{"id":3437,"date":"2024-11-13T15:23:21","date_gmt":"2024-11-13T07:23:21","guid":{"rendered":"https:\/\/blog.billows.com.tw\/?p=3437"},"modified":"2024-11-13T15:24:22","modified_gmt":"2024-11-13T07:24:22","slug":"%e4%ba%9e%e9%a6%ac%e9%81%9c%e9%81%ad%e5%8f%97-moveit-transfer-%e9%a7%ad%e5%ae%a2%e6%94%bb%e6%93%8a%e8%80%8c%e9%80%a0%e6%88%90%e9%87%8d%e5%a4%a7%e8%b3%87%e6%96%99%e5%a4%96%e6%b4%a9","status":"publish","type":"post","link":"https:\/\/blog.billows.com.tw\/?p=3437","title":{"rendered":"\u4e9e\u99ac\u905c\u906d\u53d7 MOVEit Transfer \u99ed\u5ba2\u653b\u64ca\u800c\u9020\u6210\u91cd\u5927\u8cc7\u6599\u5916\u6d29"},"content":{"rendered":"\n

MOVEit Transfer \u8cc7\u6599\u6d29\u9732\u4e8b\u4ef6\u4e2d\uff0c\u4e9e\u99ac\u905c\u53d7\u5230\u7684\u5f71\u97ff\u6700\u5927<\/strong><\/p>\n\n\n\n

\"\"
Photo Credit: Daily Security Review<\/figcaption><\/figure>\n\n\n\n

\u53bb\u5e74\u767c\u751f\u7684 MOVEit Transfer \u8cc7\u6599\u6d29\u9732\u4e8b\u4ef6\uff0c\u662f\u8fd1\u5e74\u4f86\u898f\u6a21\u6700\u5927\u7684\u4e8b\u4ef6\u4e4b\u4e00\uff0c\u5982\u4eca\u5c0d\u5404\u5927\u4f01\u696d\u4ecd\u5b58\u5728\u6df1\u9060\u5f71\u97ff\u3002\u6700\u8fd1\u4e00\u4f4d\u81ea\u7a31\u300c\u8cc7\u6599\u6fc0\u9032\u99ed\u5ba2\u5206\u5b50\u300d\u7684\u99ed\u5ba2\u5c07\u6578\u767e\u842c\u7b46\u7528\u6236\u8cc7\u6599\u516c\u4f48\u65bc\u8cc7\u6599\u6d29\u9732\u8ad6\u58c7\u3002<\/p>\n\n\n\n

\u4e9e\u99ac\u905c\u662f\u9019\u6b21\u6d29\u9732\u4e2d\u5f71\u97ff\u6700\u5927\u7684\u516c\u53f8<\/strong>\uff0c\u7d04\u6709\u8fd1 300 \u842c\u7b46\u7d00\u9304\u88ab\u6d29\u9732\u3002\u4e9e\u99ac\u905c\u8b49\u5be6\uff0c\u9019\u6b21\u8cc7\u6599\u5916\u6d29\u4e2d\u66b4\u9732\u4e86\u54e1\u5de5\u7684\u96fb\u8a71\u865f\u78bc\u3001\u96fb\u5b50\u90f5\u4ef6\u5730\u5740\u548c\u8fa6\u516c\u5730\u9ede\u7b49\u8cc7\u8a0a\u3002\u7136\u800c\uff0c\u4e9e\u99ac\u905c\u548c AWS \u7cfb\u7d71\u4e26\u672a\u906d\u9047\u5230\u8cc7\u5b89\u4e8b\u4ef6\u7684\u5f71\u97ff\u3002<\/p>\n\n\n\n

\u64da\u7db2\u8def\u5b89\u5168\u516c\u53f8 Hudson Rock <\/strong>\u7a31<\/strong>\uff0c\u5176\u4ed6\u53d7\u5f71\u97ff\u7684\u516c\u53f8\u9084\u5305\u62ec\u9280\u884c\u5de8\u982d\u532f\u8c50\uff08HSBC\uff09\u3001\u745e\u9280\u96c6\u5718\uff08UBS\uff09\u3001City National Bank\uff0c\u9084\u6709\u79d1\u6280\u5927\u5ee0 HP \u548c\u806f\u60f3\uff08Lenovo\uff09\u3002\u751a\u81f3\u9023\u901f\u98df\u9023\u9396\u5e97\u9ea5\u7576\u52de\uff08McDonald\u2019s\uff09\u4e5f\u5728\u540d\u55ae\u4e0a\u3002<\/p>\n\n\n\n

\u653b\u64ca\u8005\u53ef\u80fd\u5229\u7528\u6d29\u9732\u7684\u8cc7\u8a0a\u4f86\u9032\u884c\u793e\u4ea4\u5de5\u7a0b\u3001\u7db2\u8def\u91e3\u9b5a\u653b\u64ca\u548c\u6191\u8b49\u586b\u5145\u653b\u64ca(credential-stuffing attack)<\/strong>\uff0c\u5f9e\u800c\u5c0e\u81f4\u9019\u4e9b\u516c\u53f8\u5167\u90e8\u51fa\u73fe\u9032\u4e00\u6b65\u7684\u8cc7\u6599\u5916\u6d29\u4e8b\u4ef6\u3002<\/p>\n\n\n\n

\u6709\u8da3\u7684\u662f\uff0c\u767c\u5e03\u9019\u500b\u9f90\u5927\u8cc7\u6599\u96c6\u7684\u653b\u64ca\u8005\u81ea\u7a31\u70ba\u300c\u8cc7\u6599\u5b89\u5168\u4f48\u9053\u8005\u300d<\/strong>\uff0c\u4e26\u4e14\u5728\u77e5\u540d\u8cc7\u6599\u6d29\u9732\u8ad6\u58c7\u4e0a\u5ba3\u7a31\u6b64\u8209\u662f\u70ba\u4e86\u63d0\u9ad8\u5b89\u5168\u610f\u8b58\u3002<\/p>\n\n\n\n

\u64da Hudson Rock \u7a31<\/a>\uff0c\u6578\u5341\u5bb6\u516c\u53f8\u53d7\u5f71\u97ff\uff0c\u6d29\u9732\u4e86\u6578\u767e\u842c\u7b46\u7d00\u9304\u3002\u4f46\u4e26\u975e\u6240\u6709\u4f01\u696d\u7d44\u7e54\u53d7\u5f71\u97ff\u7684\u7a0b\u5ea6\u7686\u76f8\u540c\uff0c\u6709\u4e9b\u516c\u53f8\u50c5\u6709\u6578\u5343\u7b46\u7d00\u9304\u88ab\u6d29\u9732\uff0c\u800c\u5176\u4ed6\u516c\u53f8\u5247\u5f9e 50 \u842c\u7b46\u5230 280 \u842c\u7b46\u4e0d\u7b49\u3002\u53d7\u5f71\u97ff\u7684\u4e3b\u8981\u516c\u53f8\u540d\u55ae\u5305\u62ec\u6709 Amazon\uff0cMetLife\uff0cHSBC\uff0cU.S. Bank\uff0cHP\uff0cDelta Airlines \u7b49\u3002<\/p>\n\n\n\n

\u6839\u64da Hudson Rock \u7684\u8cc7\u6599\uff0c\u4e0a\u9031\u6d29\u9732\u7684\u8cc7\u8a0a\u5305\u62ec 25 \u5bb6\u300c\u4e3b\u8981\u4f01\u696d\u7d44\u7e54\u300d\u7684\u54e1\u5de5\u76ee\u9304\u3002Hudson Rock \u6307\u51fa\uff0c\u300c\u9019\u4e9b\u76ee\u9304\u5305\u542b\u8a73\u7d30\u7684\u54e1\u5de5\u8cc7\u8a0a\uff0c\u5305\u62ec\u59d3\u540d\u3001\u96fb\u5b50\u90f5\u4ef6\u5730\u5740\u3001\u96fb\u8a71\u865f\u78bc\u3001\u6210\u672c\u4e2d\u5fc3\u4ee3\u78bc\uff0c\u751a\u81f3\u67d0\u4e9b\u9084\u5305\u542b\u5b8c\u6574\u7684\u7d44\u7e54\u67b6\u69cb\u8cc7\u8a0a\u3002\u300d\u300c\u9019\u6a23\u7684\u8cc7\u6599\u5c0d\u65bc\u5c0b\u6c42\u9032\u884c\u7db2\u8def\u91e3\u9b5a\u3001\u8eab\u4efd\u76dc\u7aca\u751a\u81f3\u5927\u898f\u6a21\u793e\u4ea4\u5de5\u7a0b\u653b\u64ca\u7684\u7db2\u8def\u72af\u7f6a\u5206\u5b50\u4f86\u8aaa\uff0c\u7121\u7591\u662f\u500b\u91d1\u5eab\u3002\u300d<\/p>\n\n\n\n

\u53bb\u5e74\uff0c\u5df2\u89e3\u6563\u7684\u52d2\u7d22\u8edf\u9ad4\u7d44\u7e54 Clop<\/a> \u5229\u7528 MOVEit Transfer\uff08\u4e00\u7a2e\u7ba1\u7406\u6a94\u6848\u50b3\u8f38\u7684\u8edf\u9ad4\uff09\u4e2d\u7684\u96f6\u65e5\u6f0f\u6d1e\u9032\u884c\u4e86\u653b\u64ca\u3002\u8a72\u6f0f\u6d1e\u73fe\u5df2\u4fee\u88dc\uff0c\u4f46\u4e4b\u524d\u653b\u64ca\u8005\u80fd\u5920\u9032\u5165 MOVEit Transfer \u7684\u4f3a\u670d\u5668\uff0c\u5b58\u53d6\u4e26\u4e0b\u8f09\u516c\u53f8\u5ba2\u6236\u5132\u5b58\u65bc\u5176\u4e2d\u7684\u8cc7\u6599\u3002<\/p>\n\n\n\n

\u64da\u4f30\u8a08<\/a><\/strong>\uff0cClop <\/strong>\u5728 MOVEit <\/strong>\u653b\u64ca\u884c\u52d5\u4e2d\u900f\u904e\u52d2\u7d22\u8d16\u91d1\u5c31\u8cfa\u53d6\u4e86 7500 <\/strong>\u842c\u5230 1 <\/strong>\u5104\u7f8e\u5143\u7684\u6536\u76ca<\/strong>\u3002<\/p>\n\n\n\n

Clop<\/strong>\u7684\u4e00\u7cfb\u5217\u653b\u64ca\u5f71\u97ff\u4e86\u591a\u5bb6\u516c\u53f8<\/strong>\uff0c\u5305\u62ec\u6bbc\u724c\u3001\u8377\u862d\u570b\u969b\u96c6\u5718\uff08ING Bank\uff09\u3001\u5fb7\u610f\u5fd7\u9280\u884c<\/a>\u3001Postbank\u3001\u7f8e\u570b\u822a\u7a7a\u3001Radisson Americas \u7b49\u3002\u6839\u64da\u7db2\u8def\u5b89\u5168\u516c\u53f8 Emisoft \u7684\u8cc7\u6599\uff0c\u6709\u8d85\u904e 2700 \u5bb6\u4f01\u696d\u7d44\u7e54\u53d7\u5230\u5f71\u97ff\uff0c\u800c\u4e14\u591a\u9054 9500 \u842c\u7528\u6236\u7684\u8cc7\u6599\u906d\u66b4\u9732\u3002<\/p>\n\n\n\n

MOVEit Transfer\u653b\u64ca\u76f8\u95dc\u7684\u90e8\u5206\u7684\u5165\u4fb5\u6307\u6a19\uff08IOCs\uff09:<\/p>\n\n\n\n

c82059564d6e7a6f56d3b1597cdfe98dfc4e30a2050024bd744f12a3ef237bb5<\/td><\/tr>
d477ec94e522b8d741f46b2c00291da05c72d21c359244ccb1c211c12b635899<\/td><\/tr>
f994063b9fea6e4b401ee542f6b6d8d6d3b9e5082b5313adbd02c55dc6b4feb7<\/td><\/tr>
2931994f3bde59c3d9da53e0062e4d993dc6fc655a1bd325e90af6dc494ed1fa<\/td><\/tr>
3ff0719da7991a38f508e72e32412a1ee498241bf84f65e973d6e93dc8fd1f66<\/td><\/tr>
bdd4fa8e97e5e6eaaac8d6178f1cf4c324b9c59fc276fd6b368e811b327ccf8b<\/td><\/tr>
6015fed13c5510bbb89b0a5302c8b95a5b811982ff6de9930725c4630ec4011d<\/td><\/tr>
c56bcb513248885673645ff1df44d3661a75cfacdce485535da898aa9ba320d4<\/td><\/tr>
3a977446ed70b02864ef8cfa3135d8b134c93ef868a4cc0aa5d3c2a74545725b<\/td><\/tr>
de4ad0052c273649e0aca573e30c55576f5c1de7d144d1d27b5d4808b99619cd<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

MOVEit Transfer \u8cc7\u6599\u6d29\u9732\u4e8b\u4ef6\u4e2d\uff0c\u4e9e\u99ac\u905c\u53d7\u5230\u7684\u5f71\u97ff\u6700\u5927 \u53bb\u5e74\u767c\u751f\u7684 MOVEit Transfe READ MORE<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[183,174],"class_list":["post-3437","post","type-post","status-publish","format-standard","hentry","category-6","tag-iocs","tag-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/3437","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3437"}],"version-history":[{"count":3,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/3437\/revisions"}],"predecessor-version":[{"id":3441,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/3437\/revisions\/3441"}],"wp:attachment":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3437"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3437"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3437"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}