新Nemty勒索软件通过受损RDP链接传播

<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <script src="/webstatic/js/toMobile.js?ver=1744362670"></script> <title>新Nemty勒索软件通过受损RDP链接传播 - 百度安全社区</title> <meta name="keywords" content="勒索病毒,nemty,比特币,恶意软件"> <meta name="description" content="上周末，网络安全研究人员发现了一个新的勒索软件，称之为Nemty。这是此勒索软件的初代版本。"> <meta http-equiv="X-UA-Compatible" content="IE=edge;IE=10;chrome=1"> <link rel="shortcut icon" href="/favicons.ico" type="image/x-icon"> <link rel="icon" href="/favicons.ico" type="image/x-icon"> <link href="/webstatic/lib/bootstrap.min.css" type="text/css" rel="stylesheet"> <link href="/webstatic/css/common.css?ver=1744362670" type="text/css" rel="stylesheet"> <link href="/webstatic/css/forum.css?ver=1744362670" type="text/css" rel="stylesheet"></head> <body> <style> /* 用于解决 https://wappass.baidu.com/static/machine/css/api/mkd_8c7067d.css a:active opacity: .6 问题 */ a:active { opacity: inherit; } </style>  <div class="menu mover"> <div class="menu-con">   <div class="mlogin no-login"> <a class="login-btn" href="javascript:void(0);">登录</a> </div>  <div class="mlogin has-login">  <div class="muser-name"> <a target="_blank" href="javascript:void(0)" onclick="return false" class="muser-link"> <span id="user_name"></span> </a> <div class="muser-down"> <a id="quit_addr" href="#" target="_self">退出账户</a> </div> </div> </div>  <a href="/" class="mlogo"></a> <ul class="mnavlist" id="mnavlist"> </ul> </div> </div>  <div class="forum clearfix" rel="detail"> <div class="forum-right">  <div class="frbox topad" id="hotArt"> <a target="_blank" href="/article/1923" style="display:block"> <img src="/upload/ue/image/20250408/1744091148131855.png" alt=""> <span>安全运营 | 第十期「纵深防护·极智运营」度安讲技术沙龙成功举办</span> </a> </div> <div class="product-rank"> <div class="product-rank-title"> 产品人气榜 </div> <ul id="rankBox"> <li class="rank-top"> <div class="product-rank-left rankTop1"></div> <div class="product-rank-right"> <a href="/pages/page.html?pid=39" class="product-title"> 史宾格安全及隐私合规平台 </a> <div class="product-des">3分钟完成一周工作量更快实现隐私合规</div> </div> </li><li class="rank-top"> <div class="product-rank-left rankTop2"></div> <div class="product-rank-right"> <a href="/pages/page.html?pid=20" class="product-title"> IP信誉查询 </a> <div class="product-des">多因子计算，多维度画像</div> </div> </li><li class="rank-top"> <div class="product-rank-left rankTop3"></div> <div class="product-rank-right"> <a href="/pages/page.html?pid=67" class="product-title"> 智能数据安全网关 </a> <div class="product-des">为企业数据安全治理提供一体化数据安全解决方案</div> </div> </li><li> <div class="product-rank-left">4</div> <a href="/pages/page.html?pid=18" class="product-rank-right"> 网址安全检测 </a> </li><li> <div class="product-rank-left">5</div> <a href="/pages/page.html?pid=19" class="product-rank-right"> SMS短信内容安全 </a> </li><li> <div class="product-rank-left">6</div> <a href="/pages/page.html?pid=5" class="product-rank-right"> 百度漏洞扫描 </a> </li><li> <div class="product-rank-left">7</div> <a href="/pages/page.html?pid=49" class="product-rank-right"> 爬虫流量识别 </a> </li><li> <div class="product-rank-left">8</div> <a href="/pages/page.html?pid=61" class="product-rank-right"> 百度AI多人体温检测 </a> </li><li> <div class="product-rank-left">9</div> <a href="/pages/page.html?pid=74" class="product-rank-right"> 工业大脑解决方案 </a> </li><li> <div class="product-rank-left">10</div> <a href="/pages/page.html?pid=64" class="product-rank-right"> APP安全解决方案 </a> </li><li> <div class="product-rank-left">11</div> <a href="/pages/page.html?pid=29" class="product-rank-right"> 安全OTA </a> </li><li> <div class="product-rank-left">12</div> <a href="/pages/page.html?pid=77" class="product-rank-right"> 大模型安全解决方案 </a> </li><li> <div class="product-rank-left">13</div> <a href="/pages/page.html?pid=70" class="product-rank-right"> 安全知识图谱 </a> </li> </ul> </div><div class="fixed"> <div class="frbox tag-part" id="theme"> <h4>热门主题</h4> <div class="frboxcon frboxcon-pd"> <ul class="forum-tags" id="hotTags"> <li> <a target="_blank" href="/tag/131"> BackerTalk</a> </li> <li> <a target="_blank" href="/tag/224"> SiemPentTeam</a> </li> <li> <a target="_blank" href="/tag/419"> 百度安全</a> </li> <li> <a target="_blank" href="/tag/5"> 漏洞</a> </li> <li> <a target="_blank" href="/tag/3"> 智能安全</a> </li> <li> <a target="_blank" href="/tag/7"> 攻击</a> </li> <li> <a target="_blank" href="/tag/6"> 黑产</a> </li> <li> <a target="_blank" href="/tag/9"> 安全</a> </li> <li> <a target="_blank" href="/tag/19"> 网络安全</a> </li> <li> <a target="_blank" href="/tag/11"> 黑客</a> </li> <li> <a target="_blank" href="/tag/44"> 恶意软件</a> </li> </ul> </div> </div> </div> <div class="fixed"> <div class="frbox"> <h4>热门文章</h4> <div class="frboxcon"> <ul class="fr-notice-list" id="recommendArt"> <li class="fr-notice-list-li"> <a href="/article/1923" target="_blank" class="fr-notice-list-link"> <div class="notice-img imgShadow"> <img src="/upload/ue/image/20250408/1744091148131855.png" alt=""> </div> <div class="notice-info">安全运营 | 第十期「纵深防护·极智运营」度安讲技术沙龙成功举办</div> </a> </li><li class="fr-notice-list-li"> <a href="/article/1922" target="_blank" class="fr-notice-list-link"> <div class="notice-img imgShadow"> <img src="/upload/ue/image/20250318/1742276030896576.png" alt=""> </div> <div class="notice-info">模型上新！体验文心大模型4.5卓越性能，文心快码邀您探索</div> </a> </li><li class="fr-notice-list-li"> <a href="/article/1921" target="_blank" class="fr-notice-list-link"> <div class="notice-img imgShadow"> <img src="/upload/ue/image/20250313/1741856397996482.png" alt=""> </div> <div class="notice-info">文心快码全新升级！Comate Zulu开放公测，超多好礼派送中</div> </a> </li><li class="fr-notice-list-li"> <a href="/article/1920" target="_blank" class="fr-notice-list-link"> <div class="notice-img imgShadow"> <img src="/upload/ue/image/20250306/1741255476943495.png" alt=""> </div> <div class="notice-info">警惕！AI组件ComfyUI易被黑产盯上</div> </a> </li><li class="fr-notice-list-li"> <a href="/article/1919" target="_blank" class="fr-notice-list-link"> <div class="notice-img imgShadow"> <img src="/upload/ue/image/20250227/1740653380412553.png" alt=""> </div> <div class="notice-info">大模型驱动智能合规 | 构建企业个保审计新范式</div> </a> </li> </ul> </div> </div> </div>  </div> <div class="forum-left"> <div class="forum-detail" id="forumDetail"><h2>新Nemty勒索软件通过受损RDP链接传播</h2> <p class="smm">2019-09-06 22:09:54<span class="forum-article-heat">9401人阅读</span></p> <div class="forum-share forum-detail-tag-share"> <div class="tag-top"> <div class="clearfix forum-pad forum-pad-detail"> <ul class="forum-tags"> <li><a target="_blank" href="/tag/208">勒索病毒</a></li> <li><a target="_blank" href="/tag/401">nemty</a></li> <li><a target="_blank" href="/tag/69">比特币</a></li> <li><a target="_blank" href="/tag/44">恶意软件</a></li> </ul> </div> </div> <div class="share-top"> 分享至：<i class="tipbtn weichartQr"></i> <a class="tipbtn weibo" href="http://service.weibo.com/share/share.php?appkey=&title=新Nemty勒索软件通过受损RDP链接传播&url=https://anquan.baidu.com/article/959&style=simple" target="_blank"> </a> </div> </div>  <div class="fd-content clearfix"> <p><br/></p><p>最近一两年勒索病毒主要是针对企业进行攻击，被加密勒索之后，很多企业、政府、组织为了快速恢复业务都会选择交付赎金或找中介进行解密，不少勒索病毒运营团队这一两年都在背后“闷声发大财”。</p><p style="text-align: center;"><img src="/upload/ue/image/20190827/1566888021171700.png" alt="VlsIxvaoiFsQAIHiLk3RT2bYJE9z5eJr6laxZrDr.png"/></p><p>上周末，网络安全研究人员发现了一个新的勒索软件，称之为Nemty。这是此勒索软件的初代版本。</p><p><br/></p><p><strong>赎金要求</strong></p><p><br/></p><p>与其他类型的文件加密恶意软件一样，Nemty将删除其处理的文件的卷影副本，从而使受害者无法恢复Windows操作系统创建的数据版本。</p><p>受害者将看到一份赎金通知，告知受害者可以通过支付一定的赎金来获得解密密钥，并找回数据。</p><p style="text-align: center;"><img src="/upload/ue/image/20190827/1566888049564955.png" alt="F9Y1KO7ksQGZvUON6S9OwhVetyux6j1z5sfyUvUC.png"/></p><p>具体来说，赎金需求为0.09981 BTC，目前价值约1000美元左右。支付网址托管在Tor网络上以匿名，用户必须上传其配置文件。在此基础上，攻击者提供了另一个带有聊天功能的网址链接以及有关需求的更多信息。</p><p style="text-align: center;"><img src="/upload/ue/image/20190827/1566888066297483.png" alt="tW9PnjA0wo5b7KTQW6zFKn0CWggJyy490MtBTZdA.png"/></p><p><br/></p><p><strong>代码中的“蛛丝马迹”</strong></p><p><br/></p><p>安全研究人员Vitali Kremez仔细研究了这个恶意软件，发现它带有一个不寻常的互斥对象名称，如下图所示：</p><p style="text-align: center;"><img src="/upload/ue/image/20190827/1566888080801318.png" alt="ngKWNPViS2l2MI6IBI4DONiAhlueJGdKb0TVscRr.png" width="440" height="453" style="width: 440px; height: 453px;"/></p><p style="text-align: center;"><img src="/upload/ue/image/20190827/1566888087749217.png" alt="Y1NCqWZIOu5efqOi9MdSAIR8bCdMSuyur6SlCJfp.png" width="531" height="408" style="width: 531px; height: 408px;"/><br/></p><p>互斥对象是一个标志，允许程序通过访问一个执行线程来控制资源。</p><p>Kremez在Nemty的代码中注意到的另一个奇怪的事情是俄罗斯总统——弗拉基米尔·普京的照片链接。特殊之处并不止于此，研究人员还发现了一条直接发送给反病毒行业的信息。</p><p style="text-align: center;"><img src="/upload/ue/image/20190827/1566888103685193.png" alt="F1zJCLvIjnqE7ePDD65LrL1GGfTFp9WDTN5yeQa4.png"/></p><p>值得一提的是，Nemty勒索软件会验证受感染设备是否来自俄罗斯、白俄罗斯、哈萨克斯坦、塔吉克斯坦和乌克兰这5个国家。Kremez认为，这并意味着攻击者会对这些国家的用户“网开一面”。</p><p>该恶意软件代码中的“isRU”检查只是将处于这5个国家的设备系统标记一下，但仍会向攻击者发送计算机名称、用户名、操作系统和计算机ID等数据。</p><p style="text-align: center;"><img src="/upload/ue/image/20190827/1566888113621159.png" alt="Z5OKAmvL3HdC8d8iisvFX0Ud5VWrePxKibhK2A5J.png"/></p><p>目前还不清楚Nemty是如何分发的，但Kremez从一个可靠的消息来源获悉，攻击者是通过受损的远程桌面连接（RDP）来部署该软件的。与网络钓鱼电子邮件（目前是常见的分发方法）相比，利用RDP连接对攻击者来说更加方便，因为他们不再需要等待受害者“主动上钩”之后才能进行后续操作。</p><hr/><p><span style="font-size: 14px; color: rgb(127, 127, 127);">本文转载自：Mottoin<br/></span></p><p><span style="font-size: 14px; color: rgb(127, 127, 127);">原文链接：</span><a href="http://www.mottoin.com/detail/4175.html" style="text-decoration: underline; font-size: 14px; color: rgb(127, 127, 127);"><span style="font-size: 14px; color: rgb(127, 127, 127);">http://www.mottoin.com/detail/4175.html</span></a></p><p><span style="font-size: 14px; color: rgb(127, 127, 127);">原文作者：Gump</span></p><p><br/></p> </div>  <div class="forum-share forum-share-bottom">  <div class="share-bottom"> 分享至：<i class="tipbtn weichartQr"></i> <a class="tipbtn weibo" href="http://service.weibo.com/share/share.php?appkey=&title=新Nemty勒索软件通过受损RDP链接传播&url=https://anquan.baidu.com/article/959&style=simple" target="_blank"> </a> </div> </div> </div> <div id="recom-part"> <div class="detail-recom-read" id="detail-recom-read"> <div class="recom-title">推荐阅读</div> </div> <ul class="recom-reading clearfix"> <li> <a href="/article/1610"> <span class="recom-read-img imgShadow" style="background: url(/upload/ue/image/20220413/1649819847797816.jpg) no-repeat center; background-size: cover"></span> <span class="recom-read-sub-title"> <span>最新发现：恶意软件 FFDroider 佯装成 Telegram 攻击窃取浏览器用户密码</span> </span> </a> </li> <li> <a href="/article/1585"> <span class="recom-read-img imgShadow" style="background: url(/upload/ue/image/20220310/1646893324768395.jpg) no-repeat center; background-size: cover"></span> <span class="recom-read-sub-title"> <span>大规模的Meris僵尸网络嵌入来自REvil的勒索软件注释</span> </span> </a> </li> <li> <a href="/article/1518"> <span class="recom-read-img imgShadow" style="background: url(/upload/ue/image/20211116/1637041892196741.jpg) no-repeat center; background-size: cover"></span> <span class="recom-read-sub-title"> <span>虚假安装程序已经成为了传播恶意软件的新途径</span> </span> </a> </li> <li> <a href="/article/1467"> <span class="recom-read-img imgShadow" style="background: url(/upload/ue/image/20210902/1630570401887468.jpg) no-repeat center; background-size: cover"></span> <span class="recom-read-sub-title"> <span>2021年恶意软件AdLoad绕过了苹果XProtect的防护</span> </span> </a> </li> <li> <a href="/article/1430"> <span class="recom-read-img imgShadow" style="background: url(/upload/ue/image/20210720/1626763065458341.png) no-repeat center; background-size: cover"></span> <span class="recom-read-sub-title"> <span>iPhone被曝存在安全隐患：不点击链接也有可能被入侵</span> </span> </a> </li> </ul> </div> </div> </div> <div class="popover fade top in" id="qrimg" style="left: 1172.31px; top: 10037px; display: none;"> <div class="arrow" style="left: 22.1812%;"></div> <div class="popover-content"> 微信扫描访问文章<br> <img src="" alt="" width="121"> </div> </div> <script> var aid = 959; </script> <div class="footer"> <div class="footer-container"> <div class="footer-cell contact-infos"> <div class="footer-cell-content"> <img width="158" src="/webstatic/img/logo_baiduanquan_navbar_web.svg" alt="logo"> <div class="spu-btn-primary" id="footer-apply" style="margin-bottom: 10px;">立即咨询</div> <span id="footer-contact">商务咨询：400-805-4999</span> </div> </div> <div class="footer-cell foot-border-left"> <div class="footer-cell-head">安全产品</div> <div class="footer-cell-content"> <a href="https://anquan.baidu.com/page/1" target="_blank">DDoS攻击防护</a> </div></div><div class="footer-cell false"> <div class="footer-cell-head">解决方案</div> <div class="footer-cell-content"> <a href="https://anquan.baidu.com/page/6" target="_blank">IDC智云盾</a> <a href="https://anquan.baidu.com/page/7" target="_blank">云高防</a> <a href="https://anquan.baidu.com/page/8" target="_blank">xSRC</a> <a href="https://anquan.baidu.com/page/9" target="_blank">gSRC</a> </div></div><div class="footer-cell false"> <div class="footer-cell-head">安全服务</div> <div class="footer-cell-content"> <a href="https://anquan.baidu.com/page/13" target="_blank">渗透测试</a> <a href="https://anquan.baidu.com/page/16" target="_blank">安全培训</a> </div></div><div class="footer-cell false"> <div class="footer-cell-head">开放服务</div> <div class="footer-cell-content"> <a href="https://anquan.baidu.com/page/18" target="_blank">网址安全检测</a> <a href="https://anquan.baidu.com/page/19" target="_blank">SMS短信内容安全</a> </div></div><div class="footer-cell false"> <div class="footer-cell-head">其他</div> <div class="footer-cell-content"> <a href="https://anquan.baidu.com/forum" target="_blank">安全社区</a> <a href="https://www.baidu.com/duty/yinsiquan-policy.html" target="_blank">隐私协议</a> </div></div> <div class="footer-cell"> <div class="footer-cell-head">关注我们</div> <div class="footer-cell-content"> <img src="/webstatic/img/newicon/icon_WeChat.jpg" alt="bar-code" width="121"> </div> </div> </div> <div class="footer-site-line"> <div class="footer-container-line pl"></div> </div> <div class="footer-tips"> <p id="relatedLinks"> <a href=http://bsb.baidu.com/ target="_blank">网址检测</a> <a href=https://www.oasesalliance.com target="_blank">OASES联盟</a> <a href=http://bsrc.baidu.com/ target="_blank">BSRC</a> <a href=https://comate.baidu.com/ target="_blank">Comate智能代码助手</a> <a href=http://hao.lenovo.com.cn/?channel=bdsec target="_blank">智慧联想浏览器</a> <a href=https://www.freebuf.com/ target="_blank">FreeBuf</a> <a href=https://www.leiphone.com target="_blank">雷锋网</a> <a href=https://www.4hou.com/ target="_blank">嘶吼</a> <a href=https://www.bugbank.cn target="_blank">漏洞银行</a> <a href=https://developer.baidu.com/?hmsr=百度安全官网 target="_blank">百度开发者中心</a> <a href=https://ziyuan.baidu.com target="_blank">百度站长平台</a> <a href=https://cloud.baidu.com/ target="_blank">百度智能云</a> <a href=http://abcxueyuan.baidu.com target="_blank">百度云智学院</a> <a href=https://vr.baidu.com target="_blank">百度VR</a> <a href=https://pan.baidu.com/union target="_blank">百度网盘开放平台</a> <a href=https://app.baidu.com/newapp/index target="_blank">百度移动分发平台</a> <a href=https://www.seclover.com/ target="_blank">四叶草安全</a> <a href=https://e.baidu.com/lp/search/?refer=1320 target="_blank">企业推广</a> <p class="copyright"> <span>© 2025  Baidu </span> <a href="https://www.baidu.com/duty/" target="_blank">  使用百度前必读</a> <a href="http://help.baidu.com/" target="_blank">  意见反馈</a>    <a href="https://beian.miit.gov.cn/" target="_blank">京ICP证030173号</a>  <a href="https://beian.miit.gov.cn/" target="_blank">京公网安备11000002000001号</a> </p> </div> <div class="contact"> <a href="" class="gotop" id="backTop"> <img src="/webstatic/img/bbs/icon_backtothetop@1x.svg"> </a> <a href="" class="aboatqr active"> </a> </div> <div class="contact-info hidden-style"> 关注我们<br> <img src="/webstatic/img/newicon/icon_WeChat.jpg" alt="" width="121"> </div> </div> <div class="overall-form-box saas-modal"> <div class="modal-con overall-form-con"> <h3 class="modal-con-h3"> </h3> <span class="overall-form-close modal-close" id="closeForm"></span> <div class="overall-form-mod"> <div class="overall-mod-list"> <div class="overall-mod-list-left"> <span class="hintStart">*</span><span>身份类型</span> </div> <div class="overall-mod-list-right"> <div class="overall-type-box mr40 ml10"> <span class="overall-type-select on" data-type=2><i></i>️</span> <span class="overall-type-val">企业</span> </div> <div class="overall-type-box"> <span class="overall-type-select" data-type=1><i></i>️</span> <span class="overall-type-val">个人</span> </div> <div class="waring-hint"> </div> </div> </div> <div class="overall-mod-list"> <div class="overall-mod-list-left"> <span class="hintStart">*</span><span>企业名称</span> </div> <div class="overall-mod-list-right"> <input type="text" placeholder="请输入真实企业名称" id="enterpriseName"> <div class="waring-hint"> 企业名称不能为空 </div> </div> </div> <div class="overall-mod-list"> <div class="overall-mod-list-left"> <span class="hintStart">*</span><span>真实姓名</span> </div> <div class="overall-mod-list-right"> <input type="text" placeholder="请输入真实姓名便于联系" id="enterpriseUserName"> <div class="waring-hint"> 真实姓名不能为空 </div> </div> </div> <div class="overall-mod-list"> <div class="overall-mod-list-left"> <span class="hintStart">*</span><span>电话号码</span> </div> <div class="overall-mod-list-right"> <input type="text" placeholder="请输入真实电话号码便于联系" id="enterprisePhone"> <div class="waring-hint" id="phoneHint"> 电话号码不能为空 </div> </div> </div> <div class="overall-mod-list"> <div class="overall-mod-list-left"> <span class="hintStart">*</span><span>邮箱</span> </div> <div class="overall-mod-list-right"> <input type="text" placeholder="请输入真实邮箱便于联系" id="enterpriseEmail"> <div class="waring-hint" id="emailHint"> 邮箱不能为空 </div> </div> </div> <div class="overall-mod-list overall-mod-list-handle-select"> <div class="overall-mod-list-left"> <span class="hintStart">*</span><span>申请服务</span> </div> <div class="overall-mod-list-right"> <div class="overall-mod-apply-select-container"> <select class="overall-mod-apply-select" placeholder="申请服务" id="applySelect"> <option value="智能硬件“安全+”">智能硬件“安全+”</option> <option value="个人信息保护">个人信息保护</option> <option value="远程办公守护（WAF+VPN）">远程办公守护（WAF+VPN）</option> <option value="公益平台保护">公益平台保护</option> <option value="云加速SCDN">云加速SCDN</option> <option value="业务风控">业务风控</option> <option value="APP消息推送">APP消息推送</option> </select> </div> <div class="waring-hint"> </div> </div> </div> <div class="overall-mod-list overall-mod-list-handle-textarea on"> <div class="overall-mod-list-left"> <span class="hintStart">*</span><span>咨询内容</span> </div> <div class="overall-mod-list-right"> <textarea placeholder="请描述你想咨询的内容" class="overall-textarea"></textarea> <div class="waring-hint"> 咨询内容不能为空 </div> </div> </div> <div class="overall-mod-list"> <div class="overall-mod-list-left"> <span class="hintStart">*</span><span>验证码</span> </div> <div class="overall-mod-list-right pr"> <input type="text" placeholder="请输入右侧验证码" class="width140" id="enterpriseCode"> <div class="overall-code" id="overallCode"> <img src="/catpcha" alt="" height="100%"> </div> <div class="waring-hint" id="codeHint"> 验证码不能为空 </div> </div> </div> <div class="overall-submit saas-btn fr"> 提交 </div> </div> </div> </div> <div class="overall-form-success saas-modal"> <div class="modal-con overall-form-con"> <span class="overall-form-close close-form-success modal-close"></span> <div class="form-modal-title"> 提交成功 </div> <img src="/webstatic/img/footer/icon_success.svg" alt="" class="form-modal-img"> <div class="form-modal-text"> 您的申请已提交，之后会有我们的商务团队与您联系，谢谢！ </div> <div class="close-form-success saas-btn"> 关闭 </div> </div> </div> <div class="saas-login-dialog"> <div class="saas-login-container"> <div class="saas-login-container-left"> </div> <div class="saas-login-container-right"> <div class="saas-login-container-right-title"> <div class="saas-login-dialog-close"></div> </div> <div class="saas-login-dialog-tab clearfix"> <div class="saas-login-dialog-tab-item active">百度账号</div> <div class="saas-login-dialog-tab-item">百度推广账号</div> </div> <div class="saas-login-container-right-body"> <div class="passport-login saas-login-dialog-tab-container active"> <div id="passport-login"></div> </div> <div class="saas-login-dialog-tab-container"> <div id="uc-passport-login"></div> </div> </div> <div class="saas-login-container-right-footer"> 温馨提示：与百度搜索、百度贴吧、百度云盘、百度知道、百度文库等产品通用。 </div> </div> </div> </div> <div class="conpin saas-modal"> <div class="conpin-container"> <div class="conpin-close"></div> <div class="conpin-value show" data-key="voucher_price"> <div class="conpin-value-unit">￥</div> <div class="conpin-value-price">0</div> <div class="conpin-value-des">现金券</div> </div> <div class="conpin-value"></div> <div class="conpin-value" data-key="try_time"> <div class="conpin-value-price">0</div>  <div class="conpin-value-des">兑换券</div> </div> <div class="conpin-name"></div> <div class="conpin-btn">立即领取</div> <div class="conpin-no-login">登录即可领取优惠券</div> <div class="conpin-success">领取成功</div> </div> </div><script src="//hm.baidu.com/hm.js?3bc064e919b01ed9e8c5459f2fae3fe4"></script> <script src="/webstatic/lib/jquery.min.js?ver=1744362670"></script> <script type="text/javascript" src="//passport.baidu.com/passApi/js/wrapper.js?ver=1744362670"></script><script type="text/javascript" src="//cas.baidu.com/staticv2/dep/common-login/api.js?ver=1744362670"></script> <script src="/webstatic/js/renderPage.js?ver=1744362670"></script> <script src="/webstatic/js/forum.js?ver=1744362670"></script><script> (function () { var path = [ '/haoma/search', '/haoma/common', '/page/', '/product/', '/activity/prize', 'vdc/fileCheck', '/activity/srd', '/activity/su', '/springer/plan', '/bsi/index', '/activity/newYear', '/partner/apply' ]; window.antibotObserver = null; if (window.createObserver) { window.antibotObserver = createObserver(); } var len = path.length; var pathname = location.pathname; var search = location.search; var isTargetPage = false; var key = '__abbaidu_20181211_cb'; for (var i = 0; i < len; i++) { var curIndex = pathname.indexOf(path[i]); if (curIndex >= 0) { isTargetPage = true; } } if (/voucher_id/.test(search) && /voucher_flag/.test(search)) { isTargetPage = true; } if (isTargetPage) { window['__abbaidu_2024_subidgetf'] = function () { var subid = '1234'; return subid; }; window['__abbaidu_2024_cb'] = function (responseData) { if (window.localStorage) { window.localStorage.setItem(key, responseData); if (loadPageReport) { loadPageReport(responseData); } if (window.antibotObserver && window.antibotObserver.listen) { var data = {}; try { data = JSON.parse(responseData); } catch (e) { data = {}; } window.antibotObserver.listen(data); } } }; var script = document.createElement('script'); script.src = 'https://dlswbr.baidu.com/heicha/mw/abclite-2024-s.js'; document.body.appendChild(script); } else { if (window.localStorage) { window.localStorage.removeItem(key); } } })(); </script> </body> </html>

CINXE.COM

新Nemty勒索软件通过受损RDP链接传播 - 百度安全社区