{"id":59353,"date":"2019-02-15T09:00:18","date_gmt":"2019-02-15T01:00:18","guid":{"rendered":"https:\/\/blog.trendmicro.com.tw\/?p=59353"},"modified":"2019-02-14T14:24:37","modified_gmt":"2019-02-14T06:24:37","slug":"%e9%96%93%e8%ab%9c%e8%bb%9f%e9%ab%94-trickbot-%e8%ae%8a%e7%a8%ae%e5%86%8d%e9%80%b2%e5%8c%96%e5%a4%9a%e4%ba%86%e6%87%89%e7%94%a8%e7%a8%8b%e5%bc%8f%e5%b8%b3%e5%af%86%e6%93%b7%e5%8f%96%e5%8a%9f%e8%83%bd","status":"publish","type":"post","link":"https:\/\/blog.trendmicro.com.tw\/?p=59353","title":{"rendered":"\u9593\u8adc\u8edf\u9ad4 Trickbot \u8b8a\u7a2e\u518d\u9032\u5316,\u591a\u4e86\u61c9\u7528\u7a0b\u5f0f\u5e33\u5bc6\u64f7\u53d6\u529f\u80fd"},"content":{"rendered":"\n<p><a href=\"https:\/\/www.trendmicro.com.tw\/edm\/Tracking.asp?id=2651&amp;name=20110916\">\u8da8\u52e2\u79d1\u6280<\/a>\u57282018\u5e7411\u6708\u767c\u73fe\u4e00\u96bb\u5e36\u6709\u5bc6\u78bc\u64f7\u53d6\u6a21\u7d44\u7684<a href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/trickbot-shows-off-new-trick-password-grabber-module\/\">Trickbot\u8b8a\u7a2e<\/a>\uff0c\u5b83\u80fd\u5920\u5f9e\u8a31\u591a\u61c9\u7528\u7a0b\u5f0f\u4e2d\u7aca\u53d6\u5e33\u5bc6\u3002\u57282019\u5e741\u6708\uff0c\u6211\u5011\u770b\u5230\u52a0\u5165\u4e86\u65b0\u529f\u80fd\u7684Trickbot\uff08\u5075\u6e2c\u70baTrojanSpy.Win32.TRICKBOT.AZ\u548cTrojan.Win32.MERETAM.AD\uff09\u3002\u9019\u4f5c\u8005\u5f88\u986f\u7136\u5730\u6301\u7e8c\u5728\u66f4\u65b0Trickbot\uff0c\u6211\u5011\u6700\u8fd1\u767c\u73fe\u4e00\u96bb\u65b0\u8b8a\u7a2e\u6703\u4f7f\u7528\u65b0\u7248\u672c\u7684pwgrab\u6a21\u7d44\u4f86\u64f7\u53d6\u9060\u7aef\u61c9\u7528\u7a0b\u5f0f\u7684\u5e33\u5bc6\u3002<br><br><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"642\" src=\"https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2018\/05\/password.jpg\" alt=\"\" class=\"wp-image-55474\" srcset=\"https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2018\/05\/password.jpg 800w, https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2018\/05\/password-300x241.jpg 300w, https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2018\/05\/password-768x616.jpg 768w, https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2018\/05\/password-600x482.jpg 600w, https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2018\/05\/password-30x24.jpg 30w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<p><strong>\u611f\u67d3\u93c8<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-1.png\" alt=\"FIGURE 1\"\/><\/figure>\n\n\n\n<p><em>\u57161\u3001\u60e1\u610f\u8edf\u9ad4\u7684\u611f\u67d3\u93c8<\/em><\/p>\n\n\n\n<p><strong>\u507d\u88dd\u6210\u91d1\u878d\u670d\u52d9\u516c\u53f8\u7684\u79df\u7a05\u734e\u52f5\u901a\u77e5\u4fe1, <\/strong><strong>\u593e\u5e36\u60e1\u610fExcel<\/strong><strong>\u9644\u4ef6<\/strong><\/p>\n\n\n\n<p>\u60e1\u610f\u8edf\u9ad4\u6703\u593e\u5e36\u5728\u507d\u88dd\u6210\u91d1\u878d\u670d\u52d9\u516c\u53f8\u7684\u79df\u7a05\u734e\u52f5\u901a\u77e5\u5167\u51fa\u73fe\u3002\u9019\u5c01\u90f5\u4ef6\u5167\u5305\u542b\u5e36\u6709\u5de8\u96c6\uff08XLSM\uff09\u7684Microsoft Excel\u9644\u4ef6\u6a94\uff08\u5075\u6e2c\u70baTrojan.W97M.MERETAM.A\uff09\uff0c\u8072\u7a31\u88e1\u9762\u662f\u79df\u7a05\u734e\u52f5\u7684\u8a73\u7d30\u8cc7\u6599\u3002\u4e0d\u904e\u5c31\u5982\u540c\u9019\u985e\u9644\u4ef6\u6a94\u5e38\u505a\u7684\u4e00\u6a23\uff0c\u9019\u662f\u500b\u60e1\u610f\u5de8\u96c6\u6587\u4ef6\uff0c\u4e00\u65e6\u555f\u7528\u5c31\u6703\u4e0b\u8f09\u548c\u90e8\u7f72Trickbot\u5230\u4f7f\u7528\u8005\u7684\u96fb\u8166\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-2-1.png\" alt=\"FIGURE 2\"\/><\/figure>\n\n\n\n<p><em>\u57162\u3001\u5305\u542b\u60e1\u610f\u5de8\u96c6\u9644\u4ef6\u6a94\u7684\u5783\u573e\u90f5\u4ef6\u3002<\/em><\/p>\n\n\n\n<!--more-->\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-3.png\" alt=\"FIGURE 3\"\/><\/figure>\n\n\n\n<p><em>\u57163\u3001\u9644\u52a0Excel\u6587\u4ef6\u6a94\u7684\u622a\u5716<\/em><\/p>\n\n\n\n<p>\u9019\u500bTrickbot\u8b8a\u7a2e\u8ddf\u572811\u6708\u767c\u73fe\u7684\u8b8a\u7a2e\u6975\u70ba\u76f8\u4f3c\u3002\u4f462019\u5e74\u7684\u7248\u672c\u52a0\u5165\u4e86\u4e09\u500b\u65b0\u529f\u80fd\uff0c\u5206\u5225\u7528\u65bcVNC\u3001PuTTY\u548cRDP\u7a0b\u5f0f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-4.png\" alt=\"FIGURE 4\"\/><\/figure>\n\n\n\n<p><em>\u57164\u30012018\u5e7411\u6708\uff08\u4e0a\uff09\u548c2019\u5e741\u6708\uff08\u4e0b\uff09\u7684pwgrab\u6a21\u7d44\u6bd4\u8f03\u3002\u8acb\u6ce8\u610f\u7a0b\u5f0f\u78bc\u5167\u65b0\u52a0\u7684\u529f\u80fd\u3002<\/em><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-5-1.png\" alt=\"FIGURE 5\"\/><\/figure>\n\n\n\n<p><em>\u57165\u3001\u50b3\u9001\u51faRDP\u5e33\u5bc6\u7684C&amp;C\u6d41\u91cf\u3002<\/em><\/p>\n\n\n\n<p>\u9019\u4e9b\u65b0\u529f\u80fd\u6703\u5229\u7528XOR\u6216SUB\u904b\u7b97\u4f86\u5c0d\u5b57\u4e32\u9032\u884c\u52a0\u5bc6\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-6.png\" alt=\"FIGURE 6\"\/><\/figure>\n\n\n\n<p><em>\u57166.\u3001XOR\uff08\u4e0a\uff09\u548cSUB\uff08\u4e0b\uff09\u5b57\u4e32\u52a0\u5bc6\u3002<\/em><\/p>\n\n\n\n<p>\u5b83\u9084\u6703\u7528API\u96dc\u6e4a\u503c\u9032\u884c\u9593\u63a5API\u547c\u53eb\uff0c\u9019\u88e1\u53ef\u4ee5\u770b\u51fa\u8ddf<a href=\"https:\/\/threatpost.com\/carberp-source-code-leaked\/101070\/\">2013\u5e74Carberp\u6728\u99ac\u539f\u59cb\u78bc\u5916\u6d29<\/a>\u7684\u95dc\u806f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-7.png\" alt=\"FIGURE 7\"\/><\/figure>\n\n\n\n<p><em>\u57167\u3001Carberp\u539f\u59cb\u78bc\u5167\u7684API\u96dc\u6e4a\u529f\u80fd\u3002<\/em><\/p>\n\n\n\n<p><strong>VNC<\/strong><\/p>\n\n\n\n<p>\u70ba\u4e86\u53d6\u5f97VNC\u5e33\u5bc6\uff0cpwgrab\u6a21\u7d44\u6703\u641c\u5c0b\u4ee5\u4e0b\u76ee\u9304\u5167\u7684\u201c*.vnc.lnk\u201d\u6a94\u6848\uff1a<\/p>\n\n\n\n<ul><li><em>%APPDATA%\\Microsoft\\Windows\\Recent<\/em><\/li><li><em>%USERPROFILE%\\Documents, %USERPROFILE%\\Downloads<\/em><\/li><\/ul>\n\n\n\n<p>\u7aca\u53d6\u7684\u8cc7\u6599\u5305\u62ec\u4e86\u76ee\u6a19\u6a5f\u5668\u7684\u4e3b\u6a5f\u540d\u7a31\u3001\u7aef\u53e3\u548c\u4ee3\u7406\u8a2d\u5b9a\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-8.png\" alt=\"FIGURE 8\"\/><\/figure>\n\n\n\n<p><em>\u57168\u3001pwgrab\u5728%USERPROFILE%\\Downloads\u76ee\u9304\u5c0b\u627e\u201c.vnc.lnk\u201d\u6a94\u6848\u3002<\/em><\/p>\n\n\n\n<p>\u6b64\u6a21\u7d44\u6703\u7528POST\u4f86\u50b3\u9001\u6240\u9700\u8cc7\u6599\uff0c\u9019\u662f\u900f\u904e\u4e0b\u8f09\u7684\u8a2d\u5b9a\u6a94\u201cdpost\u201d\u4f86\u9032\u884c\u8a2d\u5b9a\u3002\u8a72\u6a94\u6848\u5305\u542b\u4e86\u4e00\u4efd\u547d\u4ee4\u548c\u63a7\u5236\uff08C&amp;C\uff09\u4f3a\u670d\u5668\u5217\u8868\uff0c\u9019\u4e9b\u4f3a\u670d\u5668\u6703\u5f9e\u53d7\u5bb3\u8005\u63a5\u6536\u7aca\u5f97\u7684\u8cc7\u6599\u3002<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-9.png\" alt=\"FIGURE 9\"\/><\/figure>\n\n\n\n<p><em>\u57169\u3001\u88ab\u7aca\u8cc7\u6599\u5916\u6d29\u5230C&amp;C\u4f3a\u670d\u5668\u3002<\/em><\/p>\n\n\n\n<p><strong>PuTTY<\/strong><\/p>\n\n\n\n<p>\u70ba\u4e86\u53d6\u5f97PuTTY\u6191\u8b49\uff0c\u5b83\u6703\u6aa2\u67e5\u8a3b\u518a\u8868Software\\SimonTatham\\Putty\\Sessions\u4f86\u627e\u51fa\u5132\u5b58\u7684\u9023\u7dda\u8a2d\u5b9a\uff0c\u9019\u53ef\u4ee5\u8b93\u6a21\u7d44\u53d6\u5f97\u4e3b\u6a5f\u548c\u4f7f\u7528\u8005\u540d\u7a31\u7b49\u8cc7\u8a0a\uff0c\u9084\u6709\u79c1\u9470\u6a94\u6848\u7528\u4f86\u9032\u884c\u8eab\u4efd\u8a8d\u8b49\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/02\/Trickbot-Remote-Application-10.png\" alt=\"FIGURE 10\"\/><\/figure>\n\n\n\n<p><em>\u571610\u3001\u641c\u5c0b\u8a3b\u518a\u8868\u4f86\u627e\u51faPutty\u8cc7\u6599\uff08\u5de6\uff09\u986f\u793a\u4e3b\u6a5f\u540d\u7a31\uff0c\u4f7f\u7528\u8005\u540d\u7a31\u548c\u79c1\u9470\u6a94\u6848\u7684\u7a0b\u5f0f\u78bc\uff08\u53f3\uff09\u3002<\/em><\/p>\n\n\n\n<p><strong>RDP<\/strong><\/p>\n\n\n\n<p>\u8ddfRDP\u76f8\u95dc\u7684\u7b2c\u4e09\u500b\u529f\u80fd\u4f7f\u7528<strong>CredEnumerateA<\/strong> API\u4f86\u8b58\u5225\u548c\u7aca\u53d6\u5132\u5b58\u7684\u5e33\u5bc6\u3002\u5b83\u63a5\u8457\u6703\u641c\u5c0b\u5b57\u4e32\u201c<strong>target = TERMSRV<\/strong>\u201d\u4f86\u627e\u51fa\u6bcf\u500bRDP\u6191\u8b49\u5132\u5b58\u7684\u4e3b\u6a5f\u540d\u7a31\u3001\u4f7f\u7528\u8005\u540d\u7a31\u548c\u5bc6\u78bc\u3002<\/p>\n\n\n\n<p><strong>\u5efa\u8b70<\/strong><\/p>\n\n\n\n<p>\u5df2\u7d93\u5f88\u68d8\u624b\u7684Trickbot\u52a0\u5165\u65b0\u529f\u80fd\uff0c\u9019\u4e5f\u662f\u8a31\u591a\u99ed\u5ba2\u7528\u4f86\u63d0\u9ad8\u60e1\u610f\u8edf\u9ad4\u80fd\u529b\u7684\u7b56\u7565\uff1a\u9010\u6b65\u5730\u9032\u5316\u73fe\u6709\u7684\u60e1\u610f\u8edf\u9ad4\u3002\u96d6\u7136\u9019\u500b\u65b0\u8b8a\u7a2e\u5728\u80fd\u505a\u7684\u4e8b\u60c5\u4e0a\u4e26\u4e0d\u5275\u65b0\uff0c\u4f46\u5b83\u8b49\u660e\u4e86Trickbot\u7684\u5e55\u5f8c\u9ed1\u624b\u4e26\u6c92\u6709\u6eff\u8db3\u65bc\u73fe\u72c0\u4e14\u5728\u4e0d\u65b7\u5730\u6539\u9032\u5b83\uff0c\u8b93\u5df2\u7d93\u5371\u96aa\u7684\u60e1\u610f\u8edf\u9ad4\u66f4\u52a0\u6709\u6548\u3002<\/p>\n\n\n\n<p>\u5e78\u904b\u7684\u662f\uff0c\u4f7f\u7528\u8005\u53ea\u8981\u9075\u5faa\u9632\u5783\u573e\u90f5\u4ef6\u7684<a href=\"https:\/\/www.trendmicro.com\/vinfo\/ph\/security\/news\/cybercrime-and-digital-threats\/infosec-guide-email-threats\">\u6700\u4f73\u505a\u6cd5<\/a>\u5c31\u53ef\u4ee5\u5c07\u9019\u4e9b\u653b\u64ca\u627c\u6bba\u5728\u840c\u82bd\u968e\u6bb5\u3002\u9019\u5305\u62ec\u4e86\u89e3\u5783\u573e\u90f5\u4ef6\u7684\u4e3b\u8981\u7279\u5fb5\uff0c\u5982\u53ef\u7591\u7684\u5bc4\u4ef6\u8005\u5730\u5740\u548c\u51fa\u73fe\u8a31\u591a\u8a9e\u6cd5\u932f\u8aa4\u3002\u6211\u5011\u4e5f\u5efa\u8b70\u4f7f\u7528\u8005\u4e0d\u8981\u958b\u555f\u96fb\u5b50\u90f5\u4ef6\u9644\u52a0\u6a94\u6848\uff0c\u9664\u975e\u78ba\u5b9a\u5b83\u4f86\u81ea\u53ef\u4fe1\u4efb\u7684\u4f86\u6e90\u3002<\/p>\n\n\n\n<p><strong>\u8da8\u52e2\u79d1\u6280\u89e3\u6c7a\u65b9\u6848<\/strong><\/p>\n\n\n\n<p>\u4e0b\u5217\u7531\u8da8\u52e2\u79d1\u6280XGen\u5b89\u5168\u9632\u8b77\u6280\u8853\u6240\u9a45\u52d5\u7684\u89e3\u6c7a\u65b9\u6848\u53ef\u4ee5\u4fdd\u8b77\u7cfb\u7d71\u5c0d\u6297\u5404\u985e\u5a01\u8105\uff0c\u5305\u62ecTrickbot\u7b49\u60e1\u610f\u8edf\u9ad4\uff1a<\/p>\n\n\n\n<ul><li><a href=\"https:\/\/t.rend.tw\/?i=Njc0MA\">PC-cillin 2019 \u96f2\u7aef\u7248<\/a><\/li><li><a href=\"https:\/\/www.trendmicro.tw\/tw\/business\/complete-software-protection\/index.html\">\u8da8\u52e2\u79d1\u6280HYPERLINK\n&#8220;https:\/\/www.trendmicro.tw\/tw\/business\/complete-software-protection\/index.html&#8221;\nSmart Protection Suites<\/a>\u548c <a href=\"https:\/\/www.trendmicro.com\/zh_tw\/small-business\/all-products-for-smb.html\">Worry-Free\nBusiness Security&nbsp;<\/a> <\/li><li><a href=\"https:\/\/www.trendmicro.com\/zh_tw\/business\/products\/network.html\">\u8da8\u52e2\u79d1\u6280Network Defense<\/a><\/li><\/ul>\n\n\n\n<p><strong>\u5165\u4fb5\u6307\u6a19\uff08IOC<\/strong><strong>\uff09<\/strong><\/p>\n\n\n\n<p><strong>Trickbot<\/strong><strong>\uff08\u5075\u6e2c\u70baTrojanSpy.Win32.TRICKBOT.AZ<\/strong><strong>\uff09<\/strong><\/p>\n\n\n\n<ul><li>374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05<\/li><\/ul>\n\n\n\n<p><strong>Trickbot<\/strong><strong>\uff08\u5075\u6e2c\u70baTrojan.Win32.MERETAM.AD<\/strong><strong>\uff09<\/strong><\/p>\n\n\n\n<ul><li>Fcfb911e57e71174a31eae79433f12c73f72b7e6d088f2f35125cfdf10d2e1af<\/li><\/ul>\n\n\n\n<p>@\u539f\u6587\u51fa\u8655\uff1a<a href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/trickbot-adds-remote-application-credential-grabbing-capabilities-to-its-repertoire\/\">Trickbot\nAdds Remote Application Credential-Grabbing Capabilities to Its Repertoire<\/a> \u4f5c\u8005\uff1aNoel Anthony Llimos\u548cCarl Maverick\nPascual\uff08<a href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/author\/trend-micro\/\">\u8da8\u52e2\u79d1\u6280<\/a>\uff09<\/p>\n\n\n\n<a href=\"https:\/\/t.rend.tw\/?i=Njc0MA\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2015\/08\/Windows10Banner-540x90v5.gif\" \/><\/a>\n<p style=\"font-size: 8pt;\">\n","protected":false},"excerpt":{"rendered":"<p>\u8da8\u52e2\u79d1\u6280\u57282018\u5e7411\u6708\u767c\u73fe\u4e00\u96bb\u5e36\u6709\u5bc6\u78bc\u64f7\u53d6\u6a21\u7d44\u7684Trickbot\u8b8a\u7a2e\uff0c\u5b83\u80fd\u5920\u5f9e\u8a31\u591a\u61c9\u7528\u7a0b\u5f0f\u4e2d\u7aca\u53d6\u5e33\u5bc6\u3002\u57282 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wpscppro_dont_share_socialmedia":false,"_wpscppro_custom_social_share_image":0,"_facebook_share_type":"","_twitter_share_type":"","_linkedin_share_type":"","_pinterest_share_type":"","_linkedin_share_type_page":"","_instagram_share_type":"","_medium_share_type":"","_threads_share_type":"","_google_business_share_type":"","_selected_social_profile":[],"_wpsp_enable_custom_social_template":false,"_wpsp_social_scheduling":{"enabled":false,"datetime":null,"platforms":[],"status":"template_only","dateOption":"today","timeOption":"now","customDays":"","customHours":"","customDate":"","customTime":"","schedulingType":"absolute"},"_wpsp_active_default_template":true},"categories":[3586,1944],"tags":[271],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/59353"}],"collection":[{"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=59353"}],"version-history":[{"count":0,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/59353\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=59353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=59353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=59353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}