2024.01.13 보안 이슈

==2024.01.13==

# 취약점 / 악성코드 

- JUNIPER NETWORKS FIXED A CRITICAL RCE BUG IN ITS FIREWALLS AND SWITCHES

https://securityaffairs.com/157373/security/juniper-networks-rce-cve-2024-21591.html

- Orange Spain Faces BGP Traffic Hijack After RIPE Account Hacked by Malware

https://thehackernews.com/2024/01/orange-spain-faces-bgp-traffic-hijack.html

- Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

https://thehackernews.com/2024/01/act-now-cisa-flags-active-exploitation.html

- Urgent: GitLab Releases Patch for Critical Vulnerabilities - Update ASAP

https://thehackernews.com/2024/01/urgent-gitlab-releases-patch-for.html

- 윈도 환경에서 DLL을 로딩하는 새로운 기법 발견돼

https://www.boannews.com/media/view.asp?idx=125355&page=20&kind=1

- 아파치 스트럿츠 2 원격 코드 실행 취약점 발견... 악성파일 업로드 가능

https://www.boannews.com/media/view.asp?idx=125371&page=19&kind=1

- 미국의 CISA, 크롬과 펄에서 발견된 취약점에 대한 새로운 경고 발표

https://www.boannews.com/media/view.asp?idx=125447&page=16&kind=1

- 해커들, 유튜브 계정 침해한 후 루마스틸러 퍼트린다

https://www.boannews.com/media/view.asp?idx=125567&page=9&kind=1

https://thehackernews.com/2024/01/beware-youtube-videos-promoting-cracked.html

- 어나니머스아라빅, 여러 해킹 포럼과 텔레그램에서 멀웨어 풀어

https://www.boannews.com/media/view.asp?idx=125568&page=9&kind=1

https://thehackernews.com/2024/01/syrian-hackers-distributing-stealthy-c.html

- [긴급] 성인 게임 실행 파일로 위장한 ‘악성코드’ 주의보

https://www.boannews.com/media/view.asp?idx=125599&page=8&kind=1

- 중국 정부, 에어드랍마저 해킹하는 데 성공했다고 주장

https://www.boannews.com/media/view.asp?idx=125605&page=7&kind=1

https://www.bleepingcomputer.com/news/security/china-claims-it-cracked-apples-airdrop-to-find-numbers-email-addresses/

- 하둡얀과 플링크 서버 공략해 암호화폐 채굴하려는 공격자들, 실력은 수준급

https://www.boannews.com/media/view.asp?idx=125664&page=5&kind=1

https://thehackernews.com/2024/01/cryptominers-targeting-misconfigured.html

- 미라이의 새 변종 노아봇, 사물인터넷 봇넷 만들어 암호화폐 채굴

https://www.boannews.com/media/view.asp?idx=125693&page=3&kind=1

- 피카봇 멀웨어, 칵봇이 사라진 자리에 나타나 칵봇을 계승하려 하다

https://www.boannews.com/media/view.asp?idx=125728&page=1&kind=1

https://www.boannews.com/media/view.asp?idx=125607&page=7&kind=1

https://thehackernews.com/2024/01/alert-water-curupira-hackers-actively.html

# 국가지원 해킹그룹

- North Korea's Cyber Heist: DPRK Hackers Stole $600 Million in Cryptocurrency in 2023

https://thehackernews.com/2024/01/north-koreas-cyber-heist-dprk-hackers.html

- Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

https://thehackernews.com/2024/01/nation-state-actors-weaponize-ivanti.html

https://thehackernews.com/2024/01/chinese-hackers-exploit-zero-day-flaws.html

- 북한 해커조직 김수키가 보낸 스피어피싱 메일, 4명 중 1명은 ‘회신’

https://www.boannews.com/media/view.asp?idx=125406&page=17&kind=1

- Pro-Ukraine hackers breach Russian ISP in revenge for KyivStar attack

https://www.bleepingcomputer.com/news/security/pro-ukraine-hackers-breach-russian-isp-in-revenge-for-kyivstar-attack/

- 러시아, 우크라이나의 대형 통신사들 안에서 수개월 째 작전 수행 중

https://www.boannews.com/media/view.asp?idx=125489&page=13&kind=4

https://thehackernews.com/2024/01/russian-hackers-had-covert-access-to.html

- 북한 김수키 해킹그룹의 유형별 스피어피싱 공격사례 분석해 보니

https://www.boannews.com/media/view.asp?idx=125415&page=12&kind=1

- 네덜란드의 IT 업체 및 통신사 침해한 터키의 시터틀

https://www.boannews.com/media/view.asp?idx=125526&page=11&kind=1

https://www.bleepingcomputer.com/news/security/turkish-hackers-sea-turtle-expand-attacks-to-dutch-isps-telcos/

- 북한의 사이버 공격 단체, 스펙트럴블러라는 맥OS용 멀웨어 개발해 등장

https://www.boannews.com/media/view.asp?idx=125529&page=11&kind=1

https://thehackernews.com/2024/01/spectralblur-new-macos-backdoor-threat.html

# 랜섬웨어 / 정보유출

- 2030 커플의 데이팅코스 앱 ‘데이트팝’, 해킹으로 개인정보 유출

https://www.boannews.com/media/view.asp?idx=125433&page=1&kind=1

- 정체 불명의 해커, 이란 주요 기업들로부터 수억 건 데이터 유출시켜

https://www.boannews.com/media/view.asp?idx=125413&page=17&kind=1

- 랜섬웨어 그룹 블랙캣, 스위스 군 기밀 빼돌리는 데 성공

https://www.boannews.com/media/view.asp?idx=125569&page=9&kind=1

- 인도의 대형 통신사 해스웨이로부터 400만 사용자 개인정보 유출돼

https://www.boannews.com/media/view.asp?idx=125604&page=7&kind=1

- 브라질 전체 인구의 개인정보 유출되었을 가능성 높아

https://www.boannews.com/media/view.asp?idx=125603&page=7&kind=1

# 다크웹 / OSINT / 계정 / 피싱

- 사이버 금융범죄, 절반 이상이 메신저 피싱 54.83%

https://www.boannews.com/media/view.asp?idx=125417&page=1&kind=2

- SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails

https://thehackernews.com/2024/01/smtp-smuggling-new-threat-enables.html

- 영국 핵 폐기물 관리 시스템 겨냥한 사이버 공격, 링크드인 통해 진행

https://www.boannews.com/media/view.asp?idx=125412&page=17&kind=1

- 가짜뉴스 살포하려는 이들, 다크웹에서 트위터 골드 계정 거래 활발히 진행

https://www.boannews.com/media/view.asp?idx=125445&page=16&kind=1

- 보안 업체 맨디언트의 트위터 계정 침해한 공격자, 암호화폐 사기 시도

https://www.boannews.com/media/view.asp?idx=125446&page=16&kind=1

https://thehackernews.com/2024/01/mandiants-x-account-was-hacked-using.html

- 크리덴셜 스터핑, 전체 보호 대상 트래픽의 19.4% 차지

https://www.boannews.com/media/view.asp?idx=125566&page=9&kind=3

- 부킹닷컴, 해커 표적 됐나... 호텔 직원 대상 로그인 계정 탈취 시도

https://www.boannews.com/media/view.asp?idx=125577&page=9&kind=1

- 미국 증권거래위원회 공식 엑스 계정 침해 당해 비트코인 가격 올라

https://www.boannews.com/media/view.asp?idx=125602&page=7&kind=1

- 엔씨소프트 신작 게임 TL, 크리덴셜 스터핑 공격으로 일부 이용자 계정과 게임머니 탈취

https://www.boannews.com/media/view.asp?idx=125617&page=7&kind=1

- 전자세금계산서 발급? 국세청 사칭 이메일·문자메시지 유포

https://www.boannews.com/media/view.asp?idx=125626&page=6&kind=2

#AI 

- [아시아경제] 양자화로 AI 압축…손안의 AI기기 핵심도 ‘SW’

https://view.asiae.co.kr/article/2024010517294220220

- [연합뉴스] 中 "'생성형 AI' 직접 생성 자료, 과학연구성과로 제출 불가"

https://www.yna.co.kr/view/AKR20240104078100083?input=1195m

- [디지털데일리] 美대법원장 "AI 판사 등판? 아직 시기상조"… '환각현상' 등 부작용 경고

https://www.ddaily.co.kr/page/view/2024010211392946921

- 인공지능 기반 피싱 공격 도구, 연말연시 맞아 할인되고 있어

https://www.boannews.com/media/view.asp?idx=125523&page=11&kind=1

- [테크칼럼] 초거대 언어 모델의 보안위협과 설명가능한 인공지능의 역할

https://www.boannews.com/media/view.asp?idx=125142&page=11&kind=5

- 인공지능은 우리를 편하게 해주는 게 아니라 경쟁을 심화한다

https://www.boannews.com/media/view.asp?idx=125621&page=3&kind=4

- 오픈AI의 새로운 GPT 스토어, 데이터 보안 문제 해결했을까?

https://www.boannews.com/media/view.asp?idx=125727&page=2&kind=1

# 공급망

- 'everything' blocks devs from removing their own npm packages

https://www.bleepingcomputer.com/news/security/everything-blocks-devs-from-removing-their-own-npm-packages/

- Beware: 3 Malicious PyPI Packages Found Targeting Linux with Crypto Miners

https://thehackernews.com/2024/01/beware-3-malicious-pypi-packages-found.html

- Three Ways To Supercharge Your Software Supply Chain Security

https://thehackernews.com/2024/01/three-ways-to-supercharge-your-software.html

- 스프레드시트 파스엑셀에서 임의 코드 실행 취약점 발견

https://www.boannews.com/media/view.asp?idx=125530&page=11&kind=1

# 클라우드 

- [블로터] AWS·MS·구글, 공공 클라우드 진출 좌초되나…CSAP 하등급에도 포함된 '국정원 요구'

https://n.news.naver.com/mnews/article/293/0000050345?sid=105

- 6년 넘게 클라우드 전체 공개 해놓고 운영한 게임사

https://www.boannews.com/media/view.asp?idx=125356&page=20&kind=1

- 에프봇, 은밀히 움직이며 클라우드와 지불 서비스 노려

https://www.boannews.com/media/view.asp?idx=125694&page=3&kind=1

https://thehackernews.com/2024/01/new-python-based-fbot-hacking-toolkit.html

- 미국 학교들의 안전 수칙과 대피 방법, 클라우드 설정 오류로 대거 노출돼

https://www.boannews.com/media/view.asp?idx=125692&page=3&kind=1

# 기타

- 사이버 보안업계가 선정한 2024년 보안 위협 트렌드 TOP 5

https://www.boannews.com/media/view.asp?idx=125372&page=2&kind=3

- 2024년 보안의 핵심 키워드는 ‘AI·Zero Trust·Mesh·APT’

https://www.boannews.com/media/view.asp?idx=125367&page=1&kind=3

- [2024 보안 핫키워드-4] 신종 피싱 공격 등장과 공권력의 대응 강화 추세

https://www.boannews.com/media/view.asp?idx=124890&page=1&kind=1

- [2024 이메일 보안 리포트] 사이버 공격의 시작은 이메일로부터 시작된다

https://www.boannews.com/media/view.asp?idx=125259&page=1&kind=3

- 2024년에 주의 깊게 살펴야 할 인공지능 분야 트렌드

https://www.boannews.com/media/view.asp?idx=125181&page=1&kind=3

- 2024년, 인공지능과 데이터 과학 분야에서는 이런 직군이 ‘뜬다’

https://www.boannews.com/media/view.asp?idx=125182&page=1&kind=3

- Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks

https://thehackernews.com/2023/12/microsoft-disables-msix-app-installer.html

- 테슬라의 자율 주행 모드에 침해한 연구원들, ‘일론 모드’까지 드러내

https://www.boannews.com/media/view.asp?idx=125353&page=20&kind=1

- 한국은행, 새해 첫날 디도스 공격 받은 것으로 드러나

https://www.boannews.com/media/view.asp?idx=125407&page=17&kind=1

- 해킹된 IP 카메라 사생활 영상, 아직 텔레그램에 무방비 노출... 해결책은 없나

https://www.boannews.com/media/view.asp?idx=125360&page=17&kind=1

- 사이버 보안업계가 선정한 2024년 보안 위협 트렌드 TOP 5

https://www.boannews.com/media/view.asp?idx=125372&page=13&kind=3

- 사우디아라비아의 정부 부처, 민감 파일을 15개월 동안 노출시켜

https://www.boannews.com/media/view.asp?idx=125570&page=9&kind=1

- 윤 대통령이 망분리 제도 개선을 지시한 이유는? 데이터 공유·활용 중시 국가정책과 충돌

https://www.boannews.com/media/view.asp?idx=125654&page=4&kind=2

- 네이버와 삼성 등 유명 도메인 사칭한 ‘위장 도메인’ 공격 늘었다

https://www.boannews.com/media/view.asp?idx=125698&page=3&kind=3

- [주말판] 2024년 IT 업계가 목격하게 될 9가지 현상들

https://www.boannews.com/media/view.asp?idx=125619&page=2&kind=3