{"id":64227,"date":"2020-05-07T10:37:24","date_gmt":"2020-05-07T02:37:24","guid":{"rendered":"https:\/\/blog.trendmicro.com.tw\/?p=64227"},"modified":"2020-05-07T12:04:58","modified_gmt":"2020-05-07T04:04:58","slug":"%e9%87%9d%e5%b0%8d%e6%80%a7%e5%8b%92%e7%b4%a2%e7%97%85%e6%af%92%e6%94%bb%e6%93%8a%e5%8f%b0%e7%81%a3%e4%bc%81%e6%a5%ad","status":"publish","type":"post","link":"https:\/\/blog.trendmicro.com.tw\/?p=64227","title":{"rendered":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"alignright size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/04\/Ransomeware-380x380.jpg\" alt=\"\" width=\"250\" height=\"250\"\/><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de\u6027\uff0c\u56e0\u70ba\u52d2\u7d22\u75c5\u6bd2\u4f3c\u4e4e\u6703\u91dd\u5c0d\u8cc7\u6599\u5eab\u548c\u90f5\u4ef6\u4f3a\u670d\u5668\u9032\u884c\u52a0\u5bc6\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5011\u6240\u6536\u96c6\u7684\u8cc7\u6599\u986f\u793a\u9019\u6ce2\u653b\u64ca\u57285\u6708\u521d\u958b\u59cb\u653b\u64ca\u4f01\u696d\u3002\u5206\u6790\u60e1\u610f\u8edf\u9ad4\u986f\u793aColdLock\u8207\u4e4b\u524d\u7684\u52d2\u7d22\u75c5\u6bd2\u5bb6\u65cfLockergoga\uff0cFreezing\u4ee5\u53caEDA2\u201c\u6559\u5b78\u7528\u201d\u52d2\u7d22\u75c5\u6bd2\u5957\u4ef6\u9593\u6709\u76f8\u4f3c\u4e4b\u8655\u3002\u6c92\u6709\u8de1\u8c61\u986f\u793a\u9019\u6ce2\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u4e86\u76ee\u6a19\u4e4b\u5916\u7684\u7d44\u7e54\u3002\u6211\u5011\u4e0d\u8a8d\u70ba\u9019\u652f\u75c5\u6bd2\u5bb6\u65cf\u73fe\u5728\u6709\u88ab\u5ee3\u6cdb\u7684\u4f7f\u7528\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8da8\u52e2\u79d1\u6280\u4f7f\u7528\u8005\u5df2\u7d93\u80fd\u5920\u62b5\u79a6\u6b64\u5a01\u8105\uff0c\u6211\u5011\u5c07\u5176\u5075\u6e2c\u70baRansom.MSIL.COLDLOCK.YPAE-A\u548cRansom.PS1.COLDLOCK.YPAE-A\u3002\u5e95\u4e0b\u7684\u6587\u7ae0\u6703\u63cf\u8ff0\u6b64\u5a01\u8105\u7684\u884c\u70ba\uff0c\u4e26\u63cf\u8ff0\u5b83\u8207\u5176\u4ed6\u52d2\u7d22\u75c5\u6bd2\u5a01\u8105\u7684\u95dc\u806f\u3002<\/p>\n\n\n\n<!--more-->\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><em>\u62b5\u9054\u5a92\u4ecb<\/em><\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5011\u76ee\u524d\u5c1a\u672a\u5f97\u77e5\u6b64\u5a01\u8105\u4e00\u958b\u59cb\u9032\u5165\u6f5b\u5728\u53d7\u5bb3\u8005\u7db2\u8def\u7684\u62b5\u9054\u5a92\u4ecb\u3002\u4f46\u6211\u5011\u8a8d\u70ba\u653b\u64ca\u8005\u7528\u4e86\u67d0\u7a2e\u65b9\u6cd5\u53d6\u5f97\u76ee\u6a19\u7d44\u7e54\u7684Active Directory\u4f3a\u670d\u5668\u6b0a\u9650\u3002\u6b64\u6642\u4ed6\u5011\u53ef\u4ee5\u8a2d\u5b9a\u7fa4\u7d44\u539f\u5247\uff0c\u5c0e\u81f4\u52d2\u7d22\u75c5\u6bd2\u6a94\u6848\u88ab\u4e0b\u8f09\u4e26\u5728\u53d7\u5f71\u97ff\u7db2\u57df\u5167\u7684\u96fb\u8166\u4e0a\u57f7\u884c\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u60e1\u610f\u6a94\u6848\u4ee5.NET\u57f7\u884c\u6a94\uff08.DLL\u6a94\uff09\u7684\u5f62\u5f0f\u62b5\u9054\uff0c\u4e26\u4f7f\u7528<a href=\"https:\/\/yck1509.github.io\/ConfuserEx\/\">ConfuserEx<\/a>\u52a0\u6bbc\u5668\u9032\u884c\u58d3\u7e2e\/\u4fdd\u8b77\u3002\u5b83\u4f7f\u7528PowerShell\u53cd\u5c04\u8f09\u5165.NET\u57f7\u884c\u6a94\u4f86\u57f7\u884c\u4e0a\u8ff0\u7684.DLL\u6a94\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-1.png\" alt=\"\"\/><figcaption> <em>\u57161. \u53cd\u5c04\u8f09\u5165.DLL\u6a94<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b83\u9084\u6703\u9032\u884c\u5169\u9805\u6aa2\u67e5\u4f86\u78ba\u8a8d\u81ea\u5df1\u662f\u5426\u6b63\u5728\u57f7\u884c\u3002\u9996\u5148\uff0c\u5b83\u6703\u6aa2\u67e5\u7528\u65bc\u52d2\u8d16\u901a\u77e5\u7684<em>%System\nRoot%\\ProgramData\\readme.tmp<\/em>\u662f\u5426\u5b58\u5728\u3002\u6b64\u6aa2\u67e5\u53ef\u9632\u6b62\u7cfb\u7d71\u88ab\u91cd\u8907\u611f\u67d3\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-2.png\" alt=\"\"\/><figcaption> <em>\u57162. \u6aa2\u67e5\u52d2\u8d16\u901a\u77e5<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6bd4\u8f03\u4e0d\u5c0b\u5e38\u7684\u662f\u5b83\u6703\u6aa2\u67e5\u7cfb\u7d71\u6642\u9418\u3002\u53ea\u6703\u5728\u6307\u5b9a\u65e5\u671f\u7684\u4e0b\u534812:10\u6216\u4e4b\u5f8c\u57f7\u884c\uff1b\u5982\u679c\u6642\u9593\u6c92\u5230\uff0c\u5b83\u6703\u4f11\u772015\u79d2\u9418\uff0c\u76f4\u5230\u904e\u4e86\u4e0a\u8ff0\u6642\u9593\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-3.png\" alt=\"\"\/><figcaption> <em>\u57163. \u7a0b\u5f0f\u78bc\u5167\u8a2d\u5b9a\u7684\u5b9a\u6642\u70b8\u5f48<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><em>\u52a0\u5bc6\u52d5\u4f5c<\/em><\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728\u52a0\u5bc6\u4efb\u4f55\u6a94\u6848\u524d\uff0c\u52d2\u7d22\u75c5\u6bd2\u9084\u6703\u57f7\u884c\u4e00\u4e9b\u6e96\u5099\u52d5\u4f5c\u3002\u9996\u5148\uff0c\u5982\u679c\u4e0b\u5217\u670d\u52d9\u6b63\u5728\u57f7\u884c\u4e2d\u5c31\u6703\u52a0\u4ee5\u7d42\u6b62\u4ee5\u9632\u6b62\u51fa\u73fe\u62d2\u7d55\u6a94\u6848\u5b58\u53d6\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>mariadb<\/li><li>msexchangeis<\/li><li>mssql<\/li><li>mysql<\/li><li>oracleservice<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u4e9b\u662f\u5404\u8cc7\u6599\u5eab\u53caExchange\u90f5\u4ef6\u4f3a\u670d\u5668\u6240\u7528\u7684\u670d\u52d9\u540d\u7a31\u3002\u5b83\u9084\u6703\u7d42\u6b62<em>Outlook<\/em>\u7a0b\u5e8f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"362\" src=\"https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2020\/05\/Figure4-1024x362.png\" alt=\"\" class=\"wp-image-64229\" srcset=\"https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2020\/05\/Figure4-1024x362.png 1024w, https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2020\/05\/Figure4-300x106.png 300w, https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2020\/05\/Figure4-768x272.png 768w, https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2020\/05\/Figure4-30x11.png 30w, https:\/\/blog.trendmicro.com.tw\/wp-content\/uploads\/2020\/05\/Figure4.png 1433w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption> <em>\u57164. \u7d42\u6b62\u670d\u52d9\u548c\u7a0b\u5e8f<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b83\u9084\u6703\u6aa2\u67e5\u7cfb\u7d71\u4e0a\u7684Windows\u7248\u672c\u3002\u5982\u679c\u7684\u662fWindows 10\uff0c\u5b83\u6703\u57f7\u884c\u6578\u500bWindows 10\u7279\u5b9a\u7684\u52d5\u4f5c\u3002\u6703\u505c\u7528Windows Defender\uff0c\u4e14\u7121\u6cd5\u5411Microsoft\u50b3\u9001\u53cd\u994b\/\u60e1\u610f\u8edf\u9ad4\u6a23\u672c\u3002\u63a8\u9001\u901a\u77e5\u4e5f\u88ab\u505c\u7528\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-5.png\" alt=\"\"\/><figcaption> <em>\u57165. \u505c\u7528Windows Defender<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b83\u7684\u52a0\u5bc6\u884c\u70ba\u6709\u4e9b\u7279\u5225\u3002\u8cc7\u6599\u593e\u5167\u7684\u6a94\u6848\u662f\u5426\u88ab\u52a0\u5bc6\u53d6\u6c7a\u4ee5\u4e0b\u7684\u4e09\u500b\u689d\u4ef6\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>\u76ee\u6a19\u8cc7\u6599\u593e\u5167\u7684\u6a94\u6848\u6578\u91cf\u5c11\u65bc100<\/li><li>\u8cc7\u6599\u593e\u7684\u4e0a\u6b21\u5beb\u5165\u6642\u9593\u665a\u65bc2018\u5e741\u67081\u65e5\u3002<\/li><li>\u8cc7\u6599\u593e\u540d\u7a31\u4e0d\u5305\u542b\u4ee5\u4e0b\u5b57\u4e32\uff1a<ul><li>.git<\/li><\/ul><ul><li>appdata<\/li><\/ul><ul><li>cache<\/li><\/ul><ul><li>image<\/li><\/ul><ul><li>lib<\/li><\/ul><ul><li>log<\/li><\/ul><ul><li>logs<\/li><\/ul><ul><li>microsoft<\/li><\/ul><ul><li>reference<\/li><\/ul><ul><li>res<\/li><\/ul><ul><li>resource<\/li><\/ul><ul><li>script<\/li><\/ul><ul><li>setup<\/li><\/ul><ul><li>skin<\/li><\/ul><ul><li>temp<\/li><\/ul><ul><li>theme<\/li><\/ul><ul><li>third_party<\/li><\/ul><ul><li>thirdparty<\/li><\/ul><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u6eff\u8db3\u4ee5\u4e0a\u6240\u6709\u689d\u4ef6\uff0c\u5b83\u6703\u52a0\u5bc6\u6307\u5b9a\u8cc7\u6599\u593e\u5167\u7684\u6240\u6709\u6a94\u6848\uff0c\u4f46\u4f7f\u7528\u4ee5\u4e0b\u526f\u6a94\u540d\u7684\u6a94\u6848\u9664\u5916\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>.avi<\/li><li>.dll<\/li><li>.gif<\/li><li>.iso<\/li><li>.m2ts<\/li><li>.mkv<\/li><li>.mov<\/li><li>.mp3<\/li><li>.msi<\/li><li>.ocx<\/li><li>.tmp<\/li><li>.wmv<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u800c\u5982\u679c\u6c92\u6709\u6eff\u8db3\u5168\u90e8\u689d\u4ef6\u6642\uff0c\u5b83\u53ea\u6703\u52a0\u5bc6\u4f7f\u7528\u4ee5\u4e0b\u526f\u6a94\u540d\u7684\u6a94\u6848\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>.7z<\/li><li>.aspx<\/li><li>.bak<\/li><li>.cpp<\/li><li>.csv<\/li><li>.doc<\/li><li>.docx<\/li><li>.gz<\/li><li>.hwp<\/li><li>.java<\/li><li>.jpg<\/li><li>.jsp<\/li><li>.lnk<\/li><li>.odt<\/li><li>.one<\/li><li>.php<\/li><li>.ppt<\/li><li>.pptx<\/li><li>.pst<\/li><li>.rar<\/li><li>.sh<\/li><li>.sql<\/li><li>.txt<\/li><li>.xls<\/li><li>.xlsx<\/li><li>.xml<\/li><li>.zip<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-6.png\" alt=\"\"\/><figcaption> <em>\u57166. \u767d\u540d\u55ae\/\u9ed1\u540d\u55ae\u7a0b\u5f0f\u78bc<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u52a0\u5bc6\u7a0b\u5e8f\u4f7f\u7528AES\u7684CBC\u6a21\u5f0f\u3002\u5b83\u6703\u7528\u9e7d\u503c\uff08salt\uff09\u548c\u5bc6\u9470\uff08secret key\uff09\u7522\u751f\u6240\u9700\u7684\u91d1\u9470\u548c\u521d\u59cb\u5411\u91cf\uff08IV\uff09\uff1b\u9e7d\u503c\u5167\u5d4c\u5728\u7a0b\u5f0f\u78bc\u88e1\uff0c\u800c\u5bc6\u9470\u662f\u52d5\u614b\u7528SHA-256\u96dc\u6e4a\u96a8\u6a5f\u7522\u751f\u768432\u4f4d\u5143\u9577\u5ea6\u5b57\u4e32\u3002\u7136\u5f8c\u7528\u5beb\u6b7b\u7684RSA\u516c\u9470\u5c0d\u6b64\u9032\u884c\u52a0\u5bc6\uff0c\u7136\u5f8c\u5d4c\u5165\u5230\u52d2\u8d16\u901a\u77e5\u88e1\u3002\u52a0\u5bc6\u904e\u7684\u6a94\u6848\u6703\u52a0\u4e0a.locked\u526f\u6a94\u540d\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-7.png\" alt=\"\"\/><figcaption> <em>\u57167. AES\u52a0\u5bc6\u7a0b\u5f0f\u78bc<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-8.png\" alt=\"\"\/><figcaption> <em>\u57168. \u7522\u751f\u5bc6\u9470<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u52d2\u8d16\u901a\u77e5\u6703\u88ab\u5b58\u653e\u5728\u7cfb\u7d71\u7684\u4e0b\u5217\u4f4d\u7f6e\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>%Desktop%\\How To Unlock\nFiles.Txt<\/li><li>%System\nRoot%\\ProgramData\\readme.tmp<\/li><li>%User Startup%\\How To Unlock\nFiles.Txt<\/li><li>{Encrypted Drive}:\\How To\nUnlock Files.Txt<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u5176\u5167\u5bb9\u8207\u5176\u4ed6\u52d2\u7d22\u75c5\u6bd2\u985e\u4f3c\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-9.png\" alt=\"\"\/><figcaption> <em>\u57169. \u52d2\u8d16\u901a\u77e5<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u63a5\u8457\u52d2\u7d22\u75c5\u6bd2\u6703\u66ff\u6240\u6709\u4f7f\u7528\u8005\u66f4\u63db\u7cfb\u7d71\u684c\u5e03\uff1b\u5305\u542b\u4e86\u4e00\u500b\u8b80\u53d6\u6587\u5b57\u6a94\uff08\u52d2\u8d16\u901a\u77e5\uff09\u7684\u6307\u4ee4\u3002\u5b83\u900f\u904e\u8b8a\u66f4\u5e7e\u500b\u767b\u9304\u6a94\u8a2d\u5b9a\u505a\u5230\u9019\u4e00\u9ede\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2020\/05\/coldlock-10.png\" alt=\"\"\/><figcaption> <em>\u571610. \u88ab\u66f4\u63db\u7684\u7cfb\u7d71\u684c\u5e03<\/em> <\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><em>\u8207\u5176\u4ed6\u52d2\u7d22\u75c5\u6bd2\u5bb6\u65cf\u7684\u95dc\u806f<\/em><\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u9019\u6ce2\u5a01\u8105\u4e4d\u770b\u4f3c\u4e4e\u8ddfLockergoga\u6709\u95dc\uff0c\u56e0\u70ba\u90fd\u7528\u4e00\u6a23\u7684\u526f\u6a94\u540d\uff08.locked\uff09\u4f86\u52a0\u5bc6\u6a94\u6848\u3002\u4e0d\u904e\u4e5f\u6709\u5176\u4ed6\u7684\u52d2\u7d22\u75c5\u6bd2\u4f7f\u7528\u76f8\u540c\u526f\u6a94\u540d\uff0c\u6240\u4ee5\u9019\u500b\u95dc\u806f\u6027\u5f88\u8584\u5f31\u3002\u800c\u8ddfFreeze\u52d2\u7d22\u75c5\u6bd2\u5c31\u5b58\u5728\u8457\u66f4\u52a0\u5408\u7406\u7684\u95dc\u806f\u3002\u90fd\u4f7f\u7528\u985e\u4f3c\u7684\u65b9\u6cd5\u5728\u7db2\u8def\u5167\u6563\u64ad\uff08\u5165\u4fb5AD\u4f3a\u670d\u5668\uff09\u3001\u4f7f\u7528\u53cd\u5c04\u6ce8\u5165\u6280\u8853\u548c\u5167\u90e8\u6a21\u7d44\u67b6\u69cb\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b83\u7684\u7a0b\u5f0f\u78bc\u9084\u8ddf\u958b\u653e\u539f\u59cb\u78bc\u7684EDA2\u52d2\u7d22\u75c5\u6bd2\u5957\u4ef6\u6709\u76f8\u4f3c\u4e4b\u8655\u3002<a href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/new-open-source-ransomwar-based-on-hidden-tear-and-eda2-may-target-businesses\/\">\u5728\u597d\u5e7e\u5e74\u524d<\/a>\u5c31\u6709\u5be6\u969b\u5728\u5916\u8086\u8650\u7684\u52d2\u7d22\u75c5\u6bd2\u662f\u57fa\u65bc\u9019\u64da\u7a31\u50c5\u7528\u65bc\u201d\u6559\u5b78\u201d\u76ee\u7684\u7684EDA2\u3002<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><em>\u8da8\u52e2\u79d1\u6280\u89e3\u6c7a\u65b9\u6848<\/em><\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u52d2\u7d22\u75c5\u6bd2\u4ecd\u662f\u500b\u63ee\u4e4b\u4e0d\u53bb\u7684\u5a01\u8105\uff0c\u7576\u6211\u5011\u770b\u5230\u6240\u5075\u6e2c\u52d2\u7d22\u75c5\u6bd2\u6578\u91cf\u5f9e2018\u5e74\u76845,500\u842c\u4e0a\u5347\u52302019\u5e74\u76846,100\u842c\u5f8c\u5728\u6700\u65b0\u7684<a href=\"https:\/\/t.rend.tw\/?i=ODk2MA\">\u5e74\u5ea6\u8cc7\u5b89\u7d9c\u5408\u5831\u544a<\/a>\u88e1\u63d0\u5230\u4e86\u9019\u4e00\u9ede\u3002\u9019\u4e00\u6b21\u7684\u5a01\u8105\u53c8\u66f4\u52a0\u5371\u96aa\uff0c\u56e0\u70ba\u6703\u5165\u4fb5\u4f01\u696d\u7cfb\u7d71\u7684\u5a01\u8105\u66f4\u52a0\u5bb9\u6613\u5728\u4f01\u696d\u7db2\u8def\u5167\u90e8\u6563\u64ad\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5e95\u4e0b\u662f\u4e00\u4e9b\u4f7f\u7528\u8005\u53ef\u4ee5\u63a1\u7528\u4fdd\u8b77\u7cfb\u7d71\u62b5\u79a6\u52d2\u7d22\u75c5\u6bd2\u5371\u5bb3\u7684<a href=\"https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cybercrime-and-digital-threats\/best-practices-ransomware\">\u6700\u4f73\u505a\u6cd5<\/a>\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>\u9075\u5faa<a href=\"https:\/\/blog.trendmicro.com.tw\/?p=52832\">3-2-1 \u539f\u5247<\/a>\u4f86\u5b9a\u671f\u5099\u4efd\u6a94\u6848\u3002\u6b64\u539f\u5247\u8981\u6c42\u4ee5\u5169\u7a2e\u4e0d\u540c\u683c\u5f0f\u5efa\u7acb\u4e09\u500b\u5099\u4efd\uff0c\u4e26\u5728\u7570\u5730\u5132\u5b58\u4e00\u500b\u5099\u4efd\u3002<\/li><li>\u5b9a\u671f\u4fee\u88dc\u548c\u66f4\u65b0\u61c9\u7528\u7a0b\u5f0f\u3001\u8edf\u9ad4\u548c\u4f5c\u696d\u7cfb\u7d71\u4f86\u6d88\u9664\u53ef\u80fd\u88ab\u5229\u7528\u7684\u6f0f\u6d1e\u3002\u5c0d\u65bc<a href=\"https:\/\/blog.trendmicro.com.tw\/?p=62238\">\u96f6\u6642\u5dee\u6f0f\u6d1e<\/a>\uff0c\u8acb\u5584\u7528<a href=\"https:\/\/blog.trendmicro.com.tw\/?p=61059\">\u865b\u64ec\u4fee\u88dc\u6280\u8853<\/a>\u3002<\/li><li>\u555f\u7528\u6c99\u7bb1\u5206\u6790\u3002\u56e0\u70ba\u662f\u5728\u9694\u96e2\u7684\u74b0\u5883\u5167\u57f7\u884c\u60e1\u610f\u6a94\u6848\uff0c\u6240\u4ee5\u53ef\u4ee5\u5b89\u5168\u7684\u9032\u884c\u76e3\u63a7\u3002<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u70ba\u4e86\u66f4\u6709\u6548\u3001\u66f4\u4e3b\u52d5\u5730\u9632\u79a6\u52d2\u7d22\u75c5\u6bd2\uff0c\u5efa\u8b70\u63a1\u7528\u4ee5\u4e0b\u8da8\u52e2\u79d1\u6280\u89e3\u6c7a\u65b9\u6848\uff1a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u70ba\u4e86\u66f4\u6709\u6548\u3001\u66f4\u4e3b\u52d5\u5730\u9632\u79a6\u52d2\u7d22\u75c5\u6bd2\uff0c\u5efa\u8b70\u63a1\u7528\u4ee5\u4e0b\u8da8\u52e2\u79d1\u6280\u89e3\u6c7a\u65b9\u6848\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/www.trendmicro.com\/zh_tw\/business\/products\/detection-response\/xdr.html\">\u8da8\u52e2\u79d1\u6280XDR for Users<\/a> \u2013 \u61c9\u7528AI\u548c\u5206\u6790\u529f\u80fd\u4f86\u9023\u7d50\u7aef\u9ede\u53ca\u5176\u4ed6\u7cfb\u7d71\u5c64\u9762\u63d0\u4f9b\u6709\u6548\u7684\u65e9\u671f\u5075\u6e2c<\/li><li><a href=\"https:\/\/www.trendmicro.com\/zh_tw\/business\/products\/user-protection\/sps\/endpoint.html\">\u8da8\u52e2\u79d1\u6280Apex One&#x2122;<\/a> \u2013 \u63d0\u4f9b\u53ef\u63a1\u53d6\u884c\u52d5\u7684\u5206\u6790\u3001\u66f4\u8c50\u5bcc\u7684\u8abf\u67e5\u529f\u80fd\u4ee5\u53ca\u5c0d\u6574\u500b\u7db2\u8def\u96c6\u4e2d\u638c\u63e1\u80fd\u529b\u3002<\/li><li>&nbsp;<a href=\"https:\/\/www.trendmicro.com\/zh_tw\/business\/products\/user-protection\/sps\/email-and-collaboration\/email-inspector.html\">\u8da8\u52e2\u79d1\u6280 Deep Discovery Email Inspector <\/a>&nbsp;\u2013 \u900f\u904e\u5ba2\u88fd\u5316\u6c99\u7bb1\u53ca\u5176\u4ed6\u5075\u6e2c\u6280\u8853\u4f86\u5075\u6e2c\u3001\u5c01\u9396\u548c\u5206\u6790\u60e1\u610f\u90f5\u4ef6\u9644\u4ef6\u6a94<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><em>\u5165\u4fb5\u6307\u6a19<\/em><\/strong><\/h3>\n\n\n\n<style>\n   table {border-collapse:collapse; table-layout:fixed; width:310px;}\n   table td {border:solid 1px ; width:100px; word-wrap:break-word;}\n   <\/style>\n<figure class=\"wp-block-table\"><table  class=\" table table-hover\" ><tbody><tr><td>\n  SHA-256\n  <\/td><td>\n  \u5075\u6e2c\u540d\u7a31\n  <\/td><\/tr><tr><td>\n  08677a3dac3609d13dc4a2a6868ee2f6c1334f4579356d162b706a03839bb9ff\n  <\/td><td>\n  Ransom.PS1.COLDLOCK.YPAE-A\n  <\/td><\/tr><tr><td>\n  c5108344e8a6da617af1c4a7fd8924a64130b4c86fa0f6d6225bb75534a80a35\n  <\/td><td>\n  Ransom.MSIL.COLDLOCK.YPAE-A\n  <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u539f\u6587\u4f86\u6e90:<a href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/targeted-ransomware-attack-hits-taiwanese-organizations\/\">Targeted Ransomware Attack Hits Taiwanese Organizations<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wpscppro_dont_share_socialmedia":false,"_wpscppro_custom_social_share_image":0,"_facebook_share_type":"","_twitter_share_type":"","_linkedin_share_type":"","_pinterest_share_type":"","_linkedin_share_type_page":"","_instagram_share_type":"","_medium_share_type":"","_threads_share_type":"","_bluesky_share_type":"","_mastodon_share_type":"","_selected_social_profile":[],"_wpsp_enable_custom_social_template":false,"_wpsp_social_scheduling":{"enabled":false,"datetime":null,"platforms":[],"status":"template_only","dateOption":"","timeOption":"","customDays":"","customHours":"","customDate":"","customTime":"","schedulingType":""},"_wpsp_active_default_template":true},"categories":[1268,2266,4069,2454,2452,179],"tags":[4581,2559,4582,4580],"class_list":["post-64227","post","type-post","status-publish","format-standard","hentry","category-1268","category-2266","category-4069","category-target-attack-securityterm","category-targeted-attack","category-179","tag-coldlock","tag-2559","tag-4582","tag-4580"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"\u8da8\u52e2\u79d1\u6280 TrendMicro\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/blog.trendmicro.com.tw\/?p=64227\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"zh_TW\" \/>\n\t\t<meta property=\"og:site_name\" content=\"\u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c - \u624b\u6a5f\u75c5\u6bd2\/\u96fb\u8166\u75c5\u6bd2\u9632\u79a6\u5bc6\u6280,\u4e0d\u53ea\u5b88\u8b77\u7db2\u8def\u5b89\u5168,\u9084\u63d0\u4f9b\u5404\u7a2e\u5be6\u75283C\u5be6\u7528\u5c0f\u79d8\u8a23,\u7531\u8cc7\u5b89\/\u9632\u6bd2\u8edf\u9ad4\u9818\u5c0e\u54c1\u724c\u8da8\u52e2\u79d1\u6280 Trend Micro \u6bcf\u65e5\u66f4\u65b0\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d - \u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c\" \/>\n\t\t<meta property=\"og:description\" content=\"\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/blog.trendmicro.com.tw\/?p=64227\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-07T02:37:24+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-07T04:04:58+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d - \u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c\" \/>\n\t\t<meta name=\"twitter:description\" content=\"\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#blogposting\",\"name\":\"\\u76ee\\u6a19\\u5f0f\\u52d2\\u7d22\\u75c5\\u6bd2\\u653b\\u64ca\\u53f0\\u7063\\u4f01\\u696d - \\u8cc7\\u5b89\\u8da8\\u52e2\\u90e8\\u843d\\u683c\",\"headline\":\"\\u76ee\\u6a19\\u5f0f\\u52d2\\u7d22\\u75c5\\u6bd2\\u653b\\u64ca\\u53f0\\u7063\\u4f01\\u696d\",\"author\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?author=1#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/blog.trendmicro.com\\\/trendlabs-security-intelligence\\\/files\\\/2019\\\/04\\\/Ransomeware-380x380.jpg\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227\\\/#articleImage\"},\"datePublished\":\"2020-05-07T10:37:24+08:00\",\"dateModified\":\"2020-05-07T12:04:58+08:00\",\"inLanguage\":\"zh-TW\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#webpage\"},\"articleSection\":\"\\u4f01\\u696d\\u8cc7\\u5b89, \\u52d2\\u7d22\\u75c5\\u6bd2\\\/\\u52d2\\u7d22\\u8edf\\u9ad4, \\u76ee\\u6a19\\u5f0f\\u52d2\\u7d22\\u75c5\\u6bd2, \\u76ee\\u6a19\\u5f0f\\u653b\\u64ca\\\/\\u91dd\\u5c0d\\u6027\\u653b\\u64ca\\\/\\u9396\\u5b9a\\u76ee\\u6a19\\u653b\\u64ca(Targeted attack ), \\u76ee\\u6a19\\u5f0f\\u653b\\u64ca\\\/\\u91dd\\u5c0d\\u6027\\u76ee\\u6a19\\u653b\\u64ca(Targeted attack ), \\u91cd\\u5927\\u8cc7\\u5b89\\u4e8b\\u4ef6, ColdLock, \\u52d2\\u7d22\\u75c5\\u6bd2, \\u76ee\\u6a19\\u5f0f\\u52d2\\u7d22\\u75c5\\u6bd2, \\u76ee\\u6a19\\u5f0f\\u653b\\u64ca\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?cat=3#listItem\",\"name\":\"\\u8cc7\\u5b89\\u540d\\u8a5e\\\/\\u4ec0\\u9ebc\\u662f?\\\/ \\u4f55\\u8b02?\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?cat=3#listItem\",\"position\":2,\"name\":\"\\u8cc7\\u5b89\\u540d\\u8a5e\\\/\\u4ec0\\u9ebc\\u662f?\\\/ \\u4f55\\u8b02?\",\"item\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?cat=3\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?cat=2454#listItem\",\"name\":\"\\u76ee\\u6a19\\u5f0f\\u653b\\u64ca\\\/\\u91dd\\u5c0d\\u6027\\u653b\\u64ca\\\/\\u9396\\u5b9a\\u76ee\\u6a19\\u653b\\u64ca(Targeted attack )\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?cat=2454#listItem\",\"position\":3,\"name\":\"\\u76ee\\u6a19\\u5f0f\\u653b\\u64ca\\\/\\u91dd\\u5c0d\\u6027\\u653b\\u64ca\\\/\\u9396\\u5b9a\\u76ee\\u6a19\\u653b\\u64ca(Targeted attack )\",\"item\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?cat=2454\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#listItem\",\"name\":\"\\u76ee\\u6a19\\u5f0f\\u52d2\\u7d22\\u75c5\\u6bd2\\u653b\\u64ca\\u53f0\\u7063\\u4f01\\u696d\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?cat=3#listItem\",\"name\":\"\\u8cc7\\u5b89\\u540d\\u8a5e\\\/\\u4ec0\\u9ebc\\u662f?\\\/ \\u4f55\\u8b02?\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#listItem\",\"position\":4,\"name\":\"\\u76ee\\u6a19\\u5f0f\\u52d2\\u7d22\\u75c5\\u6bd2\\u653b\\u64ca\\u53f0\\u7063\\u4f01\\u696d\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?cat=2454#listItem\",\"name\":\"\\u76ee\\u6a19\\u5f0f\\u653b\\u64ca\\\/\\u91dd\\u5c0d\\u6027\\u653b\\u64ca\\\/\\u9396\\u5b9a\\u76ee\\u6a19\\u653b\\u64ca(Targeted attack )\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/#organization\",\"name\":\"\\u8cc7\\u5b89\\u8da8\\u52e2\\u90e8\\u843d\\u683c\",\"description\":\"\\u624b\\u6a5f\\u75c5\\u6bd2\\\/\\u96fb\\u8166\\u75c5\\u6bd2\\u9632\\u79a6\\u5bc6\\u6280,\\u4e0d\\u53ea\\u5b88\\u8b77\\u7db2\\u8def\\u5b89\\u5168,\\u9084\\u63d0\\u4f9b\\u5404\\u7a2e\\u5be6\\u75283C\\u5be6\\u7528\\u5c0f\\u79d8\\u8a23,\\u7531\\u8cc7\\u5b89\\\/\\u9632\\u6bd2\\u8edf\\u9ad4\\u9818\\u5c0e\\u54c1\\u724c\\u8da8\\u52e2\\u79d1\\u6280 Trend Micro \\u6bcf\\u65e5\\u66f4\\u65b0\",\"url\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?author=1#author\",\"url\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?author=1\",\"name\":\"\\u8da8\\u52e2\\u79d1\\u6280 TrendMicro\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/efccc7c17118069b21e5cc99dc7bf0469ba02ddacd073930a40bd16f7c4ca8b1?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"\\u8da8\\u52e2\\u79d1\\u6280 TrendMicro\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#webpage\",\"url\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227\",\"name\":\"\\u76ee\\u6a19\\u5f0f\\u52d2\\u7d22\\u75c5\\u6bd2\\u653b\\u64ca\\u53f0\\u7063\\u4f01\\u696d - \\u8cc7\\u5b89\\u8da8\\u52e2\\u90e8\\u843d\\u683c\",\"description\":\"\\u4e00\\u6ce2\\u65b0\\u7684\\u91dd\\u5c0d\\u6027\\u653b\\u64ca\\u5229\\u7528\\u65b0\\u52d2\\u7d22\\u75c5\\u6bd2\\u611f\\u67d3\\u4e86\\u6578\\u5bb6\\u53f0\\u7063\\u4f01\\u696d\\uff0c\\u6211\\u5011\\u5c07\\u9019\\u96bb\\u52d2\\u7d22\\u75c5\\u6bd2\\u7a31\\u70ba ColdLock\\u3002\\u9019\\u6ce2\\u653b\\u64ca\\u5e36\\u6709\\u7834\\u58de\",\"inLanguage\":\"zh-TW\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?p=64227#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?author=1#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/?author=1#author\"},\"datePublished\":\"2020-05-07T10:37:24+08:00\",\"dateModified\":\"2020-05-07T12:04:58+08:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/#website\",\"url\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/\",\"name\":\"\\u8cc7\\u5b89\\u8da8\\u52e2\\u90e8\\u843d\\u683c\",\"description\":\"\\u624b\\u6a5f\\u75c5\\u6bd2\\\/\\u96fb\\u8166\\u75c5\\u6bd2\\u9632\\u79a6\\u5bc6\\u6280,\\u4e0d\\u53ea\\u5b88\\u8b77\\u7db2\\u8def\\u5b89\\u5168,\\u9084\\u63d0\\u4f9b\\u5404\\u7a2e\\u5be6\\u75283C\\u5be6\\u7528\\u5c0f\\u79d8\\u8a23,\\u7531\\u8cc7\\u5b89\\\/\\u9632\\u6bd2\\u8edf\\u9ad4\\u9818\\u5c0e\\u54c1\\u724c\\u8da8\\u52e2\\u79d1\\u6280 Trend Micro \\u6bcf\\u65e5\\u66f4\\u65b0\",\"inLanguage\":\"zh-TW\",\"publisher\":{\"@id\":\"https:\\\/\\\/blog.trendmicro.com.tw\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d - \u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c","description":"\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de","canonical_url":"https:\/\/blog.trendmicro.com.tw\/?p=64227","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#blogposting","name":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d - \u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c","headline":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d","author":{"@id":"https:\/\/blog.trendmicro.com.tw\/?author=1#author"},"publisher":{"@id":"https:\/\/blog.trendmicro.com.tw\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/files\/2019\/04\/Ransomeware-380x380.jpg","@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227\/#articleImage"},"datePublished":"2020-05-07T10:37:24+08:00","dateModified":"2020-05-07T12:04:58+08:00","inLanguage":"zh-TW","mainEntityOfPage":{"@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#webpage"},"isPartOf":{"@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#webpage"},"articleSection":"\u4f01\u696d\u8cc7\u5b89, \u52d2\u7d22\u75c5\u6bd2\/\u52d2\u7d22\u8edf\u9ad4, \u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2, \u76ee\u6a19\u5f0f\u653b\u64ca\/\u91dd\u5c0d\u6027\u653b\u64ca\/\u9396\u5b9a\u76ee\u6a19\u653b\u64ca(Targeted attack ), \u76ee\u6a19\u5f0f\u653b\u64ca\/\u91dd\u5c0d\u6027\u76ee\u6a19\u653b\u64ca(Targeted attack ), \u91cd\u5927\u8cc7\u5b89\u4e8b\u4ef6, ColdLock, \u52d2\u7d22\u75c5\u6bd2, \u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2, \u76ee\u6a19\u5f0f\u653b\u64ca"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/#listItem","position":1,"name":"Home","item":"https:\/\/blog.trendmicro.com.tw\/","nextItem":{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/?cat=3#listItem","name":"\u8cc7\u5b89\u540d\u8a5e\/\u4ec0\u9ebc\u662f?\/ \u4f55\u8b02?"}},{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/?cat=3#listItem","position":2,"name":"\u8cc7\u5b89\u540d\u8a5e\/\u4ec0\u9ebc\u662f?\/ \u4f55\u8b02?","item":"https:\/\/blog.trendmicro.com.tw\/?cat=3","nextItem":{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/?cat=2454#listItem","name":"\u76ee\u6a19\u5f0f\u653b\u64ca\/\u91dd\u5c0d\u6027\u653b\u64ca\/\u9396\u5b9a\u76ee\u6a19\u653b\u64ca(Targeted attack )"},"previousItem":{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/?cat=2454#listItem","position":3,"name":"\u76ee\u6a19\u5f0f\u653b\u64ca\/\u91dd\u5c0d\u6027\u653b\u64ca\/\u9396\u5b9a\u76ee\u6a19\u653b\u64ca(Targeted attack )","item":"https:\/\/blog.trendmicro.com.tw\/?cat=2454","nextItem":{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#listItem","name":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d"},"previousItem":{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/?cat=3#listItem","name":"\u8cc7\u5b89\u540d\u8a5e\/\u4ec0\u9ebc\u662f?\/ \u4f55\u8b02?"}},{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#listItem","position":4,"name":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d","previousItem":{"@type":"ListItem","@id":"https:\/\/blog.trendmicro.com.tw\/?cat=2454#listItem","name":"\u76ee\u6a19\u5f0f\u653b\u64ca\/\u91dd\u5c0d\u6027\u653b\u64ca\/\u9396\u5b9a\u76ee\u6a19\u653b\u64ca(Targeted attack )"}}]},{"@type":"Organization","@id":"https:\/\/blog.trendmicro.com.tw\/#organization","name":"\u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c","description":"\u624b\u6a5f\u75c5\u6bd2\/\u96fb\u8166\u75c5\u6bd2\u9632\u79a6\u5bc6\u6280,\u4e0d\u53ea\u5b88\u8b77\u7db2\u8def\u5b89\u5168,\u9084\u63d0\u4f9b\u5404\u7a2e\u5be6\u75283C\u5be6\u7528\u5c0f\u79d8\u8a23,\u7531\u8cc7\u5b89\/\u9632\u6bd2\u8edf\u9ad4\u9818\u5c0e\u54c1\u724c\u8da8\u52e2\u79d1\u6280 Trend Micro \u6bcf\u65e5\u66f4\u65b0","url":"https:\/\/blog.trendmicro.com.tw\/"},{"@type":"Person","@id":"https:\/\/blog.trendmicro.com.tw\/?author=1#author","url":"https:\/\/blog.trendmicro.com.tw\/?author=1","name":"\u8da8\u52e2\u79d1\u6280 TrendMicro","image":{"@type":"ImageObject","@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/efccc7c17118069b21e5cc99dc7bf0469ba02ddacd073930a40bd16f7c4ca8b1?s=96&d=mm&r=g","width":96,"height":96,"caption":"\u8da8\u52e2\u79d1\u6280 TrendMicro"}},{"@type":"WebPage","@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#webpage","url":"https:\/\/blog.trendmicro.com.tw\/?p=64227","name":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d - \u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c","description":"\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de","inLanguage":"zh-TW","isPartOf":{"@id":"https:\/\/blog.trendmicro.com.tw\/#website"},"breadcrumb":{"@id":"https:\/\/blog.trendmicro.com.tw\/?p=64227#breadcrumblist"},"author":{"@id":"https:\/\/blog.trendmicro.com.tw\/?author=1#author"},"creator":{"@id":"https:\/\/blog.trendmicro.com.tw\/?author=1#author"},"datePublished":"2020-05-07T10:37:24+08:00","dateModified":"2020-05-07T12:04:58+08:00"},{"@type":"WebSite","@id":"https:\/\/blog.trendmicro.com.tw\/#website","url":"https:\/\/blog.trendmicro.com.tw\/","name":"\u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c","description":"\u624b\u6a5f\u75c5\u6bd2\/\u96fb\u8166\u75c5\u6bd2\u9632\u79a6\u5bc6\u6280,\u4e0d\u53ea\u5b88\u8b77\u7db2\u8def\u5b89\u5168,\u9084\u63d0\u4f9b\u5404\u7a2e\u5be6\u75283C\u5be6\u7528\u5c0f\u79d8\u8a23,\u7531\u8cc7\u5b89\/\u9632\u6bd2\u8edf\u9ad4\u9818\u5c0e\u54c1\u724c\u8da8\u52e2\u79d1\u6280 Trend Micro \u6bcf\u65e5\u66f4\u65b0","inLanguage":"zh-TW","publisher":{"@id":"https:\/\/blog.trendmicro.com.tw\/#organization"}}]},"og:locale":"zh_TW","og:site_name":"\u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c - \u624b\u6a5f\u75c5\u6bd2\/\u96fb\u8166\u75c5\u6bd2\u9632\u79a6\u5bc6\u6280,\u4e0d\u53ea\u5b88\u8b77\u7db2\u8def\u5b89\u5168,\u9084\u63d0\u4f9b\u5404\u7a2e\u5be6\u75283C\u5be6\u7528\u5c0f\u79d8\u8a23,\u7531\u8cc7\u5b89\/\u9632\u6bd2\u8edf\u9ad4\u9818\u5c0e\u54c1\u724c\u8da8\u52e2\u79d1\u6280 Trend Micro \u6bcf\u65e5\u66f4\u65b0","og:type":"article","og:title":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d - \u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c","og:description":"\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de","og:url":"https:\/\/blog.trendmicro.com.tw\/?p=64227","article:published_time":"2020-05-07T02:37:24+00:00","article:modified_time":"2020-05-07T04:04:58+00:00","twitter:card":"summary_large_image","twitter:title":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d - \u8cc7\u5b89\u8da8\u52e2\u90e8\u843d\u683c","twitter:description":"\u4e00\u6ce2\u65b0\u7684\u91dd\u5c0d\u6027\u653b\u64ca\u5229\u7528\u65b0\u52d2\u7d22\u75c5\u6bd2\u611f\u67d3\u4e86\u6578\u5bb6\u53f0\u7063\u4f01\u696d\uff0c\u6211\u5011\u5c07\u9019\u96bb\u52d2\u7d22\u75c5\u6bd2\u7a31\u70ba ColdLock\u3002\u9019\u6ce2\u653b\u64ca\u5e36\u6709\u7834\u58de"},"aioseo_meta_data":{"post_id":"64227","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2025-02-18 08:01:49","updated":"2025-02-18 08:01:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null,"seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/blog.trendmicro.com.tw\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/blog.trendmicro.com.tw\/?cat=3\" title=\"\u8cc7\u5b89\u540d\u8a5e\/\u4ec0\u9ebc\u662f?\/ \u4f55\u8b02?\">\u8cc7\u5b89\u540d\u8a5e\/\u4ec0\u9ebc\u662f?\/ \u4f55\u8b02?<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/blog.trendmicro.com.tw\/?cat=2454\" title=\"\u76ee\u6a19\u5f0f\u653b\u64ca\/\u91dd\u5c0d\u6027\u653b\u64ca\/\u9396\u5b9a\u76ee\u6a19\u653b\u64ca(Targeted attack )\">\u76ee\u6a19\u5f0f\u653b\u64ca\/\u91dd\u5c0d\u6027\u653b\u64ca\/\u9396\u5b9a\u76ee\u6a19\u653b\u64ca(Targeted attack )<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/blog.trendmicro.com.tw\/"},{"label":"\u8cc7\u5b89\u540d\u8a5e\/\u4ec0\u9ebc\u662f?\/ \u4f55\u8b02?","link":"https:\/\/blog.trendmicro.com.tw\/?cat=3"},{"label":"\u76ee\u6a19\u5f0f\u653b\u64ca\/\u91dd\u5c0d\u6027\u653b\u64ca\/\u9396\u5b9a\u76ee\u6a19\u653b\u64ca(Targeted attack )","link":"https:\/\/blog.trendmicro.com.tw\/?cat=2454"},{"label":"\u76ee\u6a19\u5f0f\u52d2\u7d22\u75c5\u6bd2\u653b\u64ca\u53f0\u7063\u4f01\u696d","link":"https:\/\/blog.trendmicro.com.tw\/?p=64227"}],"_links":{"self":[{"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/64227","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=64227"}],"version-history":[{"count":10,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/64227\/revisions"}],"predecessor-version":[{"id":64238,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/64227\/revisions\/64238"}],"wp:attachment":[{"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=64227"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=64227"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.trendmicro.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=64227"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}