日本企業組織遭到攻擊行動MirrorFace鎖定,對方散布後門程式NoopDoor
支付動態 · 2024-07-18

本週日本電腦緊急應變團隊暨協調中心(JPCERT/CC)針對新一波的MirrorFace攻擊行動提出警告,駭客針對特定廠牌設備的已知漏洞而來,目的是入侵受害組織並部署名為NoopDoor的後門程式

一旦該惡意程式成功執行,駭客就會對程式碼進行加密處理,並存放於特定的系統登錄檔裡,這麼做的目的,主要是未來再度執行NoopDoor時,電腦就會根據相關資料載入相關配置。

而對於攻擊者執行的活動,研究人員表示,他們看到對方透過LSASS、NTDS.dit,以及特定的機碼挖掘Windows帳密資料。

再者,駭客也試圖取得網域管理員權限,進行橫向移動,存取工作站電腦及伺服器。研究人員看到對方進行偵察及外洩資料的活動,搜括資料的範圍不光本機檔案,還包含雲端檔案共用平臺OneDrive、協作平臺Teams,以及IIS伺服器。

Popular articles
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Indiana online casino bill stalls in House committee
Regulation
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Manila delivers: Highlights from SiGMA Asia 2026 
Southeast Asia
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Home
Game
Cooperation
Find
My