越南人權組織遭駭客OceanLotus鎖定攻擊，入侵超過4年
支付動態 · 2024-09-03
研究人員在越南人權組織的電腦，發現駭客組織OceanLotus的活動，他們在4臺電腦找到相關蹤跡，駭客設定工作排程，從而持續在受害電腦持續活動
另一臺電腦駭客則是前述攻擊的一個半月後開始活動，對方利用WMI遠端執行命令，並濫用電子書管理軟體Calibre主程式執行惡意DLL程式庫。而駭客在這臺電腦進行名稱管道冒充攻擊不久，又對第3臺電腦下手，透過Cobalt Strike建立工作排程，使用SYSTEM帳號從事攻擊行為。
研究人員循線清查是否有其他電腦受害，結果找到另一臺駭客設置在開機啟動Calibre的電腦，駭客設置了3個偽裝成微軟及Adobe更新的工作排程，但實際用途是定期與遠端的IP位址及Cobalt Strike主機連線。數個月後，駭客進行偵察，從而部署Node.js執行檔，目的是執行惡意延伸套件。
Popular articles
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
British gambling levy rates confirmed for each vertical
Regulation
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
