2024.02.17 보안 이슈

==2024.02.17==

# 취약점 / 악성코드 

- [긴급] 해커, 이반티 SSRF 취약점 악용해 650개 이상 기업들 공격…다수 한국 기업들도 피해

https://www.dailysecu.com/news/articleView.html?idxno=153513

- Ubuntu 'command-not-found' Tool Could Trick Users into Installing Rogue Packages

https://thehackernews.com/2024/02/ubuntu-command-not-found-tool-could.html

- Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation

https://thehackernews.com/2024/02/critical-exchange-server-flaw-cve-2024.html

- Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor

https://thehackernews.com/2024/02/russian-turla-hackers-target-polish.html

- 국내 리눅스 시스템 공격에 사용되는 블루셸 악성코드 유포

https://www.boannews.com/media/view.asp?idx=126612&page=9&kind=1

- RustDoor macOS Backdoor Targets Cryptocurrency Firms with Fake Job Offers

https://thehackernews.com/2024/02/rustdoor-macos-backdoor-targets.html

- 파일리스 방식으로 동작하는 리벤지 RAT 악성코드 유포중

https://www.boannews.com/media/view.asp?idx=126613&page=9&kind=1

- 라즈베리로빈, 갑자기 원데이 익스플로잇을 빠르게 탑재하기 시작하다

https://www.boannews.com/media/view.asp?idx=126627&page=8&kind=1

- 계속되는 이반티 제로데이 취약점 사태...이제는 DS로그 백도어 심겨

https://www.boannews.com/media/view.asp?idx=126665&page=7&kind=1

- 소리 없는 강자 글룹테바 멀웨어, 새로운 기능 덧입고 더 은밀해져

https://www.boannews.com/media/view.asp?idx=126666&page=7&kind=1

- MS의 아웃룩에서 발견된 모니커링크 취약점, 느낌표 하나로 해킹 끝

https://www.boannews.com/media/view.asp?idx=126710&page=6&kind=1

- 4개월 만에 나타난 범블비, 주로 미국 기업들 공략하고 있어

https://www.boannews.com/media/view.asp?idx=126711&page=6&kind=1

https://thehackernews.com/2024/02/bumblebee-malware-returns-with-new.html

- 다양한 페이로드를 퍼트리는 새로운 드로퍼 멀웨어, 틱택토

https://www.boannews.com/media/view.asp?idx=126749&page=3&kind=1

# 국가지원 해킹그룹

- 북한 해커, 대통령실 행정관의 네이버 메일을 어떻게 해킹했나

https://www.boannews.com/media/view.asp?idx=126671&page=7&kind=1

- 北, 불법 도박사이트 운영해 외화벌이... 국내 범죄조직도 개입

https://www.boannews.com/media/view.asp?idx=126676&page=7&kind=1

- 북한 해킹그룹 김수키, 국내 보안 프로그램 위장한 악성코드 유포

https://www.boannews.com/media/view.asp?idx=126703&page=6&kind=1

- 중국의 꾸준한 여론 조작 시도, 스스로를 피해자로 코스프레 해 보지만

https://www.boannews.com/media/view.asp?idx=126716&page=6&kind=1

# 랜섬웨어 / 정보유출

- CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

https://thehackernews.com/2024/02/cisa-warning-akira-ransomware.html

- 2024년 1월, 가장 많은 데이터를 유출한 랜섬웨어 공격그룹은?

https://www.boannews.com/media/view.asp?idx=126610&page=9&kind=1

# 다크웹 / OSINT / 계정 / 피싱

- 4 Ways Hackers use Social Engineering to Bypass MFA

https://thehackernews.com/2024/02/4-ways-hackers-use-social-engineering.html

- 대형 보험사 두 곳이 심스와핑 공격에 당하며 보안 실태에 대한 우려 깊어져

http://www.boannews.com/media/view.asp?idx=126589&kind=&sub_kind=

- Malicious 'SNS Sender' Script Abuses AWS for Bulk Smishing Attacks

https://thehackernews.com/2024/02/malicious-sns-sender-script-abuses-aws.html

- 프랑스인 3300만 명의 개인정보, 공격자들이 속인 건 단 한 명이었다

https://www.boannews.com/media/view.asp?idx=126628&page=8&kind=1

#AI 

- LLM 도입 전 고려해야 할 5가지 질문

https://www.itworld.co.kr/news/325394

- “다음 단어 예측 엔진” LLM 알고리즘의 이해

https://www.itworld.co.kr/news/325660

- Chinese Hackers Using Deepfakes in Advanced Mobile Banking Malware Attacks

https://thehackernews.com/2024/02/chinese-hackers-using-deepfakes-in.html

- 기업 내 ‘인공지능’ 도입 답보 상태, 40%는 여전히 ‘검토’ 단계

https://www.boannews.com/media/view.asp?idx=126706&page=6&kind=3

- 인공지능에 손대기 시작한 해킹 단체들, 시작은 미약하지만 끝은 창대할지도

https://www.boannews.com/media/view.asp?idx=126719&page=5&kind=1

https://thehackernews.com/2024/02/microsoft-openai-warn-of-nation-state.html

- 인공지능과 사이버 보안, 지금 중대한 갈림길에 서 있다

https://www.boannews.com/media/view.asp?idx=126724&page=3&kind=4

# 공급망

- 랜섬웨어 공격 한 번에 100곳이 넘는 병원이 마비된 루마니아

https://www.boannews.com/media/view.asp?idx=126668&page=7&kind=1

# 클라우드 

- How Nation-State Actors Target Your Business: New Research Exposes Major SaaS Vulnerabilities

https://thehackernews.com/2024/02/how-nation-state-actors-target-your.html

- 마이크로소프트 365 등 기업 클라우드 앱 노리는 캠페인 주의보

https://www.boannews.com/media/view.asp?idx=126631&page=8&kind=1

https://www.bleepingcomputer.com/news/security/ongoing-microsoft-azure-account-hijacking-campaign-targets-executives/

# 기타

- U.S. State Government Network Breached via Former Employee's Account

https://thehackernews.com/2024/02/us-state-government-network-breached.html

- 알뜰폰 개통 사이트의 본인인증 시스템 보안 구멍, 무엇이 원인이었나

https://www.boannews.com/media/view.asp?idx=126379&page=8&kind=1

- 점점 커지는 선박 해킹 위협... 공격 표면에 노출된 1,600개 이상 장치 발견

https://www.boannews.com/media/view.asp?idx=126635&page=2&kind=1

- 방글라데시 해커, 이스라엘 지원 이유로 한국은행 등 디도스 공격 감행했다

https://www.boannews.com/media/view.asp?idx=126784&page=1&kind=1