{"id":2932,"date":"2023-12-20T17:01:21","date_gmt":"2023-12-20T09:01:21","guid":{"rendered":"https:\/\/blog.billows.com.tw\/?p=2932"},"modified":"2023-12-20T17:01:21","modified_gmt":"2023-12-20T09:01:21","slug":"%e7%b6%b2%e8%b7%af%e7%95%8c%e7%9a%84%e7%84%a1%e9%96%93%e9%81%93-%e7%be%8e%e5%9c%8bfbi%e9%80%8f%e9%81%8e%e7%b7%9a%e4%ba%ba%e7%93%a6%e8%a7%a3%e4%ba%86alphv-blackcat-%e5%8b%92%e7%b4%a2%e8%bb%9f%e9%ab%94","status":"publish","type":"post","link":"https:\/\/blog.billows.com.tw\/?p=2932","title":{"rendered":"\u7db2\u8def\u754c\u7684\u7121\u9593\u9053 \u7f8e\u570bFBI\u900f\u904e\u7dda\u4eba\u74e6\u89e3\u4e86Alphv\/BlackCat \u52d2\u7d22\u8edf\u9ad4\u7db2\u7ad9"},"content":{"rendered":"\n<p>\u57f7\u6cd5\u6a5f\u69cb\u5229\u7528\u6a5f\u5bc6\u7dda\u4eba\u548c\u81ea\u884c\u958b\u767c\u7684\u89e3\u5bc6\u5de5\u5177\uff0c\u6417\u6bc0\u4e86\u81ed\u540d\u662d\u8457\u7684Alphv\/BlackCat\u52d2\u7d22\u8edf\u9ad4\u7db2\u7ad9\u3002<\/p>\n\n\n\n<p>\u5728\u7f8e\u570b\u6642\u9593\u5468\u4e8c(12\/19)\u7684\u65b0\u805e\u7a3f\u4e2d\uff0c\u7f8e\u570b\u53f8\u6cd5\u90e8 (DOJ) \u5ba3\u5e03\u53d6\u7de0\u4e86\u7531 FBI \u4e3b\u5c0e\u3001\u6b50\u6d32\u5211\u8b66\u7d44\u7e54\u4ee5\u53ca\u5fb7\u570b\u3001\u4e39\u9ea5\u3001\u6fb3\u6d32\u3001\u897f\u73ed\u7259\u3001\u82f1\u570b\u3001\u5967\u5730\u5229\u548c\u745e\u58eb\u7576\u5c40\u53c3\u8207\u7684\u74e6\u89e3Alphv \/BlackCat \u884c\u52d5\u3002\u5728\u74e6\u89e3\u7684\u904e\u7a0b\u4e2d\uff0cFBI\u5728\u4e00\u540d\u7dda\u4eba\u7684\u5e6b\u52a9\u4e0b\u67e5\u5c01\u4e86\u591a\u500b\u52d2\u7d22\u8edf\u9ad4\u7d93\u71df\u7684\u7db2\u7ad9\uff0c\u4e26\u958b\u767c\u4e86\u4e00\u7a2e\u89e3\u5bc6\u5de5\u5177\u4f86\u5e6b\u52a9\u53d7\u5f71\u97ff\u7684\u53d7\u5bb3\u8005\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"755\" height=\"556\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2023\/12\/image-6.png\" alt=\"\" class=\"wp-image-2933\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2023\/12\/image-6.png 755w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2023\/12\/image-6-300x221.png 300w\" sizes=\"auto, (max-width: 755px) 100vw, 755px\" \/><figcaption class=\"wp-element-caption\">\u4f5c\u70ba\u91dd\u5c0d ALPHV \/Blackcat \u52d2\u7d22\u8edf\u9ad4\u63a1\u53d6\u7684\u5354\u8abf\u57f7\u6cd5\u884c\u52d5\u7684\u4e00\u90e8\u5206\uff0c\u806f\u90a6\u8abf\u67e5\u5c40\u67e5\u5c01\u4e86\u8a72\u52d2\u7d22\u8edf\u9ad4\u7db2\u7ad9<\/figcaption><\/figure>\n\n\n\n<p>\u6839\u64da\u7f8e\u570b\u53f8\u6cd5\u90e8\u7684<a href=\"https:\/\/www.justice.gov\/opa\/pr\/justice-department-disrupts-prolific-alphvblackcat-ransomware-variant\">\u65b0\u805e\u7a3f<\/a>\uff0c\u5728\u904e\u53bb 18 \u500b\u6708\u4e2d\uff0c\u6839\u64da\u5168\u7403\u53d7\u5bb3\u8005\u652f\u4ed8\u7684\u6578\u5104\u7f8e\u5143\u8d16\u91d1\uff0cALPHV\/Blackcat \u5df2\u6210\u70ba\u5168\u7403\u7b2c\u4e8c\u591a\u7522\u7684\u52d2\u7d22\u8edf\u9ad4\u5373\u670d\u52d9\u8b8a\u7a2e\u3002\u53d7\u5bb3\u8005\u7bc4\u570d\u5f9e\u653f\u5e9c\u5be6\u9ad4\u548c\u91ab\u7642\u6a5f\u69cb\u5230\u5b78\u6821\u3001\u570b\u9632\u5de5\u696d\u57fa\u5730\u516c\u53f8\u548c\u95dc\u9375\u88fd\u9020\u8a2d\u65bd\uff0c\u4f30\u8a08\u5df2\u91dd\u5c0d\u8d85\u904e 1,000 \u540d\u53d7\u5bb3\u8005\u3002\u8a72\u7db2\u8def\u72af\u7f6a\u7d44\u7e54\u6700\u8fd1\u7684\u5169\u500b\u53d7\u5bb3\u8005\u5305\u62ec\u9ad8\u6885\u570b\u969b\u9152\u5e97\u96c6\u5718\uff08MGM Resorts International\uff09\u548c<a href=\"https:\/\/blog.billows.com.tw\/?p=2912\">Henry Schein<\/a>\u6f22\u745e\u7965\u3002\u8a72\u91ab\u7642\u4fdd\u5065\u5de8\u982d\u5728\u77ed\u77ed\u4e00\u500b\u6708\u5167\u906d\u53d7\u4e86\u5169\u6b21Alphv\/BlackCat \u653b\u64ca\u3002\u70ba\u4e86\u53d6\u7de0\u9019\u4e9b\u7db2\u7ad9\uff0c\u806f\u90a6\u8abf\u67e5\u5c40\u8058\u8acb\u4e86\u4e00\u540d\u7dda\u4eba\u3002<\/p>\n\n\n\n<p>\u6839\u64da\u9031\u4e8c\u555f\u5c01\u7684<a href=\"https:\/\/www.justice.gov\/media\/1329536\/dl?inline\">\u641c\u7d22\u4ee4<\/a>\uff0c\u7dda\u4eba\u901a\u904e\u56de\u7b54\u5e7e\u500b\u80fd\u5c55\u793a\u7cbe\u901a\u6280\u8853\u7684\u554f\u984c\uff0c\u6210\u70baBlackCat\u7684\u6210\u54e1\u4e26\u7372\u5f97\u4e86\u5b58\u53d6\uff0c\u96a8\u5f8c\u5c07\u6191\u8b49\u79fb\u4ea4\u7d66\u806f\u90a6\u8abf\u67e5\u5c40\u300212 \u6708 11 \u65e5\uff0cFBI\u5411\u4f5b\u7f85\u88e1\u9054\u5dde\u5357\u5340\u63d0\u4ea4\u7684\u641c\u67e5\u4ee4\u4e26\u62ab\u9732\u4e86\u5229\u7528\u7279\u6b0a\u53d6\u6240\u767c\u73fe\u7684\u60c5\u6cc1\u3002FBI\u8868\u793a\u5728\u8abf\u67e5\u904e\u7a0b\u4e2d\uff0c\u57f7\u6cd5\u90e8\u9580\u5df2\u4e86\u89e3\u5230 BlackCat \u52d2\u7d22\u8edf\u9ad4\u96c6\u5718\u7684\u7db2\u8def\u3002FBI \u8b58\u5225\u4e26\u6536\u96c6\u4e86 946 \u500b Tor \u7ad9\u9ede\u7684\u516c\u9470\/\u79c1\u9470\uff0c\u64da\u4e86\u89e3BlackCat\u52d2\u7d22\u8edf\u9ad4\u7d44\u7e54\u4f7f\u7528\u9019\u4e9b\u7ad9\u9ede\u4f86\u8a17\u7ba1\u53d7\u5bb3\u8005\u901a\u4fe1\u3001\u6d29\u5bc6\u6578\u64da\u548c\u6210\u54e1\u4f7f\u7528\u7684Dashboard\u7b49\u3002\u64da\u5f9eDashboard\u4e2d\uff0c\u9644\u5c6c\u6210\u54e1\u53ef\u4ee5\u770b\u5230\u53d7\u5bb3\u8005\u5be6\u9ad4\u3001\u8981\u6c42\u7684\u5168\u984d\u8d16\u91d1\u50f9\u683c\u3001\u6298\u6263\u8d16\u91d1\u50f9\u683c\u3001\u5230\u671f\u65e5\u671f\u3001\u52a0\u5bc6\u8ca8\u5e63\u5730\u5740\u3001\u52a0\u5bc6\u8ca8\u5e63\u4ea4\u6613\u3001\u53d7\u611f\u67d3\u7684\u96fb\u8166\u7cfb\u7d71\u985e\u578b\u3001\u8d16\u91d1\u8981\u6c42\u55ae\u3001\u8207\u53d7\u5bb3\u8005\u7684\u804a\u5929\u7b49\u7b49\uff0c\u9019\u4e9b\u529f\u80fd\u4f7fBlackCat\u6210\u54e1\u80fd\u5920\u5728\u6574\u500b\u8ac7\u5224\u904e\u7a0b\u4e2d\u8207\u53d7\u5bb3\u8005\u4e92\u52d5\u3002<\/p>\n\n\n\n<p>FBI\u900f\u9732\uff0c\u9664\u4e86\u67e5\u5c01 BlackCat \u7d93\u71df\u7684\u7db2\u7ad9\u5916\uff0c\u5b83\u9084\u958b\u767c\u4e86\u4e00\u7a2e\u89e3\u5bc6\u5de5\u5177\uff0c\u5e6b\u52a9 BlackCat \u53d7\u5bb3\u8005\u5f9e\u653b\u64ca\u4e2d\u6062\u5fa9\uff0c\u800c\u7121\u9700\u652f\u4ed8\u8d16\u91d1\u3002\u8a72\u5de5\u5177\u5df2\u5411\u5168\u7403 500 \u591a\u540d\u53d7\u5f71\u97ff\u7684\u53d7\u5bb3\u8005\u63d0\u4f9b\uff0c\u806f\u90a6\u8abf\u67e5\u5c40\u8868\u793a\uff0c\u5230\u76ee\u524d\u70ba\u6b62\uff0c\u5b83\u5df2\u8207\u6578\u5341\u540d\u7f8e\u570b\u548c\u570b\u969b\u53d7\u5bb3\u8005\u5408\u4f5c\u3002<\/p>\n\n\n\n<p>\u7f8e\u570b<a href=\"https:\/\/www.justice.gov\/opa\/pr\/justice-department-disrupts-prolific-alphvblackcat-ransomware-variant\">\u53f8\u6cd5\u90e8<\/a>\u4f30\u8a08\uff0c\u5b83\u70ba\u53d7\u5bb3\u8005\u7bc0\u7701\u4e86 6800 \u842c\u7f8e\u5143\u7684\u8d16\u91d1\u8981\u6c42\uff0c\u53f8\u6cd5\u90e8\u526f\u90e8\u9577Lisa Monaco\u5728\u65b0\u805e\u7a3f\u4e2d\u767c\u8868\u8072\u660e\u7a31\uff0c\u5728\u74e6\u89e3 BlackCat \u52d2\u7d22\u8edf\u9ad4\u7d44\u7e54\u7684\u904e\u7a0b\u4e2d\uff0c\u53f8\u6cd5\u90e8\u518d\u6b21\u5c0d\u99ed\u5ba2\u9032\u884c\u4e86\u653b\u64ca\uff0c\u4e26\u900f\u904e\u806f\u90a6\u8abf\u67e5\u5c40\u5411\u5168\u7403\u6578\u767e\u540d\u52d2\u7d22\u8edf\u9ad4\u53d7\u5bb3\u8005\u63d0\u4f9b\u4e86\u89e3\u5bc6\u5de5\u5177\uff0c\u4f7f\u4f01\u696d\u548c\u5b78\u6821\u80fd\u5920\u91cd\u65b0\u958b\u653e\uff0c\u91ab\u7642\u4fdd\u5065\u548c\u7dca\u6025\u670d\u52d9\u80fd\u5920\u6062\u5fa9\u7dda\u4e0a\u3002\u6211\u5011\u5c07\u7e7c\u7e8c\u512a\u5148\u8003\u616e\u7834\u58de\u884c\u70ba\uff0c\u4e26\u5c07\u53d7\u5bb3\u8005\u7f6e\u65bc\u6211\u5011\u6467\u6bc0\u52a9\u9577\u7db2\u8def\u72af\u7f6a\u751f\u614b\u7cfb\u7d71\u7684\u6230\u7565\u4e2d\u3002<\/p>\n\n\n\n<p>\u67e5\u5c01\u6216\u95dc\u9589\u7dda\u4e0a\u57fa\u790e\u8a2d\u65bd\u901a\u5e38\u662f\u963b\u6b62\u52d2\u7d22\u8edf\u9ad4\u5718\u5925\u904b\u4f5c\u7684\u77ed\u671f\u89e3\u6c7a\u65b9\u6848\uff0c\u7f8e\u570b\u5728\u9019\u6b21\u884c\u52d5\u4e2d\u672a\u5ba3\u5e03\u902e\u6355\u4efb\u4f55\u4eba\uff0c\u9019\u53ef\u80fd\u662f\u56e0\u70ba\u8a31\u591aBlackCat\u6210\u54e1\u90fd\u4f4d\u65bc\u4fc4\u7f85\u65af\uff0c\u800c\u4fc4\u7f85\u65af\u62d2\u7d55\u5c07\u72af\u7f6a\u5acc\u7591\u4eba\u5f15\u6e21\u5230\u7f8e\u570b\u3002<\/p>\n\n\n\n<p>\u7136\u800c\uff0c\u6839\u64da\u8cc7\u5b89\u7814\u7a76\u793e\u7fa4VX underground\uff0cALPHV\/BlackCat\u5df2\u806f\u7e6b\u4ed6\u5011\uff0c\u4e14\u901a\u77e5\u4ed6\u5011\u5df2\u8f49\u79fb\u5176\u4f3a\u670d\u5668\u548c\u90e8\u843d\u683c\uff0c\u6545\u6b64\u6b21\u6253\u64ca\u884c\u52d5\u7684\u6709\u6548\u6027\u4ecd\u6709\u5f85\u89c0\u5bdf\u3002<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">ALPHV ransomware group administrative group has contacted us to inform us they have moved their servers and blogs.<br><br>*Image translated from Russian to English <a href=\"https:\/\/t.co\/W01YC2jHAa\">pic.twitter.com\/W01YC2jHAa<\/a><\/p>&mdash; vx-underground (@vxunderground) <a href=\"https:\/\/twitter.com\/vxunderground\/status\/1737091053218414592?ref_src=twsrc%5Etfw\">December 19, 2023<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>\u57f7\u6cd5\u6a5f\u69cb\u5229\u7528\u6a5f\u5bc6\u7dda\u4eba\u548c\u81ea\u884c\u958b\u767c\u7684\u89e3\u5bc6\u5de5\u5177\uff0c\u6417\u6bc0\u4e86\u81ed\u540d\u662d\u8457\u7684Alphv\/BlackCat\u52d2\u7d22\u8edf\u9ad4\u7db2\u7ad9\u3002 \u5728\u7f8e\u570b\u6642 <a class=\"read-more\" href=\"https:\/\/blog.billows.com.tw\/?p=2932\">READ MORE<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-2932","post","type-post","status-publish","format-standard","hentry","category-6"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/2932","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2932"}],"version-history":[{"count":2,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/2932\/revisions"}],"predecessor-version":[{"id":2935,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/2932\/revisions\/2935"}],"wp:attachment":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2932"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2932"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2932"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}