{"id":945,"date":"2021-03-05T10:58:00","date_gmt":"2021-03-05T02:58:00","guid":{"rendered":"https:\/\/blog.billows.com.tw\/?p=945"},"modified":"2021-03-05T11:06:35","modified_gmt":"2021-03-05T03:06:35","slug":"%e9%9b%b2%e7%ab%af%e8%b3%87%e5%ae%89%e5%85%ac%e5%8f%b8qualys%e6%88%90%e7%82%baaccellion-fta%e4%ba%8b%e4%bb%b6%e7%9a%84%e6%9c%80%e6%96%b0%e5%8f%97%e5%ae%b3%e8%80%85%ef%bc%8c%e5%90%8c%e6%99%82%e6%88%90","status":"publish","type":"post","link":"https:\/\/blog.billows.com.tw\/?p=945","title":{"rendered":"\u96f2\u7aef\u8cc7\u5b89\u516c\u53f8Qualys\u6210\u70baAccellion FTA\u4e8b\u4ef6\u7684\u6700\u65b0\u53d7\u5bb3\u8005\uff0c\u540c\u6642\u6210\u70baCLOP\u7684\u6572\u8a50\u5c0d\u8c61\uff0c\u8cc7\u6599\u5916\u6d29\u88ab\u516c\u958b\u5230CL0P ^ _- LEAKS\u7db2\u7ad9\u4e0a"},"content":{"rendered":"\n<p>\u63d0\u4f9b\u96f2\u7aef\u5b89\u5168\u8207\u5408\u898f\u7684Qualys\u906d\u53d7\u4e86\u6578\u64da\u5916\u6d29\u9732\uff0c\u64da\u7a31\u99ed\u5ba2\u5229\u7528\u4e86Accellion FTA\u4f3a\u670d\u5668\u4e2d\u7684\u96f6\u6642\u5dee\u6f0f\u6d1e\u4e26\u5b89\u88dd\u4e00\u500b\u540d\u70ba\u201cDEWMODE\u201d\u7684web shell\uff0c\u7528\u65bc\u4e0b\u8f09\u5b58\u5132\u5728\u76ee\u6a19\u53d7\u5bb3\u8005FTA\u4f3a\u670d\u5668\u4e0a\u7684\u76f8\u95dc\u6a94\u6848\u3002\u7531\u5341\u4e8c\u6708\u958b\u59cb\uff0c\u4e00\u9023\u4e32\u7684\u653b\u64ca\u91dd\u5c0dAccellion FTA\u6a94\u6848\u50b3\u8f38\u61c9\u7528\u7a0b\u5f0f\u7684\u96f6\u6642\u5dee\u6f0f\u6d1e\uff0c\u8a72\u6f0f\u6d1e\u4f7f\u653b\u64ca\u8005\u80fd\u5920\u7aca\u53d6\u4f3a\u670d\u5668\u4e0a\u5b58\u5132\u7684\u6a94\u6848\u3002\u5f9e\u90a3\u6642\u8d77\uff0cCLOP\u52d2\u7d22\u8edf\u9ad4\u5c31\u4e00\u76f4\u901a\u904e\u5728\u5176\u63ed\u79d8\u7db2\u7ad9\u4e0a\u767c\u5e03\u76dc\u4f86\u7684\u6578\u64da\u4f86\u52d2\u7d22\u9019\u4e9b\u53d7\u5bb3\u8005\uff0c\u5982\u4e0b\u5716\u5df2\u77e5\u7684\u53d7\u5bb3\u8005\u5305\u62ec\u4ea4\u901a\u904b\u8f38\u7684\u65b0\u5357\u5a01\u723e\u58eb\u5dde\uff0c \u65b0\u52a0\u5761\u96fb\u4fe1\uff0c\u9f90\u5df4\u8fea\uff0cJones Day\u5f8b\u5e2b\u4e8b\u52d9\u6240\uff0c\u79d1\u6280\u4f01\u696dDanaher\u7b49<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"546\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys-1024x546.png\" alt=\"\" class=\"wp-image-948\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys-1024x546.png 1024w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys-300x160.png 300w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys-768x409.png 768w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys.png 1421w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Qualys\u64c1\u6709\u5927\u7d0419,000\u500b\u5ba2\u6236\uff0c\u5176\u4e2d\u5305\u62ecCapital One\u548cExperian\u7b49\u5927\u578b\u91d1\u878d\u516c\u53f8\uff0c\u5c0d\u65bc\u71b1\u8877\u65bc\u516c\u958b\u654f\u611f\u6578\u64da\u7684\u52d2\u7d22\u8005\u800c\u8a00\uff0cQualys\u662f\u4e00\u500b\u6709\u5438\u5f15\u529b\u7684\u76ee\u6a19\u3002<\/p>\n\n\n\n<p>Qualys\u7684\u8cc7\u8a0a\u5b89\u5168\u9577 Ben Carr\u5728\u5468\u4e09\u665a\u4e0a\u7684<a href=\"https:\/\/blog.qualys.com\/vulnerabilities-research\/2021\/03\/03\/qualys-update-on-accellion-fta-security-incident\">\u4e00\u4efd\u8072\u660e\u4e2d<\/a>\u8aaa\uff0c\u627f\u8a8d\u8a72\u516c\u53f8\u5728DMZ\u74b0\u5883\u4e2d\u5df2\u4f7f\u7528\u4e86Accellion\u6a94\u6848\u50b3\u8f38\u6280\u8853\u4f86\u9032\u884c\u8207\u5ba2\u6236\u652f\u63f4\u76f8\u95dc\u7684\u6a94\u6848\u50b3\u8f38\uff0c\u653b\u64ca\u8005\u5df2\u5b58\u53d6\u4e86Accellion\u4f3a\u670d\u5668\u4e0a\u8a17\u7ba1\u7684\u6a94\u6848\u3002Carr\u8aaa\uff0cQualys\u901a\u77e5\u4e86\u53d7\u6b64\u672a\u7d93\u6388\u6b0a\u5b58\u53d6\u5f71\u97ff\u7684\u5ba2\u6236\uff0c\u4f46\u62d2\u7d55\u900f\u9732\u6709\u591a\u5c11\u5ba2\u6236\u53d7\u5230\u5f71\u97ff\uff0c\u4e26\u6b63\u5728\u7b49\u5f85\u9032\u884c\u7684\u8abf\u67e5\u7d50\u675f\uff0cCarr\u88dc\u5145\u8aaa\u8a72\u4e8b\u4ef6\u4e26\u672a\u5f71\u97ffQualys Cloud Platform\u4e0a\u8a17\u7ba1\u7684Qualys\u751f\u7522\u74b0\u5883\uff0ccodebase\u6216\u5ba2\u6236\u6578\u64da\u3002<\/p>\n\n\n\n<p>CLOP\u52d2\u7d22\u8edf\u9ad4\u80cc\u5f8c\u99ed\u5ba2\u8072\u7a31\u5df2\u5f9eQualys\u7aca\u53d6\u4e86\u6578\u64da\uff0c\u800c\u6839\u64da\u5916\u5a92\u5f97\u5230\u7684\u622a\u5716\uff0c\u6d29\u9732\u7684\u6578\u64da\u5305\u62ec\u4e86\u516c\u53f8\u767c\u7968\u3001\u63a1\u8cfc\u8a02\u55ae\u3001\u7a05\u52d9\u6587\u4ef6\u548c\u6383\u63cf\u5831\u544a\u7b49<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"860\" height=\"520\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys-got-clopped-by-accellion-exploiting-attackers-showcase_image-3-a-16110.jpg\" alt=\"\" class=\"wp-image-946\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys-got-clopped-by-accellion-exploiting-attackers-showcase_image-3-a-16110.jpg 860w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys-got-clopped-by-accellion-exploiting-attackers-showcase_image-3-a-16110-300x181.jpg 300w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/qualys-got-clopped-by-accellion-exploiting-attackers-showcase_image-3-a-16110-768x464.jpg 768w\" sizes=\"auto, (max-width: 860px) 100vw, 860px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"495\" src=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/QUALYSSSSSS-1024x495.jpg\" alt=\"\" class=\"wp-image-947\" srcset=\"https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/QUALYSSSSSS-1024x495.jpg 1024w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/QUALYSSSSSS-300x145.jpg 300w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/QUALYSSSSSS-768x371.jpg 768w, https:\/\/blog.billows.com.tw\/wp-content\/uploads\/2021\/03\/QUALYSSSSSS.jpg 1390w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>\u53e6\u5916\u70ba\u4e86\u61c9\u5c0d\u653b\u64ca\uff0cAccellion FTA \u4f3a\u670d\u5668\u4f9b\u61c9\u5546\u5df2\u7d93\u767c\u5e03\u4e86\u591a\u500b\u5b89\u5168\u4fee\u88dc\uff0c\u4e26\u4e14\u5c07\u57282021\u5e744\u670830\u65e5\u6dd8\u6c70\u8a72FTA\u4f3a\u670d\u5668\u8edf\u9ad4\u3002<\/p>\n\n\n\n<p>\u99ed\u5ba2\u5229\u7528Accellion FTA\u9032\u884c\u6578\u64da\u76dc\u7aca\u548c\u52d2\u7d22\u7684\u6709\u95dc\u60c5\u8cc7:<\/p>\n\n\n\n<p><a href=\"https:\/\/otx.alienvault.com\/pulse\/6033df085aef66991b0b0462\">https:\/\/otx.alienvault.com\/pulse\/6033df085aef66991b0b0462<\/a><\/p>\n\n\n\n<p>\u6709\u95dcAccelion FTA\u4e8b\u4ef6\u53d7\u5f71\u97ff\u7684\u5176\u4ed6\u516c\u53f8, \u6211\u5011\u4e4b\u524d\u4e5f\u6709\u76f8\u95dc\u7684\u5831\u5c0e:&nbsp;<\/p>\n\n\n\n<p><a href=\"http:\/\/billows.tech\/MeTv1\">http:\/\/billows.tech\/MeTv1<\/a><\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-wp-embed is-provider-\u7ae3\u76df\u79d1\u6280 wp-block-embed-\u7ae3\u76df\u79d1\u6280\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"RS5d9CMfiY\"><a href=\"https:\/\/blog.billows.com.tw\/?p=929\">\u53c8\u4e00Accellion\u7528\u6236\u53d7\u5176\u9047\u99ed\u98a8\u6ce2\u5f71\u97ff\uff0c\u52a0\u62ff\u5927\u98db\u6a5f\u88fd\u9020\u5546\u9f90\u5df4\u8fea\uff08Bombardier\uff09\u4eca\u63ed\u9732\u8cc7\u6599\u5916\u6d29!!\u8ecd\u7528\u98db\u6a5f\u7522\u54c1\u7684CAD\u5716\u88abCL0P\u52d2\u7d22\u8edf\u9ad4\u99ed\u5ba2\u5c0d\u5916\u516c\u958b!!!<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"\u53c8\u4e00Accellion\u7528\u6236\u53d7\u5176\u9047\u99ed\u98a8\u6ce2\u5f71\u97ff\uff0c\u52a0\u62ff\u5927\u98db\u6a5f\u88fd\u9020\u5546\u9f90\u5df4\u8fea\uff08Bombardier\uff09\u4eca\u63ed\u9732\u8cc7\u6599\u5916\u6d29!!\u8ecd\u7528\u98db\u6a5f\u7522\u54c1\u7684CAD\u5716\u88abCL0P\u52d2\u7d22\u8edf\u9ad4\u99ed\u5ba2\u5c0d\u5916\u516c\u958b!!! &#8212; \u7ae3\u76df\u79d1\u6280\" src=\"https:\/\/blog.billows.com.tw\/?p=929&#038;embed=true#?secret=RS5d9CMfiY\" data-secret=\"RS5d9CMfiY\" width=\"600\" height=\"338\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>\u63d0\u4f9b\u96f2\u7aef\u5b89\u5168\u8207\u5408\u898f\u7684Qualys\u906d\u53d7\u4e86\u6578\u64da\u5916\u6d29\u9732\uff0c\u64da\u7a31\u99ed\u5ba2\u5229\u7528\u4e86Accellion FTA\u4f3a\u670d\u5668\u4e2d\u7684\u96f6\u6642\u5dee\u6f0f\u6d1e <a class=\"read-more\" href=\"https:\/\/blog.billows.com.tw\/?p=945\">READ MORE<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[146,137,112],"class_list":["post-945","post","type-post","status-publish","format-standard","hentry","category-6","tag-accellion","tag-clop","tag-112"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/945","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=945"}],"version-history":[{"count":2,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/945\/revisions"}],"predecessor-version":[{"id":951,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/945\/revisions\/951"}],"wp:attachment":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=945"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=945"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=945"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}