2022-06-14

TA570 (まとめ)

【ニュース】

◆MSDTのゼロデイ脆弱性、悪用拡大中 - 「QBot」の拡散にも (Security NEXT, 2022/06/09)
https://www.security-next.com/137179
⇒ https://malware-log.hatenablog.com/entry/2022/06/02/000000_2

◆Microsoft patches actively exploited Follina Windows zero-day (BleepingComputer, 2022/06/14 14:00)
[マイクロソフト、積極的に悪用されるFollina Windowsのゼロデイにパッチを適用]
https://www.bleepingcomputer.com/news/security/microsoft-patches-actively-exploited-follina-windows-zero-day/
⇒ https://malware-log.hatenablog.com/entry/2022/06/14/000000_6

【ブログ】

◆TA570 Qakbot (Qbot) tries CVE-2022-30190 (Follina) exploit (ms-msdt) (SANS, 2022/06/09)
[TA570 Qakbot (Qbot) が CVE-2022-30190 (Follina) の悪用を試みる (ms-msdt)]
https://isc.sans.edu/forums/diary/TA570+Qakbot+Qbot+tries+CVE202230190+Follina+exploit+msmsdt/28728/
⇒ https://malware-log.hatenablog.com/entry/2022/06/09/000000_6

【検索】

■Google

google: TA570
google:news: TA570
google: site:virustotal.com TA570
google: site:github.com TA570

■Bing

https://www.bing.com/search?q=TA570
https://www.bing.com/news/search?q=TA570

■Twitter

https://twitter.com/search?q=%23TA570
https://twitter.com/hashtag/TA570

【関連まとめ記事】

◆全体まとめ
　◆攻撃組織 / Actor (まとめ)