12月18日-31日勒索病毒双周报
20172012月第四周舆论周报:安卓恶意软件、新欺诈样本、重大缺陷、其他安全事项等Lurk团伙成员认为情报机构已经建立了WannaCry勒索软件
http://securityaffairs.co/wordpress/67262/cyber-crime/wannacry-lurk-group.html
PandaZeuS圣诞礼物：加密方案的变化
https://www.spamhaus.org/news/article/771/
2017年五大网络安全事宜
https://safeandsavvy.f-secure.com/2017/12/29/five-biggest-cyber-security-stories-of-2017/
广告目的者正在从浏览器的密码管理器中提取数据
https://flipboard.com/@flipboard/-ad-targeters-are-pulling-data-from-your/f-1775c6c6f3/theverge.com
MQA-一个聪明的隐形DRM-Trojan
https://media.ccc.de/v/34c3-9113-mqa_-_a_clever_stealth_drm-trojan#t=2793
用户身份没有界线：网络追踪者行使浏览器登录管理器
https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/
浏览器数据泄露缺陷-Mozilla以防万一
https://nakedsecurity.sophos.com/2017/12/30/browser-data-leakage-bug-mozilla-to-delete-info-just-in-case/
CryptoMix使用勒索新变种.tastylock”扩展名
https://www.scmagazine.com/cryptomix-ransomware-variant-carries-new-tastylock-extension/article/733651/
华为路由器0day使用的代码攻击是公开的
https://threatpost.com/code-used-in-zero-day-huawei-router-attack-made-public/129260/
又有三个WordPress发现插件隐藏在后门
https://www.bleepingcomputer.com/news/security/three-more-wordpress-plugins-found-hiding-a-backdoor/
继续使用无缝战争Riek发送Ramnit银行特洛伊木马
http://malware-traffic-analysis.net/2017/12/28/index.html
EmotetMalspam
https://twitter.com/malware_traffic/status/946123445351407618
黑客瞄准华为路由器0day试图建立新的mirai僵尸网络
https://www.darkreading.com/vulnerabilities---threats/hacker-targeted-huawei-router-0-day-in-attempt-to-create-new-mirai-botnet/d/d-id/1330715?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple
绝地求生辅助程序隐藏挖矿木马
加拿大日产被黑,110万客户数据泄露
https://www.darkreading.com/perimeter/nissan-canada-finance-alerts-113-million-customers-of-data-breach/d/d-id/1330717?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple
攻击硬盘的声音可能会损坏PC，视频系统，ATM等
https://www.bleepingcomputer.com/news/security/acoustic-attacks-on-hdds-can-sabotage-pcs-cctv-systems-atms-more/
necurs僵尸网发送垃圾邮件
https://twitter.com/malware_traffic/status/945734603448471552
McFeeQ3平安讲述
https://www.mcafee.com/us/resources/reports/rp-quarterly-threats-dec-2017.pdf#sf177243846
仍有数百个网站使用后门wordpress插件
https://www.bleepingcomputer.com/news/security/three-years-later-hundreds-of-sites-still-use-backdoored-wordpress-plugins/
专家发现了一个新的GlobeImposterRansomwaremalspam流动
http://securityaffairs.co/wordpress/67071/malware/globeimposter-ransomware-malspam-campaign.html
来自BleepingComputer专家发现了一个新的CryptomixRansomware变种
http://securityaffairs.co/wordpress/67103/malware/file-cryptomix-ransomware.html
McAfee2017年12月威胁讲述
https://www.mcafee.com/us/resources/misc/infographic-threats-report-dec-2017.pdf#sf177243192
专家在GoAhead发现了影响数十万物联网设备的缺陷
http://securityaffairs.co/wordpress/67113/iot/goahead-flaws.html
微软破绽CVE-2017-11882行使提供Loki信息窃取器
https://www.scmagazine.com/microsoft-bug-cve-2017-11882-exploited-to-deliver-loki-information-stealer/article/720224/
Digmine通过加密硬币僵尸网络通过加密硬币僵尸网络通过FacebookMessenger流传
https://www.scmagazine.com/digmine-cryptocurrency-botnet-spreading-through-facebook-messenger/article/720451/
假的“您的UPS发票准备就绪，malspam提供JavaAdwind/JavaJRAT木马
https://myonlinesecurity.co.uk/fake-your-ups-invoice-is-ready-malspam-delivers-java-adwind-java-jrat-trojan/
绿盟科技网络安全威胁周报2017.50WeblogicWLS组件破绽CVE-2017-10271
http://toutiao.secjia.com/nsfocus-internet-security-threats-weekly-201750
腾讯电脑管家上线CPU漏洞修复工具