{"id":158,"date":"2026-05-07T15:41:52","date_gmt":"2026-05-07T07:41:52","guid":{"rendered":"https:\/\/www.gswsfh2021.site\/?p=158"},"modified":"2026-05-07T15:41:52","modified_gmt":"2026-05-07T07:41:52","slug":"%e9%ad%94%e7%aa%9f%e5%86%8d%e4%b8%b4%ef%bc%9a%e5%8d%a1%e5%b7%b4%e6%96%af%e5%9f%ba%e6%8f%ad%e9%9c%b2mata%e7%bb%84%e7%bb%87%e5%af%b9%e4%b8%9c%e6%ac%a7%e5%b7%a5%e4%b8%9a%e5%b7%a8","status":"publish","type":"post","link":"https:\/\/www.gswsfh2021.site\/?p=158","title":{"rendered":"\u201c\u9b54\u7a9f\u201d\u518d\u4e34\uff1a\u5361\u5df4\u65af\u57fa\u63ed\u9732MATA\u7ec4\u7ec7\u5bf9\u4e1c\u6b27\u5de5\u4e1a\u5de8\u5934\u7684\u201c\u4e2d\u67a2\u762b\u75ea\u5f0f\u201d\u653b\u51fb"},"content":{"rendered":"\n<p>\u4fe1\u606f\u6765\u6e90\uff1a<a href=\"https:\/\/securelist.com\/updated-mata-attacks-industrial-companies-in-eastern-europe\/110829\/\">Updated MATA attacks industrial companies in Eastern Europe | Securelist<\/a> \uff082023\u5e7410\u670818\u65e5\uff09<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"%E4%B8%80%E3%80%81%E4%BA%8B%E4%BB%B6%E6%A6%82%E8%BF%B0%EF%BC%9A%E4%B8%80%E5%9C%BA%E5%A7%8B%E4%BA%8E%E5%B7%A5%E5%8E%82%E3%80%81%E7%BB%88%E7%BB%93%E4%BA%8E%E2%80%9C%E5%AE%89%E5%85%A8%E4%B8%AD%E6%9E%A2%E2%80%9D%E7%9A%84%E6%95%B0%E5%AD%97%E5%85%A5%E4%BE%B5\"><strong>\u4e00\u3001\u4e8b\u4ef6\u6982\u8ff0\uff1a\u4e00\u573a\u59cb\u4e8e\u5de5\u5382\u3001\u7ec8\u7ed3\u4e8e\u201c\u5b89\u5168\u4e2d\u67a2\u201d\u7684\u6570\u5b57\u5165\u4fb5<\/strong><\/h2>\n\n\n\n<p>2022\u5e749\u6708\uff0c\u5361\u5df4\u65af\u57fa\u5b89\u5168\u56e2\u961f\u5728\u5206\u6790\u4e1c\u6b27\u5730\u533a\u5de5\u4e1a\u4f01\u4e1a\u7684\u9065\u6d4b\u6570\u636e\u65f6\uff0c\u53d1\u73b0\u4e86\u4e00\u7ec4\u65b0\u578b\u6076\u610f\u8f6f\u4ef6\u6837\u672c\uff0c\u5b83\u4eec\u5747\u5f52\u5c5e\u4e8e\u4e00\u4e2a\u540d\u4e3a\u201c<strong>MATA<\/strong>\u201d\u7684\u957f\u671f\u6d3b\u8dc3APT\u7ec4\u7ec7\u3002\u8fd9\u6b21\u653b\u51fb\u59cb\u4e8e2022\u5e748\u6708\u4e2d\u65ec\uff0c\u6301\u7eed\u81f32023\u5e745\u6708\uff0c\u76ee\u6807\u9501\u5b9a\u5728<strong>\u80fd\u6e90\uff08\u6cb9\u6c14\uff09\u4e0e\u56fd\u9632\u5de5\u4e1a<\/strong>\u7684\u5341\u4f59\u5bb6\u5927\u578b\u4f01\u4e1a\u3002<\/p>\n\n\n\n<p>\u4e0e\u4ee5\u5f80APT\u653b\u51fb\u4e0d\u540c\uff0c\u6b64\u6b21\u884c\u52a8\u7684\u771f\u6b63\u6050\u6016\u4e4b\u5904\u5728\u4e8e\u5176<strong>\u653b\u51fb\u8def\u5f84\u7684\u9006\u5411\u6027<\/strong>\uff1a\u653b\u51fb\u8005\u5e76\u672a\u76f4\u63a5\u7784\u51c6\u6838\u5fc3\u7cfb\u7edf\uff0c\u800c\u662f\u4ece\u4e00\u4e2a\u8fb9\u7f18\u5de5\u5382\u7684\u666e\u901a\u5458\u5de5\u5165\u624b\uff0c\u901a\u8fc7\u5c42\u5c42\u6e17\u900f\uff0c\u6700\u7ec8\u653b\u9677\u4e86\u4f01\u4e1a\u7684\u201c\u6570\u5b57\u5fc3\u810f\u201d\u2014\u2014<strong>\u5b89\u5168\u7ba1\u7406\u7cfb\u7edf\u63a7\u5236\u53f0<\/strong>\u3002\u4ed6\u4eec\u5229\u7528\u8fd9\u4e9b\u672c\u5e94\u201c\u5b88\u62a4\u5b89\u5168\u201d\u7684\u5e73\u53f0\uff0c\u53cd\u8fc7\u6765\u5411\u5168\u96c6\u56e2\u5b50\u516c\u53f8\u6279\u91cf\u6295\u653e\u6076\u610f\u8f6f\u4ef6\uff0c\u751a\u81f3\u5c06\u653b\u51fb\u8303\u56f4\u6269\u5c55\u81f3Linux\u670d\u52a1\u5668\uff0c\u5b9e\u73b0\u4e86\u5bf9\u6574\u4e2a\u5de5\u4e1a\u751f\u6001\u7684\u201c\u81ea\u4e0a\u800c\u4e0b\u201d\u5f0f\u63a7\u5236\u3002<\/p>\n\n\n\n<p>\u66f4\u4ee4\u4eba\u9707\u60ca\u7684\u662f\uff0c\u653b\u51fb\u8005\u8fd8\u90e8\u7f72\u4e86<strong>USB\u6446\u6e21\u6a21\u5757<\/strong>\uff0c\u4e13\u95e8\u7528\u4e8e\u6e17\u900f\u7269\u7406\u9694\u79bb\u7684\u201c\u7a7a\u6c14\u9699\u201d\uff08Air-Gapped\uff09\u7f51\u7edc\u3002\u8fd9\u8868\u660e\u5176\u6700\u7ec8\u76ee\u6807\u6781\u53ef\u80fd\u662f\u83b7\u53d6\u6700\u6838\u5fc3\u7684\u5de5\u4e1a\u8bbe\u8ba1\u56fe\u7eb8\u3001\u63a7\u5236\u7cfb\u7edf\u53c2\u6570\u6216\u519b\u4e8b\u6280\u672f\u8d44\u6599\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"%E4%BA%8C%E3%80%81%E6%94%BB%E5%87%BB%E8%B7%AF%E5%BE%84%EF%BC%9A%E4%BB%8E%E9%92%93%E9%B1%BC%E9%82%AE%E4%BB%B6%E5%88%B0%E5%AE%89%E5%85%A8%E4%B8%AD%E6%9E%A2%E7%9A%84%E2%80%9C%E5%85%AD%E6%AD%A5%E5%A4%BA%E6%9D%83%E2%80%9D\"><strong>\u4e8c\u3001\u653b\u51fb\u8def\u5f84\uff1a\u4ece\u9493\u9c7c\u90ae\u4ef6\u5230\u5b89\u5168\u4e2d\u67a2\u7684\u201c\u516d\u6b65\u593a\u6743\u201d<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"1.-%E5%88%9D%E5%A7%8B%E5%85%A5%E5%8F%A3%EF%BC%9A%E5%88%A9%E7%94%A8%E6%97%A7%E6%BC%8F%E6%B4%9E%E7%9A%84%E7%B2%BE%E5%87%86%E9%B1%BC%E5%8F%89%E9%82%AE%E4%BB%B6\"><strong>1. \u521d\u59cb\u5165\u53e3\uff1a\u5229\u7528\u65e7\u6f0f\u6d1e\u7684\u7cbe\u51c6\u9c7c\u53c9\u90ae\u4ef6<\/strong><\/h3>\n\n\n\n<p>\u653b\u51fb\u59cb\u4e8e\u4e00\u5c01\u7cbe\u5fc3\u6784\u9020\u7684\u9493\u9c7c\u90ae\u4ef6\uff0c\u9644\u4ef6\u4e3a\u4e00\u4efd\u770b\u4f3c\u666e\u901a\u7684\u884c\u4e1a\u62a5\u544a\u6216\u91c7\u8d2d\u5408\u540c\u3002\u6587\u6863\u4e2d\u5d4c\u5165\u4e86\u4e00\u4e2a\u5916\u90e8\u94fe\u63a5\uff0c\u6307\u5411\u4e00\u4e2a\u6258\u7ba1\u4e86<strong>CVE-2021-26411<\/strong>\u6f0f\u6d1e\u5229\u7528\u4ee3\u7801\u7684\u7f51\u9875\u3002\u8be5\u6f0f\u6d1e\u5b58\u5728\u4e8eInternet Explorer\u7684MSHTML\u5f15\u64ce\u4e2d\uff0c\u5141\u8bb8\u8fdc\u7a0b\u6267\u884c\u4ee3\u7801\u3002<\/p>\n\n\n\n<p>\u5f53\u53d7\u5bb3\u8005\u4f7f\u7528IE\u6216\u57fa\u4e8eIE\u5185\u6838\u7684\u5e94\u7528\u6253\u5f00\u94fe\u63a5\u540e\uff0c\u6f0f\u6d1e\u88ab\u89e6\u53d1\uff0c\u4e0b\u8f7d\u5e76\u6267\u884c\u7b2c\u4e00\u9636\u6bb5\u8f7d\u8377\u3002\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff0c\u653b\u51fb\u8005\u5728\u6574\u4e2a9\u6708\u6301\u7eed\u53d1\u9001\u6b64\u7c7b\u90ae\u4ef6\uff0c\u8bf4\u660e\u5176\u5177\u5907\u957f\u671f\u8fd0\u8425\u80fd\u529b\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"2.-%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8%EF%BC%9Acve-2021-26411-%E5%AE%9E%E7%8E%B0%E5%88%9D%E5%A7%8B%E7%AB%8B%E8%B6%B3\"><strong>2. \u6f0f\u6d1e\u5229\u7528\uff1aCVE-2021-26411 \u5b9e\u73b0\u521d\u59cb\u7acb\u8db3<\/strong><\/h3>\n\n\n\n<p>CVE-2021-26411\u662f\u4e00\u4e2a\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u901a\u8fc7\u7cbe\u5fc3\u6784\u9020\u7684HTML\u548cCSS\u4ee3\u7801\uff0c\u8bf1\u5bfcMSHTML\u5728\u89e3\u6790\u65f6\u53d1\u751f\u91ca\u653e\u540e\u91cd\u7528\uff08Use-After-Free\uff09\uff0c\u4ece\u800c\u63a7\u5236\u7a0b\u5e8f\u6d41\u3002\u5c3d\u7ba1\u8be5\u6f0f\u6d1e\u5df2\u57282021\u5e744\u6708\u88ab\u5fae\u8f6f\u4fee\u590d\uff0c\u4f46\u5728\u5de5\u4e1a\u73af\u5883\u4e2d\uff0c\u5927\u91cf\u8001\u65e7\u7cfb\u7edf\u4ecd\u5728\u8fd0\u884c\u672a\u6253\u8865\u4e01\u7684IE\uff0c\u6210\u4e3a\u7406\u60f3\u7684\u7a81\u7834\u53e3\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"3.-%E6%84%9F%E6%9F%93%E9%93%BE%E6%BC%94%E8%BF%9B%EF%BC%9A%E5%A4%9A%E4%BB%A3mata%E6%9C%A8%E9%A9%AC%E5%8D%8F%E5%90%8C%E4%BD%9C%E6%88%98\"><strong>3. \u611f\u67d3\u94fe\u6f14\u8fdb\uff1a\u591a\u4ee3MATA\u6728\u9a6c\u534f\u540c\u4f5c\u6218<\/strong><\/h3>\n\n\n\n<p>\u653b\u51fb\u6210\u529f\u540e\uff0c\u90e8\u7f72\u4ee5\u4e0b\u7ec4\u4ef6\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u7b2c\u4e00\u9636\u6bb5\uff1a\u4e0b\u8f7d\u5668\/\u52a0\u8f7d\u5668<\/strong><br>\u8d1f\u8d23\u4eceC2\u670d\u52a1\u5668\u83b7\u53d6\u4e3b\u6728\u9a6c\uff0c\u5e76\u9a8c\u8bc1\u53d7\u5bb3\u8005\u8eab\u4efd\uff0c\u786e\u4fdd\u53ea\u5bf9\u7279\u5b9a\u76ee\u6807\u6fc0\u6d3b\u3002<\/li>\n\n\n\n<li><strong>\u7b2c\u4e8c\u9636\u6bb5\uff1aMATA\u4e3b\u6846\u67b6\uff08Windows\uff09<\/strong><br>\u5305\u62ec\u4e09\u4ee3\u65b0\u7248\u672c\uff1a\n<ul class=\"wp-block-list\">\n<li><strong>MATA Gen.3<\/strong>\uff1a\u5728\u539f\u6709\u57fa\u7840\u4e0a\u589e\u5f3a\u53cd\u5206\u6790\u80fd\u529b\uff1b<\/li>\n\n\n\n<li><strong>MataDoor\uff08Gen.4\uff09<\/strong>\uff1a\u5b8c\u5168\u91cd\u5199\uff0c\u6a21\u5757\u5316\u7a0b\u5ea6\u66f4\u9ad8\uff1b<\/li>\n\n\n\n<li><strong>MATA Gen.5<\/strong>\uff1a\u518d\u6b21\u91cd\u6784\uff0c\u652f\u6301\u66f4\u590d\u6742\u7684\u4ee3\u7406\u94fe\u901a\u4fe1\u3002<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u7b2c\u4e09\u9636\u6bb5\uff1aLinux\u7248MATA Gen.3<\/strong><br>\u9996\u6b21\u786e\u8ba4\u8be5\u7ec4\u7ec7\u5177\u5907\u8de8\u5e73\u53f0\u653b\u51fb\u80fd\u529b\uff0c\u4e14\u4e0eWindows\u7248\u672c\u529f\u80fd\u9ad8\u5ea6\u4e00\u81f4\uff0c\u7591\u4f3c\u5171\u7528\u540c\u4e00\u4ee3\u7801\u5e93\u3002<\/li>\n\n\n\n<li><strong>\u7b2c\u56db\u9636\u6bb5\uff1a\u4e13\u7528\u7a83\u5bc6\u6a21\u5757\uff08Stealer\uff09<\/strong><br>\u6839\u636e\u4efb\u52a1\u9700\u6c42\u52a8\u6001\u52a0\u8f7d\uff0c\u5305\u62ec\uff1a\n<ul class=\"wp-block-list\">\n<li>\u5c4f\u5e55\u622a\u56fe\u5de5\u5177\uff1b<\/li>\n\n\n\n<li>\u6d4f\u89c8\u5668\u51ed\u8bc1\u7a83\u53d6\u5668\uff08\u652f\u6301Chrome\u3001Firefox\u7b49\uff09\uff1b<\/li>\n\n\n\n<li>Cookie\u63d0\u53d6\u5668\u3002<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>\u7b2c\u4e94\u9636\u6bb5\uff1a\u6743\u9650\u63d0\u5347\u4e0e\u7ed5\u8fc7\u5de5\u5177<\/strong><br>\u4f7f\u7528<strong>CallbackHell<\/strong>\uff08CVE-2021-40449\uff09\u6f0f\u6d1e\u6216<strong>BYOD\uff08\u81ea\u5e26\u6613\u635f\u9a71\u52a8\uff09<\/strong>\u6280\u672f\uff0c\u7ed5\u8fc7EDR\u7b49\u7ec8\u7aef\u9632\u62a4\u4ea7\u54c1\u3002<\/li>\n\n\n\n<li><strong>\u7b2c\u516d\u9636\u6bb5\uff1aUSB\u6446\u6e21\u6a21\u5757<\/strong><br>\u4e13\u4e3a\u7a7f\u900f\u201c\u7a7a\u6c14\u9699\u201d\u7f51\u7edc\u8bbe\u8ba1\uff0c\u901a\u8fc7U\u76d8\u5728\u9694\u79bb\u7f51\u7edc\u95f4\u4f20\u9012\u6307\u4ee4\u4e0e\u6570\u636e\u3002<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"%E4%B8%89%E3%80%81%E6%A0%B8%E5%BF%83%E7%BB%84%E4%BB%B6%EF%BC%9A%E6%A8%A1%E5%9D%97%E5%8C%96%E6%A1%86%E6%9E%B6%E4%B8%8E%E2%80%9C%E5%AE%89%E5%85%A8%E4%B8%AD%E6%9E%A2%E2%80%9D%E6%8E%A5%E7%AE%A1%E6%9C%AF\"><strong>\u4e09\u3001\u6838\u5fc3\u7ec4\u4ef6\uff1a\u6a21\u5757\u5316\u6846\u67b6\u4e0e\u201c\u5b89\u5168\u4e2d\u67a2\u201d\u63a5\u7ba1\u672f<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"1.-mata%E4%B8%BB%E6%A1%86%E6%9E%B6%EF%BC%9A%E8%B7%A8%E5%B9%B3%E5%8F%B0%E8%BF%9C%E7%A8%8B%E6%8E%A7%E5%88%B6%E4%B8%AD%E6%9E%A2\"><strong>1. MATA\u4e3b\u6846\u67b6\uff1a\u8de8\u5e73\u53f0\u8fdc\u7a0b\u63a7\u5236\u4e2d\u67a2<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\u7279\u6027<\/th><th>\u8bf4\u660e<\/th><\/tr><tr><td><strong>\u6a21\u5757\u5316\u67b6\u6784<\/strong><\/td><td>\u652f\u6301\u52a8\u6001\u52a0\u8f7d\u529f\u80fd\u63d2\u4ef6\uff0c\u5982\u7a83\u5bc6\u3001\u6a2a\u5411\u79fb\u52a8\u3001\u6301\u4e45\u5316\u7b49<\/td><\/tr><tr><td><strong>\u591a\u534f\u8bae\u901a\u4fe1<\/strong><\/td><td>\u652f\u6301HTTP\u3001HTTPS\u3001DNS\u96a7\u9053\u7b49\u591a\u79cdC2\u534f\u8bae<\/td><\/tr><tr><td><strong>\u4ee3\u7406\u94fe\u652f\u6301<\/strong><\/td><td>\u53ef\u901a\u8fc7\u591a\u5c42\u5185\u90e8\u8df3\u677f\u673a\u8fde\u63a5C2\uff0c\u9690\u85cf\u771f\u5b9e\u5730\u5740<\/td><\/tr><tr><td><strong>\u7075\u6d3b\u914d\u7f6e<\/strong><\/td><td>\u901a\u8fc7\u52a0\u5bc6\u914d\u7f6e\u6587\u4ef6\u63a7\u5236\u884c\u4e3a\uff0c\u652f\u6301\u8fdc\u7a0b\u66f4\u65b0<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>\u5176\u8bbe\u8ba1\u601d\u60f3\u9ad8\u5ea6\u5de5\u7a0b\u5316\uff0c\u4f53\u73b0\u51fa\u653b\u51fb\u8005\u5bf9\u5927\u89c4\u6a21\u7f51\u7edc\u7ba1\u7406\u7684\u6df1\u523b\u7406\u89e3\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"2.-linux-mata-gen.3%EF%BC%9A%E7%AA%81%E7%A0%B4%E5%B7%A5%E4%B8%9A%E7%B3%BB%E7%BB%9F%E7%9A%84%E2%80%9C%E6%9C%80%E5%90%8E%E9%98%B2%E7%BA%BF%E2%80%9D\"><strong>2. Linux MATA Gen.3\uff1a\u7a81\u7834\u5de5\u4e1a\u7cfb\u7edf\u7684\u201c\u6700\u540e\u9632\u7ebf\u201d<\/strong><\/h3>\n\n\n\n<p>\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\uff08ICS\uff09\u4e2d\u5927\u91cf\u4f7f\u7528Linux\u670d\u52a1\u5668\uff0c\u4f20\u7edf\u653b\u51fb\u5f80\u5f80\u96be\u4ee5\u89e6\u53ca\u3002\u6b64\u6b21\u53d1\u73b0\u7684Linux\u7248\u672cMATA\u5177\u5907\u4ee5\u4e0b\u80fd\u529b\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u8fdb\u7a0b\u9690\u85cf\u3001\u7aef\u53e3\u76d1\u542c\uff1b<\/li>\n\n\n\n<li>\u6587\u4ef6\u7a83\u53d6\u3001\u547d\u4ee4\u6267\u884c\uff1b<\/li>\n\n\n\n<li>\u81ea\u52a8\u66f4\u65b0\u673a\u5236\uff1b<\/li>\n\n\n\n<li>\u901a\u8fc7\u5b89\u5168\u7ba1\u7406\u7cfb\u7edf\u8fdc\u7a0b\u90e8\u7f72\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u8fd9\u6807\u5fd7\u7740APT\u7ec4\u7ec7\u5df2\u5177\u5907\u5168\u9762\u6e17\u900f\u73b0\u4ee3\u5de5\u4e1a\u6df7\u5408IT\u73af\u5883\u7684\u80fd\u529b\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"3.-usb%E4%BC%A0%E6%92%AD%E6%A8%A1%E5%9D%97%EF%BC%9A%E4%B8%93%E4%B8%BA%E7%A9%BA%E6%B0%94%E9%9A%99%E7%BD%91%E7%BB%9C%E8%AE%BE%E8%AE%A1%E7%9A%84%E2%80%9C%E6%95%B0%E5%AD%97%E8%B7%B3%E7%BA%BF%E2%80%9D\"><strong>3. USB\u4f20\u64ad\u6a21\u5757\uff1a\u4e13\u4e3a\u7a7a\u6c14\u9699\u7f51\u7edc\u8bbe\u8ba1\u7684\u201c\u6570\u5b57\u8df3\u7ebf\u201d<\/strong><\/h3>\n\n\n\n<p>\u8be5\u6a21\u5757\u529f\u80fd\u6781\u4e3a\u7279\u6b8a\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u5199\u5165\u6a21\u5f0f<\/strong>\uff1a\u5f53U\u76d8\u63d2\u5165\u53d7\u611f\u67d3\u7684\u8054\u7f51\u4e3b\u673a\u65f6\uff0c\u6a21\u5757\u5c06\u52a0\u5bc6\u7684\u653b\u51fb\u6307\u4ee4\u5199\u5165\u7279\u5b9a\u6587\u4ef6\uff1b<\/li>\n\n\n\n<li><strong>\u8bfb\u53d6\u6a21\u5f0f<\/strong>\uff1a\u5f53\u540c\u4e00U\u76d8\u63d2\u5165\u7a7a\u6c14\u9699\u7f51\u7edc\u4e2d\u7684\u4e3b\u673a\u65f6\uff0c\u6076\u610f\u8f6f\u4ef6\u8bfb\u53d6\u6307\u4ee4\u5e76\u6267\u884c\uff1b<\/li>\n\n\n\n<li><strong>\u56de\u4f20\u673a\u5236<\/strong>\uff1a\u6536\u96c6\u5230\u7684\u654f\u611f\u6570\u636e\u540c\u6837\u901a\u8fc7U\u76d8\u5e26\u56de\u8054\u7f51\u533a\u57df\uff0c\u5b9e\u73b0\u53cc\u5411\u901a\u4fe1\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u8fd9\u662f\u5178\u578b\u7684\u201c<strong>Stuxnet\u5f0f<\/strong>\u201d\u653b\u51fb\u903b\u8f91\uff0c\u4e13\u95e8\u7528\u4e8e\u7a83\u53d6\u6700\u673a\u5bc6\u7684\u5de5\u4e1a\u8d44\u4ea7\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"4.-edr%E7%BB%95%E8%BF%87%E5%B7%A5%E5%85%B7%EF%BC%9Acallbackhell%E4%B8%8Ebyod\"><strong>4. EDR\u7ed5\u8fc7\u5de5\u5177\uff1aCallbackHell\u4e0eBYOD<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\u5de5\u5177<\/th><th>\u6280\u672f\u539f\u7406<\/th><\/tr><tr><td><strong>CallbackHell<\/strong><\/td><td>\u5229\u7528Win32k\u5185\u6838\u6f0f\u6d1e\uff08CVE-2021-40449\uff09\u5b9e\u73b0\u6743\u9650\u63d0\u5347\uff0c\u7981\u7528\u5b89\u5168\u8f6f\u4ef6\u94a9\u5b50<\/td><\/tr><tr><td><strong>BYOD\uff08\u81ea\u5e26\u6613\u635f\u9a71\u52a8\uff09<\/strong><\/td><td>\u52a0\u8f7d\u4e00\u4e2a\u5df2\u77e5\u5b58\u5728\u6f0f\u6d1e\u7684\u5408\u6cd5\u9a71\u52a8\uff08\u5982\u8c03\u8bd5\u5de5\u5177\uff09\uff0c\u5229\u7528\u5176\u6f0f\u6d1e\u83b7\u5f97\u5185\u6838\u6743\u9650<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>\u8fd9\u4e24\u79cd\u6280\u672f\u7ec4\u5408\u4f7f\u7528\uff0c\u786e\u4fdd\u5373\u4f7f\u5728\u90e8\u7f72\u4e86\u9ad8\u7ea7EDR\u7684\u4f01\u4e1a\u4e2d\u4e5f\u80fd\u957f\u671f\u6f5c\u4f0f\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"%E5%9B%9B%E3%80%81%E6%94%BB%E5%87%BB%E7%9B%AE%E6%A0%87%E4%B8%8E%E5%BD%92%E5%9B%A0%E5%88%86%E6%9E%90\"><strong>\u56db\u3001\u653b\u51fb\u76ee\u6807\u4e0e\u5f52\u56e0\u5206\u6790<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"%E2%9C%85-%E5%8F%97%E5%AE%B3%E8%80%85%E7%94%BB%E5%83%8F%EF%BC%9A\"><strong>\u2705 \u53d7\u5bb3\u8005\u753b\u50cf\uff1a<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>\u5730\u7406\u4f4d\u7f6e<\/strong>\uff1a\u4e1c\u6b27\u591a\u56fd\uff0c\u5305\u62ec\u4e4c\u514b\u5170\u3001\u6ce2\u5170\u3001\u7f57\u9a6c\u5c3c\u4e9a\u7b49\uff1b<\/li>\n\n\n\n<li><strong>\u884c\u4e1a\u5206\u5e03<\/strong>\uff1a\u6cb9\u6c14\u516c\u53f8\u3001\u56fd\u9632\u627f\u5305\u5546\u3001\u519b\u5de5\u7814\u7a76\u673a\u6784\uff1b<\/li>\n\n\n\n<li><strong>\u7cfb\u7edf\u73af\u5883<\/strong>\uff1a\u6df7\u5408IT\u67b6\u6784\uff0c\u5305\u542bWindows\u5de5\u4f5c\u7ad9\u3001Linux\u670d\u52a1\u5668\u3001\u8001\u65e7IE\u5e94\u7528\u3001\u7a7a\u6c14\u9699\u7f51\u7edc\u3002<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"%F0%9F%94%8D-%E6%94%BB%E5%87%BB%E5%8A%A8%E6%9C%BA%E6%8E%A8%E6%B5%8B%EF%BC%9A\"><strong>\ud83d\udd0d \u653b\u51fb\u52a8\u673a\u63a8\u6d4b\uff1a<\/strong><\/h3>\n\n\n\n<p>\u4ee5<strong>\u56fd\u5bb6\u7ea7\u6280\u672f\u7a83\u53d6<\/strong>\u4e3a\u6838\u5fc3\u76ee\u6807\u3002\u653b\u51fb\u8005\u6700\u7ec8\u63a7\u5236\u4e86\u4f01\u4e1a\u7684\u5b89\u5168\u7ba1\u7406\u7cfb\u7edf\uff0c\u8868\u660e\u5176\u610f\u56fe\u4e0d\u4ec5\u662f\u83b7\u53d6\u6570\u636e\uff0c\u66f4\u662f\u8981<strong>\u5b8c\u5168\u638c\u63a7\u4f01\u4e1a\u7684\u6570\u5b57\u547d\u8109<\/strong>\uff0c\u4e3a\u957f\u671f\u95f4\u8c0d\u6d3b\u52a8\u6216\u672a\u6765\u7834\u574f\u884c\u52a8\u94fa\u8def\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"%F0%9F%94%8E-%E5%BD%92%E5%9B%A0%E7%BA%BF%E7%B4%A2%EF%BC%9A\"><strong>\ud83d\udd0e \u5f52\u56e0\u7ebf\u7d22\uff1a<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>TTPs\u4e00\u81f4\u6027<\/strong>\uff1aMATA\u7ec4\u7ec7\u81ea2018\u5e74\u8d77\u6d3b\u8dc3\uff0c\u5386\u53f2\u653b\u51fb\u5747\u9488\u5bf9\u4e1c\u6b27\u3001\u4e2d\u4e9a\u4f01\u4e1a\uff0c\u624b\u6cd5\u9ad8\u5ea6\u4e00\u81f4\uff1b<\/li>\n\n\n\n<li><strong>\u57fa\u7840\u8bbe\u65bd\u5173\u8054<\/strong>\uff1aC2\u670d\u52a1\u5668IP\u4e0e\u8fc7\u5f80MATA\u6d3b\u52a8\u5b58\u5728\u91cd\u53e0\uff1b<\/li>\n\n\n\n<li><strong>\u5f00\u53d1\u98ce\u683c\u76f8\u4f3c<\/strong>\uff1a\u4ee3\u7801\u7ed3\u6784\u3001\u52a0\u5bc6\u65b9\u5f0f\u3001\u6a21\u5757\u547d\u540d\u4e60\u60ef\u4fdd\u6301\u8fde\u8d2f\uff1b<\/li>\n\n\n\n<li><strong>MITRE ATT&amp;CK\u6620\u5c04<\/strong>\uff1a\u6db5\u76d6T1547\uff08\u6301\u4e45\u5316\uff09\u3001T1055\uff08\u8fdb\u7a0b\u6ce8\u5165\uff09\u3001T1071\uff08C2\u901a\u4fe1\uff09\u7b49\u5178\u578bAPT\u884c\u4e3a\u3002<\/li>\n<\/ul>\n\n\n\n<p>\u5c3d\u7ba1\u5c1a\u65e0\u76f4\u63a5\u8bc1\u636e\u6307\u5411\u5177\u4f53\u56fd\u5bb6\uff0c\u4f46\u7ed3\u5408\u5730\u7f18\u5229\u76ca\u4e0e\u653b\u51fb\u76ee\u6807\uff0c\u5b89\u5168\u754c\u666e\u904d\u8ba4\u4e3a\u8be5\u7ec4\u7ec7\u4e0e<strong>\u4fc4\u7f57\u65af\u80cc\u666f\u7684\u56fd\u5bb6\u7ea7\u9ed1\u5ba2\u56e2\u4f53<\/strong>\u5b58\u5728\u5173\u8054\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"%E4%BA%94%E3%80%81%E6%8A%80%E6%9C%AF%E6%BC%94%E8%BF%9B%E4%B8%8E%E6%88%98%E6%9C%AF%E5%8D%87%E7%BA%A7\"><strong>\u4e94\u3001\u6280\u672f\u6f14\u8fdb\u4e0e\u6218\u672f\u5347\u7ea7<\/strong><\/h2>\n\n\n\n<p>\u76f8\u6bd4\u65e9\u671fMATA\u653b\u51fb\uff0c\u672c\u6b21\u884c\u52a8\u5c55\u73b0\u51fa\u4e09\u5927\u6218\u7565\u8dc3\u8fc1\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u4ece\u201c\u7ec8\u7aef\u6e17\u900f\u201d\u5230\u201c\u4e2d\u67a2\u63a5\u7ba1\u201d<\/strong><br>\u653b\u51fb\u8005\u4e0d\u518d\u6ee1\u8db3\u4e8e\u63a7\u5236\u5355\u4e2a\u4e3b\u673a\uff0c\u800c\u662f\u593a\u53d6\u4f01\u4e1a\u7684\u201c\u5b89\u5168\u6307\u6325\u4e2d\u5fc3\u201d\uff0c\u5b9e\u73b0\u201c\u4ee5\u5f7c\u4e4b\u9053\uff0c\u8fd8\u65bd\u5f7c\u8eab\u201d\u3002<\/li>\n\n\n\n<li><strong>\u4ece\u201c\u5355\u5e73\u53f0\u201d\u5230\u201c\u8de8\u5e73\u53f0\u201d<\/strong><br>\u9996\u6b21\u786e\u8ba4\u90e8\u7f72Linux\u7248\u672cMATA\uff0c\u8868\u660e\u5176\u5df2\u5177\u5907\u5b8c\u6574\u7684\u8de8\u5e73\u53f0\u653b\u51fb\u80fd\u529b\u3002<\/li>\n\n\n\n<li><strong>\u4ece\u201c\u7f51\u7edc\u6e17\u900f\u201d\u5230\u201c\u7269\u7406\u7a81\u7834\u201d<\/strong><br>USB\u6446\u6e21\u6a21\u5757\u7684\u51fa\u73b0\uff0c\u610f\u5473\u7740\u653b\u51fb\u8005\u6709\u80fd\u529b\u7a7f\u900f\u6700\u4e25\u5bc6\u7684\u7269\u7406\u9694\u79bb\u9632\u7ebf\u3002<\/li>\n<\/ol>\n\n\n\n<p>\u6b64\u5916\uff0c\u653b\u51fb\u8005\u5c55\u73b0\u51fa\u6781\u5f3a\u7684<strong>\u7f51\u7edc\u6d4b\u7ed8\u4e0e\u6743\u9650\u5229\u7528\u80fd\u529b<\/strong>\uff0c\u80fd\u7cbe\u51c6\u5b9a\u4f4d\u57df\u63a7\u5236\u5668\u3001\u7ec8\u7aef\u670d\u52a1\u5668\u3001\u5b89\u5168\u7ba1\u7406\u7cfb\u7edf\u7b49\u9ad8\u4ef7\u503c\u8282\u70b9\uff0c\u4f53\u73b0\u51fa\u9ad8\u5ea6\u7684\u804c\u4e1a\u5316\u6c34\u5e73\u3002<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"%E5%85%AD%E3%80%81%E9%98%B2%E5%BE%A1%E5%BB%BA%E8%AE%AE\"><strong>\u516d\u3001\u9632\u5fa1\u5efa\u8bae<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"%E2%9C%85-%E4%BC%81%E4%B8%9A%E5%BA%94%E9%87%87%E5%8F%96%E7%9A%84%E6%8E%AA%E6%96%BD%EF%BC%9A\"><strong>\u2705 \u4f01\u4e1a\u5e94\u91c7\u53d6\u7684\u63aa\u65bd\uff1a<\/strong><\/h3>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>\u63aa\u65bd<\/th><th>\u8bf4\u660e<\/th><\/tr><tr><td><strong>\u7981\u7528IE\u53ca\u65e7\u7248\u6d4f\u89c8\u5668<\/strong><\/td><td>\u5f3a\u5236\u4f7f\u7528\u73b0\u4ee3\u6d4f\u89c8\u5668\uff0c\u5173\u95edIE\u6a21\u5f0f<\/td><\/tr><tr><td><strong>\u9694\u79bb\u5b89\u5168\u7ba1\u7406\u7cfb\u7edf<\/strong><\/td><td>\u5b89\u5168\u63a7\u5236\u53f0\u5e94\u72ec\u7acb\u7ec4\u7f51\uff0c\u7981\u6b62\u666e\u901a\u7528\u6237\u8bbf\u95ee<\/td><\/tr><tr><td><strong>\u5f3a\u5316USB\u8bbe\u5907\u7ba1\u63a7<\/strong><\/td><td>\u7981\u7528\u672a\u7ecf\u6388\u6743\u7684U\u76d8\uff0c\u90e8\u7f72DLP\u7cfb\u7edf\u76d1\u63a7\u6570\u636e\u5916\u4f20<\/td><\/tr><tr><td><strong>\u5b9e\u65bd\u6700\u5c0f\u6743\u9650\u539f\u5219<\/strong><\/td><td>\u4e25\u683c\u9650\u5236\u57df\u7ba1\u7406\u5458\u3001\u5b89\u5168\u7cfb\u7edf\u7ba1\u7406\u5458\u7684\u6743\u9650\u8303\u56f4<\/td><\/tr><tr><td><strong>\u90e8\u7f72\u5185\u5b58\u884c\u4e3a\u68c0\u6d4b<\/strong><\/td><td>\u4f7f\u7528EDR\/XDR\u76d1\u63a7\u5185\u6838\u7ea7Hook\u3001\u9a71\u52a8\u52a0\u8f7d\u7b49\u5f02\u5e38\u884c\u4e3a<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"%E2%9C%85-%E4%B8%AA%E4%BA%BA%E7%94%A8%E6%88%B7%E5%BB%BA%E8%AE%AE%EF%BC%9A\"><strong>\u2705 \u4e2a\u4eba\u7528\u6237\u5efa\u8bae\uff1a<\/strong><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u4e0d\u968f\u610f\u6253\u5f00\u6765\u6e90\u4e0d\u660e\u7684\u6587\u6863\u94fe\u63a5\uff1b<\/li>\n\n\n\n<li>\u907f\u514d\u5728\u5de5\u4f5c\u8bbe\u5907\u4e0a\u4f7f\u7528\u4e2a\u4ebaU\u76d8\uff1b<\/li>\n\n\n\n<li>\u53d1\u73b0\u7cfb\u7edf\u5f02\u5e38\uff08\u5982\u65e0\u7f18\u65e0\u6545\u91cd\u542f\u3001\u6027\u80fd\u4e0b\u964d\uff09\u53ca\u65f6\u4e0a\u62a5\u3002<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"%E4%B8%83%E3%80%81%E8%B6%8B%E5%8A%BF%E6%B4%9E%E5%AF%9F\"><strong>\u4e03\u3001\u8d8b\u52bf\u6d1e\u5bdf<\/strong><\/h2>\n\n\n\n<p>\u6b64\u6b21MATA\u653b\u51fb\u63ed\u793a\u4e86APT\u5a01\u80c1\u7684\u51e0\u4e2a\u5173\u952e\u6f14\u53d8\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>\u653b\u51fb\u76ee\u6807\u201c\u4e2d\u67a2\u5316\u201d<\/strong>\uff1a\u672a\u6765\u653b\u51fb\u5c06\u66f4\u591a\u9488\u5bf9\u4f01\u4e1a\u7684\u201c\u63a7\u5236\u4e2d\u67a2\u201d\u2014\u2014\u5982\u8eab\u4efd\u7cfb\u7edf\u3001\u5b89\u5168\u5e73\u53f0\u3001\u914d\u7f6e\u7ba1\u7406\u5de5\u5177\uff1b<\/li>\n\n\n\n<li><strong>\u8de8\u5e73\u53f0\u653b\u51fb\u5e38\u6001\u5316<\/strong>\uff1aWindows\u3001Linux\u3001macOS\u3001\u5d4c\u5165\u5f0f\u7cfb\u7edf\u5747\u9700\u7eb3\u5165\u7edf\u4e00\u9632\u62a4\u89c6\u91ce\uff1b<\/li>\n\n\n\n<li><strong>\u7269\u7406\u9694\u79bb\u4e0d\u518d\u7edd\u5bf9\u5b89\u5168<\/strong>\uff1aUSB\u3001\u6253\u5370\u673a\u3001\u7ef4\u62a4\u63a5\u53e3\u7b49\u201c\u4fa7\u4fe1\u9053\u201d\u6210\u4e3a\u65b0\u7a81\u7834\u53e3\uff1b<\/li>\n\n\n\n<li><strong>\u653b\u51fb\u8005\u5177\u5907\u201c\u7ea2\u961f\u601d\u7ef4\u201d<\/strong>\uff1a\u4ed6\u4eec\u50cf\u4e13\u4e1a\u6e17\u900f\u6d4b\u8bd5\u4eba\u5458\u4e00\u6837\uff0c\u7cfb\u7edf\u6027\u5730\u5bfb\u627e\u6743\u9650\u63d0\u5347\u3001\u6a2a\u5411\u79fb\u52a8\u3001\u6301\u4e45\u5316\u7684\u673a\u4f1a\uff1b<\/li>\n\n\n\n<li><strong>\u5de5\u4e1a\u7cfb\u7edf\u6210\u9ad8\u4ef7\u503c\u76ee\u6807<\/strong>\uff1a\u968f\u7740\u201c\u5de5\u4e1a4.0\u201d\u63a8\u8fdb\uff0c\u80fd\u6e90\u3001\u5236\u9020\u3001\u4ea4\u901a\u7b49\u5173\u952e\u57fa\u7840\u8bbe\u65bd\u9762\u4e34\u524d\u6240\u672a\u6709\u7684\u7f51\u7edc\u5a01\u80c1\u3002<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"%E5%85%AB%E3%80%81%E7%BB%93%E8%AF%AD\"><strong>\u516b\u3001\u7ed3\u8bed<\/strong><\/h2>\n\n\n\n<p>MATA\u7ec4\u7ec7\u7684\u8fd9\u6b21\u653b\u51fb\uff0c\u4e0d\u662f\u4e00\u6b21\u7b80\u5355\u7684\u6570\u636e\u7a83\u53d6\uff0c\u800c\u662f\u4e00\u573a\u7cbe\u5fc3\u7b56\u5212\u7684\u201c\u6570\u5b57\u653f\u53d8\u201d\u3002\u5b83\u544a\u8bc9\u6211\u4eec\uff1a\u5728\u73b0\u4ee3\u4f01\u4e1a\u4e2d\uff0c\u6700\u5371\u9669\u7684\u654c\u4eba\uff0c\u5f80\u5f80\u4e0d\u662f\u6765\u81ea\u5916\u90e8\uff0c\u800c\u662f\u5df2\u7ecf\u6f5c\u4f0f\u5728\u4f60\u7684\u201c\u5b89\u5168\u7cfb\u7edf\u201d\u5185\u90e8\uff0c\u6b63\u7528\u4f60\u8d4b\u4e88\u5b83\u7684\u6743\u529b\uff0c\u4e00\u70b9\u4e00\u70b9\u5730\u63a5\u7ba1\u6574\u4e2a\u738b\u56fd\u3002<\/p>\n\n\n\n<p>\u9762\u5bf9\u5982\u6b64\u9ad8\u9636\u7684\u5bf9\u624b\uff0c\u4f01\u4e1a\u5fc5\u987b\u4ece\u201c\u8fb9\u754c\u9632\u5fa1\u201d\u8f6c\u5411\u201c\u96f6\u4fe1\u4efb\u67b6\u6784\u201d\uff0c\u4ece\u201c\u88ab\u52a8\u54cd\u5e94\u201d\u8f6c\u5411\u201c\u4e3b\u52a8\u72e9\u730e\u201d\u3002\u552f\u6709\u5982\u6b64\uff0c\u624d\u80fd\u5728\u8fd9\u573a\u770b\u4e0d\u89c1\u785d\u70df\u7684\u6218\u4e89\u4e2d\uff0c\u5b88\u4f4f\u81ea\u5df1\u7684\u6570\u5b57\u4e3b\u6743\u3002<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4fe1\u606f\u6765\u6e90\uff1aUpdated MATA attacks industrial companies in Easte [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","footnotes":""},"categories":[3],"tags":[],"class_list":["post-158","post","type-post","status-publish","format-standard","hentry","category-3"],"_links":{"self":[{"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=\/wp\/v2\/posts\/158","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=158"}],"version-history":[{"count":1,"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=\/wp\/v2\/posts\/158\/revisions"}],"predecessor-version":[{"id":159,"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=\/wp\/v2\/posts\/158\/revisions\/159"}],"wp:attachment":[{"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=158"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=158"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gswsfh2021.site\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=158"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}