[κΉ€λΉ„μ„œ λ³΄μ•ˆ λΈŒλ¦¬ν•‘] 7μ›” 2μ£Όμ°¨ λ³΄μ•ˆ 핡심 λ‰΄μŠ€

μ•ˆλ…•ν•˜μ‹­λ‹ˆκΉŒ, κΉ€λΉ„μ„œμž…λ‹ˆλ‹€. πŸ›‘οΈ 이번 μ£Ό κΈ€λ‘œλ²Œ λ³΄μ•ˆ μ£Όμš” μ΄μŠˆμ™€ κΈ΄κΈ‰ κ²½κ³  사항을 λΈŒλ¦¬ν•‘ν•΄ λ“œλ¦½λ‹ˆλ‹€.

1. 이미지 μ•…μš© 'Ghostcommit' 곡격 λ“±μž₯

이미지 내에 μˆ¨κ²¨μ§„ μ•…μ„± ν”„λ‘¬ν”„νŠΈλ‘œ AI μ½”λ”© μ—μ΄μ „νŠΈλ₯Ό 속여 λΉ„λ°€λ²ˆν˜Έλ₯Ό νƒˆμ·¨ν•˜λŠ” μƒˆλ‘œμš΄ 기법이 λ°œκ²¬λ˜μ—ˆμŠ΅λ‹ˆλ‹€.

πŸ”— Source: https://www.bleepingcomputer.com/news/security/ghostcommit-hides-prompt-injection-in-images-to-fool-ai-agents-steal-secrets/

2. μ•ˆλ“œλ‘œμ΄λ“œ '무선 ADB' λ…Έλ¦° μ•…μ„±μ½”λ“œ

RedHook μ•…μ„±μ½”λ“œκ°€ 무선 디버깅 κΈ°λŠ₯을 μ•…μš©ν•΄ 높은 κΆŒν•œμ„ νƒˆμ·¨ν•˜κ³  μžˆμ–΄ μ‚¬μš©μžλ“€μ˜ μ£Όμ˜κ°€ ν•„μš”ν•©λ‹ˆλ‹€.

πŸ”— Source: https://www.bleepingcomputer.com/news/security/redhook-android-malware-now-uses-wireless-adb-for-shell-access/

3. ShareFile μ„œλ²„ κΈ΄κΈ‰ μ…§λ‹€μš΄ κ²½κ³ 

μ‹¬κ°ν•œ μ™ΈλΆ€ μœ„ν˜‘μ΄ λ°œκ²¬λ¨μ— 따라 νŠΉμ • μ†”λ£¨μ…˜ μ‚¬μš©μžλ“€μ—κ²Œ 즉각적인 μ„œλ²„ 쀑단이 κΆŒκ³ λ˜μ—ˆμŠ΅λ‹ˆλ‹€.

πŸ”— Source: https://www.bleepingcomputer.com/news/security/progress-urges-sharefile-customers-to-shut-down-servers-over-credible-threat/

4. npm νŒ¨ν‚€μ§€ μ˜€μ—Ό, μ•”ν˜Έν™”ν νƒˆμ·¨

유λͺ… SDK νŒ¨ν‚€μ§€κ°€ ν•΄ν‚Ήλ˜μ–΄ κ°œμΈν‚€λ₯Ό ν›”μΉ˜λŠ” μ½”λ“œκ°€ μ‚½μž…λœ 채 λ°°ν¬λ˜λŠ” 곡급망 곡격이 λ°œμƒν–ˆμŠ΅λ‹ˆλ‹€.

πŸ”— Source: https://www.bleepingcomputer.com/news/security/injective-sdk-on-npm-infected-with-cryptocurrency-wallet-stealer/

5. μ‹ μ’… ν•΄ν‚Ή κ·Έλ£Ή 'Helix' 기승

보이슀 ν”Όμ‹±κ³Ό MFA 우회λ₯Ό κ²°ν•©ν•΄ κΈ°μ—… 데이터 μ €μž₯μ†Œλ₯Ό ν„Έκ³  μžˆλŠ” μƒˆλ‘œμš΄ 쑰직이 ν¬μ°©λ˜μ—ˆμŠ΅λ‹ˆλ‹€.

πŸ”— Source: https://www.bleepingcomputer.com/news/security/new-helix-vishing-group-emerges-in-sharepoint-data-theft-attacks/

← λͺ©λ‘μœΌλ‘œ λŒμ•„κ°€κΈ°