{"id":4562,"date":"2023-07-03T21:06:00","date_gmt":"2023-07-03T16:36:00","guid":{"rendered":"https:\/\/soroosheamniyat.ir\/?p=4562"},"modified":"2023-07-04T13:06:33","modified_gmt":"2023-07-04T08:36:33","slug":"%d8%a7%d9%be%d8%b1%d8%a7%d8%aa%d9%88%d8%b1%d9%87%d8%a7%db%8c-blackcat-%d8%af%d8%b1-%d8%ad%d8%a7%d9%84-%d8%aa%d9%88%d8%b2%db%8c%d8%b9-%db%8c%da%a9-%d8%a8%d8%a7%d8%ac%d8%a7%d9%81%d8%b2%d8%a7","status":"publish","type":"post","link":"https:\/\/soroosheamniyat.ir\/?p=4562","title":{"rendered":"\u0627\u067e\u0631\u0627\u062a\u0648\u0631\u0647\u0627\u06cc BlackCat \u062f\u0631 \u062d\u0627\u0644 \u062a\u0648\u0632\u06cc\u0639 \u06cc\u06a9 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 \u067e\u0646\u0647\u0627\u0646 \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 WinSCP \u0627\u0632 \u0637\u0631\u06cc\u0642 Malvertising"},"content":{"rendered":"
\n
\n
\n

?? ????? ??????? ?????? ????\u00a0 ???? ?????<\/a> ????? ????? ????? ?? ????????? [?]<\/a>BlackCat ?????? ??????? ?? ?? ???????? malvertising ???? ????? installer??? ???? ???????? ??????? ????? WinSCP ??????? ???????.<\/p>\n

?????? Trend Micro ?? ?????? ?? ???? ????? ????? ??? ?? ??? ???? ?????[?]<\/a>: \u00ab???????? ???? ?? ??????? ?? ???? ????? ?? ??????? ?? ???? ????? ?? ????????? ??? ?????????? ?????? ??????? ?????. ?? ??? ????? ????? ???? ?? ???? ?? ?? ?????? ????? WinSCP ??? ?? ?? ?????? ?????? ???????? ???? ?????? ???? ???.\u00bb<\/p>\n

[?]<\/a>Malvertising ?? ??????? ?? ????????? ??????? SEO[4]<\/a>\u00a0???? ?????? ??????? ?? ???? ??????? ?????? ????? ????. ??? ??????? ???? ????? ????????? ?? ????? ????? ?????? ??? ???? ????? ??????? ???? ?? ????? ????? ?????? ???? ? ???? ????? ????? ???? ??????? ?????? ?? ????? ???? ???.<\/p>\n

???? ??? ??? ?? ???????? ?? ?? ?? ?????? ??????????? ????? WinSCP ???? ?????? ??????? ????? ???? ????? ?? ??? ????? ?? ??? ???? ???? ?? Cobalt Strike Beacon[5]<\/a>\u00a0??? ?? ???? ?????? ???? ?? ?? ???? ??? ??? ???? ??????? ????????? ?? ???????? ?????? ????? AdFind ???? ????? ??? ???? ??? ??????? ??????.<\/p>\n

?????? ????? ??? ???? Cobalt Strike ????? ???? ?????? ?????? ?????? ???? ????? ???????? ????? (PowerView)? ???? ????? (PsExec)? ?????? ????????? ?????????? (KillAV BAT) ? ??????? ???????? ????? (?????? PuTTY Secure Copy) ???? ?????????? ???? ???????. ?????? ??????? ?? ????? ???? ????? ?????????[?]<\/a>\u00a0???? ???????? ????????? ?????? ?? ??????? ?? ???? Bring Your Own Vulnerable Driver ?? BYOVD[7]<\/a>\u00a0?????? ??? ???.<\/p>\n

?? ??? ?????? ???? ?? ???? ??? ???? ????? ?????? ????? ???? ??? ???? ????? ????? ???? ?? ???? ???????? ???? ??? ???? ???? ????? ?????????? post-exploitation ???? ? ???? ????? ?? ??????? ?? ???????? ????? ? ?????? ?? ??? ??? ????? AnyDesk ? ?????? ?????? ?? ??????? ???????? ??????? ?? ?????????? ????.<\/p>\n

Trend Micro ???: \u00ab????????? ???? ??? ????? ??? ?????? ???? ???????? ??? ???? ?? ??? ?????????? ????????? ??? ???? ???? ???????? ??????? ??????????? ????? ????? ????? ???? ??? ????? ?? ???????? ???? ????? ?????? ????? ????? ????? ? ???? ?? ????? ????? ???? ? ??????? ???? ?????.\u00bb<\/p>\n

\"\"<\/a><\/p>\n

??? ????? ????? ????? ?? ????? ????? ??? ?? ?? ?????? Google Ads ???? ????? ??????? ??????? ???????. ?? ?????? ????? ?????????? ?? ????? ???? ?? ??? ???[?]<\/a>\u00a0?? ?? ?? ????? ???????? ???? ??????? BATLOADER ??????? ?????? ?? ??? ???? ??? ????????? ????? ??????? ?????.<\/p>\n

?????? ???? ????? ?????? Avast ?? ??????? ?????? ???? ????????? ????? Akira ????? ???[?]<\/a>\u00a0?? ?? ???????? ??? ??? ?? ???????? ??? ?? ???? ?????? ????? ?? ????????? ??????? ????. Akira ?? ???? ????????? ?? ???? ???? ???? ??? ?? ?? ???? ????? ??? ??? ?? ????? ???? ???[??]<\/a>\u00a0?? ????????? ?????? ?? ??? ???? ???.<\/p>\n

?????? Avast ????????: \u00ab Akira ??? ????? ?? ????????? Conti v2 ???? ?? ???? ??? ?????????? ??? ???? ?? ????????? ??? ??????? ????? ?? ????? ??? ??? Conti ????? ?????????.\u00bb ??? ???? ???? ????? ???????? ???????? ??? ????????? ?? ??? ????.<\/p>\n

??????? Conti\/TrickBot? ?? ??? ?????? Gold Ulrick ?? ITG23? ?? ??? ?? ???? ?? ?? ???? ?? ??? ????????? ???? ???? ?? ???? ????? ????? ?? ???????? ????? ??[??]<\/a>. ??? ??? ???? ????? ?????????? ?? ?? ????? ?? ???? ??? ????? ??????? ????? ???????? ??????? ??????? ? ?? ???????? ? ??????????? ????? ???? ????? warez ??? ??????? ???????.<\/p>\n

IBM Security X-Force? ?? ??? ???? ??? ?? ????????? ??? ???? ?? ??????????? ???? ???????? ? ????????? ????????? ???? ???? ?? ??????? ???? ???????? ?????????? ? ?????? ?? ???????????? ?????? ???? ?????? ????? ?????????? ???? ????? Aresloader? Canyon? CargoBay? DICELOADER? Lumma C2? Matanbuchus?\u00a0[??]<\/a>Minodo (?????? ????)?\u00a0[??]<\/a>Pikabot? SVCReady? Vidar \u00a0??????? ???????.<\/p>\n

?????? ?????? ? ???? ???????? ?????? ??????? ?????[??]<\/a>: \u00ab?????????? ???????? ?????? ?? ??????????? ??????? ???? ????? ?? ITG23 ? ????? ????? ???? ??????? ???????. ?????????? ???? ITG23 ? ???? ???????? ????? ? ??????? ????? ?? ???? ??????? ?? ????????? ????? ?????? ???.\u00bb<\/p>\n

??????? ????? ????? ???????? ????? ??????? ??????????? ???????? ?????? ???? ??????? ? ???????? ? ???? ?? ?????? ?? ?? ?? ???? ???????? ?????????? ???????? ???? ??? ?? ????? ???????? ?? ??? ????? ??? ?? ????? ???????? ??? ????????? ?????? ?? ????? ?????[??]<\/a>\u00a0???.<\/p>\n

??? ???? ???? ?? ???? ???? ????????? ???????? ?? ????? (RaaS) ?? ??? Rhysida ??? ?? ?????? ??????? ?????? ????? ????? ? ?????? ?? ?? ????? ?????? ????? ??????? ????? ? ????? ? ???????? ??? ????? ???? ???? ???.<\/p>\n

SentinelOne ?? ?? ????? ??? ???[??]<\/a>: \u00abRhysida ?? ?????? ????????? ???????? ????????? (PE) ?????? ?? ???? ??? ?? ?? ??????? ?? MINGW\/GCC ??????? ??? ???. ?? ?? ????? ???????????? ???? ??? ?????? ??? Rhysida-0.1 ????? ??? ???? ?? ???? ?????? ??? ????? ?? ????? ????? ????? ???.\u00bb<\/p>\n

<\/a><\/a><\/p>\n

?????<\/strong><\/p>\n

[?]<\/a>\u00a0https:\/\/thehackernews.com\/2023\/06\/improved-blackcat-ransomware-strikes.html<\/a><\/p>\n

[?]<\/a>\u00a0https:\/\/www.trendmicro.com\/en_us\/research\/23\/f\/malvertising-used-as-entry-vector-for-blackcat-actors-also-lever.html<\/a><\/p>\n

[?]<\/a>\u00a0https:\/\/thehackernews.com\/2023\/04\/crypto-stealing-opcjacker-malware.html<\/a><\/p>\n

[?]<\/a>\u00a0https:\/\/www.sentinelone.com\/blog\/breaking-down-the-seo-poisoning-attack-how-attackers-are-hijacking-search-results<\/a><\/p>\n

[?]<\/a>\u00a0https:\/\/www.reliaquest.com\/blog\/cobalt-strike-servers-ransomware<\/a><\/p>\n

[?]<\/a>\u00a0https:\/\/www.reddit.com\/r\/crowdstrike\/comments\/13wjrgn\/20230531_situational_awareness_spyboy_defense<\/a><\/p>\n

[?]<\/a>\u00a0https:\/\/thehackernews.com\/2023\/04\/ransomware-hackers-using-aukill-tool-to.html<\/a><\/p>\n

[?]<\/a>\u00a0https:\/\/thehackernews.com\/2022\/11\/microsoft-warns-of-hackers-using-google.html<\/a><\/p>\n

[?]<\/a>\u00a0https:\/\/decoded.avast.io\/threatresearch\/decrypted-akira-ransomware<\/a><\/p>\n

[??]<\/a>\u00a0https:\/\/blog.cyble.com\/2023\/06\/28\/akira-ransomware-extends-reach-to-linux-platform<\/a><\/p>\n

[??]<\/a>\u00a0https:\/\/thehackernews.com\/2022\/05\/conti-ransomware-gang-shut-down-after.html<\/a><\/p>\n

[??]<\/a>\u00a0https:\/\/thehackernews.com\/2023\/04\/fin7-and-ex-conti-cybercrime-gangs-join.html<\/a><\/p>\n

[??]<\/a>\u00a0https:\/\/apa.aut.ac.ir\/?p=9769<\/a><\/p>\n

[??]<\/a>\u00a0https:\/\/securityintelligence.com\/posts\/trickbot-conti-crypters-where-are-they-now<\/a><\/p>\n

[??]<\/a>\u00a0https:\/\/thehackernews.com\/2023\/06\/8base-ransomware-spikes-in-activity.html<\/a><\/p>\n

[??]<\/a>\u00a0https:\/\/www.sentinelone.com\/blog\/rhysida-ransomware-raas-crawls-out-of-crimeware-undergrowth-to-attack-chilean-army<\/a><\/p>\n

[??]\u00a0https:\/\/thehackernews.com\/2023\/07\/blackcat-operators-distributing.html<\/a><\/p>\n<\/div>\n<\/div>\n

\n
<\/div>\n<\/div>\n
<\/div>\n<\/div>\n
\n
\n

??????? :
\n???? ??????
\n???? :
\n????????? ???? ??????? ????? ???? ????<\/p><\/div>\n<\/div>\n