Log4j-Vulnerability

Log4j 漏洞 教程：https://youtu.be/PNDBjoT83zA 教程：https://cryptodeeptech.ru/log4j-vulnerability Log4j 背景 阿里巴巴云安全团队公开披露了一个严重漏洞 CVE-2021-44228，该漏洞可在多个版本的 Apache Log4j2 Log4Shell 上实现未经身份验证的远程代码执行。攻击者可通过任何协议（如 HTTPS）连接易受攻击的服务器，并发送特制字符串进行利用。 Log4j 加密货币挖矿攻击活动 Darktrace 在多个客户部署环境中检测到因利用此 Log4j...

Cb ThreatSight Investigation Reveals RETADUP Worm Leverages AutoIt to Launch Monero Cryptomining Campaign

While monitoring a customer’s environment, the Carbon Black ThreatSight team discovered a series of unusual alerts. Further investigation of the suspect processes revealed these alerts were related to an attacker leveraging the open-source Monero framework to launch a crypto-mining campaign. Afte...