假冒微星显卡超频工具 Afterburner网站泛滥

{"root":{"nodeName":"document","nodeValue":null,"nodeType":"0","display":"block","nodeAttrs":[],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[],"childNodes":[{"nodeName":"span","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":" color: rgb(0, 0, 0);;"}],"childNodes":[{"nodeName":"text","nodeValue":" ","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"border-bottom: 1px solid rgb(242, 242, 242); color: rgb(0, 0, 0);;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"position: relative; padding-bottom: 18px;;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" -webkit-box-align: center; align-items: center;;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" border-radius: 16px; background: rgb(78, 110, 242); text-align: center; line-height: 32px; cursor: pointer;;"}],"childNodes":[{"nodeName":"span","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":" color: rgb(255, 255, 255);;"}],"childNodes":[]}]}]}]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"color: rgb(0, 0, 0);;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"padding-top: 26px; padding-bottom: 16px; border-bottom: 1px solid rgb(242, 242, 242);;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; line-height: 30px; color: rgb(34, 34, 34);;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"IT之家 11 月 24 日消息，根据安全公司 Cyble 发布的最新报告，","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]},{"nodeName":"strong","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":";"}],"childNodes":[{"nodeName":"text","nodeValue":"在过去 3 个月时间里至少发生了 50 起玩家访问假冒微星 Afterburner 官方网站后，其信息被窃取、个人设备用于挖矿的安全事件。","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; margin-top: 22px;;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" -webkit-box-orient: vertical; -webkit-box-direction: normal; -webkit-box-align: center; align-items: center;;"}],"childNodes":[{"nodeName":"img","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":" border-style: initial; border-radius: 13px;;"},{"attrName":"src","attrValue":"//image109.360doc.com/DownloadImg/2022/12/2218/257889892_2_20221222063006477.jpeg"}],"childNodes":[]}]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; line-height: 30px; color: rgb(34, 34, 34); margin-top: 28px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"IT之家了解到，这些钓鱼站点包括但不限于以下域名：","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; line-height: 30px; color: rgb(34, 34, 34); margin-top: 24px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]},{"nodeName":"ul","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"padding-left: 0px; list-style: none; overflow-y: auto;;"}],"childNodes":[{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"msi-afterburner--download.site","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"msi-afterburner-download.site","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"msi-afterburner-download.tech","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"msi-afterburner-download.online","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"msi-afterburner-download.store","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"msi-afterburner-download.ru","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"msi-afterburner.download","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"mslafterburners.com","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"msi-afterburnerr.com","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]}]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; line-height: 30px; color: rgb(34, 34, 34); margin-top: 24px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"在某些情况下，黑客所使用的域名并不像微星的品牌，很可能是通过直接信息、论坛和社交媒体帖子进行推广。例子包括：","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; line-height: 30px; color: rgb(34, 34, 34); margin-top: 24px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]},{"nodeName":"ul","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"padding-left: 0px; list-style: none; overflow-y: auto;;"}],"childNodes":[{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"git[.]git[.]skblxin[.]matrizauto[.]net","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"git[.]git[.]git[.]skblxin[.]matrizauto[.]net","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"git[.]git[.]git[.]git[.]skblxin[.]matrizauto[.]net","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]},{"nodeName":"li","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"margin: 0px; padding: 0px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"git[.]git[.]git[.]git[.]git[.]skblxin[.]matrizauto[.]net","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]}]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; line-height: 30px; color: rgb(34, 34, 34); margin-top: 24px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"用户一旦访问这些钓鱼网站下载 MSI Afterburner 安装文件（MSIAfterburnerSetup.msi），在安装过程中会悄悄地投放和运行 RedLine 信息窃取恶意软件和 XMR 挖矿程序。","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; margin-top: 22px;;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" -webkit-box-orient: vertical; -webkit-box-direction: normal; -webkit-box-align: center; align-items: center;;"}],"childNodes":[{"nodeName":"img","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":" border-style: initial; border-radius: 13px;;"},{"attrName":"src","attrValue":"//image109.360doc.com/DownloadImg/2022/12/2218/257889892_3_20221222063006540.jpeg"}],"childNodes":[]}]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; margin-top: 40px;;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" -webkit-box-orient: vertical; -webkit-box-direction: normal; -webkit-box-align: center; align-items: center;;"}],"childNodes":[{"nodeName":"img","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":" border-style: initial; border-radius: 13px;;"},{"attrName":"src","attrValue":"//image109.360doc.com/DownloadImg/2022/12/2218/257889892_4_20221222063006867.jpeg"}],"childNodes":[]}]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; margin-top: 40px;;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" -webkit-box-orient: vertical; -webkit-box-direction: normal; -webkit-box-align: center; align-items: center;;"}],"childNodes":[{"nodeName":"img","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":" border-style: initial; border-radius: 13px;;"},{"attrName":"src","attrValue":"//image109.360doc.com/DownloadImg/2022/12/2218/257889892_5_20221222063007150.jpeg"}],"childNodes":[]}]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; margin-top: 40px;;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" -webkit-box-orient: vertical; -webkit-box-direction: normal; -webkit-box-align: center; align-items: center;;"}],"childNodes":[{"nodeName":"img","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":" border-style: initial; border-radius: 13px;;"},{"attrName":"src","attrValue":"//image109.360doc.com/DownloadImg/2022/12/2218/257889892_6_20221222063007242.jpeg"}],"childNodes":[]}]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; margin-top: 40px;;"}],"childNodes":[{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" -webkit-box-orient: vertical; -webkit-box-direction: normal; -webkit-box-align: center; align-items: center;;"}],"childNodes":[{"nodeName":"img","nodeValue":null,"nodeType":"1","display":"inline","nodeAttrs":[{"attrName":"style","attrValue":" border-style: initial; border-radius: 13px;;"},{"attrName":"src","attrValue":"//image109.360doc.com/DownloadImg/2022/12/2218/257889892_7_20221222063007305.jpeg"}],"childNodes":[]}]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; line-height: 30px; color: rgb(34, 34, 34); margin-top: 28px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"挖矿是通过本地 Program Files 目录下一个名为“browser_assistant.exe”的 64 位 Python 可执行文件安装的，该文件在安装程序创建的进程中注入了一个壳代码。XMR 矿工使用的参数之一是 \"CPU 最大线程\" 设置为 20，高于大多数现代 CPU 线程数，因此它被设置为捕获所有可用的功率。","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]}]},{"nodeName":"div","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":" overflow-x: visible; line-height: 30px; color: rgb(34, 34, 34); margin-top: 24px;;"}],"childNodes":[{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[]},{"nodeName":"p","nodeValue":null,"nodeType":"1","display":"block","nodeAttrs":[{"attrName":"style","attrValue":"overflow-y: auto; line-height: 30px; margin-right: 0px !important; margin-left: 0px !important; padding: 0px !important;;"}],"childNodes":[{"nodeName":"text","nodeValue":"合法的 MSI Afterburner 可以直接从 MSI 下载","nodeType":"3","display":"inline","nodeAttrs":[],"childNodes":[]}]}]}]}]}]},"imageUrls":["https://image109.360doc.com/DownloadImg/2022/12/2218/257889892_2_20221222063006477.jpeg","https://image109.360doc.com/DownloadImg/2022/12/2218/257889892_3_20221222063006540.jpeg","https://image109.360doc.com/DownloadImg/2022/12/2218/257889892_4_20221222063006867.jpeg","https://image109.360doc.com/DownloadImg/2022/12/2218/257889892_5_20221222063007150.jpeg","https://image109.360doc.com/DownloadImg/2022/12/2218/257889892_6_20221222063007242.jpeg","https://image109.360doc.com/DownloadImg/2022/12/2218/257889892_7_20221222063007305.jpeg"],"text":" IT之家 11 月 24 日消息，根据安全公司 Cyble 发布的最新报告，在过去 3 个月时间里至少发生了 50 起玩家访问假冒微星 Afterburner 官方网站后，其信息被窃取、个人设备用于挖矿的安全事件。IT之家了解到，这些钓鱼站点包括但不限于以下域名：msi-afterburner--download.sitemsi-afterburner-download.sitemsi-afterburner-download.techmsi-afterburner-download.onlinemsi-afterburner-download.storemsi-afterburner-download.rumsi-afterburner.downloadmslafterburners.commsi-afterburnerr.com在某些情况下，黑客所使用的域名并不像微星的品牌，很可能是通过直接信息、论坛和社交媒体帖子进行推广。例子包括：git[.]git[.]skblxin[.]matrizauto[.]netgit[.]git[.]git[.]skblxin[.]matrizauto[.]netgit[.]git[.]git[.]git[.]skblxin[.]matrizauto[.]netgit[.]git[.]git[.]git[.]git[.]skblxin[.]matrizauto[.]net用户一旦访问这些钓鱼网站下载 MSI Afterburner 安装文件（MSIAfterburnerSetup.msi），在安装过程中会悄悄地投放和运行 RedLine 信息窃取恶意软件和 XMR 挖矿程序。挖矿是通过本地 Program Files 目录下一个名为“browser_assistant.exe”的 64 位 Python 可执行文件安装的，该文件在安装程序创建的进程中注入了一个壳代码。XMR 矿工使用的参数之一是 \"CPU 最大线程\" 设置为 20，高于大多数现代 CPU 线程数，因此它被设置为捕获所有可用的功率。合法的 MSI Afterburner 可以直接从 MSI 下载"}