進化中的APT進階持續性威脅
cc.ntu.edu.tw · 156 words · saved by 1 readers
APT攻擊是一種常見的網路攻擊手法之一，駭客集團攻擊目標針對特定組織，除了多種攻擊手法之外且具有潛伏期長的特質。近年來APT集團逐漸將入侵的對象鎖定攻擊標的的服務或軟體供應商，並利用合法的軟體更新管道將惡意程式植入目標裝置以達成滲透目的。
--> �i�Ƥ���APT�i������ʫ¯� �x �s��� �x �O�j���� �x �p������ �x ��0051���E2019.12.20 �o�� ISSN 2077-8813 ���v�^�U �q�\/���� �հȪA�� �M�D���� �N�� ���~�M�� ���˥Z�� ���� >�M�D���� �i�Ƥ���APT�i������ʫ¯� �@�̡G�B�a���B������ / �O�A�Ⱦ��c �_�ϾdzN������w���B���ߡB��ߥx�W�j�ǭp����������� APT�����O�@�ر`��������������k���@�A�b�ȶ��Χ����ؼаw��S�w��´�A���F�h�ا�����k���~�B�㦳���������S��C��~��APT���γv���N�J�I����H��w�����Ъ����A�ȩγn������ӡA�çQ�ΦX�k���n���s�D�N�c�N�{���ӤJ�ؼи˸m�H�F�����z�ت��C ����O�i������ʫ¯�(Advanced Persistent Threat, APT ��X�~APT�������Ѹ����DzΪ�����u�{�l��A���y���l���T���ϳQ�`���I���W�s���Ϊ���ӤJ�c�
related reading
- 什麼是 APT 攻擊/進階持續性威脅 (Advanced Persistent Threat, APT)？ - 資安趨勢部落格blog.trendmicro.com.tw
- Problem solving is often a matter of cooking up an appropriate Markox chainmath.uchicago.edu
- 【資安週報】2022年7月11日到7月15日ithome.com.tw
- full English translation of Phineas Fisher's account of how he took down HackingTeam - https://www.reddit.com/r/netsec/comments/4f3e6p/full_english_translation_of_phineas_fishers/gist.github.com
- Decentralized Hole Punchingresearch.protocol.ai
- Initial Access, Tactic TA0001 - Enterprise | MITRE ATT&CK®attack.mitre.org
- PerfectData Software Abuse and Account Takeover Risksdarktrace.com
- Cloud Email Security - Block Malicious Email Attacks | Abnormal AIabnormal.ai
- Log4Shell Security Vulnerability | Orca Research Podorca.security
- Valid Accounts, Technique T1078 - Enterprise | MITRE ATT&CK®attack.mitre.org
- XZ Utils backdoor - Wikipediaen.wikipedia.org
- Threat actors misuse OAuth applications to automate financially driven attacksmicrosoft.com