During an investigation into exposed OpenWebUI servers, the Cybernews research team identified a malicious campaign targeting vulnerable OpenWebUI servers with cryptocurrency miners and Info Stealers.

此次攻击并未使用典型的恶意基础设施，而是精心构建了一条包含七个步骤的重定向链条。攻击者利用了包括思科（Cisco）安全邮件网关、Nylas邮件API平台在内的全球知名合法服务作为跳板，结合双重DKIM签名技术确保邮件通过DMARC验证，并利用过期域名的重新注册获取历史信誉，最终将受害者引导至受Cloudflare保护的钓鱼页面。这种攻击手法的核心在于“信任传递”：攻击者不直接建立信任，而是通过劫持 ...

IMDb.com, Inc. takes no responsibility for the content or accuracy of the above news articles, Tweets, or blog posts. This content is published for the entertainment of our users only. The news ...