解析最新Ursnif恶意软件攻击活动

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