MicroSoft发现伪装成勒索App的STRRAT的大规模攻击活动;研究团队发现python PyPI库被恶意上传大量恶意App

发布时间 2021-05-22

【威胁情报】


Check Point称23个Android应用泄露1亿多用户信息

https://blog.checkpoint.com/2021/05/20/misconfiguration-of-third-party-cloud-services-exposed-data-of-over-100-million-users/


MicroSoft发现伪装成勒索App的STRRAT的大规模攻击活动

https://securityaffairs.co/wordpress/118118/malware/strrat-rat-masquerading-ransomware.html


研究团队发现python PyPI库被恶意上传大量恶意App

https://www.bleepingcomputer.com/news/security/spammers-flood-pypi-with-pirated-movie-links-and-bogus-packages/


【勒索App】


Conti为爱尔兰HSE提供免费解密器,但仍在出售其数据

https://www.bleepingcomputer.com/news/security/conti-ransomware-gives-hse-ireland-free-decryptor-still-selling-data/


【分析报告】


Armorblox发布针对AMAZON的钓鱼攻击的分析报告

https://www.armorblox.com/blog/amazon-vishing-voice-phishing-attacks/