http://wechat.doonsec.com/Mzk0NzQzNTI2Mg.xmlThe latest security articles about WeChat official accountzh-CNSat, 17 May 2025 09:45:18 GMTPyRSS2Gen-1.1.0http://blogs.law.harvard.edu/tech/rsshttp://wechat.doonsec.com/http://wechat.doonsec.com/static/front/img/doonsec_bak3.pnghttps://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247484108&idx=1&sn=34eae4241f6524075fcce951de68a819一起LIVE勒索事件的溯源草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-05-16T22:00:39https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247484091&idx=1&sn=58992326daca50c79f662d7a53184eb3一起进程隐藏的SSH横向挖矿事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-04-25T18:00:25https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247484069&idx=1&sn=9c9333aa995f2a500052d1f4a5a9dbd2攻击队评分13.0，应急评分30，应急就是躺赢狗，攻击队拿了MVP!草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-04-18T12:00:32https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247484055&idx=1&sn=4b27b565d83288372717c73bce7d2b58一起Mallox勒索事件的溯源草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-04-11T12:01:23https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247484046&idx=1&sn=6ebdc567cc679dc77e3a4fe28a53f254一起SQL注入漏洞导致的网页暗链事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-03-28T12:02:31https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247484036&idx=1&sn=b31fbfd703775ca5a8216546c0a00414一起某户ezEIP漏洞导致的网页暗链事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-03-21T12:00:56https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247484022&idx=1&sn=15eb8f9dd03c07023abe1830b51d41b7一起历史webshell导致的内网失陷事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-03-14T12:00:29https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247484007&idx=1&sn=d655a8b4957b5df4eedbc7ea79ac8868一起通报外联恶意域名的排查事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-03-11T12:03:15https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483993&idx=1&sn=6b911ed81391e878b922628ce7fc215d一起某远M3漏洞导致的mallox勒索事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-03-01T18:00:21https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483982&idx=1&sn=296d64d03a51bbd4e031fe19064042a2一起PhpMyadmin弱口令导致的勒索事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-02-21T12:04:55https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483970&idx=1&sn=c29ce2cfb1b3fe93ac4952b656ef7a0a一起PHP-CGI漏洞导致的网页劫持事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2025-02-13T18:02:33https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483957&idx=1&sn=c2e52b3ded9fd2f97239513ae54471dd一起Rinetd供应链投毒的排查处置事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2024-04-09T18:01:00https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483946&idx=1&sn=f31373d8216eb1396de4f3923682eec4水文之一起Exchange服务器异常的排查事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2024-03-15T08:01:19https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483945&idx=1&sn=7933ecaa7962fb093e74deef3efe8b1a水文之一起8220Miner挖矿处置案例草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-12-14T18:00:53https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483944&idx=1&sn=e6d1fc5d71ef0d040a985500662f1a37一起伪装perl挖矿的排查溯源事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-11-28T18:05:28https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483901&idx=1&sn=1a604b444891762263503444958d6e64水文之一起Outlaw挖矿应急事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-11-27T18:00:28https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483891&idx=1&sn=bc1cb284bb850aea99a45f6520c63e9b水文之一起Buran勒索家族溯源事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-11-08T18:00:12https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483881&idx=1&sn=c4d90c4aeea6d1fc85b780838eda6e30一起远程加载恶意JS的网页劫持事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-11-05T12:00:28https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483865&idx=1&sn=2362618d7ea7d2f61342679d9aad40f1水文之一起Amnesia勒索家族溯源事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-10-24T09:30:40https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483864&idx=1&sn=9ae995ac4c4be7a927796c364e880bd3一起某蝶EAS漏洞导致的Tellyouthepass勒索事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-10-17T18:06:33https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483845&idx=1&sn=6cd3cb896624b644b422abbe69c758ec一起AutoUpdate挖矿事件的处置草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-09-22T09:01:45https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483844&idx=1&sn=8413ade38cb6fb5b8915044e6a9d164d一起Magniber勒索事件的溯源草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-09-20T09:00:03https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483791&idx=1&sn=4c268989f8899832b15d5dc44609cfea水文之一起Phobos勒索家族溯源事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-09-18T08:59:07https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483790&idx=1&sn=147258709d47d3b47bd994ec51f89c2b水文之一起Globelmposter勒索病毒溯源事件草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-09-16T09:00:47https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483772&idx=1&sn=fdfa6d21111e23447bdb3ba49de4666c笔者自己也意识到很久没更新了，本来想着遇到些经典且有趣的事件就写出来分享分享经验，然后发现过于执（lan）着草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-09-15T17:34:17https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483751&idx=1&sn=78291ebdf71a40767cbf1e29dfdc3a59一起Exchange服务器异常的排查溯源事件事件背景又是一个风和日丽的下午，前一刻还在在工位美滋滋摸鱼的我苦草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-03-20T17:32:50https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483727&idx=1&sn=b85e8546b2221b3d33f0a5267aff963eXiaoPiMiner挖矿样本分析今天在刷某步的时候，看到了一个有趣的IOCs，从而引起了我的兴趣。在搜索目草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-02-16T11:33:49https://mp.weixin.qq.com/s?__biz=Mzk0NzQzNTI2Mg==&mid=2247483678&idx=1&sn=ce52f8105f70baa708359ebe28e7d258又是一个苦逼搬砖的下午，突然接到客户的电话说被监管单位通报挖矿，需要紧急排查和处置溯源，遂风急火燎的打个车赶草蛇灰线马迹蛛丝草蛇灰线马迹蛛丝2023-01-18T17:48:33