未補漏洞且暴露在外網的舊款F5 BIG-IP設備遭中國駭客Velvet Ant攻破，潛入受害組織內部長達3年，暗中竊取敏感客戶資料
支付動態 · 2024-06-18
資安業者Sygnia協助一家大型企業調查資安事故，發現駭客在他們與IT人員聯手緩解網路環境曝露的攻擊面後，仍能對內部主機部署惡意程式，進一步調查得知，對方竟是運用該公司棄用的負載平衡設備，而能持續存取企業內部且難以被察覺
而這臺檔案伺服器又被當作另一個C2中繼站，駭客再利用滲透測試工具Impacket，針對其他老舊伺服器執行WmiExec，從而感染PlugX。換言之，根據Sygnia揭露的手法，駭客使用了3種C2伺服器來達成目的，也就是在外部伺服器之外，還濫用了F5 BIG-IP裝置，以及內部檔案伺服器來傳送攻擊命令。
Popular articles
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Kazakhstan plans to penalise online casino promotions
Regulation
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
