<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>社会工程学 on 思安录 | Thinking&#39;s Security Notes</title>
    <link>https://blog.1sec.day/tags/%E7%A4%BE%E4%BC%9A%E5%B7%A5%E7%A8%8B%E5%AD%A6/</link>
    <description>Recent content in 社会工程学 on 思安录 | Thinking&#39;s Security Notes</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>zh-cn</language>
    <managingEditor>Thinking</managingEditor>
    <webMaster>Thinking</webMaster>
    <lastBuildDate>Sat, 15 Mar 2025 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.1sec.day/tags/%E7%A4%BE%E4%BC%9A%E5%B7%A5%E7%A8%8B%E5%AD%A6/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>LinkedIn 招聘钓鱼分析：针对区块链工程师的定向攻击</title>
      <link>https://blog.1sec.day/posts/2025-03-15-linkedin-recruitment-phishing/</link>
      <pubDate>Sat, 15 Mar 2025 00:00:00 +0000</pubDate>
      <author>Thinking</author>
      <guid>https://blog.1sec.day/posts/2025-03-15-linkedin-recruitment-phishing/</guid>
      
      <description></description>
      
    </item>
    
    <item>
      <title>假 CAPTCHA 网站劫持剪贴板投递信息窃取器：ClickFix 攻击手法分析</title>
      <link>https://blog.1sec.day/posts/2026-07-16-fake-captcha-clipboard-hijacker/</link>
      <pubDate>Tue, 11 Mar 2025 00:00:00 +0000</pubDate>
      <author>Thinking</author>
      <guid>https://blog.1sec.day/posts/2026-07-16-fake-captcha-clipboard-hijacker/</guid>
      
      <description>&lt;blockquote&gt;
&lt;p&gt;导读：当&amp;quot;证明你不是机器人&amp;quot;本身成了攻击入口，你每一次对 CAPTCHA 的习惯性顺从，都可能是一次自感染。Malwarebytes 在 2025 年 3 月披露的这套 ClickFix 攻击手法，把&amp;quot;用户自己感染自己&amp;quot;这件事做到了规模化复制。&lt;/p&gt;
&lt;/blockquote&gt;</description>
      
    </item>
    
    <item>
      <title>Lazarus Group 针对加密货币交易所的 APT 攻击：IOC 与 TTP 披露</title>
      <link>https://blog.1sec.day/posts/2025-02-23-lazarus-apt-attack/</link>
      <pubDate>Sun, 23 Feb 2025 00:00:00 +0000</pubDate>
      <author>Thinking</author>
      <guid>https://blog.1sec.day/posts/2025-02-23-lazarus-apt-attack/</guid>
      
      <description>&lt;blockquote&gt;
&lt;p&gt;网络安全对抗是一场持久战。本文由我（Thinking）与山哥（23pds）联合撰写。&lt;/p&gt;
&lt;/blockquote&gt;</description>
      
    </item>
    
    <item>
      <title>Discord 私信钓鱼手法分析</title>
      <link>https://blog.1sec.day/posts/2022-05-17-discord-phishing-analysis/</link>
      <pubDate>Tue, 17 May 2022 00:00:00 +0000</pubDate>
      <author>Thinking</author>
      <guid>https://blog.1sec.day/posts/2022-05-17-discord-phishing-analysis/</guid>
      
      <description></description>
      
    </item>
    
  </channel>
</rss>
