勒索病毒隐藏在游戏插件中？
20172012月第三周舆论周报：安卓恶意软件、新欺诈样本、重大缺陷、其他安全事项等圣诞节附近，伪装成Facebook登录页面的钓鱼形式
https://blog.malwarebytes.com/cybercrime/social-engineering-cybercrime/2017/12/facebook-phishers-want-you-to-connect-with-facebook/
克隆攻击和防御代码签名证
https://posts.specterops.io/code-signing-certificate-cloning-attacks-and-defenses-6f98657fc6ec
针对三种恶意软件MSSQL和MySQL服务器实验攻击已经一年了
https://www.bleepingcomputer.com/news/security/malware-trio-has-been-targeting-mssql-and-mysql-servers-all-year/
JexBoss-JBoss（和其他Java反序列化缺陷)验证和EXploitation工具
https://www.kitploit.com/2017/12/jexboss-jboss-and-others-java.html
Digmine通过加密硬币僵尸网络通过加密硬币僵尸网络通过FacebookMessenger流传
https://www.scmagazine.com/digmine-cryptocurrency-botnet-spreading-through-facebook-messenger/article/720451/
VenusLocker，现在我们已经把注意力转向了加密硬币挖掘
https://www.scmagazine.com/venuslocker-ransomware-extortionists-switch-mo-pursue-monero-cryptomining/article/720255/
小，有针对性的勒索攻击泛起
https://www.darkreading.com/attacks-breaches/smalltargeted-ransomware-attacks-emerge/d/d-id/1330662
专家发现了一个新的GlobeImposterRansomware流动
http://translate.hotcn.top/translate/page?u=http://securityaffairs.co/wordpress/67071/malware/globeimposter-ransomware-malspam-campaign.html
新的Facebook账户功能将帮助用户发现在线钓鱼
https://www.bleepingcomputer.com/news/security/new-facebook-account-feature-will-help-users-spot-phishing-attempts/
黑客使用DC警方监控系统公布CerberRansomware
https://www.bleepingcomputer.com/news/security/hackers-used-dc-police-surveillance-system-to-distribute-cerber-ransomware/
回顾一周的勒索软件|15在勒索软件中8个变种4另一个在开发1个在攻击
http://toutiao.secjia.com/ransomware-weekly-4
无文件恶意软件攻击2017年创里程碑
https://www.darkreading.com/perimeter/fileless-malware-attacks-hit-milestone-in-2017/d/d-id/1330691?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple
VMware为了解决问题，公布了平安更新ESXi，vCenterServerAppliance（vCSA），Workstation和Fusion四个破绽产物strong>
http://securityaffairs.co/wordpress/66997/security/vmware-code-execution-flaws.html
微软破绽CVE-2017-11882行使提供Loki信息窃取器
https://www.scmagazine.com/microsoft-bug-cve-2017-11882-exploited-to-deliver-loki-information-stealer/article/720224/
行使华为路由器建立新的僵尸网络
https://blog.checkpoint.com/2017/12/21/huawei-routers-exploited-create-new-botnet/
VMWare两个高危随机代码执行缺陷CVE-2017-4941/33
http://toutiao.secjia.com/vmware-cve-2017-4941-33
伪装简历垃圾邮件，密码保护doc各种恶意软件文档流传
https://myonlinesecurity.co.uk/more-resume-malspam-with-password-protected-word-doc-attachments-continue-to-plague-us-delivering-a-variety-of-different-malware/
新移动木马变种Catelitebot目的锁定2200金融机构
https://blog.avast.com/new-version-of-mobile-malware-catelites-possibly-linked-to-cron-cyber-gang
五名CTB-Locker/Cerber有关职员被捕
防止圣诞卡成为敲诈信！
https://www.forbes.com/sites/thomasbrewster/2017/12/20/ransomware-arrests-for-cerber-and-ctb-locker/#6afd6dbf315a
HEx-Men组织攻击SQLserver举行挖矿和DDos涉嫌来自中国的攻击
https://www.scmagazine.com/hex-men-trio-using-compromised-sql-servers-to-conduct-mining-ddos-attacks/article/719523/
Wordpress验证Captcha插件影响300kwordpress站点
https://www.wordfence.com/blog/2017/12/backdoor-captcha-plugin/
GoogleChromePDFiumOpenJPEGHeap-basedBufferOverflowVulnerability(CVE-2017-15408)
https://bugs.chromium.org/p/chromium/issues/detail?id=762374
白宫正式指责朝鲜提议WannaCryRansomware疫情
https://www.bleepingcomputer.com/news/government/white-house-officially-blames-north-korea-for-wannacry-ransomware-outbreak/
跨越30万安装量的WordPress后门爆炸了插件
https://www.bleepingcomputer.com/news/security/backdoor-found-in-wordpress-plugin-with-more-than-300-000-installations/
Python刚刚修复了webbrowser.py下令参数注入缺陷，攻击者可以通过URL向BROWSER下令参数注入环境变量（CVE-2017-17522）
https://bugs.python.org/issue32367
ApacheGroovy远程代码执行缺陷详细信息
https://www.zerodayinitiative.com/blog/2017/12/19/apache-groovy-deserialization-a-cunning-exploit-chain-to-bypass-a-patch
XBLIP黑名单由于Andromeda和Satori僵尸网络增长50％
https://www.bleepingcomputer.com/news/security/xbl-ip-blacklist-grows-50-percent-because-of-andromeda-and-satori-botnets/
嵌入式Web服务器GoAhead远程代码执行缺陷CVE-2017-17562分析和保护方案
http://toutiao.secjia.com/goahead-rce-cve-2017-17562
软件集成平台Jenkins高危远程代码执行爆发CVE-2017-1000353
http://toutiao.secjia.com/jenkins-rce-cve-2017-1000353
VMWareVNC破绽
http://blog.talosintelligence.com/2017/12/vulnerability-spotlight-vmware-vnc.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed: feedburner/Talos (Talos? Blog)
卡巴斯基的专家发现了一个名字Loapi的Android恶意软件包括一个非常努力的挖掘组件，可能会损坏你的电池
http://securityaffairs.co/wordpress/66943/malware/loapi-android-malware.html
20172000年，韩国加密所Youbit第二次入侵后关闭
http://securityaffairs.co/wordpress/66933/cyber-crime/youbit-cryptocurrency-exchange-shutdown.html
ImageMagickDoS破绽三连发CVE-2017-17680/81/82
http://toutiao.secjia.com/imagemagick-dos-cve-2017-17680-81-82
沐日购物季节，GratefulPOS、Emotet和ZeusPanda三个恶意软件活跃起来
https://www.bleepingcomputer.com/news/security/three-malware-campaigns-come-alive-for-the-holiday-shopping-season/
Pythonwebbrowser.py远程代码执行缺陷CVE-2017-17522失败还可DoS
http://toutiao.secjia.com/python-rce-cve-2017-17522
研究人员发现，行使缺陷攻击网络没有补丁windowsLinux安装挖矿程序的服务器
http://securityaffairs.co/wordpress/66829/cyber-crime/zealot-campaign-nsa-exploits.html
研究人员发现Triton”和“Trisis恶意软件很可能是伊朗开发的，用于沙特阿拉伯的组织
http://www.securityweek.com/iran-used-triton-malware-target-saudi-arabia-researchers
VBpaper有人宣布名勒索软件Cerber的解密工具
https://www.virusbulletin.com/blog/2017/12/vb2017-paper-nine-circles-cerber/
201712月第四周舆情周报