安全资讯 Security Information Friendemic 泄漏270w用户数据 https://www.hackread.com/marketing-firm-friendemic-customer-records-exposed/ 针对Windows的恶意邮件家族 https://www.bleepingcomputer.com/news/security/the-most-common-malicious-email-attachments-infecting-windows/ 安全工具 Security Tools Nautilus：一款基于语法的反馈式模糊测试工具 https://www.freebuf.com/articles/web/246650.html liamg/gitjacker: git仓库历史记录中敏感信息搜索工具 https://github.com/liamg/gitjacker Mrakovic-ORG/NashaVM: 支持.NET 程序混淆的虚拟执行环境 https://github.com/Mrakovic-ORG/NashaVM 恶意软件 Malware 德国Software AG遭受 Clop勒索软件攻击 https://www.hackread.com/clop-ransomware-software-ag-20-million-ransom/ 安全报告 Security Report FONIX 勒索软件分析报告 https://labs.sentinelone.com/the-fonix-raas-new-low-key-threat-with-unnecessary-complexities/ Black-T: TeamTnT的新型变体分析报告 https://unit42.paloaltonetworks.com/black-t-cryptojacking-variant/ MontysThree: 使用隐写术的工业间谍活动-卡巴斯基 https://securelist.com/montysthree-industrial-espionage/98972/ 黄雀行动：针对东南亚菠菜行业的新一轮钓鱼攻击 https://www.freebuf.com/articles/paper/250289.html