2023-07-14

攻撃組織: RomCom (まとめ)

【要因】

◎ロシアのサイバー攻撃組織

【ニュース】

■2022年

◆RomCom RAT malware campaign impersonates KeePass, SolarWinds NPM, Veeam (BleepingComputer, 2022/11/03 15:36)
[KeePass、SolarWinds NPM、VeeamになりすますRomCom RATマルウェアキャンペーン]
https://www.bleepingcomputer.com/news/security/romcom-rat-malware-campaign-impersonates-keepass-solarwinds-npm-veeam/

■2023年

◆RomCom hackers target NATO Summit attendees in phishing attacks (BleepingComputer, 2023/07/10 16:44)
[RomComのハッカーがNATOサミット出席者を狙ったフィッシング攻撃]
https://www.bleepingcomputer.com/news/security/romcom-hackers-target-nato-summit-attendees-in-phishing-attacks/
⇒ https://malware-log.hatenablog.com/entry/2023/07/12/000000

◆「Office」のゼロデイ脆弱性、ロシア攻撃グループが悪用 (Security NEXT, 2023/07/12)
https://www.security-next.com/147778
⇒ https://malware-log.hatenablog.com/entry/2023/07/12/000000_3

◆Microsoft Officeの脆弱性を悪用して組織に不正侵入、Microsoftが注意呼びかけ (マイナビニュース, 2023/07/14 15:50)
https://news.mynavi.jp/techplus/article/20230714-2727469/
⇒ https://malware-log.hatenablog.com/entry/2023/07/14/000000

【検索】

■Google

google: RomCom
google: RomCom Cyber
google: Storm-0978
google: DEV-0978

google:news: RomCom
google:news: Storm-0978
google:news: DEV-0978

google: site:virustotal.com RomCom
google: site:virustotal.com Storm-0978
google: site:virustotal.com DEV-0978

google: site:github.com RomCom
google: site:github.com Storm-0978
google: site:github.com DEV-0978

■Bing

https://www.bing.com/search?q=RomCom
https://www.bing.com/search?q=RomCom%20Cyber
https://www.bing.com/search?q=Storm-0978
https://www.bing.com/search?q=DEV-0978

https://www.bing.com/news/search?q=RomCom
https://www.bing.com/news/search?q=Storm-0978
https://www.bing.com/news/search?q=DEV-0978

■Twitter

https://twitter.com/search?q=%23RomCom
https://twitter.com/search?q=%23Storm-0978
https://twitter.com/search?q=%23DEV-0978

https://twitter.com/hashtag/RomCom
https://twitter.com/hashtag/Storm-0978
https://twitter.com/hashtag/DEV-0978