{"id":34448,"date":"2021-06-15T17:59:57","date_gmt":"2021-06-15T09:59:57","guid":{"rendered":"https:\/\/version-2.com\/?p=34448"},"modified":"2021-06-15T17:59:57","modified_gmt":"2021-06-15T09:59:57","slug":"%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac","status":"publish","type":"post","link":"https:\/\/v2catalog.com\/zh\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/","title":{"rendered":"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"34448\" class=\"elementor elementor-34448\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-905f1cf post-content elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"905f1cf\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;a329acc&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:0,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d7f81fc\" data-id=\"d7f81fc\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7d23541 elementor-widget elementor-widget-text-editor\" data-id=\"7d23541\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"entry-header\"><p>\u8fd1\u65e5\u65b0\u51a0\u75c5\u6bd2\u75ab\u60c5\u8da8\u56b4\uff0c\u4eba\u4eba\u6234\u53e3\u7f69\u3001\u52e4\u6d17\u624b\u3001\u4fdd\u6301\u793e\u4ea4\u8ddd\u96e2\u3001\u6e1b\u5c11\u4e0d\u5fc5\u8981\u5916\u51fa\u3002\u540c\u6a23\u9762\u5c0d\u7db2\u8def\u4e16\u754c\u76db\u884c\u7684\u52d2\u7d22\u75c5\u6bd2\uff0c\u4f01\u696d\u5982\u4f55\u6709\u6548\u4fdd\u8b77\u96fb\u8166\u4e2d\u7684\u91cd\u8981\u6a94\u6848\uff0c\u9664\u5099\u4efd\u5916\uff0c\u9084\u6709\u5176\u4ed6\u65b9\u6cd5? \u6709\u7684\uff01\u900f\u904e\u7aef\u9ede\u9632\u8b77\u6a5f\u5236\uff0c\u5229\u7528\u61c9\u7528\u7a0b\u5f0f\u767d\u540d\u55ae\u9650\u5236\u4fdd\u8b77\u8cc7\u6599\u593e\u5b58\u53d6\u884c\u70ba\uff0c\u5c31\u6709\u5982\u53e3\u7f69\u7684\u4fdd\u8b77\u7be9\u9078\u4f5c\u7528\uff0c\u505a\u5230\u4e8b\u524d\u963b\u65b7\u60e1\u610f\u7a0b\u5f0f\uff0c\u8b93\u96fb\u8166\u4e2d\u91cd\u8981\u7684\u6587\u4ef6\u591a\u4e00\u5c64\u4fdd\u8b77\u3002<\/p><p>\u00a0\u65bc\u53f0\u5317\u5357\u6e2f\u5c55\u89bd2\u9928\u843d\u5e55\u7684\u5e74\u5ea6\u53f0\u7063\u8cc7\u5b89\u76db\u6703CYBERSEC 2021\uff0c\u662f\u8fd1\u5e74\u53d7\u653f\u5e9c\u53ca\u696d\u754c\u91cd\u8996\u7684\u8cc7\u5b89\u4ea4\u6d41\u5145\u96fb\u5e73\u53f0\uff0c\u6709\u8457\u9ad8\u77e5\u8b58\u542b\u91cf\u7684\u5c08\u696d\u6f14\u8b1b\uff0c\u5206\u4eab\u6700\u65b0\u8cc7\u5b89\u7814\u7a76\u3001\u653b\u64ca\u624b\u6cd5\u8207\u9632\u79a6\u7b56\u7565\uff0c\u5e6b\u52a9\u8cc7\u8a0a\u4eba\u58eb\u4e86\u89e3\u53ca\u8a02\u7acb\u898f\u5283\u4f01\u696d\u8cc7\u5b89\u85cd\u5716\u3002\u7cbe\u54c1\u79d1\u6280\u4ea6\u5206\u4eab\u591a\u5834\u7cbe\u5f69\u7684\u4e3b\u984c\u8ad6\u58c7\uff0c\u672c\u6b21\u76db\u6703\u5411\u9685\u80fd\u53c3\u52a0\u7684\u5ba2\u6236\uff0c\u53ef\u6d3d\u7cbe\u54c1\u79d1\u6280\u7a97\u53e3\u8aee\u8a62\u76f8\u95dc\u7cbe\u5f69\u5167\u5bb9\uff1a<\/p><ol><li><p>\u963b\u65b7\u52d2\u7d22\uff01\u7aef\u9ede\u63a7\u7ba1\u8b93 EDR \u53cd\u61c9\u66f4\u76f4\u89ba\u5feb\u901f<\/p><\/li><li><p>\u81ea\u9069\u61c9\u653f\u7b56\u8b93\u5b89\u5168\u653f\u7b56\u96a8\u884c\u52d5\u8fa6\u516c\u5ba4\u7684\u6642\u7a7a\u4e3b\u52d5\u8b8a\u63db<\/p><\/li><li><p>\u89e3\u69cb Target Ransom &amp; Malware Steal \u7684\u6280\u8853\u624b\u6cd5\u5206\u7fa4<\/p><\/li><li><p>\u900f\u904e X-FORT \u89e3\u69cb\u975e\u5e38\u898f\u64cd\u4f5c\u884c\u70ba<\/p><\/li><li><p>\u8a18\u9304\u53ef\u8996\u6027\uff0cX-FORT \u8ffd\u6839\u7a76\u67e2<\/p><\/li><li><p>\u6587\u4ef6\u52a0\u5bc6\u4fdd\u8b77\u7684\u61c9\u7528\uff0c\u5b89\u5168\u5206\u4eab\u7b2c\u4e09\u65b9<\/p><\/li><\/ol><p>\u00a0<\/p><h4>FAC\u8cc7\u6599\u593e\u9632\u8b77(Folder Access Control)<\/h4><p>\u5728\u7cbe\u54c1\u79d1\u6280\u7684\u6524\u4f4d\uff0c\u4e5f\u8209\u8fa6\u4e86 \u201d\u586b\u554f\u5377&gt;&gt;\u9ad4\u9a57&gt;&gt;\u9001\u597d\u79ae\u201d\u6d3b\u52d5\uff0c\u642d\u914d\u73fe\u5834\u516d\u53f0\u96fb\u8166\u5c55\u793a\u4ecb\u7d39\uff0c\u91dd\u5c0d\u52d2\u7d22\u75c5\u6bd2\u7684\u5c0d\u7b56\uff0c\u8b1b\u5e2b\u5011\u4ee5\u4e8c\u500b\u8cc7\u6599\u593e\u5167\u7684\u6587\u4ef6\u4fdd\u8b77\u4f5c\u70ba\u5c0d\u6bd4\uff0c\u53d7\u5230\u61c9\u7528\u7a0b\u5f0f\u767d\u540d\u55ae\u4fdd\u8b77\u7684\u8cc7\u6599\u593e\uff0c\u5728\u9047\u5230\u52d2\u7d22\u75c5\u6bd2\u767c\u52d5\u653b\u64ca\u6642\uff0c\u80fd\u6709\u6548\u904e\u6ffe\u963b\u65b7\u975e\u767d\u540d\u55ae\u7684\u7a0b\u5f0f\u5b58\u53d6\uff0c\u6a94\u6848\u5b8c\u597d\u5982\u521d\uff0c\u76f8\u5c0d\u958b\u653e\u6027\u7684\u4e00\u822c\u8cc7\u6599\u593e\u5c31\u770b\u8457\u60e1\u610f\u7a0b\u5f0f\u5982\u5165\u7121\u4eba\u4e4b\u5883\u4e00\u822c\u7684\u8fc5\u901f\u5c07\u5c0e\u6848\u52a0\u5bc6\u7834\u58de\uff0c\u91cd\u73fe\u4e00\u822c\u4f01\u696d\u7d44\u7e54\u5167\u96fb\u8166\u9047\u5230\u52d2\u7d22\u75c5\u6bd2\u767c\u4f5c\u6642\u675f\u624b\u7121\u7b56\u7684\u7a98\u5883\u3002<\/p><p>X-FORT\u7aef\u9ede\u9632\u8b77\u7cfb\u7d71\u63a8\u51fa\u7684FAC\u8cc7\u6599\u593e\u9632\u8b77\uff0c\u80fd\u91dd\u5c0d\u7279\u5b9a\u8cc7\u6599\u593e\u63d0\u4f9b\u61c9\u7528\u7a0b\u5f0f\u767d\u540d\u55ae\u7684\u4fdd\u8b77\u6a5f\u5236\uff0c\u9084\u80fd\u52a0\u5165\u6392\u7a0b\u5099\u4efd\uff0c\u7ba1\u7406\u8005\u900f\u904e\u653f\u7b56\u8a2d\u5b9a\uff0c\u53ef\u81ea\u52d5\u5c07\u5404\u90e8\u9580\u96fb\u8166\u4e2d\u7684\u91cd\u8981\u6a94\u6848\uff0c\u6392\u7a0b(\u9593\u9694\u6700\u5c11\u53ef\u8a2d\u70ba\u6bcf\u4e00\u5c0f\u6642) \u5099\u4efd\u81f3\u5b89\u5168\u7684\u672c\u6a5f\u8cc7\u6599\u593e\u5167\uff0c\u4e5f\u53ef\u6307\u5b9a\u5099\u4efd\u81f3\u7a7a\u9593\u66f4\u5927\u7684\u6a94\u6848\u4f3a\u670d\u5668\u4e0a\uff0c\u540c\u6642\u505a\u5230\u5099\u4efd + \u9632\u8b77\uff0c\u5373\u4f7f\u9047\u5230\u60e1\u610f\u7a0b\u5f0f\u653b\u64ca\uff0c\u91cd\u8981\u6a94\u6848\u64c1\u6709\u56fa\u82e5\u91d1\u6e6f\u7684\u9632\u8b77\uff0c\u8b93\u640d\u5931\u5927\u5e45\u5ea6\u964d\u4f4e\u3002\u5982\u540c\u53e3\u7f69\u5e36\u4f86\u7684\u9632\u8b77\u4e00\u6a23\uff0c\u9664\u4e86\u75ab\u82d7\u5916\uff0c\u53e3\u7f69\u662f\u6700\u91cd\u8981\u7684\u9632\u7dda\uff0c\u4fdd\u8b77\u751f\u547d\u5065\u5eb7\u7684\u5b89\u5168\uff0c\u4e5f\u8acb\u70ba\u60a8\u4f01\u696d\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69\uff0c\u907f\u514d\u6210\u70ba\u52d2\u7d22\u75c5\u6bd2\u7684\u76ee\u6a19\u3002<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0c8ef86 elementor-widget elementor-widget-shortcode\" data-id=\"0c8ef86\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\n<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>\u9019\u5e7e\u5e74Ransomware\u7684\u65b0\u805e\u983b\u50b3\uff0c\u96d6\u7136\u5404\u500b\u4f01\u696d\u4e5f\u56e0\u6b64\u63d0\u51fa\u76f8\u7576\u591a\u7684\u5c0d\u7b56\u8207\u9632\u7bc4\u6a5f\u5236\uff0c\u4f46Ransomware\u9084\u662f\u65e5\u76ca\u7316\u7357\u4e14\u4e0d\u65b7\u7684\u9032\u5316\u3002Ransomware\u5f9e\u4e00\u958b\u59cb\u7684\u52a0\u5bc6\u53d7\u5bb3\u8005\u7684\u8cc7\u6599\uff0c\u9032\u800c\u52d2\u7d22\u8d16\u91d1\uff1b\u5230\u7aca\u53d6\u53d7\u5bb3\u8005\u7684\u8cc7\u6599\uff0c\u518d\u5c0d\u53d7\u5bb3\u8005\u52d2\u7d22\u8d16\u91d1\u5426\u5247\u5c31\u516c\u958b\u8cc7\u6599\u9032\u800c\u5a01\u8105\u53d7\u5bb3\u8005\uff1b\u5230\u73fe\u5728Ransomware\u4e0d\u53ea\u662f\u52a0\u8cc7\u6599\u52a0\u5bc6\u9084\u53e6\u5916\u5c07\u8cc7\u6599\u7aca\u53d6\u8d70\uff0c\u518d\u5c0d\u53d7\u5bb3\u8005\u9032\u884c\u8d16\u91d1\u7684\u52d2\u7d22\u3002\u4e0d\u7ba1\u4e2d\u90a3\u4e00\u7a2e\u52d2\u7d22\u75c5\u6bd2\uff0c\u90fd\u6703\u8b93\u53d7\u5bb3\u8005\u640d\u5931\u6158\u91cd\u3002 Targeted Ransomware\u9019\u5169\u5e74\u958b\u59cb\u51fa\u73fe\uff0c\u66f4\u662f\u8b93\u4f01\u696d\u6c23\u5f97\u7259\u7662\u7662\u7684Ransomware\u653b\u64ca\u6a21\u5f0f\uff0cTargeted Ransomware\u662f\u9ad8\u5ea6\u5ba2\u88fd\u5316\u7684Ransomware\uff0c\u5c08\u9580\u91dd\u5c0d\u88ab\u9396\u5b9a\u7684\u4f01\u696d\uff0c\u5c0d\u8a72\u4f01\u696d\u88fd\u9020\u5ba2\u88fd\u5316\u7684Ransomware\uff0c\u9032\u884c\u55c5\u63a2\u5075\u6e2c\u627e\u51fa\u8106\u5f31\u9ede\uff0c\u6f5b\u4f0f\u5728\u4f01\u696d\u7684\u7cfb\u7d71\u4e2d\u4f3a\u6a5f\u900f\u904e\u6f0f\u6d1e\u9032\u884c\u653b\u64ca\uff0c\u9032\u800c\u52d2\u7d22\u8a72\u4f01\u696d\uff0c\u82e5\u4e0d\u4ed8\u8d16\u91d1\u5c31\u6703\u516c\u5e03\u6a5f\u5bc6\u8cc7\u8a0a\u7684\u65b9\u5f0f\uff0c\u8b93\u5404\u500b\u5927\u4f01\u696d\u4e56\u4e56\u5c31\u7bc4\u3002 \u00a0 \u5927\u4f01\u696d\u90fd\u5c0d\u52d2\u7d22\u75c5\u6bd2\u505a\u4e86\u9632\u8b77? \u65e2\u7136\u5404\u5927\u4f01\u696d\u90fd\u5c0d\u52d2\u7d22\u75c5\u6bd2\u505a\u4e86\u9632\u8b77\uff0c\u90a3\u52d2\u7d22\u75c5\u6bd2\u5230\u5e95\u662f\u5982\u4f55\u9032\u5165\u4f01\u696d\u7684\u74b0\u5883\u5462?\u5230\u5e95\u662f\u5982\u4f55\u7a81\u7834\u4f01\u696d\u7684\u9632\u8b77\uff0c\u96e3\u9053\u662f\u9632\u6bd2\u8207\u9632Spam\u7684\u6a5f\u5236\u51fa\u4e86\u554f\u984c\u55ce?\u6211\u5011\u7d71\u8a08\u8fd1\u5e7e\u5e74\u4e0a\u767e\u96bb\u7684Ransomware\uff0c\u505a\u4e86\u5206\u7fa4\u6b78\u985e\uff0c\u7814\u7a76\u52d2\u7d22\u75c5\u6bd2\u7684\u653b\u64ca\u65b9\u5f0f\u8207\u884c\u70ba\uff0c\u5927\u81f4\u5206\u70ba Targeted Ransomware DLL Injector \u7121\u6a94\u6848\u5f0f\u653b\u64ca(Fileless) APT\u653b\u64ca\u65b9\u5f0f \u5bb0\u6bba\u9632\u6bd2\u8207\u5099\u4efd\u6a94\u6848 \u5229\u7528\u7cfb\u7d71\u767d\u540d\u55ae\u9032\u884c\u60e1\u610f\u884c\u70ba \u9019\u4e9b\u653b\u64ca\u6a21\u5f0f\u5f80\u5f80\u7121\u6cd5\u53ea\u9760\u55ae\u7d14\u7684\u9632\u6bd2\u8207Anti-Spam\u662f\u7121\u6cd5\u9632\u7bc4\u7684\u3002\u4e14\u9664\u4e86\u4e0a\u8ff0\u7684\u653b\u64ca\u65b9\u5f0f\u5916\uff0c\u4eba\u54e1\u5f80\u5f80\u662f\u5728\u8cc7\u8a0a\u5b89\u5168\u6700\u91cd\u8981\u7684\u4e00\u74b0\uff0c\u99ed\u5ba2\u4e5f\u6700\u5e38\u4f7f\u7528\u793e\u4ea4\u5de5\u7a0b\u7684\u65b9\u5f0f\uff0c\u900f\u904eMail\u593e\u5e36\u60e1\u610f\u9023\u7d50\u6216\u662f\u6a94\u6848\uff0c\u8b93\u9632\u6bd2\u8207Anti-Spam\u5075\u6e2c\u4e0d\u51fa\u4f86\u9032\u884c\u653b\u64ca\uff0c\u518d\u914d\u5408\u4e0a\u8ff0\u7684\u653b\u64ca\u65b9\u5f0f\uff0c\u8f15\u6613\u7684\u88fd\u9020\u4f01\u696d\u5167\u7684\u5f8c\u9580\u6f0f\u6d1e\uff0c\u9032\u800c\u8b93\u52d2\u7d22\u75c5\u6bd2\u53ef\u4ee5\u5927\u8086\u7684\u5165\u4fb5\u3002 \u00a0 Mail\u793e\u4ea4\u5de5\u7a0b\u4f86\u770b\uff0c\u99ed\u5ba2\u5f80\u5f80\u6703\u5bc4\u767c\u91e3\u9b5a\u4fe1\u4ef6 \u6211\u5011\u5c31\u5f9eMail\u793e\u4ea4\u5de5\u7a0b\u4f86\u770b\uff0c\u99ed\u5ba2\u5f80\u5f80\u6703\u5bc4\u767c\u91e3\u9b5a\u4fe1\u4ef6\u4f86\u5230\u5404\u5927\u4f01\u696d\u7684\u4fe1\u7bb1\uff0c\u800c\u9019\u4e9bMail\u5f80\u5f80\u90fd\u6703\u593e\u5e36\u9644\u4ef6\u6216\u662f\u5728\u5167\u6587\u4e2d\u5d4c\u5165\u60e1\u610f\u9023\u7d50\uff0c\u800c\u9019\u4e9b\u9644\u4ef6\u5df2\u7d93\u4e0d\u662f\u58d3\u7e2e\u6a94\u6216\u662f\u57f7\u884c\u6a94\u4e86\uff0c\u56e0\u70ba\u9019\u4e9b\u6a94\u6848\u90fd\u6703\u88abSpam\u8f15\u6613\u7684\u64cb\u4e0b\u4f86\uff0c\u800cMail\u9644\u4ef6\u5c31\u6703\u4ee5Office\u7684\u6a94\u6848\u70ba\u4e3b\uff0c\u800c\u9019\u4e9bOffice\u6a94\u6848\u770b\u4f3c\u7121\u5bb3\uff0c\u4f46\u53ea\u8981\u4f01\u696d\u9ede\u64ca\u6253\u958b\uff0c\u90a3\u5c31\u6703\u8b93\u99ed\u5ba2\u53ef\u4ee5\u76f4\u63a5\u690d\u5165\u5f8c\u9580\u3001\u75c5\u6bd2\u2026\u7b49\u3002\u800c\u9019\u4e9b\u99ed\u5ba2\u5230\u5e95\u5982\u4f55\u690d\u5165\u9019\u4e9b\u60e1\u610f\u9023\u7d50\u5462?\u5176\u5be6\u5f88\u7c21\u55ae\uff0c\u662f\u5229\u7528\u4e86Office Macro\u7684\u529f\u80fd\uff0cOffice Macro\u53ef\u4ee5\u5beb\u5165VBA\u7684\u7a0b\u5f0f\uff0cVBA\u7a0b\u5f0f\u53ef\u4ee5\u547c\u53ebPowerShell\u6216CMD\u4f86\u9032\u884c\u8a31\u591a\u7684\u653b\u64ca\u3002\u6700\u5e38\u898b\u7684\u624b\u6cd5\u662fVBA\u7a0b\u5f0f\u4e2d\uff0c\u547c\u53ebPowerShell\u6216CMD\uff0c\u5728PowerShell\u6216CMD\u7684\u6307\u4ee4\u4e2d\u9032\u884c\u6307\u4ee4\u6df7\u6dc6\uff0c\u6df7\u6dc6\u7684Code\u5c31\u662f\u5f9e\u7db2\u8def\u4e0a\u4e0b\u8f09\u5177\u6709\u60e1\u610f\u653b\u64ca\u7684PS1\u8173\u672c\uff0c\u800c\u9019\u4e9b\u8173\u672c\u5167\u5bb9\u7576\u7136\u4e5f\u9032\u884c\u4e86\u591a\u5c64\u7684\u6df7\u6dc6\uff0c\u9019\u4e9b\u8173\u672c\u900f\u904ePowerShell\u7684\u6307\u4ee4\u76f4\u63a5\u9032\u5165\u96fb\u8166\u4e2d\u7684\u8a18\u61b6\u9ad4\u57f7\u884c\uff0c\u904e\u7a0b\u4e2d\u4e0d\u6b98\u7559\u4efb\u4f55\u7684\u6a94\u6848\uff0c\u9019\u7a2e\u653b\u64ca\u65b9\u5f0f\u5c31\u662f\u300c\u7121\u6a94\u6848\u5f0f\u653b\u64ca\u300d\u3002 \u800c\u8173\u672c\u7684\u653b\u64ca\u5167\u5bb9\u5927\u81f4\u5206\u70ba3\u5927\u985e\uff0c\u7b2c\u4e00\u76f4\u63a5\u5bb0\u6bba\u8a72\u96fb\u8166\u7684\u9632\u8b77\u6a5f\u5236(\u9632\u6bd2)\uff0c\u7b2c\u4e8c\u522a\u9664\u8a72\u96fb\u8166\u4e2d\u6240\u6709\u7684\u5099\u4efd\uff0c\u7b2c\u4e09\u4e0b\u8f09Ransomware\u75c5\u6bd2\u76f4\u63a5\u9032\u884c\u52a0\u5bc6\u8207\u7aca\u53d6\u3002\u9019\u4e9b\u8173\u672c\u662f\u5229\u7528Windows\u7684\u7a0b\u5f0f(\u4e00\u822c\u7a31\u70ba\u767d\u540d\u55ae)\uff0c\u4f8b\u5982:vssadmin.exe\u3001wmic.exe\u3001bcdedit.exe\u3001taskkill.exe\u7b49\u7b49\uff0c\u7528\u9019\u4e9bWindows\u7a0b\u5f0f\u505a\u653b\u64ca\u65b9\u5f0f\uff0c\u751a\u81f3\u66f4\u9ad8\u6df1\u7684Ransomware\u6703\u4f7f\u7528\u5230DLL Injector\u6280\u8853\uff0c\u76f4\u63a5\u6ce8\u5165\u5230\u9019\u4e9b\u7a0b\u5f0f\u4e2d\uff0c\u6700\u77e5\u540d\u7684\u4f8b\u5b50\u5c31\u662fNetwalker Ransomware\uff0c\u9019\u652f\u75c5\u6bd2\u662f\u76f4\u63a5DLL Injector\u5230Explorer.exe\u4e2d\uff0c\u900f\u904eExplorer\u9032\u884c\u7aca\u53d6\u52a0\u5bc6\uff0c\u7531\u65bcExplorer.exe\u662f\u4e00\u822c\u4f01\u696d\u4e0d\u80fd\u4e5f\u4e0d\u6703\u963b\u64cb\u7684\u61c9\u7528\u7a0b\u5f0f\uff0c\u525b\u597d\u99ed\u5ba2\u5c31\u5229\u7528\u9019\u9ede\u76f4\u63a5DLL Injector\u5230Explorer.exe\u3002 \u00a0 \u5728\u9762\u5c0d\u591a\u6a23\u5316\u7684\u52d2\u7d22\u75c5\u6bd2\u5a01\u8105\u8981\u5982\u4f55\u9632\u8b77\u5462? \u73fe\u4eca\u5f9e\u52d2\u7d22\u75c5\u6bd2\u7684\u653b\u64ca\u65b9\u5f0f\u8457\u624b\uff0c\u52d2\u7d22\u75c5\u6bd2\u9032\u5165\u516c\u53f8\u5167\u90e8\u7cfb\u7d71\u5f8c\u6240\u7522\u751f\u7684\u884c\u70ba\uff0c\u5982\u540c\u4e0a\u8ff0\u7684Targeted Ransomware DLL Injector\u3001\u7121\u6a94\u6848\u5f0f\u653b\u64ca(Fileless)\u3001APT\u653b\u64ca\u65b9\u5f0f\u3001\u5bb0\u6bba\u9632\u6bd2\u8207\u5099\u4efd\u6a94\u6848\u3001\u5229\u7528\u7cfb\u7d71\u767d\u540d\u55ae\u9032\u884c\u60e1\u610f\u884c\u70ba\u2026\u7b49\u3002\u8981\u963b\u64cb\u9019\u4e9b\u60e1\u610f\u7684\u653b\u64ca\u65b9\u5f0f\uff0c\u53ef\u4ee5\u4f7f\u7528X-FORT\u7684\u61c9\u7528\u7a0b\u5f0f\u63a7\u7ba1\u6a5f\u5236\uff0c\u53ea\u6709\u4e86\u89e3Ransomware\u653b\u64ca\u8207\u767c\u4f5c\u7684\u6a21\u5f0f\uff0c\u5f9e\u4e2d\u9032\u884c\u963b\u65b7\uff0c\u624d\u6709\u8fa6\u6cd5\u963b\u64cb\u60e1\u610f\u7a0b\u5f0f\uff0c\u5c31\u7b97Ransomware\u9032\u5165\u5230\u96fb\u8166\u4e2d\uff0c\u4e5f\u6703\u56e0\u70baX-FORT\u7684\u61c9\u7528\u7a0b\u5f0f\u63a7\u7ba1\u6a5f\u5236\uff0c\u8b93Ransomware\u7121\u6cd5\u767c\u4f5c\u653b\u64ca\uff0c\u4ee5\u5927\u5e45\u9054\u5230\u9810\u9632\u7684\u6548\u679c\uff0c\u751a\u81f3\u642d\u914dFAC(\u8cc7\u6599\u593e\u9632\u8b77)\u8207\u5b89\u5168\u5099\u4efd\u7684\u529f\u80fd\uff0c\u8cc7\u6599\u80fd\u5b8c\u5168\u4fdd\u8b77\u4f4f\uff0c\u8b93\u4f01\u696d\u9054\u5230\u9810\u9632\u3001\u6b62\u707d\u7684\u6548\u679c\u3002<\/p>","protected":false},"author":148019288,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_wpcom_ai_launchpad_first_post":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[1452,1376,1399,1501],"tags":[1504,1502,1503],"class_list":["post-34448","post","type-post","status-publish","format-standard","hentry","category-year2021","category-press-release","category-v2","category-x-fort","tag-1504","tag-fineart","tag-x-fort"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77 - V2Catalog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/v2catalog.com\/zh\/\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69-\u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528fac\/\" \/>\n<meta property=\"og:locale\" content=\"zh_HK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77 - V2Catalog\" \/>\n<meta property=\"og:description\" content=\"\u9019\u5e7e\u5e74Ransomware\u7684\u65b0\u805e\u983b\u50b3\uff0c\u96d6\u7136\u5404\u500b\u4f01\u696d\u4e5f\u56e0\u6b64\u63d0\u51fa\u76f8\u7576\u591a\u7684\u5c0d\u7b56\u8207\u9632\u7bc4\u6a5f\u5236\uff0c\u4f46Ransomware\u9084\u662f\u65e5\u76ca\u7316\u7357\u4e14\u4e0d\u65b7\u7684\u9032\u5316\u3002Ransomware\u5f9e\u4e00\u958b\u59cb\u7684\u52a0\u5bc6\u53d7\u5bb3\u8005\u7684\u8cc7\u6599\uff0c\u9032\u800c\u52d2\u7d22\u8d16\u91d1\uff1b\u5230\u7aca\u53d6\u53d7\u5bb3\u8005\u7684\u8cc7\u6599\uff0c\u518d\u5c0d\u53d7\u5bb3\u8005\u52d2\u7d22\u8d16\u91d1\u5426\u5247\u5c31\u516c\u958b\u8cc7\u6599\u9032\u800c\u5a01\u8105\u53d7\u5bb3\u8005\uff1b\u5230\u73fe\u5728Ransomware\u4e0d\u53ea\u662f\u52a0\u8cc7\u6599\u52a0\u5bc6\u9084\u53e6\u5916\u5c07\u8cc7\u6599\u7aca\u53d6\u8d70\uff0c\u518d\u5c0d\u53d7\u5bb3\u8005\u9032\u884c\u8d16\u91d1\u7684\u52d2\u7d22\u3002\u4e0d\u7ba1\u4e2d\u90a3\u4e00\u7a2e\u52d2\u7d22\u75c5\u6bd2\uff0c\u90fd\u6703\u8b93\u53d7\u5bb3\u8005\u640d\u5931\u6158\u91cd\u3002 Targeted Ransomware\u9019\u5169\u5e74\u958b\u59cb\u51fa\u73fe\uff0c\u66f4\u662f\u8b93\u4f01\u696d\u6c23\u5f97\u7259\u7662\u7662\u7684Ransomware\u653b\u64ca\u6a21\u5f0f\uff0cTargeted Ransomware\u662f\u9ad8\u5ea6\u5ba2\u88fd\u5316\u7684Ransomware\uff0c\u5c08\u9580\u91dd\u5c0d\u88ab\u9396\u5b9a\u7684\u4f01\u696d\uff0c\u5c0d\u8a72\u4f01\u696d\u88fd\u9020\u5ba2\u88fd\u5316\u7684Ransomware\uff0c\u9032\u884c\u55c5\u63a2\u5075\u6e2c\u627e\u51fa\u8106\u5f31\u9ede\uff0c\u6f5b\u4f0f\u5728\u4f01\u696d\u7684\u7cfb\u7d71\u4e2d\u4f3a\u6a5f\u900f\u904e\u6f0f\u6d1e\u9032\u884c\u653b\u64ca\uff0c\u9032\u800c\u52d2\u7d22\u8a72\u4f01\u696d\uff0c\u82e5\u4e0d\u4ed8\u8d16\u91d1\u5c31\u6703\u516c\u5e03\u6a5f\u5bc6\u8cc7\u8a0a\u7684\u65b9\u5f0f\uff0c\u8b93\u5404\u500b\u5927\u4f01\u696d\u4e56\u4e56\u5c31\u7bc4\u3002 \u00a0 \u5927\u4f01\u696d\u90fd\u5c0d\u52d2\u7d22\u75c5\u6bd2\u505a\u4e86\u9632\u8b77? \u65e2\u7136\u5404\u5927\u4f01\u696d\u90fd\u5c0d\u52d2\u7d22\u75c5\u6bd2\u505a\u4e86\u9632\u8b77\uff0c\u90a3\u52d2\u7d22\u75c5\u6bd2\u5230\u5e95\u662f\u5982\u4f55\u9032\u5165\u4f01\u696d\u7684\u74b0\u5883\u5462?\u5230\u5e95\u662f\u5982\u4f55\u7a81\u7834\u4f01\u696d\u7684\u9632\u8b77\uff0c\u96e3\u9053\u662f\u9632\u6bd2\u8207\u9632Spam\u7684\u6a5f\u5236\u51fa\u4e86\u554f\u984c\u55ce?\u6211\u5011\u7d71\u8a08\u8fd1\u5e7e\u5e74\u4e0a\u767e\u96bb\u7684Ransomware\uff0c\u505a\u4e86\u5206\u7fa4\u6b78\u985e\uff0c\u7814\u7a76\u52d2\u7d22\u75c5\u6bd2\u7684\u653b\u64ca\u65b9\u5f0f\u8207\u884c\u70ba\uff0c\u5927\u81f4\u5206\u70ba Targeted Ransomware DLL Injector \u7121\u6a94\u6848\u5f0f\u653b\u64ca(Fileless) APT\u653b\u64ca\u65b9\u5f0f \u5bb0\u6bba\u9632\u6bd2\u8207\u5099\u4efd\u6a94\u6848 \u5229\u7528\u7cfb\u7d71\u767d\u540d\u55ae\u9032\u884c\u60e1\u610f\u884c\u70ba \u9019\u4e9b\u653b\u64ca\u6a21\u5f0f\u5f80\u5f80\u7121\u6cd5\u53ea\u9760\u55ae\u7d14\u7684\u9632\u6bd2\u8207Anti-Spam\u662f\u7121\u6cd5\u9632\u7bc4\u7684\u3002\u4e14\u9664\u4e86\u4e0a\u8ff0\u7684\u653b\u64ca\u65b9\u5f0f\u5916\uff0c\u4eba\u54e1\u5f80\u5f80\u662f\u5728\u8cc7\u8a0a\u5b89\u5168\u6700\u91cd\u8981\u7684\u4e00\u74b0\uff0c\u99ed\u5ba2\u4e5f\u6700\u5e38\u4f7f\u7528\u793e\u4ea4\u5de5\u7a0b\u7684\u65b9\u5f0f\uff0c\u900f\u904eMail\u593e\u5e36\u60e1\u610f\u9023\u7d50\u6216\u662f\u6a94\u6848\uff0c\u8b93\u9632\u6bd2\u8207Anti-Spam\u5075\u6e2c\u4e0d\u51fa\u4f86\u9032\u884c\u653b\u64ca\uff0c\u518d\u914d\u5408\u4e0a\u8ff0\u7684\u653b\u64ca\u65b9\u5f0f\uff0c\u8f15\u6613\u7684\u88fd\u9020\u4f01\u696d\u5167\u7684\u5f8c\u9580\u6f0f\u6d1e\uff0c\u9032\u800c\u8b93\u52d2\u7d22\u75c5\u6bd2\u53ef\u4ee5\u5927\u8086\u7684\u5165\u4fb5\u3002 \u00a0 Mail\u793e\u4ea4\u5de5\u7a0b\u4f86\u770b\uff0c\u99ed\u5ba2\u5f80\u5f80\u6703\u5bc4\u767c\u91e3\u9b5a\u4fe1\u4ef6 \u6211\u5011\u5c31\u5f9eMail\u793e\u4ea4\u5de5\u7a0b\u4f86\u770b\uff0c\u99ed\u5ba2\u5f80\u5f80\u6703\u5bc4\u767c\u91e3\u9b5a\u4fe1\u4ef6\u4f86\u5230\u5404\u5927\u4f01\u696d\u7684\u4fe1\u7bb1\uff0c\u800c\u9019\u4e9bMail\u5f80\u5f80\u90fd\u6703\u593e\u5e36\u9644\u4ef6\u6216\u662f\u5728\u5167\u6587\u4e2d\u5d4c\u5165\u60e1\u610f\u9023\u7d50\uff0c\u800c\u9019\u4e9b\u9644\u4ef6\u5df2\u7d93\u4e0d\u662f\u58d3\u7e2e\u6a94\u6216\u662f\u57f7\u884c\u6a94\u4e86\uff0c\u56e0\u70ba\u9019\u4e9b\u6a94\u6848\u90fd\u6703\u88abSpam\u8f15\u6613\u7684\u64cb\u4e0b\u4f86\uff0c\u800cMail\u9644\u4ef6\u5c31\u6703\u4ee5Office\u7684\u6a94\u6848\u70ba\u4e3b\uff0c\u800c\u9019\u4e9bOffice\u6a94\u6848\u770b\u4f3c\u7121\u5bb3\uff0c\u4f46\u53ea\u8981\u4f01\u696d\u9ede\u64ca\u6253\u958b\uff0c\u90a3\u5c31\u6703\u8b93\u99ed\u5ba2\u53ef\u4ee5\u76f4\u63a5\u690d\u5165\u5f8c\u9580\u3001\u75c5\u6bd2\u2026\u7b49\u3002\u800c\u9019\u4e9b\u99ed\u5ba2\u5230\u5e95\u5982\u4f55\u690d\u5165\u9019\u4e9b\u60e1\u610f\u9023\u7d50\u5462?\u5176\u5be6\u5f88\u7c21\u55ae\uff0c\u662f\u5229\u7528\u4e86Office Macro\u7684\u529f\u80fd\uff0cOffice Macro\u53ef\u4ee5\u5beb\u5165VBA\u7684\u7a0b\u5f0f\uff0cVBA\u7a0b\u5f0f\u53ef\u4ee5\u547c\u53ebPowerShell\u6216CMD\u4f86\u9032\u884c\u8a31\u591a\u7684\u653b\u64ca\u3002\u6700\u5e38\u898b\u7684\u624b\u6cd5\u662fVBA\u7a0b\u5f0f\u4e2d\uff0c\u547c\u53ebPowerShell\u6216CMD\uff0c\u5728PowerShell\u6216CMD\u7684\u6307\u4ee4\u4e2d\u9032\u884c\u6307\u4ee4\u6df7\u6dc6\uff0c\u6df7\u6dc6\u7684Code\u5c31\u662f\u5f9e\u7db2\u8def\u4e0a\u4e0b\u8f09\u5177\u6709\u60e1\u610f\u653b\u64ca\u7684PS1\u8173\u672c\uff0c\u800c\u9019\u4e9b\u8173\u672c\u5167\u5bb9\u7576\u7136\u4e5f\u9032\u884c\u4e86\u591a\u5c64\u7684\u6df7\u6dc6\uff0c\u9019\u4e9b\u8173\u672c\u900f\u904ePowerShell\u7684\u6307\u4ee4\u76f4\u63a5\u9032\u5165\u96fb\u8166\u4e2d\u7684\u8a18\u61b6\u9ad4\u57f7\u884c\uff0c\u904e\u7a0b\u4e2d\u4e0d\u6b98\u7559\u4efb\u4f55\u7684\u6a94\u6848\uff0c\u9019\u7a2e\u653b\u64ca\u65b9\u5f0f\u5c31\u662f\u300c\u7121\u6a94\u6848\u5f0f\u653b\u64ca\u300d\u3002 \u800c\u8173\u672c\u7684\u653b\u64ca\u5167\u5bb9\u5927\u81f4\u5206\u70ba3\u5927\u985e\uff0c\u7b2c\u4e00\u76f4\u63a5\u5bb0\u6bba\u8a72\u96fb\u8166\u7684\u9632\u8b77\u6a5f\u5236(\u9632\u6bd2)\uff0c\u7b2c\u4e8c\u522a\u9664\u8a72\u96fb\u8166\u4e2d\u6240\u6709\u7684\u5099\u4efd\uff0c\u7b2c\u4e09\u4e0b\u8f09Ransomware\u75c5\u6bd2\u76f4\u63a5\u9032\u884c\u52a0\u5bc6\u8207\u7aca\u53d6\u3002\u9019\u4e9b\u8173\u672c\u662f\u5229\u7528Windows\u7684\u7a0b\u5f0f(\u4e00\u822c\u7a31\u70ba\u767d\u540d\u55ae)\uff0c\u4f8b\u5982:vssadmin.exe\u3001wmic.exe\u3001bcdedit.exe\u3001taskkill.exe\u7b49\u7b49\uff0c\u7528\u9019\u4e9bWindows\u7a0b\u5f0f\u505a\u653b\u64ca\u65b9\u5f0f\uff0c\u751a\u81f3\u66f4\u9ad8\u6df1\u7684Ransomware\u6703\u4f7f\u7528\u5230DLL Injector\u6280\u8853\uff0c\u76f4\u63a5\u6ce8\u5165\u5230\u9019\u4e9b\u7a0b\u5f0f\u4e2d\uff0c\u6700\u77e5\u540d\u7684\u4f8b\u5b50\u5c31\u662fNetwalker Ransomware\uff0c\u9019\u652f\u75c5\u6bd2\u662f\u76f4\u63a5DLL Injector\u5230Explorer.exe\u4e2d\uff0c\u900f\u904eExplorer\u9032\u884c\u7aca\u53d6\u52a0\u5bc6\uff0c\u7531\u65bcExplorer.exe\u662f\u4e00\u822c\u4f01\u696d\u4e0d\u80fd\u4e5f\u4e0d\u6703\u963b\u64cb\u7684\u61c9\u7528\u7a0b\u5f0f\uff0c\u525b\u597d\u99ed\u5ba2\u5c31\u5229\u7528\u9019\u9ede\u76f4\u63a5DLL Injector\u5230Explorer.exe\u3002 \u00a0 \u5728\u9762\u5c0d\u591a\u6a23\u5316\u7684\u52d2\u7d22\u75c5\u6bd2\u5a01\u8105\u8981\u5982\u4f55\u9632\u8b77\u5462? \u73fe\u4eca\u5f9e\u52d2\u7d22\u75c5\u6bd2\u7684\u653b\u64ca\u65b9\u5f0f\u8457\u624b\uff0c\u52d2\u7d22\u75c5\u6bd2\u9032\u5165\u516c\u53f8\u5167\u90e8\u7cfb\u7d71\u5f8c\u6240\u7522\u751f\u7684\u884c\u70ba\uff0c\u5982\u540c\u4e0a\u8ff0\u7684Targeted Ransomware DLL Injector\u3001\u7121\u6a94\u6848\u5f0f\u653b\u64ca(Fileless)\u3001APT\u653b\u64ca\u65b9\u5f0f\u3001\u5bb0\u6bba\u9632\u6bd2\u8207\u5099\u4efd\u6a94\u6848\u3001\u5229\u7528\u7cfb\u7d71\u767d\u540d\u55ae\u9032\u884c\u60e1\u610f\u884c\u70ba\u2026\u7b49\u3002\u8981\u963b\u64cb\u9019\u4e9b\u60e1\u610f\u7684\u653b\u64ca\u65b9\u5f0f\uff0c\u53ef\u4ee5\u4f7f\u7528X-FORT\u7684\u61c9\u7528\u7a0b\u5f0f\u63a7\u7ba1\u6a5f\u5236\uff0c\u53ea\u6709\u4e86\u89e3Ransomware\u653b\u64ca\u8207\u767c\u4f5c\u7684\u6a21\u5f0f\uff0c\u5f9e\u4e2d\u9032\u884c\u963b\u65b7\uff0c\u624d\u6709\u8fa6\u6cd5\u963b\u64cb\u60e1\u610f\u7a0b\u5f0f\uff0c\u5c31\u7b97Ransomware\u9032\u5165\u5230\u96fb\u8166\u4e2d\uff0c\u4e5f\u6703\u56e0\u70baX-FORT\u7684\u61c9\u7528\u7a0b\u5f0f\u63a7\u7ba1\u6a5f\u5236\uff0c\u8b93Ransomware\u7121\u6cd5\u767c\u4f5c\u653b\u64ca\uff0c\u4ee5\u5927\u5e45\u9054\u5230\u9810\u9632\u7684\u6548\u679c\uff0c\u751a\u81f3\u642d\u914dFAC(\u8cc7\u6599\u593e\u9632\u8b77)\u8207\u5b89\u5168\u5099\u4efd\u7684\u529f\u80fd\uff0c\u8cc7\u6599\u80fd\u5b8c\u5168\u4fdd\u8b77\u4f4f\uff0c\u8b93\u4f01\u696d\u9054\u5230\u9810\u9632\u3001\u6b62\u707d\u7684\u6548\u679c\u3002\" \/>\n<meta property=\"og:url\" content=\"https:\/\/v2catalog.com\/zh\/\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69-\u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528fac\/\" \/>\n<meta property=\"og:site_name\" content=\"V2Catalog\" \/>\n<meta property=\"article:published_time\" content=\"2021-06-15T09:59:57+00:00\" \/>\n<meta name=\"author\" content=\"tracylamv2\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"tracylamv2\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/v2catalog.com\\\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/v2catalog.com\\\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\\\/\"},\"author\":{\"name\":\"tracylamv2\",\"@id\":\"https:\\\/\\\/v2catalog.com\\\/#\\\/schema\\\/person\\\/949d980888460b8203c48a6e6c719cca\"},\"headline\":\"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77\",\"datePublished\":\"2021-06-15T09:59:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/v2catalog.com\\\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\\\/\"},\"wordCount\":89,\"keywords\":[\"\u7cbe\u54c1\u79d1\u6280\",\"FineArt\",\"X-Fort\"],\"articleSection\":[\"2021\",\"Press Release\",\"Version 2 Limited\",\"X-Fort\"],\"inLanguage\":\"zh-HK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/v2catalog.com\\\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\\\/\",\"url\":\"https:\\\/\\\/v2catalog.com\\\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\\\/\",\"name\":\"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77 - V2Catalog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/v2catalog.com\\\/#website\"},\"datePublished\":\"2021-06-15T09:59:57+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/v2catalog.com\\\/#\\\/schema\\\/person\\\/949d980888460b8203c48a6e6c719cca\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/v2catalog.com\\\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\\\/#breadcrumb\"},\"inLanguage\":\"zh-HK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/v2catalog.com\\\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/v2catalog.com\\\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/v2catalog.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/v2catalog.com\\\/#website\",\"url\":\"https:\\\/\\\/v2catalog.com\\\/\",\"name\":\"V2Catalog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/v2catalog.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-HK\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/v2catalog.com\\\/#\\\/schema\\\/person\\\/949d980888460b8203c48a6e6c719cca\",\"name\":\"tracylamv2\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"caption\":\"tracylamv2\"},\"url\":\"https:\\\/\\\/v2catalog.com\\\/zh\\\/author\\\/tracylamv2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77 - V2Catalog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/v2catalog.com\/zh\/\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69-\u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528fac\/","og_locale":"zh_HK","og_type":"article","og_title":"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77 - V2Catalog","og_description":"\u9019\u5e7e\u5e74Ransomware\u7684\u65b0\u805e\u983b\u50b3\uff0c\u96d6\u7136\u5404\u500b\u4f01\u696d\u4e5f\u56e0\u6b64\u63d0\u51fa\u76f8\u7576\u591a\u7684\u5c0d\u7b56\u8207\u9632\u7bc4\u6a5f\u5236\uff0c\u4f46Ransomware\u9084\u662f\u65e5\u76ca\u7316\u7357\u4e14\u4e0d\u65b7\u7684\u9032\u5316\u3002Ransomware\u5f9e\u4e00\u958b\u59cb\u7684\u52a0\u5bc6\u53d7\u5bb3\u8005\u7684\u8cc7\u6599\uff0c\u9032\u800c\u52d2\u7d22\u8d16\u91d1\uff1b\u5230\u7aca\u53d6\u53d7\u5bb3\u8005\u7684\u8cc7\u6599\uff0c\u518d\u5c0d\u53d7\u5bb3\u8005\u52d2\u7d22\u8d16\u91d1\u5426\u5247\u5c31\u516c\u958b\u8cc7\u6599\u9032\u800c\u5a01\u8105\u53d7\u5bb3\u8005\uff1b\u5230\u73fe\u5728Ransomware\u4e0d\u53ea\u662f\u52a0\u8cc7\u6599\u52a0\u5bc6\u9084\u53e6\u5916\u5c07\u8cc7\u6599\u7aca\u53d6\u8d70\uff0c\u518d\u5c0d\u53d7\u5bb3\u8005\u9032\u884c\u8d16\u91d1\u7684\u52d2\u7d22\u3002\u4e0d\u7ba1\u4e2d\u90a3\u4e00\u7a2e\u52d2\u7d22\u75c5\u6bd2\uff0c\u90fd\u6703\u8b93\u53d7\u5bb3\u8005\u640d\u5931\u6158\u91cd\u3002 Targeted Ransomware\u9019\u5169\u5e74\u958b\u59cb\u51fa\u73fe\uff0c\u66f4\u662f\u8b93\u4f01\u696d\u6c23\u5f97\u7259\u7662\u7662\u7684Ransomware\u653b\u64ca\u6a21\u5f0f\uff0cTargeted Ransomware\u662f\u9ad8\u5ea6\u5ba2\u88fd\u5316\u7684Ransomware\uff0c\u5c08\u9580\u91dd\u5c0d\u88ab\u9396\u5b9a\u7684\u4f01\u696d\uff0c\u5c0d\u8a72\u4f01\u696d\u88fd\u9020\u5ba2\u88fd\u5316\u7684Ransomware\uff0c\u9032\u884c\u55c5\u63a2\u5075\u6e2c\u627e\u51fa\u8106\u5f31\u9ede\uff0c\u6f5b\u4f0f\u5728\u4f01\u696d\u7684\u7cfb\u7d71\u4e2d\u4f3a\u6a5f\u900f\u904e\u6f0f\u6d1e\u9032\u884c\u653b\u64ca\uff0c\u9032\u800c\u52d2\u7d22\u8a72\u4f01\u696d\uff0c\u82e5\u4e0d\u4ed8\u8d16\u91d1\u5c31\u6703\u516c\u5e03\u6a5f\u5bc6\u8cc7\u8a0a\u7684\u65b9\u5f0f\uff0c\u8b93\u5404\u500b\u5927\u4f01\u696d\u4e56\u4e56\u5c31\u7bc4\u3002 \u00a0 \u5927\u4f01\u696d\u90fd\u5c0d\u52d2\u7d22\u75c5\u6bd2\u505a\u4e86\u9632\u8b77? \u65e2\u7136\u5404\u5927\u4f01\u696d\u90fd\u5c0d\u52d2\u7d22\u75c5\u6bd2\u505a\u4e86\u9632\u8b77\uff0c\u90a3\u52d2\u7d22\u75c5\u6bd2\u5230\u5e95\u662f\u5982\u4f55\u9032\u5165\u4f01\u696d\u7684\u74b0\u5883\u5462?\u5230\u5e95\u662f\u5982\u4f55\u7a81\u7834\u4f01\u696d\u7684\u9632\u8b77\uff0c\u96e3\u9053\u662f\u9632\u6bd2\u8207\u9632Spam\u7684\u6a5f\u5236\u51fa\u4e86\u554f\u984c\u55ce?\u6211\u5011\u7d71\u8a08\u8fd1\u5e7e\u5e74\u4e0a\u767e\u96bb\u7684Ransomware\uff0c\u505a\u4e86\u5206\u7fa4\u6b78\u985e\uff0c\u7814\u7a76\u52d2\u7d22\u75c5\u6bd2\u7684\u653b\u64ca\u65b9\u5f0f\u8207\u884c\u70ba\uff0c\u5927\u81f4\u5206\u70ba Targeted Ransomware DLL Injector \u7121\u6a94\u6848\u5f0f\u653b\u64ca(Fileless) APT\u653b\u64ca\u65b9\u5f0f \u5bb0\u6bba\u9632\u6bd2\u8207\u5099\u4efd\u6a94\u6848 \u5229\u7528\u7cfb\u7d71\u767d\u540d\u55ae\u9032\u884c\u60e1\u610f\u884c\u70ba \u9019\u4e9b\u653b\u64ca\u6a21\u5f0f\u5f80\u5f80\u7121\u6cd5\u53ea\u9760\u55ae\u7d14\u7684\u9632\u6bd2\u8207Anti-Spam\u662f\u7121\u6cd5\u9632\u7bc4\u7684\u3002\u4e14\u9664\u4e86\u4e0a\u8ff0\u7684\u653b\u64ca\u65b9\u5f0f\u5916\uff0c\u4eba\u54e1\u5f80\u5f80\u662f\u5728\u8cc7\u8a0a\u5b89\u5168\u6700\u91cd\u8981\u7684\u4e00\u74b0\uff0c\u99ed\u5ba2\u4e5f\u6700\u5e38\u4f7f\u7528\u793e\u4ea4\u5de5\u7a0b\u7684\u65b9\u5f0f\uff0c\u900f\u904eMail\u593e\u5e36\u60e1\u610f\u9023\u7d50\u6216\u662f\u6a94\u6848\uff0c\u8b93\u9632\u6bd2\u8207Anti-Spam\u5075\u6e2c\u4e0d\u51fa\u4f86\u9032\u884c\u653b\u64ca\uff0c\u518d\u914d\u5408\u4e0a\u8ff0\u7684\u653b\u64ca\u65b9\u5f0f\uff0c\u8f15\u6613\u7684\u88fd\u9020\u4f01\u696d\u5167\u7684\u5f8c\u9580\u6f0f\u6d1e\uff0c\u9032\u800c\u8b93\u52d2\u7d22\u75c5\u6bd2\u53ef\u4ee5\u5927\u8086\u7684\u5165\u4fb5\u3002 \u00a0 Mail\u793e\u4ea4\u5de5\u7a0b\u4f86\u770b\uff0c\u99ed\u5ba2\u5f80\u5f80\u6703\u5bc4\u767c\u91e3\u9b5a\u4fe1\u4ef6 \u6211\u5011\u5c31\u5f9eMail\u793e\u4ea4\u5de5\u7a0b\u4f86\u770b\uff0c\u99ed\u5ba2\u5f80\u5f80\u6703\u5bc4\u767c\u91e3\u9b5a\u4fe1\u4ef6\u4f86\u5230\u5404\u5927\u4f01\u696d\u7684\u4fe1\u7bb1\uff0c\u800c\u9019\u4e9bMail\u5f80\u5f80\u90fd\u6703\u593e\u5e36\u9644\u4ef6\u6216\u662f\u5728\u5167\u6587\u4e2d\u5d4c\u5165\u60e1\u610f\u9023\u7d50\uff0c\u800c\u9019\u4e9b\u9644\u4ef6\u5df2\u7d93\u4e0d\u662f\u58d3\u7e2e\u6a94\u6216\u662f\u57f7\u884c\u6a94\u4e86\uff0c\u56e0\u70ba\u9019\u4e9b\u6a94\u6848\u90fd\u6703\u88abSpam\u8f15\u6613\u7684\u64cb\u4e0b\u4f86\uff0c\u800cMail\u9644\u4ef6\u5c31\u6703\u4ee5Office\u7684\u6a94\u6848\u70ba\u4e3b\uff0c\u800c\u9019\u4e9bOffice\u6a94\u6848\u770b\u4f3c\u7121\u5bb3\uff0c\u4f46\u53ea\u8981\u4f01\u696d\u9ede\u64ca\u6253\u958b\uff0c\u90a3\u5c31\u6703\u8b93\u99ed\u5ba2\u53ef\u4ee5\u76f4\u63a5\u690d\u5165\u5f8c\u9580\u3001\u75c5\u6bd2\u2026\u7b49\u3002\u800c\u9019\u4e9b\u99ed\u5ba2\u5230\u5e95\u5982\u4f55\u690d\u5165\u9019\u4e9b\u60e1\u610f\u9023\u7d50\u5462?\u5176\u5be6\u5f88\u7c21\u55ae\uff0c\u662f\u5229\u7528\u4e86Office Macro\u7684\u529f\u80fd\uff0cOffice Macro\u53ef\u4ee5\u5beb\u5165VBA\u7684\u7a0b\u5f0f\uff0cVBA\u7a0b\u5f0f\u53ef\u4ee5\u547c\u53ebPowerShell\u6216CMD\u4f86\u9032\u884c\u8a31\u591a\u7684\u653b\u64ca\u3002\u6700\u5e38\u898b\u7684\u624b\u6cd5\u662fVBA\u7a0b\u5f0f\u4e2d\uff0c\u547c\u53ebPowerShell\u6216CMD\uff0c\u5728PowerShell\u6216CMD\u7684\u6307\u4ee4\u4e2d\u9032\u884c\u6307\u4ee4\u6df7\u6dc6\uff0c\u6df7\u6dc6\u7684Code\u5c31\u662f\u5f9e\u7db2\u8def\u4e0a\u4e0b\u8f09\u5177\u6709\u60e1\u610f\u653b\u64ca\u7684PS1\u8173\u672c\uff0c\u800c\u9019\u4e9b\u8173\u672c\u5167\u5bb9\u7576\u7136\u4e5f\u9032\u884c\u4e86\u591a\u5c64\u7684\u6df7\u6dc6\uff0c\u9019\u4e9b\u8173\u672c\u900f\u904ePowerShell\u7684\u6307\u4ee4\u76f4\u63a5\u9032\u5165\u96fb\u8166\u4e2d\u7684\u8a18\u61b6\u9ad4\u57f7\u884c\uff0c\u904e\u7a0b\u4e2d\u4e0d\u6b98\u7559\u4efb\u4f55\u7684\u6a94\u6848\uff0c\u9019\u7a2e\u653b\u64ca\u65b9\u5f0f\u5c31\u662f\u300c\u7121\u6a94\u6848\u5f0f\u653b\u64ca\u300d\u3002 \u800c\u8173\u672c\u7684\u653b\u64ca\u5167\u5bb9\u5927\u81f4\u5206\u70ba3\u5927\u985e\uff0c\u7b2c\u4e00\u76f4\u63a5\u5bb0\u6bba\u8a72\u96fb\u8166\u7684\u9632\u8b77\u6a5f\u5236(\u9632\u6bd2)\uff0c\u7b2c\u4e8c\u522a\u9664\u8a72\u96fb\u8166\u4e2d\u6240\u6709\u7684\u5099\u4efd\uff0c\u7b2c\u4e09\u4e0b\u8f09Ransomware\u75c5\u6bd2\u76f4\u63a5\u9032\u884c\u52a0\u5bc6\u8207\u7aca\u53d6\u3002\u9019\u4e9b\u8173\u672c\u662f\u5229\u7528Windows\u7684\u7a0b\u5f0f(\u4e00\u822c\u7a31\u70ba\u767d\u540d\u55ae)\uff0c\u4f8b\u5982:vssadmin.exe\u3001wmic.exe\u3001bcdedit.exe\u3001taskkill.exe\u7b49\u7b49\uff0c\u7528\u9019\u4e9bWindows\u7a0b\u5f0f\u505a\u653b\u64ca\u65b9\u5f0f\uff0c\u751a\u81f3\u66f4\u9ad8\u6df1\u7684Ransomware\u6703\u4f7f\u7528\u5230DLL Injector\u6280\u8853\uff0c\u76f4\u63a5\u6ce8\u5165\u5230\u9019\u4e9b\u7a0b\u5f0f\u4e2d\uff0c\u6700\u77e5\u540d\u7684\u4f8b\u5b50\u5c31\u662fNetwalker Ransomware\uff0c\u9019\u652f\u75c5\u6bd2\u662f\u76f4\u63a5DLL Injector\u5230Explorer.exe\u4e2d\uff0c\u900f\u904eExplorer\u9032\u884c\u7aca\u53d6\u52a0\u5bc6\uff0c\u7531\u65bcExplorer.exe\u662f\u4e00\u822c\u4f01\u696d\u4e0d\u80fd\u4e5f\u4e0d\u6703\u963b\u64cb\u7684\u61c9\u7528\u7a0b\u5f0f\uff0c\u525b\u597d\u99ed\u5ba2\u5c31\u5229\u7528\u9019\u9ede\u76f4\u63a5DLL Injector\u5230Explorer.exe\u3002 \u00a0 \u5728\u9762\u5c0d\u591a\u6a23\u5316\u7684\u52d2\u7d22\u75c5\u6bd2\u5a01\u8105\u8981\u5982\u4f55\u9632\u8b77\u5462? \u73fe\u4eca\u5f9e\u52d2\u7d22\u75c5\u6bd2\u7684\u653b\u64ca\u65b9\u5f0f\u8457\u624b\uff0c\u52d2\u7d22\u75c5\u6bd2\u9032\u5165\u516c\u53f8\u5167\u90e8\u7cfb\u7d71\u5f8c\u6240\u7522\u751f\u7684\u884c\u70ba\uff0c\u5982\u540c\u4e0a\u8ff0\u7684Targeted Ransomware DLL Injector\u3001\u7121\u6a94\u6848\u5f0f\u653b\u64ca(Fileless)\u3001APT\u653b\u64ca\u65b9\u5f0f\u3001\u5bb0\u6bba\u9632\u6bd2\u8207\u5099\u4efd\u6a94\u6848\u3001\u5229\u7528\u7cfb\u7d71\u767d\u540d\u55ae\u9032\u884c\u60e1\u610f\u884c\u70ba\u2026\u7b49\u3002\u8981\u963b\u64cb\u9019\u4e9b\u60e1\u610f\u7684\u653b\u64ca\u65b9\u5f0f\uff0c\u53ef\u4ee5\u4f7f\u7528X-FORT\u7684\u61c9\u7528\u7a0b\u5f0f\u63a7\u7ba1\u6a5f\u5236\uff0c\u53ea\u6709\u4e86\u89e3Ransomware\u653b\u64ca\u8207\u767c\u4f5c\u7684\u6a21\u5f0f\uff0c\u5f9e\u4e2d\u9032\u884c\u963b\u65b7\uff0c\u624d\u6709\u8fa6\u6cd5\u963b\u64cb\u60e1\u610f\u7a0b\u5f0f\uff0c\u5c31\u7b97Ransomware\u9032\u5165\u5230\u96fb\u8166\u4e2d\uff0c\u4e5f\u6703\u56e0\u70baX-FORT\u7684\u61c9\u7528\u7a0b\u5f0f\u63a7\u7ba1\u6a5f\u5236\uff0c\u8b93Ransomware\u7121\u6cd5\u767c\u4f5c\u653b\u64ca\uff0c\u4ee5\u5927\u5e45\u9054\u5230\u9810\u9632\u7684\u6548\u679c\uff0c\u751a\u81f3\u642d\u914dFAC(\u8cc7\u6599\u593e\u9632\u8b77)\u8207\u5b89\u5168\u5099\u4efd\u7684\u529f\u80fd\uff0c\u8cc7\u6599\u80fd\u5b8c\u5168\u4fdd\u8b77\u4f4f\uff0c\u8b93\u4f01\u696d\u9054\u5230\u9810\u9632\u3001\u6b62\u707d\u7684\u6548\u679c\u3002","og_url":"https:\/\/v2catalog.com\/zh\/\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69-\u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528fac\/","og_site_name":"V2Catalog","article_published_time":"2021-06-15T09:59:57+00:00","author":"tracylamv2","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"tracylamv2"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/v2catalog.com\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/#article","isPartOf":{"@id":"https:\/\/v2catalog.com\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/"},"author":{"name":"tracylamv2","@id":"https:\/\/v2catalog.com\/#\/schema\/person\/949d980888460b8203c48a6e6c719cca"},"headline":"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77","datePublished":"2021-06-15T09:59:57+00:00","mainEntityOfPage":{"@id":"https:\/\/v2catalog.com\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/"},"wordCount":89,"keywords":["\u7cbe\u54c1\u79d1\u6280","FineArt","X-Fort"],"articleSection":["2021","Press Release","Version 2 Limited","X-Fort"],"inLanguage":"zh-HK"},{"@type":"WebPage","@id":"https:\/\/v2catalog.com\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/","url":"https:\/\/v2catalog.com\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/","name":"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77 - V2Catalog","isPartOf":{"@id":"https:\/\/v2catalog.com\/#website"},"datePublished":"2021-06-15T09:59:57+00:00","author":{"@id":"https:\/\/v2catalog.com\/#\/schema\/person\/949d980888460b8203c48a6e6c719cca"},"breadcrumb":{"@id":"https:\/\/v2catalog.com\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/#breadcrumb"},"inLanguage":"zh-HK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/v2catalog.com\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/v2catalog.com\/%e5%bf%ab%e7%82%ba%e9%9b%bb%e8%85%a6%e7%9a%84%e9%87%8d%e8%a6%81%e6%aa%94%e6%a1%88%e6%88%b4%e4%b8%8a%e5%8f%a3%e7%bd%a9-%e9%98%b2%e7%af%84%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e5%b0%b1%e7%94%a8fac\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/v2catalog.com\/"},{"@type":"ListItem","position":2,"name":"\u5feb\u70ba\u96fb\u8166\u7684\u91cd\u8981\u6a94\u6848\u6234\u4e0a\u53e3\u7f69 \u9632\u7bc4\u52d2\u7d22\u75c5\u6bd2\u5c31\u7528FAC\u8cc7\u6599\u593e\u9632\u8b77"}]},{"@type":"WebSite","@id":"https:\/\/v2catalog.com\/#website","url":"https:\/\/v2catalog.com\/","name":"V2Catalog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/v2catalog.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-HK"},{"@type":"Person","@id":"https:\/\/v2catalog.com\/#\/schema\/person\/949d980888460b8203c48a6e6c719cca","name":"tracylamv2","image":{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","caption":"tracylamv2"},"url":"https:\/\/v2catalog.com\/zh\/author\/tracylamv2\/"}]}},"jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/posts\/34448","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/users\/148019288"}],"replies":[{"embeddable":true,"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/comments?post=34448"}],"version-history":[{"count":0,"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/posts\/34448\/revisions"}],"wp:attachment":[{"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/media?parent=34448"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/categories?post=34448"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/v2catalog.com\/zh\/wp-json\/wp\/v2\/tags?post=34448"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}