未補漏洞且暴露在外網的舊款F5 BIG-IP設備遭中國駭客Velvet Ant攻破，潛入受害組織內部長達3年，暗中竊取敏感客戶資料
支付動態 · 2024-06-18
資安業者Sygnia協助一家大型企業調查資安事故，發現駭客在他們與IT人員聯手緩解網路環境曝露的攻擊面後，仍能對內部主機部署惡意程式，進一步調查得知，對方竟是運用該公司棄用的負載平衡設備，而能持續存取企業內部且難以被察覺
而這臺檔案伺服器又被當作另一個C2中繼站，駭客再利用滲透測試工具Impacket，針對其他老舊伺服器執行WmiExec，從而感染PlugX。換言之，根據Sygnia揭露的手法，駭客使用了3種C2伺服器來達成目的，也就是在外部伺服器之外，還濫用了F5 BIG-IP裝置，以及內部檔案伺服器來傳送攻擊命令。
Popular articles
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
