{"id":932,"date":"2021-02-26T09:46:02","date_gmt":"2021-02-26T01:46:02","guid":{"rendered":"https:\/\/blog.billows.com.tw\/?p=932"},"modified":"2021-02-26T12:25:06","modified_gmt":"2021-02-26T04:25:06","slug":"%e4%bf%84%e7%be%85%e6%96%af%e5%9c%8b%e5%ae%b6%e7%b4%9a%e9%a7%ad%e5%ae%a2%e6%a9%ab%e8%a1%8c%ef%bc%8c%e7%b9%bc%e4%b9%8b%e5%89%8d%e8%a2%ab%e7%be%8e%e5%9c%8b%e6%8c%87%e6%8e%a7%e7%82%basolarwinds%e4%ba%8b","status":"publish","type":"post","link":"https:\/\/blog.billows.com.tw\/?p=932","title":{"rendered":"\u4fc4\u7f85\u65af\u570b\u5bb6\u7d1a\u99ed\u5ba2\u6a6b\u884c\uff0c\u7e7c\u4e4b\u524d\u88ab\u7f8e\u570b\u6307\u63a7\u70baSolarWinds\u4e8b\u4ef6\u7684\u5e55\u5f8c\u9ed1\u624b\uff0c\u73fe\u70cf\u514b\u862d\u653f\u5e9c\u6b63\u5f0f\u5c07\u77db\u982d\u6307\u5411\u4fc4\u7f85\u65afAPT\u7d44\u7e54\uff0c\u5165\u4fb5\u5176\u6587\u4ef6\u7ba1\u7406\u7cfb\u7d71\u3002"},"content":{"rendered":"\n<figure class=\"wp-block-gallery columns-1 is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"574\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/02\/ukarine_1O-1024x574.jpg\" alt=\"\" data-id=\"935\" data-full-url=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/02\/ukarine_1O.jpg\" data-link=\"https:\/\/blog.billows.com.tw\/?attachment_id=935\" class=\"wp-image-935\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/02\/ukarine_1O-1024x574.jpg 1024w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/02\/ukarine_1O-300x168.jpg 300w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/02\/ukarine_1O-768x430.jpg 768w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/02\/ukarine_1O-1536x861.jpg 1536w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/02\/ukarine_1O.jpg 1747w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/li><\/ul><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">The <a href=\"https:\/\/twitter.com\/ncsccUA?ref_src=twsrc%5Etfw\">@ncsccUA<\/a> warns of a cyberattack on the document management system of state bodies. The attack belongs to the so-called supply chain attacks. Methods and means of carrying out this cyberattack allow to connect it with one of Russia&#39;s hacker spy groups.<a href=\"https:\/\/t.co\/ICgYxuuflH\">https:\/\/t.co\/ICgYxuuflH<\/a><\/p>&mdash; NSDC of Ukraine (@NSDC_ua) <a href=\"https:\/\/twitter.com\/NSDC_ua\/status\/1364484306329079808?ref_src=twsrc%5Etfw\">February 24, 2021<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p><a href=\"https:\/\/www.rnbo.gov.ua\/en\/Diialnist\/4823.html\">\u5728\u6628\u5929\u70cf\u514b\u862d\u653f\u5e9c\u6307\u8cac<\/a>\u66ff\u4fc4\u7f85\u65af\u6548\u529b\u7684APT\u99ed\u5ba2\u7d44\u7e54\uff0c\u8972\u64ca\u4e86\u5176\u6587\u4ef6\u7ba1\u7406\u7cfb\u7d71\uff0c\u5373\u884c\u653f\u6a5f\u95dc\u96fb\u5b50\u4e92\u52d5\u7cfb\u7d71\uff08System of Electronic Interaction of Executive Bodies\uff09\u3002\u884c\u653f\u6a5f\u95dc\u96fb\u5b50\u4e92\u52d5\u7cfb\u7d71\u662f\u4e00\u500b\u57fa\u65bc\u7db2\u8def\u7684\u5165\u53e3\u7db2\u7ad9\uff0c\u70cf\u514b\u862d\u653f\u5e9c\u6a5f\u69cb\u4f7f\u7528\u8a72\u5165\u53e3\u7db2\u7ad9\u5728\u5f7c\u6b64\u4e4b\u9593\u4ee5\u53ca\u8207\u516c\u5171\u6a5f\u69cb\u4e4b\u9593\u5206\u767c\u6587\u4ef6\u3002\u70cf\u514b\u862d\u570b\u5bb6\u5b89\u5168\u8207\u9632\u79a6\u59d4\u54e1\u6703(NSDC)\u7684\u5b98\u54e1\u4eca\u5929\u5728\u4e00\u4efd\u8072\u660e\u4e2d\u8aaa\uff0c \u653b\u64ca\u7684\u76ee\u7684\u662f\u5927\u898f\u6a21\u611f\u67d3\u7576\u5c40\u7684\u8cc7\u8a0a\u8cc7\u6e90\u3002<\/p>\n\n\n\n<p>\u70cf\u514b\u862d\u5b98\u54e1\u8aaa\uff0c\u653b\u64ca\u8005\u5728\u8a72\u5165\u53e3\u7db2\u7ad9\u4e0a\u8f09\u4e86\u8a98\u990c\u6587\u4ef6\u5d4c\u5165\u4e86\u4e00\u500b\u5de8\u96c6(Macro)\u8173\u672c\u3002\u8a72\u5de8\u96c6\u6253\u958b\u6642\u6703\u79d8\u5bc6\u4e0b\u8f09\u60e1\u610f\u8edf\u9ad4\uff0c\u5f9e\u800c\u4f7f\u99ed\u5ba2\u80fd\u5920\u9060\u7aef\u63a7\u5236\u53d7\u5bb3\u8005\u7684\u96fb\u8166\u3002<\/p>\n\n\n\n<p>NSDC\u5b98\u54e1\u8aaa\uff1a \u201c\u9032\u884c\u9019\u7a2e\u7db2\u8def\u653b\u64ca\u7684\u65b9\u6cd5\u548c\u624b\u6bb5\u4f7f\u6211\u5011\u53ef\u4ee5\u5c07\u5176\u8207\u4fc4\u7f85\u65af\u7684\u4e00\u500b\u99ed\u5ba2\u9593\u8adc\u7d44\u7e54\u806f\u7e6b\u8d77\u4f86\u3002\u201d\u5373\u4f7f\u70cf\u514b\u862d\u5b98\u54e1\u4e5f\u6c92\u6709\u5c07\u653b\u64ca\u6b78\u56e0\u65bc\u7279\u5b9a\u7684\u4fc4\u7f85\u65afAPT\u99ed\u5ba2\u7fa4\u3002\u4f46\u662f\u5b98\u54e1\u5011\u78ba\u5be6\u767c\u5e03\u4e86\u653b\u64ca\u4e2d\u4f7f\u7528\u7684\u5165\u4fb5\u6307\u6a19\uff08IOC\uff09\u3002\u5305\u62ec\uff1a<\/p>\n\n\n\n<p>Domain\uff1aenterox.ru<\/p>\n\n\n\n<p>IP address\uff1a109.68.212.97<\/p>\n\n\n\n<p>URL\uff1ahttp:\/\/109.68.212.97\/infant.php<\/p>\n\n\n\n<p>\u570b\u5916\u5a92\u9ad4\u5831\u5c0e\u8aaa\uff0c\u57fa\u65bc\u9019\u4e9bIOC\u80fd\u5920\u5c07\u8a72\u7d44\u7e54\u8207\u4fc4\u7f85\u65af\u653f\u5e9c\u8cc7\u52a9\u7684\u99ed\u5ba2\u7d44\u7e54Gamaredon\u9023\u7d50\u8d77\u4f86\uff0c\u8a72\u7d44\u7e54\u4e00\u76f4\u4ee5\u70cf\u514b\u862d\u70ba\u653b\u64ca\u76ee\u6a19\u3002<\/p>\n\n\n\n<p>\u95dc\u65bcGamaredon\u7684\u60c5\u8cc7:<\/p>\n\n\n\n<p><a href=\"https:\/\/otx.alienvault.com\/pulse\/60352ce7950d179bd0aff18b\">https:\/\/otx.alienvault.com\/pulse\/60352ce7950d179bd0aff18b<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/otx.alienvault.com\/pulse\/5fd7a4c5ad06715cb8630ecb\">https:\/\/otx.alienvault.com\/pulse\/5fd7a4c5ad06715cb8630ecb<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5728\u6628\u5929\u70cf\u514b\u862d\u653f\u5e9c\u6307\u8cac\u66ff\u4fc4\u7f85\u65af\u6548\u529b\u7684APT\u99ed\u5ba2\u7d44\u7e54\uff0c\u8972\u64ca\u4e86\u5176\u6587\u4ef6\u7ba1\u7406\u7cfb\u7d71\uff0c\u5373\u884c\u653f\u6a5f\u95dc\u96fb\u5b50\u4e92\u52d5\u7cfb\u7d71\uff08System  <a class=\"read-more\" href=\"https:\/\/blog.billows.com.tw\/?p=932\">READ MORE<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[147,148,112],"class_list":["post-932","post","type-post","status-publish","format-standard","hentry","category-6","tag-gamaredon","tag-148","tag-112"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/932","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=932"}],"version-history":[{"count":3,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/932\/revisions"}],"predecessor-version":[{"id":940,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/932\/revisions\/940"}],"wp:attachment":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=932"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=932"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=932"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}