Aggregator

一个会规避美国执法监控的僵尸网络

黑鸟
1 week 5 days ago
Masjesu 僵尸网络是一种自 2023 年初开始运作并持续演进至 2026 年的复杂商业化物联网威胁。 该僵尸网络以隐秘性为核心，以DDoS 攻击租赁服务的形式，主要通过 Telegram 进行推广。 它针对路由器、网关等多种物联网设备，支持 i386、MIPS、ARM、AMD64 等多种架构。为实现持久化与低可见性，Masjesu 采用谨慎低调的传播策略，而非大规模感染，刻意避开美国国防部等列入黑名单的 IP 段，保障长期存活。 该僵尸网络使用基于异或（XOR）的加密混淆字符串、配置与载荷数据，大幅降低静态检测的有效性。传播时，恶意软件会随机扫描 IP，利用 D-Link、GPON、Netgear 等厂商设备的多个漏洞入侵。其命令与控制（C2）基础设施采用多域名 + 备用 IP 架构，支持 TCP、UDP、HTTP 洪水等多种 DDoS 攻击方式。 Masjesu 背后的攻击者仍以 Telegram 作为核心推广与获客平台。 有趣的是黑名单 IP 过滤机制 刻意避开以下网段，规避执法打击： 私有地址：0.0.0.0/8、10.0.0.0/8、127.0.0.0/8、172.16.0.0/12、192.168.0.0/16 美国国防部（DoD）：26.0.0.0/8、132.1.0.0/16、150.1.0.0/16 等 美国联邦机构、军方承包商、政府骨干网相关网段 原文链接： https://www.trellix.com/blogs/research/masjesu-rising-stealth-iot-botnet-ddos-evasion/

[un]prompted 2026 – Anatomy Of An Agentic Personal Al Infrastructure

Security Boulevard
1 week 5 days ago

Author, Creator & Presenter: Daniel Miessler, Founder, Unsupervised Learning

Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations' YouTube Channel.

Permalink

The post [un]prompted 2026 – Anatomy Of An Agentic Personal Al Infrastructure appeared first on Security Boulevard.

Marc Handelman

Ransomware attack on ChipSoft knocks EHR services offline across hospitals in the Netherlands and Belgium

Security Affairs
1 week 5 days ago
Dutch healthcare IT firm ChipSoft suffered a ransomware attack, forcing services and its HiX platform offline, impacting hospitals and patients. ChipSoft, a major Dutch provider of EHR systems, was hit by a ransomware attack that forced it to take its website and digital services offline, disrupting access for hospitals, healthcare providers, and patients. EHR (Electronic […]
Pierluigi Paganini

法国政府将从 Windows 工作站迁移到 Linux 工作站

Solidot
1 week 5 days ago
在微软听命于美国总统下达的不合理命令之后，越来越多的欧盟国家开始强化数字主权，远离软件巨人，拥抱开源软件。法国总理命令跨部门数字事务局（DINUM）采取措施减少对美国的依赖。DINUM 已经宣布了第一个目标：替代 Windows。DINUM 负责监管各政府部门的 IT 设备和服务部署，它宣布工作站运行的操作系统将从 Windows 迁移到 Linux。除了工作站，协作工具、防病毒软件、人工智能、数据库、虚拟化等也将考虑迁移到非美国解决方案。

Hackers Use Fake BTS World Tour Ticket Sites to Scam Fans Across Multiple Countries

Cyber Security News
1 week 5 days ago

Cybercriminals are capitalizing on the excitement around BTS’s long-awaited return to the world stage by setting up fraudulent ticket websites that steal money from unsuspecting fans. The campaign has already reached fans across nine countries, making it one of the most geographically widespread concert ticket scams seen in recent years.​ BTS, one of the biggest […]

The post Hackers Use Fake BTS World Tour Ticket Sites to Scam Fans Across Multiple Countries appeared first on Cyber Security News.

Tushar Subhra Dutta

Managed ad