Cyber Security News· Tushar Subhra Dutta·· 3 小时前精选推荐指数70
Storm-2603利用SharePoint ToolShell漏洞植入无文件后门并尝试勒索
Storm-2603 Hackers Exploit SharePoint ToolShell Flaws to Hide Fileless Backdoor and Launch Ransomware Attack
AI 导读
Kaspersky Securelist报告披露，与中方关联的威胁组织Storm-2603利用SharePoint ToolShell漏洞（CVE-2025-53770。
推荐理由
报告给出了从探测到勒索未遂的完整攻击链与IoC，读者可据此排查自身SharePoint暴露面与持久化痕迹。
来源：Cyber Security News · cybersecuritynews.com