殭屍網路Muhstik利用Apache RocketMQ已知弱點擴大DDoS攻擊規模
支付動態 · 2024-06-11
研究人員針對最新一波殭屍網路Muhstik的攻擊行動提出警告，指出駭客鎖定的目標，主要是分散式訊息串流資料平臺Apache RocketMQ的已知漏洞CVE-2023-33246
此外，該惡意程式還會掃描SSH服務進行橫向移動，從而感染其他電腦。
但為何對方運用一年前公布的已知漏洞發起攻勢？研究人員利用物聯網搜尋引擎Shodan進行調查，結果發現，全球約有5,216臺RocketMQ伺服器，曝露於CVE-2023-33246的資安風險當中，而這些伺服器幾乎位於中國。
Popular articles
GeoComply report: Betting while at NFL games soaring so far this season
Sports Betting
Meet HUIDU at Booth Z64 of iGB Live 2025 in London
HUIDU Focus
Brazil’s president says he will ban sports bets if ‘addiction’ not regulated
Sports Betting
Irish lawmakers at odds over change in gambling bill allowing ‘inducements’
Sports Betting
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Casino
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
The ultimate gambler? How Bet365’s Denise Coates became Britain’s richest woman
Sports Betting
Swedish lawmaker proposes lowered gambling tax to fight black market
Sports Betting
Pennsylvania: Valley Forge Casino opening new dining hall
Regulation
Wynn Resorts obtains United Arab Emirates gaming license
Regulation
New Partnership: 1spin4win Integrates Classic Slots into Pokerdom’s Gaming Library
Online Casino
Netherlands goverment proses raising the minimum age for online casino slots
Regulation
French Gambling Giant FDJ Completes €2.5bn Kindred Group Purchase
Regulation
FDJ says it doesn’t foresee French gambling tax hike, as stock price hit
Sports Betting
PrizePicks announces two executive staff appointments
Sports Betting