12月8日每日安全热点 - 手机银行欺诈：Brata

漏洞 VulnerabilityGrafana 任意文件读取漏洞通告https://cert.360.cn/warning/detail?id=4f2ade611da7d8876ae789eb6c8aa1edGoogle Chrome 发布多个安全漏洞更新https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html安全事件 Security Incident手机银行欺诈：Bratahttps://www.cleafy.com/cleafy-labs/mobile-banking-fraud-brata-strikes-again攻击者从BitMart平台窃取了价值超过1.5亿美元的加密货币代币https://securityaffairs.co/wordpress/125321/cyber-crime/bitmart-security-breach.html恶意的Excel XLL插件推送RedLine密码窃取恶意软件https://www.bleepingcomputer.com/news/security/malicious-excel-xll-add-ins-push-redline-password-stealing-malware/新的推特网络钓鱼活动针对已验证的帐户https://www.bleepingcomputer.com/news/security/new-twitter-phishing-campaign-targets-verified-accounts/Picus威胁库更新为Godzilla Webshell使用APTs利用CVE-2021-44077https://www.picussecurity.com/resource/blog/godzilla-webshell-used-by-apts-exploiting-cve-2021-44077