ÃÀ¹úÓÍÆø¹ÜµÀÔËÓªÉÌÀÕË÷¹¥»÷ÆÊÎö
Ðû²¼Ê±¼ä 2021-05-12ÊÂÎñÅä¾°
2021Äê5ÔÂ7ÈÕ£¬È«ÃÀ×î´óÓÍÆøÔËË͹ܵÀÔËÓªÉÌColonial PipelineÔâµ½ÀÕË÷Èí¼þ¶¨Ïò¹¥»÷£¬´Ë´ÎÀÕË÷¹¥»÷ÓÉÓÚÉæ¼°µ½¹ú¼Ò¼¶Òªº¦»ù´¡ÉèÊ©£¬¹Ê¶øÒýÆðÁËÈ«ÇòµÄÕ𾪺ÍÆÕ±é¹Ø×¢¡£¹¥»÷ÊÂÎñÒ»·½ÃæÔì³ÉÃÀ¶«ÓÍÆøǷȱÒÔ¼°¹ú¼ÊÔÓÍÆÚ»õ¼ÛÇ®µÄ´ó·ù²¨¶¯£¬¸øÒßÇéϵÄÈ«Çò¾¼ÃËÕÐÑ´øÀ´±°ÁÓÓ°Ï죻ÁíÒ»·½Ã棬¡°ÃÀ¹ú½øÈë½ôÆÈ״̬¡±µÄÏà¹ØÐÂÎÅÒ»ÔÙ·¢½Í²¢³åÉ×æÏÈÑ£¬Ò²ÔÚ¹«¹²ÈºÌåÄÚÒýÆðÒ»¶¨Ë®Æ½µÄ¿Ö»Åµ£ÐÄ¡£²»¹ý£¬ÊÂʵÉϸýôÆÈ״̬ÊÇ5ÔÂ9ÈÕÃÀ¹ú½»Í¨ÔËÊ䲿Áª°îÆû³µÔËÊäÇå¾²ÖÎÀí¾Ö£¨FMCSA£©Ðû²¼µÄÇøÓò½ôÆÈ״̬ÉùÃ÷£¬ÒÔ±ã¿íÃâʹÓÃÆû³µÔËÊäÓÍÁϵķ½·¨£¨ÏÈÇ°»®¶¨Ö»ÄÜͨ¹ý¹ÜµÀÔËÊ䣩£¬ÇÒ½ôÆÈ״̬ÏÞÓÚÊܵ½¶ÏÓÍÓ°ÏìµÄÃÀ¹úÈý¸öÇøÓò£¨Éæ¼°17¸öÖÝ£©¡£
ÔÚÔâÊܹ¥»÷ºó£¬ÓÍÆøÔËË͹ܵÀÔËÓªÉÌColonial Pipeline±»ÆÈÔÝÍ£ÁËÆäÃÀ¹ú¶«°¶µÄÒªº¦ÔËËÍÓªÒµ¡£´Ë´ÎÊÂÎñ³ä·Ö̻¶³öÒªº¦»ù´¡ÉèʩϵͳÍøÂç°²·ÀµÄųÈõÐÔ£¬Ò²±»ÊÓΪ¶ÔÃÀ¹ú°×¹¬µÄÑ°ÐÆ¡ª¡ª¶ø¾ÍÔÚ2021Äê4ÔÂÏÂÑ®£¬°ÝµÇÕþ¸®²Å¸Õ¸Õ³ǫ̈ÁËÒ»ÏîÌáÕñÄÜÔ´¹©Ó¦ÏµÍ³ÍøÂçÇå¾²µÄ¡°°ÙÈÕÍýÏ롱¡£ÓÉÓÚColonial PipelineÌìÌìͨ¹ýÆä5500Ó¢ÀïµÄ¹ÜµÀÔËËÍ250ÍòͰʯÓÍ£¬Õ¼¶«º£°¶ËùÓÐȼÁÏÏûºÄµÄ45£¥£¬ÖÂʹÃÀ¹ú¶«º£°¶µÄ×ÔÈ»ÆøºÍ²ñÓ͹©Ó¦Êܵ½ÁËÑÏÖØÓ°Ïì¡£
ͼ1£ºColonial PipelineÊäÓ͹ÜÏß
ÏÖÔھݶà¼ÒÃÀý±¨µÀÒÔ¼°ÃÀÁª°îÊÓ²ì¾Ö£¨FBI£©µÄ֤ʵ£¬´Ë´Î¹¥»÷µÄÄ»ºóºÚÊÖÈ·ÒÔΪDarkSideÀÕË÷ÍŻFBI³Æ»¹ÔÚ¼ÌÐøÓëColonial PipelineÒÔ¼°Õþ¸®ÏàÖúͬ°éÕö¿ª½øÒ»²½µÄÊӲ졣
ͼ2£ºFBI֤ʵDarkSideÀÕË÷ÍÅ»ïÊÇÄ»ºóºÚÊÖ
ÔÚÊÂÎñÒ»Ö±·¢½ÍµÄÀú³Ìʱ£¬DarkSideÖÕÓÚ5ÔÂ10ÈÕÐû²¼ÁË×îÐÂÉùÃ÷£¬Æ²Çå×ÔÒÑÓëÕþÖÎÒòËصĹØÁª¡£ÆäÌåÏÖ¸Ã×éÖ¯µÄÄ¿µÄÊÇ¡°×¬Ç®¡±£¬¶ø²¢·Ç¸øÉç»á¡°ÖÆÔìƶÀ§¡±¡£ÍŽáÆäÒÔÍùµÄ¹¥»÷Ô˶¯ÀúÊ·£¬¿ÉÒÔÆðÔ´È϶¨´Ë´Î¹¥»÷Ϊ¾¼Ã·¸·¨Ô˶¯£¬¶ø·ÇµØÔµÕþÖÎÒòËصĹ¥»÷ÊÂÎñ¡£ÏÖÔÚÒÑÖª¸Ã×éÖ¯ÇÔÈ¡ÁËColonial Pipeline¹«Ë¾100GBµÄÄÚ²¿Êý¾Ý£¬¶øÊÂÎñÉæ¼°µÄÏêϸ¹¥»÷ϸ½ÚºÍÑù±¾ÔÝδ¹ûÕæ¡£ÓÅ·¢¹ú¼ÊÍøÕ¾¹ÙÍøADLabƾ֤¹ØÁªÇ鱨Êý¾Ý£¬Õë¶ÔDarkSideÀÕË÷ÍÅ»ïµÄÀúÊ·Ô˶¯¡¢ÊÖÒÕÊÖ¶ÎÒÔ¼°×îÐÂÑù±¾¾ÙÐÐ×·×ÙÆÊÎö£¬²¢¶Ô´Ë´Î¹¥»÷ÊÂÎñ¾ÙÐÐÑо¿ºÍ¸´ÅÌ¡£
ͼ3£ºDarkSideÐû²¼ÉùÃ÷
ÀÕË÷×éÖ¯ÆÊÎö
DarkSideÊ״ηºÆðÔÚ2020Äê8Ô£¬ÊÇÒ»Ö§·Ç³£»îÔ¾µÄÐÂÐËÀÕË÷ÍŻ¸Ã×éÖ¯ÔÚÆä°µÍø¹ÙÍøÖÐÐû³Æ£ºËûÃÇÖ»»áÕë¶Ô´óÐÍÓÐÀû¿ÉͼµÄ¹«Ë¾£¬²¢ÇÒ½«²¿·ÖÊÕµ½µÄÊê½ð¾è¸ø´ÈÉÆ»ú¹¹¡£³ý´ËÖ®Í⣬ËûÃÇ»¹»á×èÖ¹¹¥»÷ÒÔÏÂÄ¿µÄ£¬°üÀ¨éëÔá·þÎñÐÐÒµ¡¢Ò½Ò©ÐÐÒµ£¨½öÏÞÓÚÒ½Ôº¡¢Ç¨¾ÍÖÎÁÆ×éÖ¯¡¢ÁÆÑøÔºÒÔ¼°Ò»Ð©¼ÓÈëйÚÒßÃç·ÖÅɺÍÑз¢µÄ¹«Ë¾£©¡¢½ÌÓýÐÐÒµ¡¢·ÇÓªÀû×éÖ¯ÒÔ¼°Õþ¸®²¿·Ö¡£µ«ÈôÊÇÊܺ¦Õ߾ܾø¸¶¿î£¬ËûÃǽ«»á°ÑÊܺ¦ÕßµÄËùÓÐÊý¾Ý¹ûÕæ²¢ÇÒ½«Êܺ¦ÕßÌí¼Óµ½¹ÙÍøÐû²¼µÄÊܺ¦¹«Ë¾ÁÐ±í£¬¡°É±Ò»ÙÓ°Ù¡±¡£
ͼ4£ºDarkSide¹ûÕæµÄ²¿·ÖÊܺ¦ÕßÊý¾Ý
¡ñ ÀúÊ·Ô˶¯
DarkSideÀÕË÷Èí¼þÍÅ»ïÔÚ½üÒ»ÄêµÄʱ¼äÀ↑չºÜÊÇƵÈÔµÄÀÕË÷¹¥»÷£¬´ËÇ°¸Ã×éÖ¯µÄ²¿·Ö˽Կй¶ʹµÃ²¿·ÖÀÏ°æ±¾²¡¶¾¼ÓÃܵÄÎļþÄܹ»µÃÒÔ½âÃÜ¡£
ͼ5£ºDarkSide½âÃܹ¤¾ß
ÔÚÎÒÃÇͳ¼ÆÁ˸Ã×éÖ¯×Ô2020Äê8ÔÂÆðÔÚ°µÍø鶵ÄÊܺ¦Õß×éÖ¯Ãûµ¥¡£¿ÉÒÔ¿´³ö£¬¸ÃÍÅ»ïÔÚÒÑÍùÒѾһÁ¬¶¨Ïò¹¥»÷ÁË´ó×ÚÆóÒµ£¬°üÀ¨Ö´·¨¡¢µç×Ó¡¢IT·þÎñ¡¢ÐÞ½¨¡¢ÉÌÎñ¡¢ÄÜÔ´µÈÐÐÒµ¡£
ͼ6£ºDarkSideÍÅ»ï鶵ÄÊܺ¦ÕßÃûµ¥
DarkSideµÄ¹¥»÷Ô˶¯×Ô2020Äê8ÔÂ×îÏÈÖð½¥µÝÔö£¬ÔÚ½ñÄê2Ôµִïá۷壬¶øÔÚ½ñÄê5ÔÂ7ÈÕ¹¥»÷Colonial Pipelineºó£¬ÓÉÓÚÒýÆðÁËÖØ´óµÄ¾ª¶¯ºÍFBIµÈÊÓ²ì»ú¹¹µÄ¹Ø×¢£¬¸Ã×éÖ¯½üÆÚδÔÙ¼ÌÐø·¢¶¯ÀÕË÷¹¥»÷¡£
ͼ7£ºÊܺ¦×éÖ¯ÊýÄ¿£¨ÒÀ¾ÝDarkSideй¶ÐÅϢͳ¼Æ£¬µ¥Î»£ºÔ£©
Ïà¹ØÊܺ¦×éÖ¯Ö÷ÒªÂþÑÜÔÚÃÀ¹ú¡¢µÂ¹ú¡¢Ó¢¹ú¡¢¼ÓÄô󡢷¨¹úµÈÎ÷Å·¹ú¼Ò£¬ÆäÖÐÃÀ¹úµÄÊܺ¦ÕßÕ¼±È¸ß´ï64.37%¡£
ͼ8£ºÊܺ¦×éÖ¯ËùÊô¹ú¼ÒÂþÑÜ£¨ÒÀ¾ÝDarkSideй¶ÐÅϢͳ¼Æ£©
¡ñ ÊÖÒÕÆÊÎö
£¨1£©ÊÖÒÕÌصãÆÊÎö
ͨ¹ý¶ÔÍøÂçµ½µÄDarkSide¼Ò×åµÄIOC¾ÙÐÐÆÊÎöºÍÕûÀí£¬ÎÒÃÇ´ÓÖÐÌáÈ¡µ½15¸ö°µÍøURLµØµã£¬¼ûIOC²¿·Ö¡£¸ÃÀÕË÷Èí¼þ»á×Ô½ç˵¼ÓÃÜÎļþµÄͼ±ê£¬ÔçÆÚ°æ±¾icoͼ±êÎļþ»á±»Êͷŵ½%LOCALAPPDATA%Ŀ¼Ï£¬Ð°汾Êͷŵ½%ALLUSERSPROFILE%Ŀ¼Ï¡£Í¼±êÎļþÃû³ÆÊDZ»Ñ¬È¾»úеµÄMachineGuid¾ÓÉCrc32´¦Öóͷ£ºóµÄЧ¹û£¬Í¬Ê±Õâ¸öЧ¹ûÒ²×÷Ϊ±»ÀÕË÷Èí¼þ¼ÓÃܺóµÄÎļþÃûºó׺¡£ÏÖÔÚÍøÂçµ½ËùÓÐICOͼ±êÎļþµÄHASH¾ùΪ£º4f57d54d01ccbdaf3ebfac3ec0ac3fd7¡£ICOͼ±êÈçÏÂͼËùʾ£º
ͼ9£ºICOͼ±ê
DarkSideÀÕË÷Èí¼þÔËÐÐÖ®ºó£¬»á½âÃÜRSA-1024µÄ¹«Ô¿ÐÅÏ¢ºÍÉèÖÃÐÅÏ¢µ½ÄÚ´æÖС£¹«Ô¿ÐÅÏ¢°üÀ¨RSA-1024Óõ½µÄeºÍn£¬ÉèÖÃÎļþ°üÀ¨ÆäÔÚ¼ÓÃÜÊܺ¦Óû§ÎļþÇ°ÐèҪɨ³ýµÄÎļþºó׺Ãû¡¢Îļþ·¾¶¡¢ÐèҪɱËÀµÄϵͳÀú³Ì¡¢·þÎñÒÔ¼°CCµØµãµÈÏà¹ØÐÅÏ¢¡£
±ðµÄ£¬ÀÕË÷²¡¶¾»áͨ¹ý¶¯Ì¬Å²ÓÃGetUserDefaultLangIDºÍGetUserDefaultUILanguageº¯ÊýÅжÏϵͳÓïÑÔ¡£É¨³ýϵͳÓïÑÔΪ¶íÓïµÄ¹ú¼Ò¡£
ͼ10£º¼ì²âϵͳÓïÑÔ
£¨2£©½âÃÜÉèÖÃÎļþ
ÀÕË÷Èí¼þÔÚ¼ÓÃÜÊܺ¦Óû§Îļþ֮ǰ»á½âÃÜÆäÉèÖÃÐÅÏ¢µ½ÄÚ´æÖС£ÕâЩÉèÖÃÐÅÏ¢°üÀ¨¼ÓÃÜSalas20ÃÜԿʱÓõ½µÄRSA-1024¹«Ô¿ÐÅÏ¢£¨°üÀ¨eºÍn£©¡¢CCµØµãÒÔ¼°ÀÕË÷ÉèÖÃÏà¹ØµÄÆäËûÐÅÏ¢¡£
ÀÕË÷Èí¼þ»á¼ÓÃܳýÒÔϺó׺ÃûÖ®ÍâµÄÆäËûºó׺Îļþ£º
ͼ11£ºÉ¨³ýÎļþºó׺Ãû
ͬʱ£¬ÉèÖÃÎļþÖÐÒ²ÁгöÁËÆä¼ÓÃÜÓû§Îļþʱ£¬É¨³ýµÄÎļþÃû³ÆºÍÎļþ·¾¶¡£Ï±íÊÇÀÕË÷Èí¼þ²»¼ÓÃܵÄÎļþÃû³Æ:
ÀÕË÷Èí¼þ²»¼ÓÃÜÈçÏÂÎļþ·¾¶:
ÀÕË÷Èí¼þ»á¼ì²éÊܺ¦ÕßÖ÷»úÊÇ·ñ±£´æÒÔÏÂÀú³Ì£¬ÈôÊDZ£´æ¾ÍɱËÀÄ¿µÄÀú³Ì£¨±ÜÃâ¼ÓÃÜÎļþ±»Õ¼Ó㬵¼ÖÈÎÃüÜʧ°Ü£©£º
ͬʱÀÕË÷Èí¼þ²»»áɱËÀÈçÏÂÀú³Ì£¬±ÜÃâϵͳËÀ»úµ¼ÖÂÎļþ¼ÓÃÜÖÐÖ¹:
ÀÕË÷Èí¼þ»áʵÑéɱËÀÒÔÏÂϵͳ·þÎñ£¬±ÜÃâÏà¹ØµÄÎļþ±»Õ¼Óöøµ¼ÖÈÎÃüÜʧ°Ü£º
±ðµÄ£¬½âÃܵÄC2µØµãÈçÏ£¬ÀÕË÷Èí¼þ»á½«ÍøÂçµ½µÄѬȾÖ÷»ú×°±¸Ãô¸ÐÐÅÏ¢»Ø´«µ½ÆäC&C·þÎñÆ÷µØµã¡£
£¨3£©ÀÕË÷¼ÓÃÜËã·¨
Ïà½ÏÓÚʹÓñê×¼µÄSalsa20ÃÜÔ¿¾ØÕóÃûÌã¬ÀÕË÷Èí¼þÑ¡ÔñʹÓÃ×Ô½ç˵µÄSalsa20ÃÜÔ¿¾ØÕó¶ÔÊܺ¦Óû§Îļþ¾ÙÐмÓÃÜ¡£ÏÂͼΪÀÕË÷Èí¼þËæ»úÌìÉúµÄSalsa20¾ØÕóÃÜÔ¿£º
ͼ12£ºSalsa20ÃÜÔ¿
ÀÕË÷Èí¼þʹÓÃRSA-1024Ëã·¨¶ÔSalsa20µÄÃÜÔ¿¾ØÕó¾ÙÐмÓÃÜ£¬½«¼ÓÃܺóµÄÃÜÎÄ´æ´¢ÔÚ¼ÓÃÜÎļþµÄĩβ¡£ÏÂͼÊÇÀÕË÷Èí¼þʹÓõÄRSA1024µÄ¹«Ô¿ÐÅÏ¢(e,n)£º
ͼ13£ºRSA¹«Ô¿
¡ñ ¸´Å̺Í˼Ë÷
´Ó±¾´ÎÀÕË÷ÊÂÎñÀ´¿´£¬ÕâÊÇÒ»´Î·ÇÕþÖÎÒòËØÒýÆ𣬵«Éæ¼°Òªº¦»ù´¡ÉèÊ©Çå¾²Òþ»¼µÄÖØ´ó¹¥»÷ÊÂÎñ¡£ÎÒÃÇ´Ó±¾´Î¹¥»÷ÊÂÎñ¿ÉÒÔÒý³ö¼¸¸ö·½ÃæµÄ˼Ë÷£º
Ê×ÏÈ£¬´Ë´Î¹¥»÷̻¶³öÃÀ¹úÒªº¦»ù´¡ÉèÊ©ÐÐÒµµÄÍøÂçųÈõÐÔ£¬ÒÑÓеĻù½¨ÏµÍ³»ù´¡ÎÞ·¨Ó¦¶ÔÍ»·¢µÄÍøÂç¹¥»÷¡£´Ë¹¥»÷ÊÂÎñΪ»ù½¨ÐÐÒµµÄÇå¾²°ü¹ÜÇÃÏìÁ˾¯ÖÓ£¬Ïà¹Ø»ù½¨ÆóÒµºÍÕþ¸®²¿·ÖÐèÒªÔöÇ¿ÍøÂçÇå¾²·À»¤²¢ÇÒ¼á³Ö¸ß¶ÈСÐÄ¡£
Æä´Î£¬ÀÕË÷¹¥»÷ÒѾ·ºÆð³öÖð½¥Ïò¶¨Ïò¹¥»÷Éú³¤µÄÐÂÇ÷ÊÆ¡£´Ó½üÄêµÄÀÕË÷¹¥»÷ÊÂÎñÀ´¿´£¬ÀÕË÷ÍÅ»ïµÄ¹¥»÷ÐÎʽÒѾ´ÓÒÑÍùÈä³æʽÈö²¥£¬¼°¹ãÈöÍøʽµÄ¹¥»÷Öð½¥×ªÏò¶¨Ïò»¯¡¢¸ßЧ»¯µÄ¹¥»÷Éú³¤£¬ºÚ¿ÍÃÇÆ«ÏòÓÚʹÓÃÉø͸¹¥»÷µÄÊֶνøÈëÖ÷ҪʵÌåµÄÄÚ²¿ÍøÂçÖ²ÈëÀÕË÷²¡¶¾£»ÕâÖÖÒÔÀÕË÷Ä¿µÄ¼ÛֵΪµ¼ÏòµÄ¸ß¶È¶¨Ïò¹¥»÷ÒѾºÍAPT¹¥»÷ÎÞÒ죬APTµÄ¹¥»÷ÊֶνÔÓпÉÄܳÉΪÀÕË÷²¡¶¾ÈëÇÖµÄÈë¿Ú¡£
×îºó£¬´Ë´Î¹¥»÷ÊÂÎñµ¼ÖÂÃÀ¹ú¶«²¿Ö÷ÒªµÄÓÍÆø¹ÜµÀ¹Ø±Õ²¢ÇÒʹÃÀ¹ú½øÈë½ôÆÈ״̬£¬ÔÙ´Ë֤ʵÎú»ù½¨ÉèÊ©¶ÔÒ»¸ö¹ú¼ÒµÄÖ÷ÒªÐÔ¡£ÍøÂç¿Õ¼äÒѾ³ÉΪ¼Ì½¡¢º£¡¢¿Õ¡¢ÌìÖ®ºóµÄµÚÎå´óÖ÷ȨÁìÓò¿Õ¼ä£¬¸÷¸ö¹ú¼Ò¼äµÄÍøÂç¹¥·À¶Ô¿¹ÓúÑÝÓúÁÒ£»»ù½¨ÉèÊ©×÷ΪÍøÂçÇå¾²µÄ±¡Èõ»·½Ú£¬ÒѾ³ÉΪ¹ú¼Ò¼äÍøÂç¹¥·À²©ÞĵÄÇ¿ÁÒÕ½³¡£¬Òªº¦»ù´¡ÉèÊ©Éæ¼°ÄÜÔ´¡¢Í¨Ñ¶¡¢½ðÈÚ¡¢½»Í¨¡¢¹«¹²ÊÂÒµµÈÖ÷ÒªÐÐÒµÔËÐеÄÐÅϢϵͳ»ò¹¤Òµ¿ØÖÆϵͳ£¬´ËÀàϵͳһµ©±¬·¢Ôâµ½ÍøÂç¹¥»÷£¬»á¶Ô¹ú¼ÒÕþÖΡ¢¾¼Ã¡¢¿Æ¼¼¡¢ÈËÃñÉúÃü¹¤ÒµµÈÔì³ÉÖØ´óËðʧ£¬°ü¹ÜÒªº¦»ù´¡ÉèÊ©ÍøÂçÇå¾²ÓÈΪÖ÷Òª¡£
ͼ14£º½üÄêÀ´Õë¶ÔÒªº¦»ù´¡ÉèÊ©Çå¾²µÄÀÕË÷¹¥»÷ÊÂÎñ
ÔÚÃæÁÙ´ËÀàÇå¾²Íþвʱ£¬ÖÜÈ«µÄ·ÀÓùϵͳÖÁ¹ØÖ÷Òª¡£ÒԴ˴ι¥»÷ΪÀý£¬Colonial PipelineÔÚ²¿·ÖϵͳÊܵ½ÀÕË÷¹¥»÷ʱÐèÒª±»ÆȹØÍ£ÆäËüӪҵϵͳ£¬ËµÃ÷ÆäȱÉÙÓÐÓõķÀ»¤²½·¥£¬ÇҺܿÉÄÜ佫½¹µãÍøÂç¾ÙÐÐÇå¾²¸ôÀëºÍÊý¾Ý±¸·Ý£¬ÕâÒ²¸øÏà¹ØÐÐÒµÒÔÖ÷Òª¾¯Ê¾¡£ÆóÒµÐèÒª×öºÃÊÂÇ°Ô¤·À¡¢ÊÂÖпØÖÆ¡¢Êºó´¦Öóͷ£µÄÖÜȫ׼±¸£¬Ö»Óй¹½¨È«ÏµÍ³·ÀÓùϵͳºÍÍêÉƵÄÓ¦¼±ÏìÓ¦»úÖÆ£¬²Å»ª¸üºÃµÄÓ¦¶ÔÖÖÖÖƵ·¢µÄÍøÂç¹¥»÷¡£
¡ñ ·À»¤½¨Òé
1.Õë¶Ô½¹µãӪҵϵͳ×öºÃÊý¾Ý±¸·ÝÓëÔÖÄѻָ´¼Æ»®£¨3-2-1¹æÔò£©
£¨1£©ÖÁÉÙ×¼±¸ÈýÖÖ¸±±¾£»
£¨2£©Á½ÖÖ²î±ðÉúÑÄÐÎʽ£º¾ÙÐжà´æ´¢ÀàÐÍÉúÑÄ£¬Èç·þÎñÆ÷¡¢Òƶ¯Ó²ÅÌ¡¢Ôƶˡ¢¹âÅ̵ȣ»
£¨3£©ÖÁÉÙÒ»·ÝÒìµØ±¸·Ý£¨ÍÑ»ú£©£º±ÜÃâÀÕË÷²¡¶¾½«Áª»úµÄ±¸·Ýϵͳ¼ÓÃÜ¡£
2.Ìá¸ßÇå¾²Òâʶ£¬²»Òªµã»÷ȪԴ²»Ã÷µÄÓʼþÒÔ¼°¸½¼þ¡£
3.°´ÆÚ¼ì²é²Ù×÷ϵͳºÍÈí¼þÎó²î£¬ÊµÊ±¸üÐÂÇå¾²²¹¶¡¡£
4.°´ÆÚÌæ»»ÉÏ°¶¿ÚÁ×èÖ¹¿Õ¿ÚÁî»òÈõ¿ÚÁî¡£
5.ÈçÎÞÐëÒª£¬¾¡¿ÉÄܲ»½«²úÆ·Ö±½Ó̻¶ÔÚ»¥ÁªÍøÖУ¬Èç±ØÐèÁªÍøÓ¦½«×°±¸ÅþÁ¬ÖÁ·À»ðǽ¡¢IDS¡¢IPSµÈÇå¾²×°±¸ÒÔÔöÇ¿·À»¤¡£
6.ÔöÇ¿ÍøÂç½çÏßÈëÇÖÌá·ÀºÍÖÎÀí£¬¹Ø±Õ·ÇÐëÒªÍøÂç·þÎñºÍ¶Ë¿Ú£¬Èç445¡¢135¡¢139¡¢3389¡¢5900¡£
7.Õë¶Ô½¹µãӪҵϵͳ¾ÙÐÐÇå¾²¸ôÀë
¡ñ IOC
C2£º
catsdegree[.]com
securebestapp20[.]com
temisleyes[.]com
ICOͼ±êÎļþMD5£º
4f57d54d01ccbdaf3ebfac3ec0ac3fd7
ÀÕË÷URLµØµã£º
http://darksidfqzcuhtk2.onion/2AHUVJ3VGS97NUG5J5EYMQM5PJO77V9V0GDT3UYIJGFZUTOQRLUX593CQ2EZ2ZEH
http://darksidfqzcuhtk2.onion/3NQA47J490NLKJVB1FI43HHCEJO62CE3E440J4H4K564VRQ8AFONVJQOM8158NR3
http://darksidfqzcuhtk2.onion/45FYQLKAX0QTR144EDUI3VOVH2B3SQ0TZM0G7MXX3YUGDSA3AZA9XNNTCMD1H4CN
http://darksidfqzcuhtk2.onion/61XCW6PKCUTDV5AZD8WK1JWU84BJBWSI25DGLKZ6O6STDBITLAFAH3X1MSRQGRBS
http://darksidfqzcuhtk2.onion/B69Q1UI7FTR7GBNM08Y61RV3YKYIE62POYGBVE93EYFTPQZLWTXR4X7ZHS3U24ZJ
http://darksidfqzcuhtk2.onion/DZYNTXY9RP5P8DQ96EFKV2YTOVAMA3VVHL5V0RASUBLBWZGLG51U4LOOBSHV9R0Y
http://darksidfqzcuhtk2.onion/FNKSGXL6YM3ZOHUB9WRBMPZDFXUG0DSF5M61SMYGU4V8R8OOJ6AKQ2VF4BGHSE1O
http://darksidfqzcuhtk2.onion/GM0CG8TNZ83ZPUD15TL76BLDCG0ST24TR6NXG1J2AVXSKF8KS4KFIIN2ON5GRWD4
http://darksidfqzcuhtk2.onion/K71D6P88YTX04R3ISCJZHMD5IYV55V9247QHJY0HJYUXX68H2P05XPRIR5SP2U68
http://darksidfqzcuhtk2.onion/KB0LXKYKN6E96Z7RFYWCEI6NM03TX93VZCL5EDA4IVPXUIQQZBG2ZEG269ZIFSFM
http://darksidfqzcuhtk2.onion/O7ADVDV5LR24AMM1KAYU5IJO4MMIBYA22RXI2K2EPNIAKZGNHUZNT933I6WBWPTN
http://darksidfqzcuhtk2.onion/OBB5DDMR8RB9DI2RYYF376YGBJAV2J4F2NXFEWPBSXY709MAA0MY7PMBBQJ0HVG3
http://darksidfqzcuhtk2.onion/SN8W532EY9MVOD09H4HBVZ1RI9RS4AATPO11NCDX0JKZ7GAPU6K6CV3CVLSS2NMH
http://darksidfqzcuhtk2.onion/VGBU8VAXXW7EYB5U4KQJXUGU5NT5FP8208W6UXVSKQDAE3CNBR4JTZQCXEZFZWF2
http://dark24zz36xm4y2phwe7yvnkkkkhxionhfrwp67awpb3r3bdcneivoqd.onion/0UGH4S3ASFAVY4P2TQZ6VNB0U65Y731LJ5SNZXC1AHEZFFY1JCIJV6PVHV0R0V2C
Ñù±¾SHA256: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ÓÅ·¢¹ú¼ÊÍøÕ¾¹ÙÍøÆð¾¢·ÀÓùʵÑéÊÒ£¨ADLab£©
ADLab½¨ÉèÓÚ1999Ä꣬ÊÇÖйúÇå¾²ÐÐÒµ×îÔ罨ÉèµÄ¹¥·ÀÊÖÒÕÑо¿ÊµÑéÊÒÖ®Ò»£¬Î¢ÈíMAPPÍýÏë½¹µã³ÉÔ±£¬¡°ºÚȸ¹¥»÷¡±¿´·¨Ê×ÍÆÕß¡£×èÖ¹ÏÖÔÚ£¬ADLabÒÑͨ¹ýCVEÀÛ¼ÆÐû²¼Çå¾²Îó²î½ü1100¸ö£¬Í¨¹ý CNVD/CNNVDÀÛ¼ÆÐû²¼Çå¾²Îó²î1000Óà¸ö£¬Ò»Á¬¼á³Ö¹ú¼ÊÍøÂçÇå¾²ÁìÓòÒ»Á÷Ë®×¼¡£ÊµÑéÊÒÑо¿Æ«Ïòº¸Ç²Ù×÷ϵͳÓëÓ¦ÓÃϵͳÇå¾²Ñо¿¡¢ÖÇÄÜÖÕ¶ËÇå¾²Ñо¿¡¢ÎïÁªÍøÖÇÄÜ×°±¸Çå¾²Ñо¿¡¢WebÇå¾²Ñо¿¡¢¹¤¿ØϵͳÇå¾²Ñо¿¡¢ÔÆÇå¾²Ñо¿¡£Ñо¿Ð§¹ûÓ¦ÓÃÓÚ²úÆ·½¹µãÊÖÒÕÑо¿¡¢¹ú¼ÒÖصã¿Æ¼¼ÏîÄ¿¹¥¹Ø¡¢×¨ÒµÇå¾²·þÎñµÈ¡£