駭客偽裝成求職者散布後門程式More_eggs
支付動態 · 2024-10-07
趨勢科技揭露專門針對企業人資部門而來的後門程式More_eggs攻擊，駭客聲稱要應徵工作，並以個人網站提供「履歷」，引誘相關人員上當
究竟ZIP檔的內容為何？當中包含John Cboins.lnk及6.jpeg，一旦下載履歷的人執行LNK檔，會在電腦的Windows作業系統資料夾所在位置之外，產生ieuinit.inf檔案，當中含有指令碼元件（Script Component，SCT）檔案存放位置的網址；再者，該INF檔案也會複製IE初始化公用程式ie4uinit.exe，並利用WMIC加上–basesettings參數執行。
若下載這段SCT程式碼檔案並執行，電腦就會藉由regsvr32.exe執行惡意的動態連結程式庫檔案38804.dll，進而載入More_eggs。
Popular articles
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Kazakhstan plans to penalise online casino promotions
Regulation
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
