?? > ???? > ??

?????????:???????????????????????

????:2025-01-17 20:53:29 ??:????

????:?????:????????????

??????????????1???????17??? ?????17?,??????????????

?

2024?12??????????????18??????,???????????CNCERT?(

???

(????)??????

2024?????8?19????????,???????????????????????????,??????????/????????????????????2024?????8?21?,?/??????????????????

(???????????????)??????

2024?8????????????????????21????????????????????????12????,??????,???????????,???,??????????????/xxx/xxxx?flag=syn_user_policy???,?????????????/xxx/xxxStats?

(??????????????)??????

2024????11?????????6??2024???????11?????????8?2024?????????????11??????????16???????????????,?276??????????????????????????????????????????????

????????????????????

(?????????????)?

??IP????????,??????,?,?????,??????????????

(?????)??

2024?11??????????????????????6??????????????????11??????????16????,?3???IP?,??????????????,??????,?????????????????????????????????,??????????,????????????????????????????????????????????4.98GB?

????????????????

(?)?????

?????????????????,???????????????22??????????????????????????????????8??????,??????????????10?????????20??,?,??????????????????

(?)????????

???????????????5??????????IP??????????????,?,??????

(??)??

??,????????????????????????????????,?????????????

????????,??,????????????????

(???)?

??????????,???????????????????,???????????,?276????,??????????????????,???????????????????

??????IP???????????????????????

???????

2024????12??????????????????????18?,??CNCERT????(

??????????????????????

(?????????????????)?

?Exchange??????2?Exchange????,?????????,?,??????

(?)???????????

??,??????????????2?,???????????????????????,??????????????,??????????????/owa/auth/xxx/xx.aspx????????????/owa/auth/xxx/yy.aspx,??????????????????????????????????????,??,?????

(?)??????????30????????????????

?,???????????????????,?,?SSH?SMB?30???????????????????????????;??????????????????????????,????????????????????????????????????????????????????????,???websocket+SSH???????,??????,?????????????WeChatxxxxxxxx.exe?????????2?PIPE??,?????????????????

??????????????????????????

(????)??????????????

?????,????????????????????????,????,???,?,????

(?)????????????

???3???????????????????????,?????????????????????????????????,2023????5??????????2??????,?????????(95.179.XX.XX)????????,?????????,???????????,?,???????????????�?????�?�??�?�???????????????????�?�???????(????+????)�?�???????????IP??�?�???????????????????????????�?????????????

(????)???????????????????

???????????????????????,???,2023????????????????????????7?26??????????????????????????,??????(65.21.XX.XX)??????,????????????????????????????,?,?????????????????????????????????,????1.03GB???,????????????????�?�???????????�tip4XXXXXXXX.php�?

(?????)???

?????????,?,?,????????????????????????????SSH????????????,?,???????????????

??????????

(?????????)?????????

??????????????????,???????22????8??????,?10?????20??????????????,?,????????????

(???????????)???????????????????????????

2023?5???????????????2023?????10??????????????????????????????,????30?,???????????????IP????????????,?????????

(?????)???

?????????????2????????????????PIPE????????????�c:\windows\system32\�?,?.net??????????,??????,?KB,?????TLS???????????????????????????????,??https?????????????????????,??????websocket+SSH?,???????????????????????

??????????????????????????IP?

??:?????

????

  • ????
  • ????