\"auto, (max-width: 910px) 100vw, 910px\" \/><\/figure>\n\n\n\n<p>5\u670811\u65e5\uff0c\u52a0\u62ff\u5927\u79c1\u4eba\u5047\u60f3\u6575\u516c\u53f8 Top Aces\u900f\u9732\uff0c\u65d7\u4e0b\u7f8e\u570b\u5206\u516c\u53f8\u5728\u8abf\u67e5\u91dd\u5c0d\u5176\u5167\u90e8\u7cfb\u7d71\u906d\u52d2\u7d22\u8edf\u9ad4\u653b\u64ca\u7684\u4e8b\u4ef6\uff0c\u64daThe Record<a href=\"https:\/\/therecord.media\/top-aces-ransomware-attack-lockbit\/\">\u5831\u5c0e<\/a>\uff0cTop Aces\u5728\u767c\u73fe\u88ab\u5217\u70baLockBit 2.0\u52d2\u7d22\u8edf\u9ad4\u7684\u53d7\u5bb3\u8005\u5f8c\uff0c\u6b63\u5c55\u958b\u8abf\u67e5\u3002\u64cd\u4f5cLockBit 2.0\u52d2\u7d22\u8edf\u9ad4\u80cc\u5f8c\u99ed\u5ba2\u5df2\u8981\u6c42Top Aces\u5728 5 \u6708 15 \u65e5\u4e4b\u524d\u4ed8\u8d16\u91d1\uff0c\u4ee5\u63db\u53d6\u4e0d\u5916\u6d29\u5c6c\u65bcTop Aces\u7d04 44 GB\u7684\u6578\u64da\u3002Top Aces\u64c1\u6709\u5168\u7403\u898f\u6a21\u6700\u5927\u7684\u79c1\u71df\u6230\u9b25\u6a5f\u6a5f\u968a\uff0c\u7528\u65bc\u70ba\u4e16\u754c\u5404\u5730\u7684\u8ecd\u968a\u63d0\u4f9b\u8a13\u7df4\uff0c\u9664\u4e86\u8207\u52a0\u62ff\u5927\u3001\u5fb7\u570b\u3001\u4ee5\u8272\u5217\u7b49\u570b\u5bb6\u5408\u4f5c\u5916\uff0c\u8a72\u516c\u53f8\u9084\u65bc2019\u5e74\u8207\u7f8e\u570b\u7c3d\u7f72\u4e86\u4e00\u9805\u5354\u8b70\uff0c\u70ba\u9632\u79a6\u4fc4\u7f85\u65af\u63d0\u4f9b\u8a13\u7df4\u5de5\u5177\u3002\u8cc7\u5b89\u516c\u53f8Emsisoft\u7684\u5a01\u8105\u5206\u6790\u5e2b Brett Callow\u6307\u51fa\uff0c\u5c0d\u570b\u9632\u627f\u5305\u5546\u7684\u653b\u64ca\u4ee4\u4eba\u64d4\u6182\uff0c\u56e0\u70ba\u7121\u6cd5\u77e5\u9053\u88ab\u76dc\u6578\u64da\u6700\u7d42\u6703\u843d\u5728\u54ea\u88e1\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-7.png\" alt=\"\" class=\"wp-image-1920\" width=\"865\" height=\"674\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-7.png 865w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-7-300x234.png 300w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-7-768x598.png 768w\" sizes=\"auto, (max-width: 865px) 100vw, 865px\" \/><figcaption class=\"wp-element-caption\">\u601d\u5922\u6a02\u516c\u544a<\/figcaption><\/figure>\n\n\n\n<p>\u65e5\u672c\u5927\u578b\u670d\u88dd\u9023\u9396\u4f01\u696d\u601d\u5922\u6a025\u670811\u65e5<a href=\"https:\/\/www.shimamura.gr.jp\/assets-c\/uploads\/426a71e424a28540adb3a1bf487f7b170d51a9c8.pdf\">\u900f\u9732<\/a>\uff0c\u5728\u65e5\u672c\u9ec3\u91d1\u9031\u5047\u671f\u9593\uff0c\u5176\u5167\u90e8\u7cfb\u7d71\u906d\u99ed\u5ba2\u5165\u4fb5\u9020\u6210\u7cfb\u7d71\u7570\u5e38\uff0c\u7121\u6cd5\u5728\u5e97\u8216\u9032\u884c\u96fb\u5b50\u652f\u4ed8\u548c\u7dda\u4e0a\u7522\u54c1\u8a02\u8cfc\uff0c\u591a\u90542200\u9593\u5546\u5e97\u53d7\u5f71\u97ff\u3002<a href=\"https:\/\/www3.nhk.or.jp\/news\/html\/20220510\/k10013620031000.html\">NHK<\/a>\u5831\u5c0e\u601d\u5922\u6a02\u9632\u6b62\u640d\u5bb3\u7684\u9032\u4e00\u6b65\u64f4\u5927\uff0c\u57285\u67085\u65e5\u66ab\u505c\u6240\u6709\u5e97\u9762\u96fb\u5b50\u652f\u4ed8\uff0c6\u65e5\u56e0\u78ba\u8a8d\u5b89\u5168\u6027\uff0c\u6062\u5fa9\u96fb\u5b50\u7d50\u5e33\uff0c\u4f46\u76ee\u524d2200\u9593\u5e97\u8216\u4ecd\u7121\u6cd5\u63d0\u4f9b\u5e97\u9762\u7121\u73fe\u8ca8\u7684\u5546\u54c1\u8a02\u8cfc\u670d\u52d9\u3002<\/p>\n\n\n\n<p>\u6839\u64da\u89c0\u5bdf\uff0cLockBit 2.0\u8072\u7a31\u53d6\u5f97\u601d\u5922\u6a02\u8d85\u904e 16Gb\u7684\u6578\u64da\uff0c\u8981\u6c42\u601d\u5922\u6a02\u57285\u670816\u65e5\u524d\u652f\u4ed8\u8d16\u91d1\uff0c\u53e6\u5916\uff0c\u601d\u5922\u6a02\u8868\u793a\uff0c\u76ee\u524d\u672a\u767c\u73fe\u6709\u5ba2\u6236\u6216\u54e1\u5de5\u7684\u500b\u8cc7\u5916\u6d41\u3002<\/p>\n\n\n\n<p>LockBit \u4ecd\u7136\u662f\u6700\u6d3b\u8e8d\u7684\u52d2\u7d22\u8edf\u9ad4\u7d44\u7e54\u4e4b\u4e00\uff0c\u53bb\u5e74\u767c\u751f\u4e86\u6578\u767e\u6b21\u653b\u64ca\u3002\u6839\u64da Recorded Future \u6536\u96c6\u7684\u6578\u64da\uff0c\u4eca\u5e74\u5230\u76ee\u524d\u70ba\u6b62\uff0c\u4ed6\u5011\u5df2\u7d93\u653b\u64ca\u4e86\u81f3\u5c11 650 \u500b\u7d44\u7e54\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"810\" height=\"483\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-8.png\" alt=\"\" class=\"wp-image-1921\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-8.png 810w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-8-300x179.png 300w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2022\/05\/image-8-768x458.png 768w\" sizes=\"auto, (max-width: 810px) 100vw, 810px\" \/><figcaption class=\"wp-element-caption\">Photo Credit: The Record<\/figcaption><\/figure>\n\n\n\n<p>\u6709\u95dcLockBit2.0\u7684\u90e8\u5206\u5165\u4fb5\u6307\u6a19(Indicator of compromise -IOCs):<\/p>\n\n\n\n<p>URL:<\/p>\n\n\n\n<p>http:\/\/45.32.108.54:443\/c0000015.log<\/p>\n\n\n\n<p>http:\/\/45.32.108.54:443\/glib-2.0.dll<\/p>\n\n\n\n<p>IPv4: 149.28.137.7<\/p>\n\n\n\n<p>SHA 1:<\/p>\n\n\n\n<p>e35a702db47cb11337f523933acd3bce2f60346d<\/p>\n\n\n\n<p>729eb505c36c08860c4408db7be85d707bdcbf1b<\/p>\n\n\n\n<p>25fbfa37d5a01a97c4ad3f0ee0396f953ca51223<\/p>\n\n\n\n<p>1458421f0a4fe3acc72a1246b80336dc4138dd4b<\/p>\n\n\n\n<p>0c842d6e627152637f33ba86861d74f358a85e1f<\/p>\n\n\n\n<p>091b490500b5f827cc8cde41c9a7f68174d11302<\/p>\n\n\n\n<p>\u00a0&#8220;\u8f49\u8cbc\u3001\u5206\u4eab\u6216\u5f15\u7528\u6587\u7ae0\u5167\u5bb9\uff0c\u8acb\u8a3b\u660e\u51fa\u8655\u70ba\u7ae3\u76df\u79d1\u6280\u00a0<a href=\"https:\/\/www.billows.com.tw\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.billows.com.tw<\/a>\u00a0, \u4ee5\u514d\u89f8\u6cd5&#8221;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>5\u670811\u65e5\uff0c\u52a0\u62ff\u5927\u79c1\u4eba\u5047\u60f3\u6575\u516c\u53f8 Top Aces\u900f\u9732\uff0c\u65d7\u4e0b\u7f8e\u570b\u5206\u516c\u53f8\u5728\u8abf\u67e5\u91dd\u5c0d\u5176\u5167\u90e8\u7cfb\u7d71\u906d\u52d2\u7d22\u8edf\u9ad4\u653b\u64ca\u7684\u4e8b\u4ef6 <a class=\"read-more\" href=\"https:\/\/blog.billows.com.tw\/?p=1918\">READ MORE<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[184,116],"class_list":["post-1918","post","type-post","status-publish","format-standard","hentry","category-6","tag-lockbit2-0","tag-lockbitransomware"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1918"}],"version-history":[{"count":2,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1918\/revisions"}],"predecessor-version":[{"id":2442,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/1918\/revisions\/2442"}],"wp:attachment":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}