GA»Æ½ð¼×

¡°¼«¼ò¡±»ÀР¡¤ È«ÓòÖÇÁª Ø­ GA»Æ½ð¼×м«¼òÁ캽ÏÂÒ»´úÐ£Ô°Íø½¨Éè×êÑлá
date
Ô¤Ô¼Ö±²¥
ÎÞ¸Ð×¼Èë ÈËÎïͳ¹Ü Ø­ RG-SAM+5.X ÐÂÒ»´ú¸ßУAIÈÏ֤ƽ̨°ä²¼
date
Ô¤Ô¼Ö±²¥
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·
½â¾ö¹æ»®
< ·µ»ØÖ÷²Ëµ¥
½â¾ö¹æ»®ÖÐÐÄ
ÐÐÒµ
ºÏ×÷ͬ°é
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/˵»°
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

°²È«Ó¦¼±|Ó×ÐÄÒ»¸öÁ´½ÓÈÃÄãµÄϵͳÀ¶ÆÁ£¡

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ °ä²¼¹¦·ò£º2021-01-25
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

½üÈÕ £¬GA»Æ½ð¼×ÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶÓ×·×Ùµ½Ò»ÔòWindows 10 condrv.sys´æÔÚÄÚ´æ°Ü»µ·ì϶µÄÐÅÏ¢ £¬¸Ã·ì϶ֱ½Óµ¼ÖÂWin10ϵͳÀ¶ÆÁ¡£¸Ã·ì϶ÊÇÓÉÓÚWindows 10ÖÐcondrvÇý¶¯ÉèÖÃÃýÎóµ¼ÖµÄ¡£ µ±Chrome »òEdgeä¯ÀÀÆ÷ÔÚ´ò¿ªÌض¨Á´½Óʱ £¬¸ÕºÃŲÓÃÁ˸ÃÇý¶¯µÄÏàÓ¦º¯Êý £¬¶øIEûÓÐŲÓà £¬Òò¶øIE²»»áÊÜÓ°Ïì¡£Áí±í £¬¹¥»÷Õß¿ÉÄÜÖ±½Ó»ú¹Ø¶ñÒâ´úÂëÖ±½ÓŲÓôæÔÚ·ì϶µÄº¯Êý £¬ÈôÊÇÓû§µã»÷¾Í»á´¥·¢·ì϶¡¢µ¼ÖÂÀ¶ÆÁ¡£

 

ÀûÓôó¾Ö

 
 

½Ó¼ûÁ´½Ó\\.\globalroot\device\condrv\kernelconnect»á´¥·¢À¶ÆÁ¡£

 

´¥·¢²½Öè

 
  • ÓÃä¯ÀÀÆ÷½Ó¼û£º

file://\\.\globalroot\device\condrv\kernelconnect

  • ÓÃÒ»¸ö¿ì½Ý·½Ê½Ö¸Ïò£º

\\.\globalroot\device\condrv\kernelconnect

  • ÍøÒ³¹¥»÷£º

 

ÀýÈça±êÇ©

<a href="file://\\.\globalroot\device\condrv\kernelconnect"></a>

<script>document.location = '\\\\.\\globalroot\\device\\condrv\\kernelconnect';</script>

 

ÒÔ¼°JavaScript¾ç±¾¡£

 

  •  Î¢ÐÅȺ¶ñÒâÓû§´«²¼ÃûΪtest.urlÎļþ,ÔÚ΢ÐÅ¿ªÆô×Ô¶¯ÏÂÔØÖ°ÄܺóÎļþ±»½Ó¹Üµ¼ÖµçÄÔ¼´À¶ÆÁ

     

 

 

  1. ½Ó¼û¸ÃÎļþ¼Ð¼´À¶ÆÁ(urlÎļþ»á×Ô¶¯ÒªÇóÎļþͼ±ê¶ø¼ÓÔØ\\.\gxxx

  2. µã»÷´ò¿ª¼´À¶ÆÁ,ÎļþÄÚĬÈÏURLΪ\\.\gxxx

  3. µçÄÔ΢ÐÅ´ò¿ª¼´À¶ÆÁ,µçÄÔ΢ÐÅĬÈÏʹÓÃÁË΢Ðŵ±Ç°Ä¿Â¼ÏÂwechatweb.exeÎļþ¶ÔWebÄÚÈݽøÐмÓÔØ,¶ø¸ÃexeÖ÷ÌâÔòÊÇÓÉQQä¯ÀÀÆ÷ÑÝ±ä¶øÀ´,¶øQQä¯ÀÀÆ÷ÄÚºËÓÖÊÇѡȡµÄchromeÄÚºË,ËùÒÔ΢ÐŶ˴ò¿ª¼´À¶ÆÁ

 

Ó°ÏìÁìÓò

 
 

ĿǰÊÜÓ°ÏìµÄ²Ù×÷ϵͳ°æ±¾£ºWindows 10.1709¼°ÒÔÉÏϵͳ

 

 

´¦Öù滮

 
 

¹Ù·½½¨¸´½¨Òé

 

¸Ã·ì϶µ±Ç°ÔÝÎÞ¹Ù·½½â¾ö¹æ»®¡£

 

²úÆ·µ±Ç°¹Ù·½ÔÝδ°ä²¼ÊÜÓ°Ïì°æ±¾µÄ¶ÔÓ¦²¹¶¡ £¬½¨ÒéÊÜÓ°ÏìµÄÓû§ÊµÊ±¹Ø×¢¸üйٷ½µÄ°²È«²¹¶¡£¨ÊµÊ±¸üÐÂÉý¼¶µ½×îа汾£©¡£Á´½ÓÈçÏ£º

https://www.microsoft.com/zh-cn/software-download/windows10

 

GA»Æ½ð¼×ÍøÂ罨¸´½¨Òé

 

²úÆ·

×¢Ã÷

RG-WALLϵÁÐÏÂÒ»´ú·À»ðǽ

ÏÂÒ»´ú·À»ðǽ½áºÏ·À²¡¶¾ÒÔ¼°Íþвµý±¨¼ì²â¡£ÔÚ°²È«ÄÜÁ¦ÉÏ £¬²»½öÖ§³ÖNAT¡¢ACL¡¢DDoS·ÀÓùµÈ´«Í³°²È«Ö°ÄÜ £¬Ò²Ö§³Ö·á˶µÄÀûÓü¶°²È«Ö°ÄÜ £¬Ô̺¬²¡¶¾²éɱ¡¢ÈëÇÖ¼ì²â¡¢APP¼ì²â¡¢Îļþ¹ýÂË¡¢¶ñÒâURL¹ýÂ˵È¡£Ìṩ¶àά¶ÈµÄÀûÓòã¼à¿ØÓë·ÖÎö £¬Ô®ÊÖÓû§°ÑÎÕ·çÏÕ £¬¾«×¼Ô¤¾¯¡£

RG-IDPϵÁÐÈëÇÖ¼ì²â·ÀÓùϵͳ

ÊÇGA»Æ½ð¼×ÍøÂçÍÆ³öµÄ½«Éî¶ÈÄÚÈݼì²â¡¢°²È«·À»¤¡¢ÉÏÍøÐÐΪÖÎÀíµÈ¼¼Êõ½áºÏµÄÈëÇÖ¼ì²â·ÀÓùϵͳÉ豸¡£Í¨¹ý¶ÔÍøÂçÖÐÉî²ã¹¥»÷ÐÐΪ½øÐÐÕýÈ·µÄ·ÖÎöÅжÏ £¬×Ô¶¯ÓÐЧµÄ± £»¤ÍøÂ簲ȫ¡£¹²Í¬ÊµÊ±¸üеÄÈëÇÖ¹¥»÷ÌØµã¿â £¬¿É¼ì²â·À»¤3500ÖÖÒÔÉϵÄÍøÂç¹¥»÷ÐÐΪ £¬Ô̺¬DoS/DDoS¡¢²¡¶¾¡¢È䳿¡¢½©Ê¬ÍøÂ硢ľÂí¡¢¿ÉÒÉ´úÂ롢̽²âÓëɨÃèµÈ¸÷ÀàÍøÂçÍþв¡£

 

°²È«½¨Òé

 

  • ²»Òª´ò¿ªÄ°ÉúÍøÒ³ £¬ÈôÊDz»ÓÃÒª½¨Òé²»ÈÝJavaScript¡£

  • ²»Òª´ò¿ªÄ°Éú·¨Ê½ £¬ÖÕ¶Ë×°Ö÷À»¤Èí¼þ¡£

  • ²»ÒªÇáÒ×ÏÂÔØ×°ÖÃÆðÔ´²»Ã÷µÄÈí¼þ £¬Ô¤·ÀÓÐÈ˶ñÒâÀûÓô˷ì϶Ôì³É»Ø¾ø·þÎñ¹¥»÷¡£

  • ¶Ô²»Ã÷À´ÀúµÄÓʼþ¡¢officeµÈÌá¸ß¾¯Ìè¡£

  • ¾¯Ìè²»Ã÷À´ÀúѹËõÎļþ £¬ÎªÁËÈÃÊܺ¦ÕßÏÂÔØWindows¿ì½Ý·½Ê½(.url)Îļþ¡£¹¥»÷Õß»áͨ¹ýºýŪÓû§ÏÂÔØZIP¹éµµÎļþ £¬²¢½«¶ñÒâ×Ö·û´®°µ²ØÆäÖÐ £»µ±Óû§½âѹZIPÎļþʱ±ã»á´¥·¢¹¥»÷¡£

  • ʵʱ±¸·Ý³ÁÒªÎļþ £¬ÒÔÃâÎļþÃÔʧ¡£

 

ÍŶӽéÉÜ

 

GA»Æ½ð¼×ÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶÓ £¬¸ú×Ù×îл¥ÁªÍøÍþвÊÂÎñ £¬Õë¶Ô×îа²È«·ì϶ £¬APT¹¥»÷ÒÔ¼°½©Ê¬ÍøÂç¼Ò×å×öʵʱ¸ú×ٺͷÖÎö;Ϊ²úÆ·¡¢¿Í»§Ìṩʵʱ¡¢ÓÐЧµÄ°²È«·À»¤Õ½ÊõÓë½â¾ö¹æ»®¡£

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

 

GA»Æ½ð¼×“ÍøÂç+°²È«”Ö÷ÕŽ«ÍøÂçÉ豸µÄ°²È«ÄÜÁ¦³ä·Ö²ûÑï £¬ÍøÂçÉ豸¡¢°²È«É豸Ó밲ȫƽ̨ÖÇÄÜÁª¶¯ £¬ÎÕ±ð°²È«¹Âµº £¬×é³ÉÕûÍøÁª¶¯µÄ°²È«±£ÏÕϵͳ £¬ÊµÏÖ·À»¤¡¢°²È«Ô¤²â¡¢·ÖÎöºÍÏìÓ¦µÈ°²È«ÎÊÌâ×Ô¶¯»¯È«Á÷³Ì¹Ø»·¡£

 

GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

 

ÈçÄú±ØÒªGA»Æ½ð¼×°²È« £¬ÇëÁôÏÂÄúµÄÁªÏµ·½Ê½

¹Ø×¢GA»Æ½ð¼×
gfwx_logo
¹Ø×¢GA»Æ½ð¼×¹ÙÍøÎ¢ÐÅ
ËæÊ±Ïàʶ¹«Ë¾×îж¯Ì¬
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾

·µ»Ø¶¥²¿

ÊÕÆð
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ ÎĵµAI¸±ÊÖ
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾ ÎĵµÆÀ¼Û
ev-close
¸Ã×ÊÁÏÊÇ·ñ½â¾öÁËÄúµÄÎÊÌ⣿
ev-close
Äú¶Ôµ±Ç°Ò³ÃæµÄÖÐÒâ¶ÈÈôºÎ£¿
²»Õ¦µÎ
¼«¶ÈºÃ
dark-star dark-star dark-star dark-star dark-star
ev-close
ÄúÖÐÒâµÄÔ­ÒòÊÇ£¨¶àÑ¡£©£¿
ev-close
Äú²»ÖÐÒâµÄÔ­ÒòÊÇ£¨¶àÑ¡£©£¿
ev-close
ÄúÊÇ·ñ»¹ÓÐÆäËûÎÊÌâ»ò½¨Ò飿
ΪÁ˼±¾ç½â¾ö²¢»Ø¸´ÄúµÄÎÊÌâ £¬ÄúÄܹ»ÁôÏÂÁªÏµ·½Ê½
ÓÊÏä
ÊÖ»úºÅ
ev-bg
¸Ð¼¤ÄúµÄ·´À¡£¡
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
GA»Æ½ð¼×¡¤(Öйú¼¯ÍÅ)¹Ù·½ÍøÕ¾
ÇëÑ¡Ôñ·þÎñÏîÄ¿
¹Ø¹ØÕ÷ѯҳ
ÊÛǰÕ÷ѯ ÊÛǰÕ÷ѯ
ÊÛǰÕ÷ѯ
ÊÛºó·þÎñ ÊÛºó·þÎñ
ÊÛºó·þÎñ
¶¨¼û·´À¡ ¶¨¼û·´À¡
¶¨¼û·´À¡
¸ü¶àÁªÏµ·½Ê½
¡¾ÍøÕ¾µØÍ¼¡¿