今週の気になるセキュリティニュース - Issue #124

Revue アレかね

ポッドキャスト収録用のメモですよ。

podcast - #セキュリティのアレ - ゆるーいセキュリティのポッドキャストですよ。


事件、事故

AtCoder が DDoS 攻撃による障害の状況について報告

(6/22) 障害報告書 - 2023/6/22


攻撃、脅威

Kaspersky が今月初めに報告した "Operation Triangulation" で使用されたマルウェアについて報告

(6/21) TriangleDB, spyware implant of Operation Triangulation | Kaspersky official blog

(6/21) Dissecting TriangleDB, a Triangulation spyware implant | Securelist


AhnLab が攻撃者グループ APT37 による攻撃活動について報告

(6/21) RedEyes Group Wiretapping Individuals (APT37) - ASEC BLOG

RedEyes (also known as APT37, ScarCruft, and Reaper) is a state-sponsored APT group that mainly carries out attacks against individuals such as North Korean defectors, human rights activists, and university professors. Their task is known to be monitoring the lives of specific individuals. In May 2023, AhnLab Security Emergency response Center (ASEC) discovered the RedEyes group distributing and using an Infostealer with wiretapping features that was previously unknown along with a backdoor developed using GoLang that exploits the Ably platform.


Aqua Security が GitHub リポジトリに対する RepoJacking 攻撃について報告

(6/21) GitHub Dataset Research Reveals Millions Potentially Vulnerable to RepoJacking


(6/21) Akamai SIRT Security Advisory: CVE-2023-26801 Exploited to Spread Mirai Botnet Malware | Akamai


Symantec が攻撃者グループ APT15 による攻撃活動について報告

(6/21) Graphican: Flea Uses New Backdoor in Attacks Targeting Foreign Ministries | Symantec Enterprise Blogs

The Flea (aka APT15, Nickel) advanced persistent threat (APT) group continued to focus on foreign ministries in a recent attack campaign that ran from late 2022 into early 2023 in which it leveraged a new backdoor called Backdoor.Graphican.


Check Point が中国の攻撃者グループ Camaro Dragon の攻撃活動について報告

(6/22) Beyond the Horizon: Traveling the World on Camaro Dragon’s USB Flash Drives - Check Point Research


NSA が BlackLotus マルウェアの対策ガイドを公開

(6/22) NSA Releases Guide to Mitigate BlackLotus Threat > National Security Agency/Central Security Service > Press Release View


脆弱性

Apple が macOS Ventura 13.4.1, macOS Monterey 12.6.7, macOS Big Sur 11.7.8, iOS 16.5.1 / iPadOS 16.5.1, iOS 15.7.7 / iPadOS 15.7.7, watchOS 9.5.2 / 8.8.1, Safari 16.5.1 をリリース。すでに悪用が確認されている脆弱性の修正を含む (うち 2件は Kaspersky が報告した "Operation Triangulation" 関連)。

(6/21) Apple security updates - Apple Support


CISA が Known Exploited Vulnerabilities (KEV) カタログに 6+5 個の脆弱性を追加

(6/22) CISA Adds Six Known Exploited Vulnerabilities to Catalog | CISA

(6/23) CISA Adds Five Known Exploited Vulnerabilities to Catalog | CISA


その他

DuckDuckGo が Windows向け DuckDuckGo ブラウザのベータ版を公開

(6/22) DuckDuckGo's Windows browser now available in public beta