{"id":2889,"date":"2023-11-10T14:09:54","date_gmt":"2023-11-10T06:09:54","guid":{"rendered":"https:\/\/blog.billows.com.tw\/?p=2889"},"modified":"2023-11-10T14:09:54","modified_gmt":"2023-11-10T06:09:54","slug":"%e9%96%8b%e7%99%bc%e4%ba%ba%e5%93%a1%e8%ab%8b%e6%b3%a8%e6%84%8f%ef%bc%81pypi%e4%b8%ad%e7%99%bc%e7%8f%be%e5%a4%9a%e5%80%8b%e5%8c%85%e5%90%abblazestealer%e6%83%a1%e6%84%8f%e8%bb%9f%e9%ab%94%e7%9a%84","status":"publish","type":"post","link":"https:\/\/blog.billows.com.tw\/?p=2889","title":{"rendered":"\u958b\u767c\u4eba\u54e1\u8acb\u6ce8\u610f\uff01PYPI\u4e2d\u767c\u73fe\u591a\u500b\u5305\u542bBlazeStealer\u60e1\u610f\u8edf\u9ad4\u7684\u5957\u4ef6"},"content":{"rendered":"\n

<\/p>\n\n\n\n

Photo credit: Checkmarx<\/a><\/p>\n\n\n\n

\u6839\u64daCheckmarx<\/a> \u7684\u5831\u544a\u4e00\u7d44\u65b0\u7684\u60e1\u610f Python \u5957\u4ef6\u5df2\u9032\u5165 Python \u5957\u4ef6\u5132\u5b58\u5eab (PyPI) \uff0c\u5176\u76ee\u7684\u662f\u5f9e\u53d7\u611f\u67d3\u7684\u958b\u767c\u4eba\u54e1\u7cfb\u7d71\u4e2d\u7aca\u53d6\u654f\u611f\u8cc7\u8a0a\uff0c\u9019\u4e9b\u8edf\u9ad4\u5305\u507d\u88dd\u6210\u770b\u4f3c\u7121\u5bb3\u7684\u6df7\u6dc6\u5de5\u5177\uff0c\u4f46\u537b\u96b1\u85cf\u8457\u540d\u70baBlazeStealer\u7684\u60e1\u610f\u8edf\u9ad4\u3002<\/p>\n\n\n\n

\u6b64\u4e8b\u4ef6\u65bc 2023 \u5e74 1 \u6708\u958b\u59cb\uff0c\u7e3d\u5171\u6d89\u53ca 8 \u500b\u5957\u4ef6\uff0c\u540d\u70ba Pyobftoexe\u3001Pyobfusfile\u3001Pyobfexecute\u3001Pyobfpremium\u3001Pyobflite\u3001Pyobfadvance\u3001Pyobfuse \u548c pyobfgood\uff0c\u6700\u5f8c\u4e00\u500b\u5957\u4ef6\u65bc 10 \u6708\u767c\u5e03\u3002<\/p>\n\n\n\n

\u9019\u4e9b\u6a21\u7d44\u9644\u5e36 setup.py \u548c init.py \u6587\u4ef6\uff0c\u65e8\u5728\u6aa2\u7d22 Transfer[.]sh \u4e0a\u8a17\u7ba1\u7684 Python \u8173\u672c\uff0c\u8a72\u8173\u672c\u5728\u5b89\u88dd\u5f8c\u7acb\u5373\u57f7\u884c\u3002<\/p>\n\n\n\n

\u8a72\u60e1\u610f\u8edf\u9ad4\u540d\u70baBlazeStealer\uff0c\u80fd\u4f7f\u653b\u64ca\u8005\u80fd\u5920\u7372\u53d6\u5927\u91cf\u8cc7\u8a0a\uff0c\u5305\u62ec\u4f86\u81eaWeb \u700f\u89bd\u5668\u7684\u5bc6\u78bc\u3001\u57f7\u884c\u4efb\u610f\u547d\u4ee4\u3001\u52a0\u5bc6\u6587\u4ef6\u4ee5\u53ca\u505c\u7528\u53d7\u611f\u67d3\u4e3b\u6a5f\u4e0a\u7684Microsoft Defender \u9632\u6bd2\u8edf\u9ad4\u3002<\/p>\n\n\n\n

\u540c\u6642\u5b83\u6703\u900f\u904e\u63d0\u9ad8 CPU \u4f7f\u7528\u7387\u3001\u5728\u555f\u52d5\u76ee\u9304\u4e2d\u63d2\u5165 Windows \u6279\u6b21\u8173\u672c\u4f86\u95dc\u9589\u96fb\u8166\uff0c\u751a\u81f3\u5f37\u5236\u51fa\u73fe\u85cd\u5c4f\u6b7b\u6a5f (BSoD) \u932f\u8aa4\uff0c\u5f9e\u800c\u5c0e\u81f4\u4f7f\u96fb\u8166\u7121\u6cd5\u4f7f\u7528\u3002<\/p>\n\n\n\n

\u8207\u9019\u4e9b\u5957\u4ef6\u76f8\u95dc\u7684\u4e0b\u8f09\u591a\u662f\u5728\u7f8e\u570b\uff0c\u5176\u6b21\u662f\u4e2d\u570b\u3001\u4fc4\u7f85\u65af\u3001\u611b\u723e\u862d\u3001\u9999\u6e2f\u3001\u514b\u7f85\u57c3\u897f\u4e9e\u3001\u6cd5\u570b\u548c\u897f\u73ed\u7259\u3002\u5728\u88ab\u522a\u9664\u4e4b\u524d\uff0c\u5b83\u5011\u7e3d\u5171\u88ab\u4e0b\u8f09\u4e86 2,438 \u6b21\u3002<\/p>\n\n\n\n

\u8fd1\u5e74\u4f86\uff0c\u958b\u6e90\u5132\u5b58\u5eab\u5df2\u6210\u70ba\u5a01\u8105\u884c\u70ba\u8005\u50b3\u64ad\u60e1\u610f\u8edf\u9ad4\u7684\u6eab\u5e8a\u3002\u6839\u64da Phylum 2023 \u5e74\u7b2c\u4e09\u5b63\u8edf\u9ad4\u4f9b\u61c9\u93c8\u5b89\u5168\u6f14\u9032\u5831\u544a\uff0c\u591a\u500b\u751f\u614b\u7cfb\u7d71\u4e2d\u7e3d\u8a08 13,708 \u500b\u5957\u4ef6\u88ab\u767c\u73fe\u5728\u5b89\u88dd\u904e\u7a0b\u4e2d\u57f7\u884c\u53ef\u7591\u7a0b\u5f0f\u78bc\uff0c\u6709 1,481 \u500b\u8edf\u9ad4\u5305\u5f9e\u9060\u7aef\u4f86\u6e90\u79d8\u5bc6\u4e0b\u8f09\u4e26\u57f7\u884c\u4ee3\u78bc\uff0c10,201 \u500b\u5957\u4ef6\u5f15\u7528\u4e86\u5df2\u77e5\u7684\u60e1\u610f URL\u3002<\/p>\n\n\n\n

\u958b\u6e90\u9818\u57df\u662f\u672a\u4f86\u5275\u65b0\u8207\u9032\u6b65\u7684\u6c83\u571f\uff0c\u4f46\u958b\u767c\u8005\u4ecd\u9700\u8981\u8b39\u614e\u4e26\u4fdd\u6301\u8b66\u60d5\uff0c\u4e26\u5c0d\u4e0d\u719f\u6089\u7684\u5957\u4ef6\u9032\u884c\u6aa2\u67e5\uff0c\u78ba\u4fdd\u5176\u5b89\u5168\u7121\u865e\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

Photo credit: Checkmarx \u6839\u64daCheckmarx \u7684\u5831\u544a\u4e00\u7d44\u65b0\u7684\u60e1\u610f Python \u5957\u4ef6 READ MORE<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[174],"class_list":["post-2889","post","type-post","status-publish","format-standard","hentry","category-6","tag-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/2889","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2889"}],"version-history":[{"count":1,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/2889\/revisions"}],"predecessor-version":[{"id":2890,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/2889\/revisions\/2890"}],"wp:attachment":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2889"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2889"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2889"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}