iPhone 13組裝 鴻海大贏家

iPhone 13組裝 鴻海大贏家

]

蘋果今年新iPhone進入備貨倒數階段，供應鏈傳出，今年新機以iPhone 13命名，組裝訂單分配當中，鴻海仍是大贏家。圖為蘋果執行長庫克（左）先前參觀鴻海集團旗下富士康鄭州廠iPhone生產線。（網路照片） facebook

蘋果今年新iPhone進入備貨倒數階段，供應鏈傳出，今年新機以iPhone 13命名，組裝訂單分配當中，鴻海（2317）仍是大贏家，囊括頂規的6.7吋iPhone 13 Pro Max新機全數訂單，6.1吋iPhone 13也有68%由鴻海操刀，另一6.1吋的iPhone 13 Pro訂單也有約六成由鴻海拿下，助攻鴻海下半年旺季營運動能。

供應鏈傳出，今年新iPhone將回歸到往年9月發表的狀況，代工廠第3季開始出貨，拉貨高峰落在第4季，蘋果將推四款新機，分別為6.7吋iPhone 13 Pro Max，6.1吋的iPhone 13 Pro，以及5.4吋與6.1吋，同樣名為iPhone 13的機種。

推薦

facebook

在代工訂單分配上，鴻海維持主力代工廠地位，和碩則獨家拿下螢幕最小的5.4吋iPhone 13訂單。至於今年首度組裝iPhone的紅色供應鏈指標廠立訊，出貨機種為6.1吋iPhone 13 Pro，訂單占比約四成，與鴻海分食，遭點名的業者均不回應訂單動態。

市場普遍對今年iPhone新機出貨出貨抱持樂觀看法，日系外資更上調今年下半年新iPhone出貨量預估，由8,200萬支上修到8,500萬支，預估今年整體iPhone出貨將由原估的2.25億支增加到2.28億支。

至於立訊加入iPhone組裝行列，外資認為，相關影響在可控制範圍內，主要在於今年新iPhone出貨量可望比去年機種增加，加上鴻海在iPhone組裝市占下滑程度有限，鴻海去年下半年iPhone 12系列的訂單占比約72%至74%，今年下半年iPhone新機中，預估鴻海訂單占比則為68%至70%，同樣為主要組裝iPhone中高階產品。

因此，若iPhone下半年銷售優於預期，鴻海、和碩與立訊等可望跟著受惠。市場也密切關注，立訊在今年度首度成為iPhone的組裝廠之後，其供貨的iPhone 13 Pro產品良率、交期等表現。

鴻海將於本周公布6月與上半年營收表現，鴻海5月中旬時表示，第1季雖然基期高，但是需求延伸到第2季，預估第2季營收將與首季持平，但仍會較去年同期強勁成長。

Brooklyn Dumpling Shop Puts Greek Diner Culture in Automat Form

]

Close Get email notifications on {{subject}} daily!

Your notification has been saved.

There was a problem saving your notification.

{{description}}

Email notifications are only sent once a day, and only if there are new matching items.

LockBit 2.0 Ransomware Proliferates Globally

]

The LockBit ransomware-as-a-service (RaaS) gang has ramped up its targeted attacks, researchers said, with attempts against organizations in Chile, Italy, Taiwan and the U.K. using version 2.0 of its malware.

Attacks in July and August have employed LockBit 2.0, according to a Trend Micro analysis released on Monday, featuring a souped-up encryption method.

“In contrast to LockBit’s attacks and features in 2019, this version includes automatic encryption of devices across Windows domains by abusing Active Directory (AD) group policies, prompting the group behind it to claim that it’s one of the fastest ransomware variants in the market today,” according to the report. “LockBit 2.0 prides itself on having one of the fastest and most efficient encryption methods in today’s ransomware threat landscape. Our analysis shows that while it uses a multithreaded approach in encryption, it also only partially encrypts the files, as only 4 KB of data are encrypted per file.”

The attacks also feature an effort to recruit insider threats from within targeted companies, Trend Micro noted. The last step of the malware’s infection routine is to change the wallpaper on victim machines to what’s effectively an advertisement, with information on how organization insiders can be part of the “affiliate recruitment,” with guaranteed payouts of millions of dollars and anonymity in exchange for credentials and access, according to the report.

The fresh spate of attacks are employing the tactic “seemingly to remove middlemen (of other threat actor groups) and to enable faster attacks by providing valid credentials and access to corporate networks,” according to the researchers.

LockBit, it should be noted, recently made headlines as the culprit behind the Accenture cyberattack.

LockBit 2.0 Infection Routine

For initial access to a targeted corporate network, the LockBit gang recruits affiliates and helpers as mentioned, who perform the actual intrusion on targets, usually via valid remote desktop protocol (RDP) account credentials. To help the cause, LockBit’s creators provide their partners with a handy StealBit trojan variant, which is a tool for establishing access and automatically exfiltrating data.

The report pointed out that once in a system, LockBit 2.0 uses a panoply of tools to case the joint, as it were. A network scanner takes stock of the network structure and identifies target domain controllers. It also uses multiple batch files for various purposes, including terminating security tools, enabling RDP connections, clearing Windows Event logs, and making sure that crucial processes, such as Microsoft Exchange, MySQL and QuickBooks, are unavailable. It also stops Microsoft Exchange and disables other related services.

But that’s not all: “LockBit 2.0 also abuses legitimate tools such as Process Hacker and PC Hunter to terminate processes and services in the victim system.”

After this first stage, it’s time for lateral movement.

“Once in the domain controller, the ransomware creates new group policies and sends them to every device on the network,” Trend Micro researchers explained. “These policies disable Windows Defender, and distribute and execute the ransomware binary to each Windows machine.”

This main ransomware module goes on to append the “.lockbit” suffix to every encrypted file. Then, it drops a ransom note into every encrypted directory threatening double extortion; i.e., the note warns victims that files are encrypted and may be publicly published if they don’t pay up.

The final step for LockBit 2.0 is changing the victims’ desktop wallpapers into the aforementioned recruitment ad, which also includes instructions on how victims can pay the ransom.

LockBit’s Continued Evolution

Trend Micro has been tracking LockBit over time, and noted that its operators initially worked with the Maze ransomware group, which shut down last October.

Maze was a pioneer in the double-extortion tactic, first emerging in November 2019. It went on to make waves with big strikes such as the one against Cognizant. In summer 2020, it formed a cybercrime “cartel” – joining forces with various ransomware strains (including Egregor) and sharing code, ideas and resources.

“After Maze’s shutdown, the LockBit group went on with its own leak site, which led to the development of LockBit,” researchers explained. “The previous version showed characteristics of ready-made ransomware using the double extortion techniques of encrypting files, stealing data and leaking the stolen data when the ransom was not paid.”

Now, LockBit 2.0 shows influences from Ryuk and Egregor, perhaps due to shared code DNA. Two notable examples flagged by Trend Micro are:

Wake-on-LAN feature inspired by Ryuk ransomware, sending the Magic Packet “0xFF 0xFF 0xFF 0xFF 0xFF 0xFF” to wake offline devices.

Print bombing of the ransom note onto the victim’s network printers, similar to Egregor’s technique of attracting the victim’s attention. It uses Winspool APIs to enumerate and print a document on connected printers.

“We…assume that this group will continue to make a scene for a long time, especially since it’s currently recruiting affiliates and insiders, making it more capable of infecting many companies and industries,” Trend Micro researchers concluded. “It would also be wise to assume and prepare for upgrades and further developments in LockBit 2.0, especially now that many companies are aware of its capabilities and how it works.”

How to Protect Organizations from Ransomware

The Center of Internet Security and the National Institute of Standards and Technology recommend the following best practices for preventing LockBit 2.0 and other malware infections: