360CERT - 每日安全简报 (2020-06-27)

<<Previous Next>>

安全工具 Security Tools

CorsMe - CORS错误配置扫描器

https://www.kitploit.com/2020/06/corsme-cross-origin-resource-sharing.html

ShellcodeLoader - 将shellcode用rsa加密并动态编译exe，自带几种反沙箱技术

https://github.com/Hzllaga/ShellcodeLoader

安全资讯 Security Information

欧洲主流银行遭遇史上最大的基于PPS的DDoS攻击

https://www.hackread.com/mainstream-european-bank-largest-ever-pps-ddos-attack/

非接触式支付的安全风险

https://securityintelligence.com/articles/the-security-risks-of-contactless-payment/

安全研究 Security Research

DarkCrewBot - 机器人商店船员的归来

https://research.checkpoint.com/2020/the-return-of-the-bot-shop-crew/

GuLoader？不，CloudEyE。

https://research.checkpoint.com/2020/guloader-cloudeye/

zdi20 -709: NETGEAR NIGHTHAWK R6700路由器中的堆溢出

https://www.thezdi.com/blog/2020/6/24/zdi-20-709-heap-overflow-in-the-netgear-nighthawk-r6700-router

使用yarGen提取Linux恶意脚本特征

https://www.freebuf.com/sectool/238293.html

恶意软件 Malware

Himera与AbSent-Loader利用COVID-19传播恶意软件

https://yoroi.company/research/himera-and-absent-loader-leverage-covid19-themes/

安全报告 Security Report

威胁评估:EKANS勒索软件

https://unit42.paloaltonetworks.com/threat-assessment-ekans-ransomware/

<<Previous Next>>