查看軟體開發人員職缺資訊要小心！研究人員揭露間諜軟體MerkSpy攻擊行動，駭客散播可濫用已知MSHTML漏洞Word檔作為網路釣魚誘餌
支付動態 · 2024-07-01

3年前引起各界關注的MSHTML安全功能繞過漏洞CVE-2021-40444，最近又有駭客將其用於攻擊行動，目的是散布名為MerkSpy的間諜軟體，藉此來監控受害電腦的一舉一動

值得留意的是，駭客也將MerkSpy偽裝成Google軟體更新工具，並在開機預設執行的程序當中，植入名為Google Update的項目，以便在電腦啟動時載入，而能在受害者不知情的情況下持續運作。

而MerkSpy的主要功能，包括拍下螢幕截圖、側錄使用者鍵盤輸入的內容、搜刮Chrome存放的帳密資料，並存取MetaMask加密貨幣錢包的延伸套件，然後將相關資料傳送到攻擊者的伺服器。

熱門文章
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Indiana online casino bill stalls in House committee
Regulation
首頁
遊戲
合作
發現
我的