中國駭客UNC3886利用Fortinet、VMware設備零時差漏洞持續在受害組織網路環境活動
支付動態 · 2024-06-20

研究人員發現，中國駭客組織UNC3886在攻擊行動裡，利用多項Fortinet防火牆作業系統、VMware虛擬化環境的零時差漏洞，而能暗中從事網路間諜行動不被發現

除此之外，他們也發現這些駭客也有利用FortiOS的SSL VPN漏洞CVE-2022-42475的情況，而這項漏洞能讓攻擊者藉由發送偽造的請求執行任意程式碼。

在成功利用上述漏洞控制vCenter伺服器及ESXi伺服器後，對方於虛擬機器部署名為Reptile、Medusa兩款rootkit，以便在不被察覺異狀的情況下，持續存取受害的網路環境。

而為了遠端進行控制，這些駭客也使用名為Mopsled、Riflespine的惡意程式，它們濫用GitHub及Google Drive做為存取C2的通道。

熱門文章
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Indiana online casino bill stalls in House committee
Regulation
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
GGC Awards 2026 Shines in Colombo: Honoring Leaders and Innovators in the iGaming Industry
HUIDU Focus
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Kazakhstan plans to penalise online casino promotions
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
首頁
遊戲
合作
發現
我的