###### tags: `資安事件新聞週報` # 資安事件新聞週報 2023/12/25 ~ 2023/12/29 1.重大弱點漏洞/後門/Exploit/Zero Day 報告:2023 年四分之一的高風險漏洞在發布當天就被利用且遠端即可 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10869 駭侵者利用 Adobe ColdFusion 漏洞攻擊美國政府包商 https://www.twcert.org.tw/tw/cp-104-7641-d7840-1.html 中華數位科技 Mail SQR Expert - Path Traversal https://www.twcert.org.tw/tw/cp-132-7596-648f3-1.html 中華數位科技 Mail SQR Expert - Blind Server-Side Request Forgey (SSRF) https://www.twcert.org.tw/tw/cp-132-7597-fff54-1.html 中華數位科技 Mail SQR Expert - Command Injection https://www.twcert.org.tw/tw/cp-132-7598-37b03-1.html 中華數位科技 Mail SQR Expert - Local File Inclusion-1 https://www.twcert.org.tw/tw/cp-132-7599-461d5-1.html 中華數位科技 Mail SQR Expert - Local File Inclusion-2 https://www.twcert.org.tw/tw/cp-132-7600-dd072-1.html Windows 內核級零日漏洞遭勒索軟體攻擊者濫用 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10868 微軟Windows事件記錄系統CLFS零時差漏洞被鎖定,已陸續遭勒索軟體駭客利用 https://www.darkreading.com/vulnerabilities-threats/ransomware-attackers-abuse-windows-clfs-driver-zero-days https://securelist.com/windows-clfs-exploits-ransomware/111560/ https://securelist.com/windows-clfs-exploits-ransomware-cve-2023-28252/111601/ 攻擊者利用已有6年歷史的微軟Office 漏洞散播間諜軟體 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10867 ERP系統Apache OfBiz存在重大漏洞,恐被用於繞過身分驗證防護 https://blog.sonicwall.com/en-us/2023/12/sonicwall-discovers-critical-apache-ofbiz-zero-day-authbiz/ 駭客掃描ERP系統Apache OFBiz重大漏洞,意圖對採用此軟體的Atlassian Confluence伺服器下手 https://www.bleepingcomputer.com/news/security/apache-ofbiz-rce-flaw-exploited-to-find-vulnerable-confluence-servers/ https://twitter.com/shadowserver/status/1740317678257218036 https://www.bleepingcomputer.com/news/security/apache-ofbiz-rce-flaw-exploited-to-find-vulnerable-confluence-servers/ Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack https://thehackernews.com/2023/12/critical-zero-day-in-apache-ofbiz-erp.html Barracuda郵件安全閘道遭到中國駭客鎖定,利用零時差漏洞對其下手 https://www.barracuda.com/company/legal/esg-vulnerability Chinese Hackers Exploited New Zero-Day in Barracuda's ESG Appliances https://thehackernews.com/2023/12/chinese-hackers-exploited-new-zero-day.html GKE容器服務傳出有漏洞,可能讓使用者在K8s服務提升權限並完全控制叢集 https://thehackernews.com/2023/12/google-cloud-resolves-privilege.html https://unit42.paloaltonetworks.com/google-kubernetes-engine-privilege-escalation-fluentbit-anthos/ https://cloud.google.com/anthos/clusters/docs/security-bulletins#gcp-2023-047 Canonical針對Ubuntu發布更新,修補文字編輯器Vim漏洞 https://ubuntu.com/security/notices/USN-6557-1 2.銀行/金融/保險/證券/金融監理 新聞及資安 金管會發布113年金檢重點,首度明列雲端資安 https://www.ithome.com.tw/news/160437 金融業明年金檢 鎖定六領域…公司治理、資安等列關注焦點 https://udn.com/news/story/7239/7652431 永豐金防駭 強化資安戰力 https://money.udn.com/money/story/5613/7665109 後量子資安人才養成 政大攜手財金公司簽署MOU超前佈局 https://www.nccu.edu.tw/p/406-1000-15825,r17.php?Lang=zh-tw 強化金融資安!政大與財金公司簽MOU 佈局「後量子時代」金鑰管理 https://tw.nextapple.com/life/20231227/01B31DF0ADC0CFAF41B31A6FA55D6DB6 政大攜財金公司產學合作 培育量子資安人才 https://udn.com/news/story/6928/7669483 財金公司聯手政大 共培金融資安跨領域人才 https://www.chinatimes.com/realtimenews/20231227004911-260410?chdtv 聯徵中心表揚46家機構 - 推升台灣金融授信業務徵審品質、資訊安全 https://www.ctee.com.tw/news/20231227700180-439901 優化金融信用資訊 39機構獲表揚 https://money.udn.com/money/story/5635/7667393 Android Banking Trojan Chameleon can now bypass any Biometric Authentication https://www.threatfabric.com/blogs/android-banking-trojan-chameleon-is-back-in-action 金融木馬Chameleon出現變種,可繞過生物辨識保護機制 https://www.ithome.com.tw/news/160528 安卓金融木馬Chameleon停用指紋辨識功能,並竊取PIN碼來接管手機 https://www.threatfabric.com/blogs/android-banking-trojan-chameleon-is-back-in-action Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication https://thehackernews.com/2023/12/new-chameleon-android-banking-trojan.html 金融木馬Carbanak東山再起,被用於勒索軟體攻擊行動 https://www.nccgroup.com/us/newsroom/ncc-group-monthly-threat-pulse-november-2023/ Carbanak Banking Malware Resurfaces with New Ransomware Tactics https://thehackernews.com/2023/12/carbanak-banking-malware-resurfaces.html 防止網絡勒索 保護金融中心地位 https://www.hk01.com/article/975095?utm_source=01articlecopy&utm_medium=referral 中信銀引進Whoscall進階版強化阻詐實力 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10875 富邦金控舉辦2023年「供應商ESG交流會」 堅持精進 永續不息 實現企業和環境的共榮 https://www.taiwannews.com.tw/ch/news/5067419 柯文哲拋金融兵推 金管會:近年來每年辦資安演練 https://udn.com/news/story/7239/7652176?from=udn-ch1_breaknews-1-0-news 3.信用卡/電子支付/行動支付/pay/支付系統/資安 Rogue WordPress Plugin Exposes E-Commerce Sites to Credit Card Theft https://thehackernews.com/2023/12/rogue-wordpress-plugin-exposes-e.html 惡意WordPress外掛程式鎖定電商網站而來,目標是發動Magecart信用卡側錄攻擊 https://blog.sucuri.net/2023/12/magecart-wordpress-plugin-injects-malicious-user-credit-card-skimmer.html 歐洲刑警組織警告逾400個電商網站遭駭,被植入信用卡側錄程式 https://www.bleepingcomputer.com/news/security/europol-warns-443-online-shops-infected-with-credit-card-stealers/ https://www.europol.europa.eu/media-press/newsroom/news/action-against-digital-skimming-reveals-443-compromised-online-merchants https://www.group-ib.com/media-center/press-releases/digital-skimming-action/ 北韓推行電子支付,韓國:藉此管控市場現金 https://technews.tw/2023/12/22/north-korea-pay-online/ 發展跨境電子支付 政府應推更多誘因 https://www.tkww.hk/epaper/view/newsDetail/1740055405838602240.html 電支帳戶飆TWQR再納雙雄 https://wantrich.chinatimes.com/news/20231229900397-420101 4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約/WEB3 資安 Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining https://thehackernews.com/2023/12/warning-poorly-secured-linux-ssh.html Mt. Gox 發動退款與 2014 年比特幣駭客攻擊有關?細節 https://portalcripto.com.br/zh-TW/mt-gox-%E9%96%8B%E5%A7%8B%E9%80%80%E6%AC%BE%EF%BC%8C%E6%B6%89%E5%8F%8A-2014-%E5%B9%B4%E6%AF%94%E7%89%B9%E5%B9%A3%E9%A7%AD%E5%AE%A2%E6%94%BB%E6%93%8A%E7%B4%B0%E7%AF%80/ 區塊鏈安全和分析公司:2023年加密攻擊被盜資金近24億美元 https://bitnance.vip/news/01f26f63-54b3-4603-9b63-19ed69b0381e 一白帽駭客因披露Sui高危漏洞獲5萬美元的SUI代幣賞金 https://news.cnyes.com/news/id/5419860 Kyber Network 在網路攻擊損失數百萬美元後面臨裁員 https://portalcripto.com.br/zh-TW/%E7%99%BE%E8%90%AC%E5%AF%8C%E7%BF%81%E6%B5%81%E5%A4%B1%E5%BE%8C%EF%BC%8CKyber-Network-%E9%9D%A2%E8%87%A8%E5%9C%98%E9%9A%8A%E8%A3%81%E5%93%A1/ Kyber Network公佈賠償計劃,將於明年2月發放賠償 https://www.panewslab.com/zh_hk/sqarticledetails/ir0kjyd6Ft.html 數據顯示,2 年駭客竊取了 2023 億美元的加密貨幣 https://zh-tw.techwar.gr/266588/chaker-eklepsan-2-disekatommyria-dolaria-se-kryptografisi-to-2023-symfona-me-stoicheia/#google_vignette Thunder Terminal 遭駭損失 86.5 枚以太幣,強調用戶資金安全卻遭駭客爆「全是謊話」 https://blockcast.it/2023/12/27/on-chain-trading-platform-thunder-terminal-hacked-for-86-5-eth-user-funds-and-data-safe/ 比特幣交易所交易基金的批准越來越接近現實:比特幣交易所交易基金新聞和5個常見的比特幣交易所交易基金問題 https://www.fxstreet.hk/news/bi-te-bi-jiao-yi-suo-jiao-yi-ji-jin-de-pi-zhun-yue-lai-yue-jie-jin-xian-shi-bi-te-bi-jiao-yi-suo-jiao-yi-ji-jin-xin-wen-he-5ge-chang-jian-de-bi-te-bi-jiao-yi-suo-jiao-yi-ji-jin-wen-ti-202312270643 2023年加密用戶因詐騙、RUG及駭客攻擊損失近20億美元,與去年相比減少約50% https://news.cnyes.com/news/id/5420718 Beosin:2023年Web3領域因駭客攻擊、釣魚詐騙和項目方Rug Pull造成的總損失達20.2億美元 https://amp-news.cnyes.com/news/id/5420922 MicroStrategy 增持!最新以 6.15 億美元買入 14,620 枚比特幣 https://news.owlting.com/articles/565722 OKLink:2023年發生區塊鏈安全事件超520起,損失超17億美元 https://www.panewslab.com/zh_hk/sqarticledetails/qc4kzw8zFt.html 永續合約平台Levana遭遇攻擊,損失超110萬美元 https://news.cnyes.com/news/id/5421276 MICA Daily|追隨 Solana 表現,主鏈幣出現補漲行情 https://blockcast.it/2023/12/28/mica-daily-1228/ Immunefi:加密貨幣用戶在2023年因被駭客攻擊和被詐騙共損失18億美元 https://news.cnyes.com/news/id/5421436 盤點2023去中心化交易所(DEX)發生什麼大事,崛起與挑戰 https://www.blocktempo.com/looking-back-at-the-development-of-dex-in-2023/ 加拿大加密交易所Catalyx因「安全漏洞」暫停交易和提款 https://www.panewslab.com/zh_hk/sqarticledetails/5r2p1w2lFt.html Lazarus、Kimsuki、Andariel 等多個駭侵團體自 2017 年至今竊得加密貨幣超過 30 億美元 https://www.twcert.org.tw/tw/cp-104-7657-2b437-1.html 5.資安事件新聞 A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC ALPHV Blackcat 勒索病毒 https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-353a 杭州破獲藉ChatGPT優化程式電腦病毒重大勒索案 https://www.ctee.com.tw/news/20231229700758-430801 Sophos 示警多個勒索軟體集團蓄意發動遠端加密攻擊 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10873 多組駭客濫用微軟市集App的URI協定,散布惡意軟體 https://www.microsoft.com/en-us/security/blog/2023/12/28/financially-motivated-threat-actors-misusing-app-installer/ 特立尼達和多巴哥社會福利機構遭勒索軟體攻擊 https://therecord.media/trinidad-and-tobago-government-agency-hit-with-post-christmas-cyberattack 德國醫療體系KHO遭遇勒索軟體LockBit攻擊,旗下3家醫院IT系統資料被加密 https://www.bleepingcomputer.com/news/security/lockbit-ransomware-disrupts-emergency-care-at-german-hospitals/ 彩券公司Ohio Lottery傳出遭勒索軟體DragonForce攻擊,被迫關閉部分系統 https://www.bleepingcomputer.com/news/security/ohio-lottery-hit-by-cyberattack-claimed-by-dragonforce-ransomware/ 駭客假冒尼泊爾政府官員,利用Word檔案作為誘餌,散布Nim惡意程式 https://www.netskope.com/blog/a-look-at-the-nim-based-campaign-using-microsoft-word-docs-to-impersonate-the-nepali-government 約旦Abdali綜合醫院傳出遭勒索軟體Rhysida攻擊 https://securityaffairs.com/156430/cyber-crime/rhysida-ransomware-abdali-hospital-jordan.html 會計師事務所Xeinadin傳出遭到勒索軟體LockBit攻擊 https://securityaffairs.com/156303/cyber-crime/lockbit-gang-xeinadin.html 方程式編輯器的老舊漏洞被利用,駭客拿來散布惡意軟體Agent Tesla https://www.zscaler.com/blogs/security-research/threat-actors-exploit-cve-2017-11882-deliver-agent-tesla 竊資軟體MetaStealer透過惡意廣告散布 https://www.malwarebytes.com/blog/threat-intelligence/2023/12/new-metastealer-malvertising-campaigns 伊朗駭客APT33鎖定國防產業,散布惡意程式FalseFont https://www.bleepingcomputer.com/news/security/microsoft-hackers-target-defense-firms-with-new-falsefont-malware/ https://twitter.com/MsftSecIntel/status/1737895710169628824 https://twitter.com/MsftSecIntel/status/1737895713646739697 https://twitter.com/MsftSecIntel/status/1737895715911700830 RAT木馬程式Bandook透過密碼保護的壓縮檔案散布 https://www.fortinet.com/blog/threat-research/bandook-persistent-threat-that-keeps-evolving 美國、加拿大遭到鎖定,駭客組織BattleRoyal對其散布惡意程式DarkGate https://www.proofpoint.com/us/blog/threat-insight/battleroyal-darkgate-cluster-spreads-email-and-fake-browser-updates Akira, again: The ransomware that keeps on taking https://otx.alienvault.com/pulse/658c45ad9b174d9cf1b26ce0 Stealth Backdoor “Android/Xamalicious” Actively Infecting Devices https://www.mcafee.com/blogs/other-blogs/mcafee-labs/stealth-backdoor-android-xamalicious-actively-infecting-devices/ 印度政府機關遭Rust惡意程式鎖定,駭客對其進行Operation RusticWeb攻擊行動 https://www.seqrite.com/blog/operation-rusticweb-targets-indian-govt-from-rust-based-malware-to-web-service-exfiltration/ Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities https://thehackernews.com/2023/12/operation-rusticweb-rust-based-malware.html Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware https://thehackernews.com/2023/12/decoy-microsoft-word-documents-used-to.html Microsoft Warns of New 'FalseFont' Backdoor Targeting the Defense Sector https://thehackernews.com/2023/12/microsoft-warns-of-new-falsefont.html 微軟再度預設關閉ms-appinstaller協定處理器 https://www.ithome.com.tw/news/160617 Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks https://thehackernews.com/2023/12/microsoft-disables-msix-app-installer.html Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware https://thehackernews.com/2023/12/multi-million-dollar-predator-spyware.html New Sneaky Xamalicious Android Malware Hits Over 327,000 Devices https://thehackernews.com/2023/12/new-sneaky-xamalicious-android-malware.html New Rugmi Malware Loader Surges with Hundreds of Daily Detections https://thehackernews.com/2023/12/new-rugmi-malware-loader-surges-with.html CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK https://thehackernews.com/2023/12/cert-ua-uncovers-new-malware-wave.html Menorah病毒被发现,主要目标是中东地区的组织 https://www.anquanke.com/post/id/292272 B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊 Most Sophisticated iPhone Hack Ever Exploited Apple's Hidden Hardware Feature https://thehackernews.com/2023/12/most-sophisticated-iphone-hack-ever.html 安卓系統面臨嚴重威脅 木馬病毒攻擊超1800個網銀App https://reurl.cc/mrL84V 10款APP藏木馬病毒快刪掉!專門攻擊網銀 奪取個資、偷光錢財 https://www.nownews.com/news/6331481 利用4個零日漏洞 最高深的iPhone駭客攻擊事件 https://www.technice.com.tw/techmanage/infosecurity/88248/ iPhone曾遇史上最複雜攻擊!駭客發一則訊息就能竊走所有機密 https://www.mirrormedia.mg/external/tvbs_2351054 史上最複雜 iPhone 攻擊鏈!卡巴斯基公布鎖定 iMessage 複雜攻擊細節 https://infosecu.technews.tw/2023/12/29/kaspersky-iphone-attack/ 卡巴斯基揭露間諜軟體攻擊Operation Triangulation更多細節,駭客至少利用4個零時差漏洞 https://securelist.com/operation-triangulation-the-last-hardware-mystery/111669/ iOS 手機系統疑長年「後門大開」爆出多個未公開安全漏洞 https://ezone.ulifestyle.com.hk/article/20023188/iOS-%E6%89%8B%E6%A9%9F%E7%B3%BB%E7%B5%B1%E7%96%91%E9%95%B7%E5%B9%B4-%E5%BE%8C%E9%96%80%E5%A4%A7%E9%96%8B-%E7%88%86%E5%87%BA%E5%A4%9A%E5%80%8B%E6%9C%AA%E5%85%AC%E9%96%8B%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E 據指印度政府不滿 Apple 向政治人物和記者警告有國家級駭客攻擊 https://hk.news.yahoo.com/apple-reportedly-faces-pressure-in-india-after-sending-out-warnings-of-state-sponsored-hacking-061106464.html?guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_sig=AQAAAI3aBeiNyD9izH4fWM0S64NyXnvKzv5RdzSEBmcnk6EsrHcnzEdyhcEP1X_gvsR3_scsVGVW5nur_fPJqQCIg9MBx6-aILL0sOuPFugrrxOQB6Agzmjm1R4kUSABWFpuAgMsIEBT-ptdAByTdY3HGzzU8DJv7iw45ppaKPE8Rsh4 Apple 緊急為較舊產品修復 2 個 0-day 漏洞 https://www.twcert.org.tw/tw/cp-104-7649-5db31-1.html 「變色龍」木馬捲土重來,中斷 Android 指紋、臉部解鎖竊取 PIN 碼 https://infosecu.technews.tw/2023/12/26/android-banking-trojan-chameleon/ C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力 2023年資訊安全風雲:重大事件回顧與未來展望 https://www.getinfo.com.tw/2023it-report/ Sophos 偵測到多起鎖定飯店的惡意活動 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10865 物流集運商搶單!雇駭客關網站 發信攬客 https://today.line.me/tw/v2/article/oqrKPPj 美國CISA 要求科技製造廠停止提供預設密碼 https://www.twcert.org.tw/tw/cp-104-7655-d6d47-1.html 大英圖書館遭受嚴重駭客攻擊,館藏目錄系統等遭到癱瘓 https://vocus.cc/article/658da1defd897800011e0e10 電玩開發商RockStar Games遭駭一年,《俠盜獵車手V》原始碼被公開 https://www.bleepingcomputer.com/news/security/gta-5-source-code-reportedly-leaked-online-a-year-after-rockstar-hack/ https://gtafocal.com/?p=560 https://www.bleepingcomputer.com/news/security/gta-5-source-code-reportedly-leaked-online-a-year-after-rockstar-hack/ https://www.bleepingcomputer.com/news/security/lapsus-hacker-behind-gta-6-leak-gets-indefinite-hospital-sentence/ https://thecyberexpress.com/gta-5-source-code-leak/ https://twitter.com/vxunderground/status/1739263588408164859 〈漫威金鋼狼〉遊戲資料被駭,開發商 Insomniac:深感悲憤 https://infosecu.technews.tw/2023/12/28/insomniac-games-was-hacked/ 從事非法網路活動 北韓偵察總局局長遭南韓制裁 https://money.udn.com/money/story/5599/7668925 美國遊戲公司UBI近日受駭客攻擊最後成功守住資料 https://www.ptt.cc/bbs/C_Chat/M.1703571638.A.094.html 遊戲開發商Ubisoft傳出遭網路攻擊,駭客宣稱目標是《虹彩六號:圍攻行動》的內部資料 https://www.ithome.com.tw/news/160546 https://twitter.com/vxunderground/status/1738093190538760574 https://twitter.com/vxunderground/status/1738144068788494722 阿爾巴尼亞議會傳出遭到網路攻擊,導致部分服務暫停 https://www.securityweek.com/cyberattack-targets-albanian-parliaments-data-system-halting-its-work/ 美對中情報網遭破 10年難恢復 https://udn.com/news/story/6809/7667776 美國CIA中國情報網遭剿難重建 了解習近平核心圈計劃受限 https://www.cna.com.tw/news/acn/202312260381.aspx AI武器化?美控北京駭取巨量美國人個資 又竊AI技術「替所有美國人建立檔案」 https://today.line.me/tw/v2/amp/article/MLvoD6a 美國指控中國竊取人工智慧機密 大規模蒐集資料 https://www.primenews.com.tw/article/13766/ 美情報機構:中國盜竊人工智慧機密 偷取美國人個資 https://www.cmmedia.com.tw/home/articles/44278 美印台防範解放軍網路攻擊 專家:台灣經驗寶貴 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10870 網路安全相關產業快速發展 網路攻擊頻傳 《澳洲》亟需強化資安防禦 https://www.trademag.org.tw/page/itemsd/?id=7893637&no=19 瑞星捕获东南亚黑客组织对中国能源行业发起的APT攻击 https://www.aqniu.com/vendor/101988.html 烏克蘭遭到俄羅斯駭客APT28鎖定,散布惡意程式Masepie https://www.bleepingcomputer.com/news/security/russian-military-hackers-target-ukraine-with-new-masepie-malware/ APT28: From Initial Damage to Domain Controller Threats in an Hour (CERT-UA#8399) https://cert.gov.ua/article/6276894 Fog of Cyber Warfare: Cloud Atlas Spies Attack Russian Companies Under the guise of Supporting NWO Participants https://www.facct.ru/blog/cloud-atlas/ UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware https://thehackernews.com/2023/12/uac-0099-using-winrar-exploit-to-target.html Threat Actor 'UAC-0099' Continues to Target Ukraine https://www.deepinstinct.com/blog/threat-actor-uac-0099-continues-to-target-ukraine Bandook - A Persistent Threat That Keeps Evolving https://www.fortinet.com/blog/threat-research/bandook-persistent-threat-that-keeps-evolving British LAPSUS$ Teen Members Sentenced for High-Profile Attacks https://thehackernews.com/2023/12/british-lapsus-teen-members-sentenced.html Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks https://thehackernews.com/2023/12/kimsuky-hackers-deploying-appleseed.html 網路/資安培訓工程師 https://www.104.com.tw/job/7t0xp?jobsource=cmw_redirect 儲備資訊安全分析師【高雄】_三個月專業培訓(無經驗可) https://www.104.com.tw/job/7ujbd?jobsource=cmw_redirect 【財團法人】資訊通訊安全人員(新竹培訓中心) https://www.104.com.tw/job/82zm7?jobsource=cmw_redirect 技術支援工程師 (無經驗可,公司給予培訓 ;除薪資外,支援外勤另給予油資補助) https://www.104.com.tw/job/6isif?jobsource=cmw_redirect (SOC)資安監控中心資安工程師 https://www.104.com.tw/job/70hww?jobsource=cmw_redirect [ADN] 網路資安 助理工程師 (台北) https://www.104.com.tw/job/5yirk?jobsource=cmw_redirect 〔駐點台中〕技術支援工程師〈上班地點:台中〉 https://www.104.com.tw/job/838tx?jobsource=cmw_redirect 資訊專員 https://www.104.com.tw/job/7ezfy?jobsource=cmw_redirect 網路管理工程師(南區) (Network Engineer) https://www.104.com.tw/job/8755e?jobsource=hotjob_chr 法律數位鑑識分析工程師 Forensics Engineer (eDiscovery) https://www.104.com.tw/job/85nqk?jobsource=cmw_redirect 資訊安全威脅獵捕分析師/研究員 https://www.104.com.tw/job/7eim4?jobsource=cmw_redirect 資訊安全分析師(初/中/高)級 Security Analyst (T1/T2/T3) https://www.104.com.tw/job/79u7l?jobsource=cmw_redirect 資安工程師-弱點檢測技術 https://www.104.com.tw/job/6g1kz?jobsource=cmw_redirect 【台北】Product Technology Engineer 資安產品工程師 https://www.104.com.tw/job/7n67c?jobsource=cmw_redirect 資深資安顧問/資安專家 https://www.104.com.tw/job/6u5p3?jobsource=cmw_redirect 資訊-資安工程師-龍潭廠-ATT210060 https://www.104.com.tw/job/7etlp?jobsource=cmw_redirect 顧問/資深顧問-資訊安全管理 Consultant/Senior Consultant of Cybersecurity (6384) https://www.104.com.tw/job/819ql?jobsource=cmw_redirect 【諮詢服務】資安架構/技術顧問 https://www.104.com.tw/job/7n6wp?jobsource=cmw_redirect 資安滲透測試專家(Q13) https://www.104.com.tw/job/4chjb?jobsource=cmw_redirect D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全 基因測試公司 23andMe 共 690 萬使用者資料遭竊 https://www.twcert.org.tw/tw/cp-104-7637-3ccb0-1.html Cloud Atlas' Spear-Phishing Attacks Target Russian Agro and Research Companies https://thehackernews.com/2023/12/cloud-atlas-spear-phishing-attacks.html Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service https://thehackernews.com/2023/12/google-cloud-resolves-privilege.html 勒索軟體Akira聲稱攻擊Nissan澳洲分公司,竊得100 GB內部資料 https://www.bleepingcomputer.com/news/security/nissan-australia-cyberattack-claimed-by-akira-ransomware-gang/ 法媒:台灣公民社會動員為盾 對抗北京認知戰 https://www.cna.com.tw/news/aipl/202312280011.aspx 駭客持續針對Booking.com用戶展開攻擊,駭客論壇已開始兜售登入憑證 https://www.ithome.com.tw/news/160597 比電玩內容被駭更可怕的事!遊戲開發者的個資外洩,為什麼會影響生命安全 https://buzzorange.com/techorange/2023/12/28/game-developer-cybersecurity/ 工程師變內鬼!疑經營糾紛報復 男勾結工程師刪系統竊個資 害虧1200萬 https://www.youtube.com/watch?v=ZnaoVmRTSbQ 台灣民眾面臨詐騙和數位挑戰的現況 https://www.npo.org.tw/npo165/OnePage.aspx?mid=2&id=24 詐騙新招 電話收集聲紋再AI偽造騙「親人」 https://news.ltn.com.tw/news/society/breakingnews/4532143 停用 Facebook 帳號,會失去之前的資料嗎 https://blog.trendmicro.com.tw/?p=80124 松下透露2022年12月發生的資料外洩事故 https://www.ithome.com.tw/news/160605 https://www.bleepingcomputer.com/news/security/panasonic-discloses-data-breach-after-december-2022-cyberattack/ https://www.documentcloud.org/documents/24238563-panasonic-avionics-corporation-consumer-notice-letter 歐洲大型停車應用程式服務集團EasyPark傳出資料外洩 https://www.hackread.com/ringgo-parkmobile-easypark-data-breach-data-stolen/ https://www.easypark.com/en-nl/comm https://www.theguardian.com/technology/2023/dec/26/hackers-steal-customer-data-europe-parking-app-easypark-ringgo-parkmobile 養樂多澳洲分公司傳出資料外洩,95 GB檔案流出 https://www.bleepingcomputer.com/news/security/yakult-australia-confirms-cyber-incident-after-95-gb-data-leak/ 抵押貸款業者LoanCare母公司資料外洩,130萬借款人受到影響 https://www.bleepingcomputer.com/news/security/mortgage-firm-loancare-warns-13-million-people-of-data-breach/ 美國房地產教育訓練中心Real Estate Wealth Network資料庫不設防,曝露15億筆資料 https://www.vpnmentor.com/news/report-realestatewealthnetwork-breach/ 房地產管理軟體製造商的CRM系統曝露69萬客戶資料 https://cybernews.com/security/dubai-real-estate-agency-data-leak/ 生成式AI被濫用於釣魚郵件攻擊,研究人員呼籲企業組織應透過AI對抗 https://abnormalsecurity.com/blog/2023-ai-generated-email-attacks 俄羅斯企業組織遭到駭客組織Cloud Atlas鎖定,從事魚叉式網釣攻擊 https://thehackernews.com/2023/12/cloud-atlas-spear-phishing-attacks.html 竊資軟體RedLine、Vidar鎖定旅館而來,駭客假借投訴與訂房為由發動攻擊 https://news.sophos.com/en-us/2023/12/19/inhospitality-malspam-campaign-targets-hotel-industry/ E.研究報告/工具 啟用SSH遠端登入、資安防護卻不足的Linux系統,淪為挖礦、發動DDoS攻擊利器 https://asec.ahnlab.com/en/59972/ Smoke and Mirrors : Understanding The Workings of Wazawaka https://25491742.fs1.hubspotusercontent-eu1.net/hubfs/25491742/WAZAWAKA_TLPCLEAR_Report.pdf 駭客能讓自駕車把紅燈辨識成綠燈?分析 6 種 AI 模型攻擊,提升 AI 安全防禦力 https://scitechvista.nat.gov.tw/Article/C000003/detail?ID=d000add1-00a2-45f2-9a7e-bef05c17b7b9 你的網站非常危險 - Web安全攻防滲透駭客現場直播 https://www.tenlong.com.tw/products/9786267383261?list_name=r-zh_tw 前端開發資安入門|你不能忽視的漏洞對策必備知識 フロントエンド開発のためのセキュリティ入門 https://www.tenlong.com.tw/products/9786263247109?list_name=p-r-zh_tw 報告:Grand Theft Auto V 原始程式碼,報廢的 DLC 洩露 https://portal.sina.com.hk/technology/technology-game/gamereactor/2023/12/27/686855/%E5%A0%B1%E5%91%8A%EF%BC%9Agrand-theft-auto-v-%E5%8E%9F%E5%A7%8B%E7%A8%8B%E5%BC%8F%E7%A2%BC%EF%BC%8C%E5%A0%B1%E5%BB%A2%E7%9A%84-dlc-%E6%B4%A9%E9%9C%B2/#google_vignette 探索黑客服務領域:誠實技術支援的基礎知識 https://medium.com/@theshelady/%E7%B0%A1%E4%BB%8B-4d7fbe8f15d3 形塑未來,資安引領企業AI之路 https://money.udn.com/money/story/5636/7669547 資安躍居亞太區最大營運風險 https://www.ctee.com.tw/news/20231227700150-439901 資安預警通報:X-103_SUPERNOVA攻擊活動歸因及相關技術分析 https://www.issdu.com.tw/technology_detail.php?id=15&csrt=118661266517374876 AI資安風險猶存 專家:跟人工智慧談心不要說出祕密 https://udn.com/news/story/6812/7669247?from=udn-ch1_breaknews-1-0-news 全新 SLAM 攻擊,可自 AMD、Intel 處理器竊取機敏資訊 https://www.twcert.org.tw/tw/cp-104-7643-45300-1.html 智慧工廠如何逆轉 新形態資安攻擊 https://www.chinatimes.com/realtimenews/20231228002218-260412?chdtv 安永: 僅 20% 資安長認為現行網路安全管理方案有效 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10866 【生成式AI開啟資安新變革】AI資安2024 https://www.ithome.com.tw/article/160614 Analysis of Kimsuky Group's AppleSeed Malware Attack Trends https://asec.ahnlab.com/ko/59933/ 2023年全国网络安全行业职业技能大赛-电子数据取证分析师-writeup https://mp.weixin.qq.com/s?__biz=MzkzNjIwMzM5Nw==&mid=2247487637&idx=1&sn=46f54466d5e911ec081a19c306179189 工具:Webshell查杀呼叫集群 https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247488087&idx=1&sn=bcabe04ce0b0b92097ea7813c6371068 预警:针对 Linux 服务器的DDoS 机器人和加密货币挖矿程序攻击增多 https://www.anquanke.com/post/id/292276 CVE-2023-36802 与一种新的读写原语 ioring https://www.anquanke.com/post/id/292287 F.商業 防止晶片被逆向工程物理破解Jmem tek高度強化晶片資安防護 https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?CnlID=13&id=0000681225_66H3LEY61PMVQC6AMQUA4 駭客四伏 資安危機即商機 https://www.trademag.org.tw/page/itemsd/?id=7893634&no=19 趨勢科技榮獲最新美國 FedRAMP營運授權認證 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10876 企業被駭焦慮?微智安聯提供情資威脅解方 https://www.ctee.com.tw/news/20231228700185-439901 設定郵件稽核引擎、控管高機敏內容!荃贏全美密碼用雲端工具強化企業資安 https://www.wealth.com.tw/articles/20a4e3c0-894a-41b8-b52a-0b5a66289fdd 在地緣衝突升溫時刻,IBM 與北約如何攜手打造韌性與彈性兼具的資安防禦 https://buzzorange.com/techorange/2023/12/29/ibm-nci-agency-cybersecurity/ 零壹科技正式成為Extreme Networks 台灣合作夥伴 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10874 F5預測2024年: AISecOps興起、邊緣運算將成網路攻擊主要目標 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10872 自由系統、展望會、微軟「數位轉型及資安防護」論壇:如何兼顧高效及安全 https://www.bnext.com.tw/article/77932/fs2023.12 唯思安全WithSecure Business Suite 16推出本地主機版 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10861 Mozilla改變對Trusted Types防護技術的立場,計畫在瀏覽器導入 https://www.ithome.com.tw/news/160604 https://www.theregister.com/2023/12/21/mozilla_decides_trusted_types_is/ https://github.com/mozilla/standards-positions/issues/20#issuecomment-1853427823 Chrome將會於背景自動偵測外洩密碼、可疑擴充程式 https://www.ithome.com.tw/news/160520 G.政府 中正紀念堂用"中製掃地機"! 民眾憂心恐釀資安漏洞 掃地機器人"未連網"仍有疑慮 專家示警: 恐成駭客目標 https://www.youtube.com/watch?v=CagfJOF9sgM 主持國土安全政策會報 鄭副院長:持續強化我國關鍵基礎設施防護韌性 完備各項安全防護工作 https://www.ey.gov.tw/Page/9277F759E41CCD91/ad13cec4-eaf2-41eb-8c28-98e80ebe88ac 強化資安專業 113年起高考三級新增「資通安全」類科 https://reurl.cc/N4rv3Q 擴大進用資安人才 高考三級明年新增「資通安全」類科 https://news.ltn.com.tw/news/life/breakingnews/4534668 H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安 特斯拉自動駕駛系統 遭德國專家駭客手段攻破 https://news.tvbs.com.tw/world/2349420 只花600歐元,就能破解特斯拉自動駕駛系統!德國專家:沒想到這麼簡單 https://www.storm.mg/article/4965363 美國新年度NDAA生效 聯邦機構禁用中國無人機 https://reurl.cc/dLGNZz 行動聯網安全晶片持續守護IoT資安 https://www.2cm.com.tw/2cm/zh-tw/magazine/-MarketTrend/8809F1B91B9F4CC389D6A9EA04D576BA?type= 洛克威爾自動化 助強化工控資安 https://www.ctee.com.tw/news/20231228700182-439901 I.教育訓練 iPAS資訊安全工程師中級筆記 https://hackmd.io/@Not/iPASInformationSecuritySpecialist iPas資安工程師證照考前研習 https://reurl.cc/GEbA3p Coursera 盤點 7 項雲端資安認證,高薪跳板都在這了! https://buzzorange.com/techorange/2022/07/12/cloud-security-certificates/ 全球網絡安全勞動力失衡 (ISC)2免費課程及考試填補人才缺口 https://reurl.cc/m39MDj CISSP資安認證的8大領域 https://2formosa.blogspot.com/2022/12/CISSP-topic-domains.html CISSP考試心得 https://reurl.cc/KbY83j CISSP考試心得 – Benson https://reurl.cc/GbWvxd 目標導向-20天光速考過CISSP https://reurl.cc/2Zq6zn CISSP證照考試實戰心得 第一章:初期準備工作 https://netmag.tw/2022/06/17/the-cissp-has-learned-the-first-chapter-in-actual-combat CISSP證照考試實戰心得 第二章:規律且有紀律的讀書策略 https://netmag.tw/2022/07/01/the-cissp-is-in-the-field-of-combat-chapter-two-regular-and-disciplined-reading-strategies CISSP證照考試實戰心得 第三章:終極一戰 https://netmag.tw/2022/07/12/the-cissp-has-learned-a-third-chapter-in-actual-combat-experience-the-ultimate-battle Quick CISSP Infographic for IPSec https://www.studynotesandtheory.com/single-post/quick-cissp-infographic-for-ipsec CSSLP Certification - Security models in F# https://github.com/vbocan/csslp Certified Secure Software Lifecycle Professional in bullet points https://github.com/joeyhage/csslp-notes CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得 https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/ EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022 https://reurl.cc/1oyEM8 CEH v11 考試心得與準備方式 https://blog.sean.taipei/2022/01/ceh CEH https://github.com/a3cipher/CEH CodeRed by EC-Council https://github.com/codered-by-ec-council EC-Council CEH Practical / Master 準備心得 — 讓理論與實作相輔相成的學習 https://medium.com/blacksecurity/ceh-practical-master-3e80cac180a2 EC-Council CEHP考試準備心得 https://hackmd.io/@9dCJrgb6QHGd8dRfgHO0zg/r14xNn1po ECSA v10 考試心得與讀書資料分享/ ECSA v10 Review and Study Materials https://medium.com/blacksecurity/ecsa-v10-1ec76c0eb7d4 EC-Council ECSA資安分析專家 v10 考試心得分享 https://javaxtalk.blogspot.com/2019/05/ec-council-ecsa-v10.html 20180817 EC-Council ECSA v10 PASS https://www.ptt.cc/bbs/License/M.1534571704.A.5BA.html 關於EC-Council CPENT和LPT Master滲透測試證照準備方式及心得分享 https://medium.com/@ChadSecurity/%E9%97%9C%E6%96%BCec-council-cpent%E5%92%8Clpt-master%E6%BB%B2%E9%80%8F%E6%B8%AC%E8%A9%A6%E8%AD%89%E7%85%A7%E6%BA%96%E5%82%99%E6%96%B9%E5%BC%8F%E5%8F%8A%E5%BF%83%E5%BE%97%E5%88%86%E4%BA%AB-efb63de00a8d 深度解析 CPENT 考試心得、以及與 OSCP 的比較 https://reurl.cc/41eL8v EC-Council CPENT v1 滲透測試認證 – 內容及心得分享 https://hackercat.org/pentesting/ec-council-cpent-v1-experience-review CPENT 從暴力到破解 https://hackmd.io/@3WAsoRFgSlyy7pm10p60kg/ByO0zs295 Ec-Council CPENT心得 - 資安菜鳥從CEH到LPT Master https://4hsienyang.medium.com/cpent-lpt-master-ccaebf2dbc7f CPENT考試心得分享:一次拿到 LPT 滲透測試大師認證 https://ucom.uuu.com.tw/web/Testimony/Article/4404 kaizensecurity/CPENT https://github.com/kaizensecurity/CPENT/tree/master CPENT : Pentesting like NO OTHERS ! https://www.linkedin.com/pulse/cpent-pentesting-like-others-belly-rachdianto/ Journey of My CPENT Exam https://medium.com/techiepedia/journey-of-my-cpent-exam-3a5d7ee6d917 [備考心得]CompTIA Security+ (SY0–601) 上篇 https://reurl.cc/M053DK [備考心得]CompTIA Security+ (SY0–601) 下篇 https://reurl.cc/M053Gv comptia-security-plus https://github.com/ajfuto/comptia-security-plus security-plus https://github.com/fjavierm/security-plus CompTIA Security+ Certification Practice Test Questions https://www.examcompass.com/comptia/security-plus-certification/free-security-plus-practice-tests#google_vignette 不只是工程師才要懂的 App 資訊安全:取得資安檢測合格證書血淚史(iT邦幫忙鐵人賽系列書) https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html OSEP (Evasion Techniques and Breaching Defenses (PEN-300) 心得分享 https://hackmd.io/@henry-ko/HyQ56e8eF OSCP(Offensive Security Certified Professional) https://github.com/0x584A/oscp-notes/tree/master ISACA Certified Information Systems Auditor® (CISA) 國際電腦稽核師認證準備歷程心得、申請流程分享- 2023年 https://reurl.cc/aVLoX9 Learn NIST Inside Out With 21 Hours of Training @ 86% OFF https://thehackernews.com/2022/06/learn-nist-inside-out-with-21-hours-of.html 駭客與國家: 網路攻擊與地緣政治新常態 The hacker and the state: cyber attacks and the new normal of geopolitic https://reurl.cc/D3nKKj Practical Network Penetration Tester (PNPT) Certification Review https://tmc222.medium.com/practical-network-penetration-tester-pnpt-certification-review-4280e4e164df WUSON常用的基本詞彙 https://choson.lifenet.com.tw/?p=1958 證照仍是學習資安基本功的主要管道,有專家打造「資安證照地圖」 https://www.ithome.com.tw/news/156754 用證照證明自己實力之餘,更應將證照視為督促學習的最大動力 https://www.ithome.com.tw/news/156756 打破證照誤解與迷思,資安專家帶你釐清資安證照的意義 https://www.ithome.com.tw/news/156755 Accelerate Your Career with the Global Leader in Cyber Security Training https://www.sans.org/mlp/promo-partnership-hacker-news/ 6.近期資安活動及研討會 網路自由小聚 [1月] :拒絕真的需要勇氣,當平台遇到法律問題 2024/1/3 https://ocftw.kktix.cc/events/internetfreedom-january2024 Deep Learning Conversations & Happy Hour 2024/1/3 https://www.meetup.com/deep-learning-conversations/events/298011970/ SyntaxError 2024/1/3 https://www.meetup.com/pythonhug/events/pqnsctygccbfb/ Taipei dbt Meetup #19 feats Airflow Meetup (in-person 👫 & online 👨💻) 2024/1/4 https://www.meetup.com/taipei-dbt-meetup/events/297876626/ 2024 CISA_國際電腦稽核師認證研習班(平日) 2024/1/4~ 2024/1/10 https://www.caa.org.tw/coursedetail-36602.html AIS3 EOF CTF 2024 2024/1/5 ~ 2024/1/7 https://ais3.org/eof/Home/Rule Just a chat - with no Expectations 2024/1/6 https://www.meetup.com/taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-cryptocurrency-meetup/events/lsmkqsygccbjb/ WordPress - 桃園午茶小聚 Linner Meetup #32 2024/1/6 https://www.meetup.com/taoyuan-wordpress-meetup/events/298052588/ ISO/IEC 27001:2022資訊安全管理系統 CQI & IRCA主導稽核員訓練課程 2024/1/8 ~ 2024/1/12 https://www.caa.org.tw/coursedetail-36580.html 36th Annual FIRST Conference 2024/1/9 ~ 2024/1/14 https://www.first.org/conference/2024/ AWS re:Inforce 2024/1/10 ~ 2024/1/12 https://reinforce.awsevents.com/ SyntaxError 2024/1/10 https://www.meetup.com/pythonhug/events/pqnsctygccbnb/ ISO/IEC 27001:2022 資訊安全管理系統 主導稽核員轉版訓練課程 2024/1/10 ~ 2024/1/11 https://www.caa.org.tw/coursedetail-36566.html 國家高速網路與計算中心 教育訓練 大型語言模型LLMs課程教學-跟你組織內的知識庫對話 Talk To Your Internal Knowledge Base 2024/1/10 https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=4084&from_course_list_url=homepage Taipei DevOps User Group 4th Event, supported by Wankuma Alliance 2024/1/12 https://www.meetup.com/taipei-devops-user-group/events/297826906/ 2024年第一次會員研討會 - ISC2 資安之旅:Security Congress心得、得獎專案,以及資安反思 2024/1/16 https://isc2taipei.kktix.cc/events/isc2webinar1th Elixir Taiwan monthly meetup 2024/1/16 https://www.meetup.com/elixirtw-taipei/events/297578852/ SyntaxError 2024/1/17 https://www.meetup.com/pythonhug/events/pqnsctygccbwb/ 國家高速網路與計算中心 教育訓練 大型語言模型LLMs課程教學-跟你組織內的知識庫對話 Talk To Your Internal Knowledge Base 2024/1/17 https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=4085&from_course_list_url=homepage 【Monosparta ②⓪②④ 第一梯次 軟體開發實戰訓練營➠線上說明會 2024/1/17 https://trunk-studio.kktix.cc/events/monosparta-202401 2024年資安新手實戰培訓課程說明會 2024/1/19 https://acsiacad.kktix.cc/events/acadnewhire 2024 Global NF Conference 2024/1/20 ~ 2024/1/25 https://www.ctf.org/events/2024-joint-global-nf-conference# 獲利究竟被誰偷走了-Excel樞紐分析編製各式報表與查核 2024/1/24 https://www.caa.org.tw/coursedetail-36599.html Cyber Range in 2024 2024/1/24 ~ 2024/1/25 https://www.wwt.com/event/64e4ebafc176b30347f0568a SyntaxError 2024/1/24 https://www.meetup.com/pythonhug/events/pqnsctygccbgc/ SANS Cyber Threat Intelligence Summit & Training 2024 2024/1/29 - 2024/2/5 https://www.sans.org/cyber-security-training-events/cyber-threat-intelligence-summit-2024/ SyntaxError 2024/1/31 https://www.meetup.com/pythonhug/events/pqnsctygccbpc/ 第七屆《Hit AI & Blockchain》人工智慧暨區塊鏈產業高峰會 2024/2/6 https://www.accupass.com/event/2311160625102022535520 【安碁學苑】IPAS 資訊安全工程師中級證照培訓班 2024/2/20-2024/2/3/5 https://www.accupass.com/event/2312151022301066488466
×
Sign in
Email
Password
Forgot password
or
By clicking below, you agree to our
terms of service
.
Sign in via Facebook
Sign in via Twitter
Sign in via GitHub
Sign in via Dropbox
Sign in with Wallet
Wallet (
)
Connect another wallet
New to HackMD?
Sign up