201712月2周勒索病毒周报
20172012月第二周舆论周报：安卓恶意软件、新欺诈样本、重大缺陷、其他安全事项等Satori僵尸网络可以随时提出瘫痪攻击
https://www.scmagazine.com/satori-botnet-able-to-launch-crippling-attacks-at-any-time/article/712869/
StrongPity2取代了特工软件MitM系列中的FinFisher
https://www.welivesecurity.com/2017/12/08/strongpity-like-spyware-replaces-finfisher/
新的勒索软件被称为文件蜘蛛。使用两个组件，一个加密程序（enc.exe）和解密程序（dec.exe）
https://twitter.com/LawrenceAbrams/status/939961981158686722
EmotetDownloader木马恢复生效
https://securingtomorrow.mcafee.com/mcafee-labs/emotet-downloader-trojan-returns-in-force/#sf175737450
在QNXQnet特权提升的缺陷
https://www.midnightbluelabs.com/blog/2017/12/8/elevation-of-privilege-vulnerability-in-qnx-qnet
随着价格的上涨，比特币钱包的网络钓鱼攻击越来越严重
https://www.bleepingcomputer.com/news/security/phishing-attacks-on-bitcoin-wallets-intensify-as-price-goes-higher-and-higher/
RSA认证SDK两个严重的瑕疵被曝光
http://www.freebuf.com/news/156369.html
高危Android缺陷绕过签名检测机制，变更App
http://www.freebuf.com/vuls/156821.html
moneytaker组：IB在美国和俄罗斯发现了一个网络团伙攻击银行
http://securityaffairs.co/wordpress/66591/cyber-crime/moneytaker-group.html
机器人攻击：RSATLS加密攻击对Facebook，PayPal与数百个顶级域名一起工作
http://securityaffairs.co/wordpress/66682/hacking/robot-attack.html
Cryptojackers挖矿软件在星巴克WiFi网络上发现
https://www.bleepingcomputer.com/news/security/cryptojackers-found-on-starbucks-wifi-network-github-pirate-streaming-sites/
安全预警:潜伏17年0day漏洞
CryptomixRansomware变种泛起
https://www.bleepingcomputer.com/news/security/work-cryptomix-ransomware-variant-released/
GoogleResearcher公布iOS11越狱破绽
http://www.securityweek.com/google-researcher-releases-ios-11-jailbreak-exploit
跨越1900万加利福尼亚居民存放在不安全的地方MongoDB，选民登记资料已删除，勒索赎金
http://securityaffairs.co/wordpress/66792/cyber-crime/voter-mongodb-ransom-attack.html
银行员工因辅助Dridex恶意软件被判入狱
https://www.bleepingcomputer.com/news/security/bank-employee-gets-prison-time-for-helping-dridex-malware-gang/
研究人员:沙乌地阿拉伯
http://www.securityweek.com/iran-used-triton-malware-target-saudi-arabia-researchers
Vigilante公司两年内未能完成Netgear网站的恶意软件消灭了事情
https://www.bleepingcomputer.com/news/security/vigilante-removes-malware-from-netgear-site-after-company-fails-to-do-so-for-2-years/
Windows密码泄露的风险可能是预装密码管理器
http://securityaffairs.co/wordpress/66802/hacking/keeper-password-manager-flaw.html
黑客打算为能源机构挖掘
https://www.raconteur.net/technology/hackers-are-after-processing-power-to-get-valuable-bitcoins
"Zealot"行使NSA缺陷工具在Windows和Linux服务器上对Monero的攻击
https://www.bleepingcomputer.com/news/security/-zealot-campaign-uses-nsa-exploits-to-mine-monero-on-windows-and-linux-servers/
恶意软件禁用佐治亚州农业部网站
http://www.myajc.com/news/state--regional-govt--politics/malware-disables-georgia-agriculture-department-website/97bicqeIIfhlWcwRZEuwiP/
俄罗斯输油管道巨头Transneft被Monero加密钱币矿工熏染
http://securityaffairs.co/wordpress/66813/cyber-crime/transneft-monero-cryptocurrency-miner.html
11月安全舆情报告