勒索軟件流行態(tài)勢分析Cephalus、Pear、Charon等家族。本月安全研究人員發(fā)現(xiàn)了首款使用AI模型驅(qū)動的勒生成的Lua腳本會遍歷本地文件系統(tǒng)，識別并定位目標(biāo)文件。一致性。借助AI的動態(tài)生成能力，可能使攻擊行為更靈活，例如，根據(jù)目標(biāo)環(huán)境調(diào)整1.檢測本地系統(tǒng)與軟件環(huán)境，創(chuàng)建對應(yīng)環(huán)境的漏洞利用腳本，進(jìn)行提權(quán)與持2.針對本地環(huán)境中使用Lua腳本的游戲與應(yīng)用軟件進(jìn)行白利用劫持，以繞過3.針對自身創(chuàng)建腳本進(jìn)行混淆，以及利用多種技術(shù)方式，嘗試致盲、關(guān)閉本5.檢測選擇非工作時段且無用戶操作的時機進(jìn)行文件加密，同時刪除各類企基于對360反勒索服務(wù)數(shù)據(jù)的分析研判，360數(shù)字安全集團高級威脅研究分析中心感染數(shù)據(jù)分析針對本月勒索軟件受害者設(shè)備所中病毒家族進(jìn)行統(tǒng)計：Weaxor家族占比51.82%居圖1.2025年8月勒索軟件家族占比對本月受害者所使用的操作系統(tǒng)進(jìn)行統(tǒng)計，位居前三的是：Windows10、Windows圖2.2025年8月勒索軟件入侵操作系統(tǒng)占比圖3.2025年8月勒索軟件入侵操作系統(tǒng)類型占比勒索軟件熱點事件日產(chǎn)日本公司向媒體證實，攻擊者在未經(jīng)授權(quán)的情況下訪問了其子公司Creative英國電信公司ColtTechnologyServices證實，隨著Warlock勒索軟件團文件以20萬美元的價格出售，據(jù)稱包含財務(wù)信息、網(wǎng)絡(luò)架構(gòu)數(shù)據(jù)和客戶信息。雖然目前尚不確定本次對Colt勒索的贖金金額具體是多少，但此前該勒索軟件團伙的贖金訴求通常在45萬至數(shù)百萬美元之間。發(fā)現(xiàn)的。攻擊者通過短信或電話與員工聯(lián)系，假裝來自人力資源或IT部門，試圖誘騙能是與ShinyHunters勒索集團相關(guān)的一波安全漏洞的一部分，該勒索集團通過社會工黑客信息披露BM-2cXFq2HvWpBCesbm7F7hw7MBkTaa1yfDecryptionhelping@aol.Helpingdecryption@cyberfear.creopening2025@gmailshirleyrichardsoncrpdongmin.liu@earlyligAnswer:Encsgi2@veronica.stein1998@onionmaiworm01@4569f6322bc3b22e9@protMariaJTipton@364482@jabber.hot-crestoring_sup@indiaNeZhadecryption@restoring_sup@computer4NeZhadecryption@miragesity@hotmail.crestoring_reserve@indiakayla7tzpnthompson@aol表1.黑客郵箱圖4.2025年8月通過數(shù)據(jù)泄露獲利的勒索軟件家族占比本月共有519個組織/企業(yè)遭遇雙重勒索/多重勒索攻擊，其中，包含中國12個組ΕWoodsideBondtechHilcoMetalBuilding&RooToowoombaFriendlySocieMicrocosmProvalveArmaturenGmbH&Co.atlantaneighborhoodTheLawOfficesofHicks&DeAdvancedBlendingSolutionsHKHardware&EngineeringElkhartIndependentSArchitecturalDesignWestDUCApp:GlobalMoneyMovement,AndersonPackagingAtlasTransfer&StorageBurger&BrownEngineerMutualScrew&SupplyHorizonHydraulicsCommunityServicesofMissAlascomBüCHNERBARELLAHolMediateManagementStThomasMoreCatholicHighMPOWERHealthManesaHowardFinancial&AssociaEuropeanBusinessServerClNEASTownofChatham,MASSACHWstg-steuerberater.deKafkaConveyors&Equipmentbatemangroundworks.coColoradoHealthNetworkTexasPregnancyCareNetwilderlawfirmUgandaElectricityTransmissionAdmiralGamingNetworkMainElectricSupplyCo.PalmgoldManagementSdnBelmontchristiancolleAdvancedSecuritySystemsEscautoCentroAutomoWeathercraftCompaniesWelcomeFinancialGroMatissRehabilitativeHealthwoodboureNewayValveSterlingsAccountancySoBRIDGEWATERASSOCIATMAGELLANFINANCIALGROUPAldagiONEXCANADAASSETMANAGEMENTMIZUHAFINANCIALGROBanvilleWineMerchantsBrad'sBeddingP-FakeMGMTransformerLewisBaachKaufmannMPROMOSFERAS.r.l.promosfera.KStrategiesMarketingandPubKINASSOLICITORSkinas.cBARArchitects&Interiorswfd2027uae.aeDragonflyCO.LTDdragonflygame.cAfpaCKPowerPublicCompanyLiphillips66lubricants.HytrolHarineradelValleMetroHeatingConsumerElectronics&CompuVINSON&ELKINSLLPBrunton-ShawPequannockTownshipScDiversifiedProjectServAccidentInjurySSecurityFirstCrediACMARKBrooksideHomesPoconoFarmsCountryCClarkstonFirstBaptistChBromackManufacturingPhiladelphiaInvestmentPartAilHospitalityGroupVanHookDentalStudTwinOaksPresbyterianChuThinkBigHealthCareSolutiAroeiraSallesAdvogadosAltVisionBoltNutManufacturiBarlowsElectricalPreferredHomesR.plWineWorksAustraliaKarndeanInternational,KalchschmidGmbH&CoU.S.BatteryNorwestVenturePartnersGraphiteConstructionGHCKCapitalGroupDottoriCommercialistiAssociatiGreenscapePumpServmelland.bright-futures.co.CarrolltonEarNoseandThNewtonElectricalContractorsGEAConsultingEngineRanshu,MeridianAutoParts,ErdyMcHenryArchitectuWierBoernerAllinAvvEmilioMarcoCasaMarkEdwardPartnersCarmichaelEngineerHillPetersonCarperBeeManhattanRetirementFoundationHoganConstructionGroBarbasNunezSandersButleHovsepianFLimiComprehensivePainCeBackstageLibraryWorksWhiteHorsePackaging.auMobalTruckingWeismanChildren'sAdvancedHPCCharakCenterforHeWedlichCo?sCountyFamilyHeBancoGuanabaraAggressiveAirCompressor&coTombMultimediaProductBIGROCKRESORTSonitrolSecuritySolBoxElderCountyMONTE-CARLOHygradeComponentsSpohn+BurkhardtGmbH&HarmonyElectronicsCorpHuronRegionalMedicalCenterCookevilleRegionalMedicalCnorthernconstructionBurtProcessEquipmeNissanCBIHaeger&SchmidtLogistUniversalGroupForEngineeringAssistedLivingPharmacyServiMeissnerFenstertechnikAllTruckTransportationCoAmbitekOceanEdgeResort&GolfMMATRANSFERSGreatLakesCarpet&T.twOmegaGlobalTechnolMBMIntellectualPropertyLFranklinPierceSchWhiteCoffeeCorporationGreaterPittsburghOrthopaAssociatesBluewaterYachtSal表2.受害組織/企業(yè)系統(tǒng)安全防護數(shù)據(jù)分析圖52025年8月受攻擊系統(tǒng)占比圖6.2025年8月國內(nèi)受攻擊地區(qū)占比排名圖7.2025年8月監(jiān)控到的RDP入侵量圖8.2025年8月監(jiān)控到的MSSQL入侵量圖9.2025年8月監(jiān)控到的MYSQL入侵量勒索軟件關(guān)鍵詞以下是本月上榜活躍勒索軟件關(guān)鍵詞統(tǒng)計，數(shù)據(jù)來自360勒索軟件搜索引擎。屬于Weaxor勒索軟件家族，該家族目前的主要傳播方式為：利用各類軟件漏洞進(jìn)屬于BeijingCrypt勒索軟件家族，由于被加密文件后綴會被修改為beijing而成屬于ZeroCool勒索軟件家族，該家族目前的主要傳播方式為：利用各類軟件漏洞屬于TargetCompany