[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"news-detail:ZX20240508_98748319":3},{"code":4,"data":5},0,{"unicode":6,"title":7,"categoryId":8,"categoryName":9,"industryId":10,"industryName":11,"origin":12,"originAuthor":13,"originRemark":14,"originUrl":15,"pic":16,"content":17,"numRead":18,"numLike":4,"createTime":19,"hadFav":4,"hadLike":4,"status":4,"memberUnicode":20,"companyLogo":21,"companyName":22,"corporateVideoUrl":23,"collected":4,"corporate3dCover":24,"corporate3dUrl":25,"corporate3dId":26,"companyUnicode":27,"focusFlag":28,"exhibitionMainInfoVO":29},"ZX20240508_98748319","微软Graph API遭黑客滥用，用于逃避安全软件监测","1242381412612444162","行业动态","1245513623956107264","其它行业",1,"","http:\u002F\u002Ftech.ifeng.com\u002F","https:\u002F\u002Ftech.ifeng.com\u002Fc\u002F8ZObF8fqrti","https:\u002F\u002Fx0.ifengimg.com\u002Fres\u002F2024\u002F9DAD7A02A9C20C556E1A15F991A0B4F035E7E5C9_size180_w1440_h319.png","\u003Cdiv class=\"index_text_D0U1y\">\n \u003Cp>IT之家 5 月 7 日消息，赛门铁克威胁猎人团队近日发布报告，声称目前有大量黑客滥用微软图形应用程序接口 Graph API，黑客主要将相关 API 嵌入木马中，以便于受害设备自动下载先前存储在微软 OneDrive 等云服务上的恶意脚本。\u003C\u002Fp>\n \u003Cp>安全人员表示，自 2022 年 1 月以来，他们已观察到多个黑客组织使用相关 API“加速入侵过程”，近期就有黑客利用一款内嵌 Graph API 的“BirdyClient”木马伪装成笔记本触控板驱动程序 DLL 程序库组件 vxdiff.dll 进行攻击。\u003C\u002Fp>\n \u003Cp class=\"textAlignCenter\">\u003Cimg class=\"empty_bg\" src=\"https:\u002F\u002Fx0.ifengimg.com\u002Fres\u002F2024\u002F9DAD7A02A9C20C556E1A15F991A0B4F035E7E5C9_size180_w1440_h319.png\" src=\"data:image\u002Fpng;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABAQMAAAAl21bKAAAAA1BMVEXy8vJkA4prAAAACklEQVQI12NgAAAAAgAB4iG8MwAAAABJRU5ErkJggg==\" style=\" width: 640px; height: 141px;\">\u003C\u002Fp>\n \u003Cp>安全人员表示，黑客使用 Graph API 的最大原因是可以利用相关通信服务“隐蔽自身”，让安全软件认为设备正与微软服务器进行通信，从而不会提醒受害者设备遭到入侵。\u003C\u002Fp>\n \u003Cp>除了“看起来不显眼”外，IT之家同时注意到，安全人员声称微软 OneDrive 可谓“黑客廉价而安全的云托管空间”，这是因为“OneDrive 等服务基本是免费的”。\u003C\u002Fp>\n\u003C\u002Fdiv>",211,"2024-05-08 08:53:41","2299021137","https:\u002F\u002Fimages6396289.oss-accelerate.aliyuncs.com\u002F2299021137\u002F207k1en0gl\u002F39556b555c5294a73c851a6d064c914.png","云展 动力","https:\u002F\u002Fimages6396289.oss-accelerate.aliyuncs.com\u002F2299021137\u002Fow873ffgpa\u002F鸿威宣传视频.mp4","https:\u002F\u002Fimages6396289.oss-accelerate.aliyuncs.com\u002F2299021137\u002Fbx9hvodhys\u002F广州本部.jpg","https:\u002F\u002Fwww.ysdli.com\u002Fspc.html?m=luNgqWJZN","1405769664983003136","c99s2fxwoa6zj",-2,null]