Leeqwind

360 HuntingZero Lab - Advanced Threat & Exploit Hunting

[Leeqwind @Leeqwind]

New office vulnerability CVE-2023-33162 (only vuln, no exp & payload) caught by @360sandboxcloud and 360HuntingZeroLab 👉 https://t.co/CWYeSpyLNX 👉 https://t.co/lya9Ms51hS

[360 ATA Cloud @360atacloud]

A new out-of-bounds read vulnerability in winmm.dll of Windows, found by @360sandboxcloud , won't be fixed. https://t.co/wjoEhX4h2W

[360 ATA Cloud @360atacloud]

view the analysis report in #360sandboxcloud 👉 https://t.co/rY2AK0eM1Y

[360 ATA Cloud @360atacloud]

最新 RTF RCE 漏洞 CVE-2023-21716 分析 👉 #360沙箱云 #360sandboxcloud https://t.co/WHeTJAhoCF
https://t.co/VaDEVaUMSY
https://t.co/LZqhPWptXE

[360 ATA Cloud @360atacloud]

View it in 360 Sandbox Cloud 👉 https://t.co/SvyHTMu0a0

[360 ATA Cloud @360atacloud]

View it in 360 Sandbox Cloud:
https://t.co/7cDr1jzstH

[360 ATA Cloud @360atacloud]

沙箱云网站现已升级 Android 检测功能 | Sandbox cloud website has upgraded Android detection!
https://t.co/V3HwkBEj6Y

[360 ATA Cloud @360atacloud]

360沙箱云新版“威胁追踪”页面已上线，欢迎体验！ | The new "Threat Tracking" page of 360 Sandbox Cloud has arrived. Welcome to experience!
https://t.co/nOcl03FGVx

[360 ATA Cloud @360atacloud]

360 沙箱云 2.0 版本升级 https://t.co/KsC4qBv6SM

[360 ATA Cloud @360atacloud]

👉https://t.co/QusmjBG7gP #360sandboxcloud #ata

[Leeqwind @Leeqwind]

🧐

[360 ATA Cloud @360atacloud]

360沙箱云 2.0 版已发布！ | 360 Sandbox Cloud v2.0 has arrived!
https://t.co/QusmjBG7gP

[360 ATA Cloud @360atacloud]

上次文章里提到的那个蠕虫病毒涉及到的攻击邮件已经被某邮箱平台添加了警告标记⚠️。不过目前看来应该只是把发件人邮箱地址加入了告警列表，而不是根据邮件正文、附件之类的特征来识别。因为涉及的另一个邮箱地址发的攻击邮件还没有任何提示。

[360 ATA Cloud @360atacloud]

There is no prompt for the attack message sent by another email address involved.

[360 ATA Cloud @360atacloud]

The attack email involved in the worm mentioned in the last article has been warned tagged by a mail platform⚠️. But at present it seems that the sender's email should only be added to the alarm list, not based on the body of the email, attachments and other characteristics.

[360 ATA Cloud @360atacloud]

记一起通过邮件传播的恶意程序攻击 | A malware attack spread by mail
https://t.co/6CU1uR2DJd

[Leeqwind @Leeqwind]

😀

[360 ATA Cloud @360atacloud]

360 Sandbox Cloud professional & professional enhanced subscription now support CVE-2022-30190 vulnerability exploit detection https://t.co/ydR3dhKmnj

[360 ATA Cloud @360atacloud]

360沙箱云（ATA）对可疑的内存分配和操作进行转储记录，并面向分析人员呈现，提供更多角度的分析研判数据。
----
360 Sandbox Cloud (ATA) dumps and records suspicious memory allocation and operations, and presents them to analysts to provide analysis and judgment data from more angles.

[360 ATA Cloud @360atacloud]

https://t.co/3jhARbikkQ

[360 ATA Cloud @360atacloud]

Can be detected by 360 Sandbox Cloud 😎

[Leeqwind @Leeqwind]

This should be CVE-2017-0102 or one of other hidden fixes in MS17-017 instead of CVE-2017-0101 :(

[Leeqwind @Leeqwind]

The analysis of CVE-2017-0101 (in Chinese): https://t.co/l86eNtxvxS