全球高级持续性威胁（APT）2021年度报告
⚺銳錜挿 Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ佟䏎ㄤ匚毫瓦欰遤⚌䧭⚹Ⰼ椕 "15 崞⸓Ⱒ岤涸껷銳湡叻կⰌ椕 涸 "15 崞⸓✲⟝♸佟䏎ㄤ匚毫瓦欰遤⚌湱Ⱒկꛏ㼆氬䱽♸氋劼匬ծ氻嫫灇瑕劼匬ծ氋蕐灇〄劼匬ㄤⰦ➭湱Ⱒ涸匚㷖灇瑕劼匬涸넞紩㪭胇崞⸓䭯絯♶倗կ⚥㕂絩絯䧭⚹Ⰼ椕 "15 崞⸓涸껷銳㖑勹䚍湡叻կ㼆⚆歲涰䎃劢剣⛓㣐」㽷⚥㕂涸絑崸♸猰䪮곭㚖緸絞㸝Ⰼ姻㖈絑「满䨾劢剣涸䊭㣐罌낉կꛏ㼆⚥㕂곭⯓涸猰灇劼匬ծ猰䪮⟱⚌涸緸絞瑷㺙崞⸓♸緸絞灶㗁崞⸓䭯絯⸈ⶢկ 䎃Ⰼ椕 "15 崞⸓ッ梡ⴀ㔋㣐暵挿"15 絆絉鄳㢊✫刿㢴涸 EBZ 怩峯娀㐼血〷縁錛氋䞔掚挿⥌䜂䭯絯䧭⚹ "15 崞⸓䌢欽霶껖⣘䎾Ꝇㄤ緸絞㸝Ⰼ❡ᄩ䧭⚹余ⴁⴗⰆ挿㹁ぢ灶㗁䚍㪭胇䧭⚹"15 崞⸓倝馋⸷կ緸絞㸝Ⰼծ欰暟ⵖ蚋ծ菔瑟❡⚌ծ勹㗌Ꝇ瘝遤⚌䧭⚹ 䎃 "15 崞⸓Ⱒ岤涸倝Ⱓ掚挿〄欰✫㢴饰䕧ᆄꅾ㣐涸 "15 余ⴁ✲⟝կ 䎃 EBZ 怩峯余ⴁッ旘〄馋⸷㖈ꅿⵄ欽涸 EBZEBZ 怩峯侨ꆀ馄鵂 ⚡㖈緸絞㸝Ⰼ血〷♳䨾劢錛կ㖈ꅿ EBZ 怩峯ⵄ欽涸侮⡤馋⸷⟄ 8JOEPXT 䎂〵⚹㛇炄$ISPNF4BGBSJ 崹錢㐼⚹⚺崨ぢ㢴䎂〵䒁⠽կ&YDIBOHFծ㚖䱽瘝ⰻ緸呍䗱餴❡ EBZ 怩峯䧭⚹倝涸旘〄挿ず傞ꥥ满 J04"OESPJE欰䙖涸♶倗㸤㊤湱Ⱒ "15 絆絉ꛏ㼆鵯❈䎂〵涸 EBZ 余ⴁ⛲鷶䎃⟄珘㹁涸馋⸷㟞⸈կ䧮⟌곫崵㖈 䎃"15 崞⸓㼜ッ梡ⴀ㥵♴Ⱉ㣐馋⸷氋蕐⿺湱Ⱒ❡⚌㼜⠔黨ⵌ䭯絯余ⴁꛏ㼆⚥㕂涸 "15 遤⸓㼜䭯絯⸈ⶢ⚂刿⸈ꥧ猽㖈ꅿ EBZ 怩峯ⵄ欽䭯絯旘〄潐ⲥⰢꝶ㛇炄霃倶涸灶㗁ㄤ余ⴁ⠔馊〄岌忝ꛏ㼆緸絞㸝Ⰼ❡ᄩ涸余ⴁ⠔「ⵌ "15 絆絉刿㢴涸ꫬ滸⠔旘〄刿㢴ծ刿⚚ꅾ涸⣘䎾Ꝇ余ⴁ✲⟝կⰌ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ⚺銳錜挿MAIN POINTS Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ䶰銳 Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ 䎃㣼㸝⥌㪭胇䞔䫣⚥䗱껷妃⢪欽㣼㸝⥌㪭胇ꨭ鴪㼆㞯ⰻ涸 "15 余ⴁ崞⸓鵳遤✫Ⰼ倰⡙黔䠭崵絚կ港崵ⵌ䧮㕂薴㔵ⰻ㣐ꆀ *1 㖑㖧♸侨宀⚡㞯㢪 "15 絆絉❡欰鵂넞矛鸑⥌⻌❩㖑勹⟄⿺䎛⚎ծ犷䒊ծ嵄寐ծ寐蔼瘝屠嵳溁⟧⡲⚹䧮㕂佟屛⚥䗱ծ絑崸〄鴪㖑勹僽㞯㢪 "15 絆絉鵳遤緸絞余ⴁ涸⚺銳湡叻㖑勹կ㛇✵㣼㸝⥌㪭胇ꨭ鴪涸崵絚ⴔ區 䎃嵳蜠蔄ծ訫抳蔄ծ贄加坸ծ8JOOUJծ嫫✻谐瘝絆絉僽㼆䧮㕂余ⴁ곸桧剒넞ծ矛㹲剒㣐涸 "15 絆絉կ䧮㕂㞯ⰻ「Ⱖ䱽ⵖ涸 *1 㖑㖧嫱⢾ⴔⵆ⚹嵳蜠蔄 嫫✻谐 &*$"3%BSLIPUFM訫抳蔄 կ劥妃䫣デ鸑鵂絾ざⴔ區㣼㸝⥌㪭胇ꨭ鴪崵絚侨䰘ծ㣼㸝⥌紤ꨍ忹㔙ꢭ㼆㹐䨪梡㖞涸 "15 余ⴁ絁程䱗叅䞔ⲃ⟄⿺㣼㸝⥌㪭胇䞔䫣佅䭯涸Ⰼ絁❡ᄩデ险侨䰘䖤ⴀ⟄♴絕雿 䎃䧮㕂佟䏎鿈꡶ծ瓦欰匚毫鿈꡶ծ넞倝猰䪮⟱⚌黨「넞紩㪭胇余ⴁ瑲ⴀ「䕧ᆄ涸遤⚌䱗ぜ❀ⴔⵆ僽佟䏎 匚毫腊彂 猰灇 侅肫 կ 䎃㣼㸝⥌㪭胇䞔䫣⚥䗱佐䔶✫ 眜넞紩㪭胇碫Ⱆ䒓䫣デ嶍⿺ ⚡䊺ㄐぜ涸余ⴁ絆絉䧴余ⴁ遤⸓կⰦ⚥䲿⿺桧剒넞涸❀⚡ "15 絆絉ⴔⵆ僽-B[BSVT"15,JNTVLZ職腰赈嵳蜠蔄կ劥妃䫣デ㼆䒓彂䞔䫣⚥嶍⿺涸넞紩㪭胇崞⸓湡叻㕂㹻㖑勹ⴔ䋒䞔ⲃ鵳遤✫ⴔ區絡雦儑爙 䎃넞紩㪭胇余ⴁ崞⸓Ⳝ⛖銻渷✫Ⰼ椕絟㣐㢴侨㕂㹻㖑勹կⰦ⚥䲿⿺桧剒넞涸❀⚡「㹲㕂㹻ⴔⵆ⚹㕂⤜縄倛 ⚥㕂 繠㕂 皮䏞 կ佟䏎鿈꡶ㄤ匚毫瓦欰遤⚌⣜搬僽Ⰼ椕 "15 崞⸓Ⱒ岤涸껷銳湡叻稒ꥥⰦた涸僽猰䪮ծ㕂ծⵖ鸣ծ腊彂瘝곭㚖կ 䎃EBZ 怩峯余ⴁッ旘〄馋⸷㖈ꅿⵄ欽涸 EBZEBZ 怩峯侨ꆀ馄鵂 ⚡㖈緸絞㸝Ⰼ血〷♳䨾劢錛㣼㸝⥌㪭胇䞔䫣⚥䗱侮椚✫宀㣐碫鄄 "15 絆絉⢪欽涸 EBZ 怩峯銻渷✫㢴⚡ꅾ銳䎾欽ㄤ禹絡氋䞔掚挿⥌䜂絩絯䧭⚹ "15 崞⸓䌢欽霶껖罜ꛏ㼆㸝Ⰼ❡ᄩ涸⣘䎾Ꝇ余ⴁㄤ㹁ぢ⹗程㪭胇䧭䶰銳ABSTRACT 齱盲UJ@TVQQPSU!RJBOYJODPN歏霢㸽緸IUUQTUJRJBOYJODPN䶰銳 Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ⚹ "15 崞⸓倝馋⸷կⰢꝶ㶶Ⰼ椕넞紩䭯絯䚍㪭胇ծ"15ծEBZծ⣘䎾Ꝇծ㪭胇ꨭ鴪ծ氋䞔 痦♧畎⚥㕂㞯ⰻ넞紩䭯絯䚍㪭胇絾鶣♧ծ㣼㸝⥌㪭胇ꨭ鴪㞯ⰻ黔崵ⴔ區✳ծ 䎃稒湢䧮㕂涸崞駟絆絉♲ծ 䎃㞯ⰻ「㹲遤⚌ⴔ區痦✳畎Ⰼ椕넞紩䭯絯䚍㪭胇絾鶣♧ծⰌ椕넞紩㪭胇灇瑕䞔ⲃ✳ծ「㹲湡叻涸遤⚌♸㖑㚖♲ծ崞駟넞紩㪭胇絆絉䞔ⲃ㔋ծ넞紩㪭胇䎃䏞崞⸓暵挿❀ծ 䎃Ⰼ椕「㹲遤⚌ⴔ區痦♲畎㖑続♴涸 "15 絆絉ծ崞⸓ㄤ馋⸷♧ծ⚎❇㖑勹✳ծ⚎文❇㖑勹♲ծ文❇㖑勹㔋ծ⚎妍㖑勹❀ծ⚥⚎㖑勹ⰙծⰦ➭㖑勹痦㔋畎〷霜紩嵳ꆀ EBZ 怩峯鄄欽✵ "15 余ⴁ♧ծ$7&8JOEPXT%FGFOEFS 涸㊜椠倛⛓骉✳ծ$ISPNF 崹錢㐼㖈ꅿ EBZ 怩峯余ⴁ旘〄Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ湡䔶 Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ湡䔶0101051618181921222630313740454953596464CATALOGUE ♲ծ&YDIBOHF 㚖䱽瘝ⰻ緸呍䗱餴❡ EBZ 怩峯䧭⚹搋挿㔋ծ⛉鵵涸 "EPCF3FBEFS 㖈ꅿ EBZ 怩峯ⵄ欽余ⴁꝆ❀ծ緸絞娀㐼ⱙ抠(休)䲀岚⸔愝Ⱉծ䩧皮㐽唀1SJOU/JHIUNBSF♧禹䩧皮劼 EBZ 怩峯♫ծꛏ㼆 J04NBD04 涸㢴饰 EBZ 怩峯余ⴁ崞⸓Ⱃծ$7&礵㦪涸 0DF 㖈ꅿ EBZ 怩峯ⵄ欽⛰ծ-PH4IFMM冝诡㖈 "QBDIF-PHK ♴涸 +BWB 欰䙖呍䔀宀ծ嵳蜠蔄ⵄ欽㢴⚡㕂ⰻ㸝Ⰼ⟱⚌ EBZ 〄饰⣘䎾Ꝇ "15 余ⴁ痦❀畎 䎃넞紩䭯絯䚍㪭胇곫崵♧ծ氋蕐⿺湱Ⱒ❡⚌㼜⠔黨ⵌ䭯絯余ⴁ✳ծꛏ㼆⚥㕂涸 "15 遤⸓㼜䭯絯⸈ⶢ♲ծ㖈ꅿ EBZ 怩峯ⵄ欽䭯絯旘〄㔋ծ潐ⲥⰢꝶ㛇炄霃倶涸灶㗁ㄤ余ⴁ⠔馊〄岌忝❀ծꛏ㼆緸絞㸝Ⰼ❡ᄩ涸余ⴁ⠔「ⵌ "15 絆絉刿㢴涸Ⱒ岤Ⱉծ旘〄刿㢴ծ刿⚚ꅾ涸⣘䎾Ꝇ "15 余ⴁ✲⟝꣡䔶 Ⰼ椕⚺銳 "15 絆絉邍꣡䔶 㣼㸝⥌㪭胇䞔䫣⚥䗱꣡䔶 紤ꨍ忹㔙ꢭ 3FE%SJQ5FBN ꣡䔶 罌Ꝇ䱹66676768697071727373737374747576808283齱盲UJ@TVQQPSU!RJBOYJODPN歏霢㸽緸IUUQTUJRJBOYJODPN湡䔶 Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ痦♧畎⚥㕂㞯ⰻ넞紩䭯絯䚍㪭胇絾鶣 Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ痦♧畎⚥㕂㞯ⰻ넞紩䭯絯䚍㪭胇絾鶣㛇✵⚥㕂㞯ⰻ嵳ꆀ %/4 㚖ぜ鍒區ㄤ㣼㸝⥌㪭胇䞔䫣⚥䗱㣟ꤴ唬崵*0$䎽涸焥中ⴔ區㣼㸝⥌㪭胇ꨭ鴪僽✫鍒䧮㕂㞯ⰻ "15 余ⴁ崞⸓⿺넞紩䭯絯䚍㪭胇〄㾝馋⸷涸ꅾ銳䩛媯կ 䎃㣼㸝⥌㪭胇䞔䫣⚥䗱껷妃⢪欽㣼㸝⥌㪭胇ꨭ鴪㼆㞯ⰻ涸 "15 余ⴁ崞⸓鵳遤✫Ⰼ倰⡙黔䠭崵絚կ港崵ⵌ䧮㕂薴㔵ⰻ㣐ꆀ *1 㖑㖧毟⡃ㄤ侨宀⚡㞯㢪 "15 絆絉❡欰鵂넞矛鸑⥌⻌❩㖑勹⟄⿺䎛⚎ծ犷䒊ծ嵄寐ծ寐蔼瘝屠嵳溁⟧⡲⚹䧮㕂佟屛⚥䗱ծ絑崸〄鴪㖑勹僽㞯㢪 "15 絆絉鵳遤緸絞余ⴁ涸⚺銳湡叻㖑勹կ劥畎ⰻ㺂⿺絕雿⚺銳㛇✵㣼㸝⥌㪭胇ꨭ鴪侨䰘ծ㣼㸝⥌紤ꨍ忹㔙ꢭ㖈㹐䨪梡㖞㢅縨䱗叅涸溫㹊 "15 余ⴁ✲⟝絕ざ⢪欽✫㣼㸝⥌㪭胇䞔䫣涸Ⰼ絁❡ᄩデ险侨䰘鵳遤涸侮椚♸ⴔ區կ♧ծ㣼㸝⥌㪭胇ꨭ鴪㞯ⰻ黔崵ⴔ區㣼㸝⥌㪭胇ꨭ鴪僽㣼㸝⥌㪭胇䞔䫣⚥䗱㛇✵㣼㸝⥌㣐緸侨䰘ㄤ㪭胇䞔䫣⚥䗱㣟ꤴ唬崵*0$䎽欽✵港䱽Ⰼ㞯薴㔵ⰻ毟⡃鄄 "15 絆絉ծぐ碫⬿加迿䱽ⵖ涸緸絞餴❡涸♧妴㪭胇䞔䫣 4BB4 䎾欽կ鸑鵂侮ざ㣼㸝⥌涸넞ծ⚥⡙㪭胇䞔䫣腊⸂〄梡䭷㹁勹㚖ⰻ毟⡃鄄♶ず余ⴁ絆絉䧴䜌䠑鲱⟝䱽ⵖ涸⚺劼 *1✫鍒♶ず㪭胇碫㘗涸嫱⢾⿺鄄䱽⚺劼侨ꆀ馋⸷瘝կ〳鵳♧姿弓⸔䱗叅ꅾ挿餴❡湱Ⱒ涸 "15 余ⴁ絁程կ㕃 㣼㸝⥌㪭胇ꨭ鴪㞯ⰻ「㹲罏侨䰘ⴔ區 齱盲UJ@TVQQPSU!RJBOYJODPN歏霢㸽緸IUUQTUJRJBOYJODPN㕃 䎃⚥㕂㞯ⰻ毟⡃「䱽 *1 㖑㖧剢䏞ⴔ䋒㣼㸝⥌㪭胇䞔䫣⚥䗱㛇✵㪭胇ꨭ鴪㖈 䎃港崵ⵌ侨宀⚡㞯㢪 "15 絆絉ꛏ㼆䧮㕂薴㔵ⰻ㣐ꆀ湡叻 *1 〄欰鵂鸑⥌䕎䧭✫㣐ꆀ涸㞯ⰻ *1 ♸暵㹁 "15 絆絉涸緸絞㛇炄霃倶涸넞矛鸑⥌✲⟝կⰦ⚥鿈ⴔ湡叻 *1剎絑♸㢴⚡ "15 絆絉涸㢴⚡ $ 剪⸉㐼$PNNBOE$POUSPM4FSWFS 鵴䱽剪⸉㐼⛓ꢂ❡欰ꬋ岁鵶䱹կ♴㕃⚹ 䎃㣼㸝⥌㪭胇ꨭ鴪黔崵䠭濼涸䧮㕂㞯ⰻ嫦剢鵶䱹㞯㢪 "15 絆絉 $ 剪⸉㐼涸毟⡃「㹲 *1 㖑㖧⚡侨絡雦䎂㖲嫦剢剣馄鵂 ⡮⚡㞯ⰻ *1 㖑㖧♸暵㹁 "15 絆絉涸 $ 剪⸉㐼❡欰ꬋ岁鵶䱹⚂䎃⚥ծ䎃劣⚹余ⴁ넞䂽傞劍կ 䎃⚥㕂㞯ⰻ嫦剢倝㟞毟⡃鄄㞯㢪 "15 絆絉䱽ⵖ涸 *1 㖑㖧」⻊馋⸷㥵♴㕃䨾爙կ⿿僥ⴀ "15 絆絉♶倗〄⸓刿㢴涸ꛏ㼆䚍余ⴁ䧴㖈鵳遤余ⴁ崞⸓傞곸籖刿䰃 $ 剪⸉㐼կ倝㟞「䱽 *1 㖑㖧馋⸷⛲♸㕃 ⚥嫦剢鵶䱹㞯㢪 "15 絆絉 $ 剪⸉㐼涸毟⡃「㹲 *1 㖑㖧ⴔ䋒湱痗կ㛇✵㣼㸝⥌㪭胇ꨭ鴪㞯ⰻ涸黔崵ⴔ區䧮⟌➢⟄♴倰㼆䧮㕂㞯ⰻ毟⡃黨「涸 "15 余ⴁ鵳遤✫ⴔ區ㄤ絡雦կ♧「䱽 *1 侨ꆀㄤ馋⸷ Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ痦♧畎⚥㕂㞯ⰻ넞紩䭯絯䚍㪭胇絾鶣 Ⰼ椕넞紩䭯絯䚍㪭胇"15 䎃䏞䫣デ㕃 䎃⚥㕂㞯ⰻ嫦剢倝㟞毟⡃「䱽 *1 㖑㖧」⻊馋⸷㕃 䎃⚥㕂㞯ⰻ毟⡃「䱽 *1 㖑㖧㖑㚖ⴔ䋒♴㕃絛ⴀ✫ 䎃⚥㕂㞯ⰻ毟⡃鵶䱹鵂㞯㢪 "15 絆絉 $ 剪⸉㐼涸 *1 㖑㖧㖑㚖ⴔ䋒ⴔⵆ㾝爙✫ぐ溁毟⡃「㹲 *1 㖑㖧涸⚡侨〳⟄溏ⵌ䎛⚎ծ犷䒊ծ嵄寐ծ寐蔼瘝屠嵳溁⟧⿺⻌❩㖑勹⡲⚹䧮㕂絑崸〄鴪溁⟧ㄤ佟屛⚥䗱僽㞯㢪 "15 絆絉ꅾ挿余ⴁ涸⚺銳湡叻㖑勹կ✳「㹲湡叻勹㚖ⴔ䋒 齱盲UJ@TVQQPSU!RJBOYJODPN歏霢㸽緸IUUQTUJRJBOYJODPN㕃 䎃 "15 絆絉䱽ⵖ㞯ⰻ *1 㖑㖧侨ꆀ毛嫱⿺ $ 剪⸉㐼䨾㾩㔙⠑侨ꆀⴔ䋒♴㕃ⴔⵆ㾝爙✫ 䎃㞯㢪 "15 絆絉毟⡃䱽ⵖ䧮㕂㞯ⰻ湡叻 *1 㖑㖧涸⚡侨毛嫱⟄⿺㞯㢪 "15 絆絉毟⡃⢪欽鵂涸 $ 剪⸉㐼侨ꆀⴔ䋒կ〳⟄溏ⴀ嵳蜠蔄ծ嫫✻谐ծ&*$"3ծ%BSLIPUFMծ訫抳蔄ծ눥縄咝瘝悶⠃㖈䧮㕂ワ鴝㕂㹻ㄤ㖑勹涸 "15絆絉毟⡃䱽ⵖ✫㞯ⰻ㣐鿈ⴔ「䱽 *1 㖑㖧կ嵳蜠蔄ㄤ嫫✻谐⡲⚹䧮⟌涸罈㼆䩛㖈
