unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
Analyzing an Illegal Android Gambling App Built with Flutter
Affected Platforms: AndroidImpacted Users: Android end-usersImpact: Geolocation and phone numbe...
2026-11-9 14:0:0 | 阅读: 6 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
hxxps
qp
recharge
fortiguard
BITTER Expands Its Arsenal with PapRAT
Affected Platfo...
2026-11-2 14:0:0 | 阅读: 25 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
paprat
c2
remote
fortiguard
wmrat
ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
Affected Platfo...
2026-10-5 13:0:0 | 阅读: 33 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
injection
clingstun
remote
Uncovering a SectopRAT Variant Embedded in Legitimate Software
Affected Platfo...
2026-9-24 13:0:0 | 阅读: 45 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
sectoprat
c2
payload
decrypted
bsc
Casbaneiro: A Banking Trojan with Distributed Data-Receiving Servers
Affected Platforms: Microsoft WindowsImpacted Users: Microsoft WindowsImpact: The stolen inform...
2026-9-10 13:0:0 | 阅读: 23 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
casbaneiro
phishing
autoit
victim
Someone Else Is Using Your AI
Affected Platforms: Amazon Web Services (AWS), Amazon BedrockThreat Type: Cloud credential theft...
2026-9-3 13:0:0 | 阅读: 21 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
bedrock
lacework
marketplace
cloud
llmjacking
Multi-Functional Linux Botnet “Evooo1Bot”
Affected Platfo...
2026-8-13 13:0:0 | 阅读: 14 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
injection
ssh
evooo1bot
payload
Multi-Functional Linux Botnet “Evooo1Bot”
Affected Platfo...
2026-8-13 13:0:0 | 阅读: 73 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
injection
ssh
evooo1bot
payload
QuickFox Supply Chain Attack Used to Deploy FDMTP Implant
Affected Platfo...
2026-8-4 13:0:0 | 阅读: 72 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
fdmtp
2026
staging
wangmeng66
quickfox
Inside a TrickBot Variant Using DNS Tunneling for C2
Affected Platfo...
2026-7-22 13:0:0 | 阅读: 95 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
c2
tunneling
windows
payload
analysis
The TTF Trap: A Global Campaign of a Low-Detection Lua Loader
Affected Platfo...
2026-7-16 13:0:0 | 阅读: 68 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
lua
loader
autoit
snake
memory
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Affected Platfo...
2026-7-1 13:0:0 | 阅读: 53 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
ousaban
webpage
victim
phishing
malicious
From CI/CD to Cloud Data: How Shai Hulud Persistence Leads to Redshift Breach
Affected Platforms: Amazon Web Services (AWS)Impacted Users: Any organizationImpact: Stolen clo...
2026-6-26 13:0:0 | 阅读: 70 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
cloud
jenkins
redshift
security
shai
Threat Actors Weaponize AI Hype to Deliver AsyncRAT
Affected Platforms: Microsoft Wi...
2026-6-11 13:0:0 | 阅读: 100 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
powershell
payload
stage
ahk
Cybercriminals Are Targeting the FIFA World Cup 2026
Starting June 11, the FIFA World Cup 2026 will unite fans, teams, sponsors, broadcasters, hospita...
2026-6-4 13:0:0 | 阅读: 83 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
fifa
fortiguard
2026
attackers
fans
Inside the Cross-Platform Propagation of a New Gafgyt Variant C0XMO
Affected Platforms: DD-WRT chang...
2026-6-3 13:0:0 | 阅读: 81 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
c0xmo
blacklist
ssh
c2
glpi
Phishing Campaign Deploys JavaScript-Driven PureLogs Variant to Steal Sensitive Data
Affected Platforms: Microsoft Wi...
2026-5-26 13:0:0 | 阅读: 74 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
powershell
phishing
8443
c2
hollowing
Misconfigured, Enrolled and Dormant: Anatomy of a P2Pinfect Kubernetes Compromise
Affected Platforms: Linux, Windo...
2026-5-20 13:0:0 | 阅读: 49 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
p2pinfect
redishell
peers
forticnapp
client
PureLogs: Delivery via PawsRunner Steganography
Affected Platforms: Microsoft Wi...
2026-5-15 13:0:0 | 阅读: 58 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
loader
purelogs
payload
stage
download
Tracking Mirai Variant Nexcorium: A Vulnerability-Driven IoT Botnet Campaign
嗯,用户让我帮忙总结一下这篇文章的内容,控制在一百个字以内,而且不需要用“文章内容总结”之类的开头。首先,我需要快速浏览一下文章,抓住主要信息。 文章主要讲的是一个针对TBK DVR设备的恶意软件攻击。攻击者利用了CVE-2024-3721漏洞,植入了一个叫做Nexcorium的Mirai变种。这个恶意软件支持多种架构,比如ARM、MIPS和x86-64,并且有多种持久化机制,比如修改inittab、rc.local、创建systemd服务和设置cron任务。此外,它还能进行DDoS攻击,包括UDP flood、TCP ACK flood等多种类型。 用户可能是一个网络安全相关人员,或者是企业IT管理员,他们需要快速了解这个威胁的严重性以及如何应对。因此,在总结时要突出关键点:漏洞利用、恶意软件功能、攻击目标以及影响。 接下来,我要确保在100字以内涵盖这些要点:TBK DVR设备被攻击,利用CVE-2024-3721漏洞植入Nexcorium恶意软件,支持多架构,具备持久化和DDoS能力。同时提到影响范围广和安全建议。 最后,检查一下语言是否简洁明了,避免使用专业术语过多,让读者一目了然。 </think> TBK DVR设备被发现存在严重漏洞(CVE-2024-3721),被用于植入名为Nexcorium的恶意软件。该软件支持多架构(如ARM、MIPS、x86-64),具备持久化机制(如修改启动脚本、创建服务)及DDoS攻击能力(包括UDP flood等)。攻击者通过漏洞利用和暴力破解扩大感染范围。此威胁对物联网设备构成重大风险。...
2026-4-17 13:0:0 | 阅读: 97 |
收藏
|
Fortinet Threat Research Blog - feeds.fortinet.com
flood
nexcorium
fortiguard
dvr
c2
Previous
-6
-5
-4
-3
-2
-1
0
1
Next