{"id":91919,"date":"2020-08-20T13:41:55","date_gmt":"2020-08-20T11:41:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vyyavlen-cherv-fritzfrog-porazhayushhij-servery-po-ssh-i-stroyashhij-deczentralizovannyj-botnet"},"modified":"2020-08-20T13:41:55","modified_gmt":"2020-08-20T11:41:55","slug":"vyyavlen-cherv-fritzfrog-porazhayushhij-servery-po-ssh-i-stroyashhij-deczentralizovannyj-botnet","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vyyavlen-cherv-fritzfrog-porazhayushhij-servery-po-ssh-i-stroyashhij-deczentralizovannyj-botnet","title":{"rendered":"Byl zji\u0161t\u011bn \u010derv FritzFrog, kter\u00fd napad\u00e1 servery p\u0159es SSH a vytv\u00e1\u0159\u00ed decentralizovanou botnet.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spole\u010dnost Guardicore, specializuj\u00edc\u00ed se na ochranu datov\u00fdch center a cloudov\u00fdch syst\u00e9m\u016f, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.guardicore.com\/2020\/08\/fritzfrog-p2p-botnet-infects-ssh-servers\/\">odhalila<\/a><\/noindex> nov\u00fd vysoce technologick\u00fd malware FritzFrog, kter\u00fd napad\u00e1 servery na b\u00e1zi Linuxu. FritzFrog kombinuje \u010derv, kter\u00fd se \u0161\u00ed\u0159\u00ed prost\u0159ednictv\u00edm bruteforce \u00fatok\u016f na servery s otev\u0159en\u00fdm portem SSH, a komponenty pro vytv\u00e1\u0159en\u00ed decentralizovan\u00e9 botnety, kter\u00e1 funguje bez \u0159\u00edd\u00edc\u00edch uzl\u016f a nem\u00e1 jedin\u00e9 m\u00edsto selh\u00e1n\u00ed.<\/p>\n<p>Pro vytv\u00e1\u0159en\u00ed botnetu se pou\u017e\u00edv\u00e1 vlastn\u00ed P2P protokol, ve kter\u00e9m si uzly vz\u00e1jemn\u011b komunikuj\u00ed, koordinuj\u00ed organizaci \u00fatok\u016f, udr\u017euj\u00ed chod s\u00edt\u011b a kontroluj\u00ed stav jeden druh\u00e9ho. Nov\u00e9 ob\u011bti se nach\u00e1zej\u00ed pomoc\u00ed bruteforce \u00fatok\u016f na servery, kter\u00e9 p\u0159ij\u00edmaj\u00ed SSH po\u017eadavky. P\u0159i objeven\u00ed nov\u00e9ho serveru se prov\u00e1d\u00ed proch\u00e1zen\u00ed pomoc\u00ed slovn\u00edku typick\u00fdch kombinac\u00ed u\u017eivatelsk\u00fdch jmen a hesel. \u0158\u00edzen\u00ed m\u016f\u017ee b\u00fdt prov\u00e1d\u011bno p\u0159es libovoln\u00fd uzel, co\u017e zt\u011b\u017euje odhalen\u00ed a zablokov\u00e1n\u00ed oper\u00e1tor\u016f botnetu.<\/p>\n<p>Podle v\u00fdzkumn\u00edk\u016f botnet ji\u017e zahrnuje p\u0159ibli\u017en\u011b 500 uzl\u016f, mezi nimi\u017e se objevil servery n\u011bkolika univerzit a velk\u00e9 \u017eelezni\u010dn\u00ed spole\u010dnosti. Je poznamen\u00e1no, \u017ee hlavn\u00edm c\u00edlem \u00fatoku jsou s\u00edt\u011b vzd\u011bl\u00e1vac\u00edch instituc\u00ed, zdravotnick\u00fdch center, vl\u00e1dn\u00edch instituc\u00ed, bank a telekomunika\u010dn\u00edch spole\u010dnost\u00ed. Po kompromitaci serveru je na n\u011bm zah\u00e1jen proces t\u011b\u017eby kryptom\u011bny Monero. Aktivita tohoto malware je sledov\u00e1na od ledna 2020.<\/p>\n<p>Charakteristikou FritzFrog je, \u017ee uchov\u00e1v\u00e1 v\u0161echna data a vykon\u00e1van\u00fd k\u00f3d pouze v pam\u011bti. Zm\u011bny na disku spo\u010d\u00edvaj\u00ed pouze v p\u0159id\u00e1n\u00ed nov\u00e9ho SSH kl\u00ed\u010de do souboru authorized_keys, kter\u00fd je pot\u00e9 pou\u017e\u00edv\u00e1n pro p\u0159\u00edstup k serveru. Syst\u00e9mov\u00e9 soubory se nem\u011bn\u00ed, co\u017e \u010din\u00ed \u010derv neviditeln\u00fdm pro syst\u00e9my kontroluj\u00edc\u00ed integritu pomoc\u00ed kontroln\u00edch sou\u010dt\u016f. V pam\u011bti jsou dr\u017eeny tak\u00e9 slovn\u00edky pro proch\u00e1zen\u00ed hesel a \u00fadaje pro t\u011b\u017ebu, kter\u00e9 se synchronizuj\u00ed mezi uzly pomoc\u00ed P2P protokolu.<\/p>\n<p>Zlovoln\u00e9 komponenty se maskuj\u00ed jako procesy &#171;ifconfig&#187;, &#171;libexec&#187;, &#171;php-fpm&#187; a &#171;nginx&#187;. Uzly botnetu sleduj\u00ed stav soused\u016f a v p\u0159\u00edpad\u011b restartov\u00e1n\u00ed serveru nebo dokonce p\u0159einstalace opera\u010dn\u00edho syst\u00e9mu (pokud byl do nov\u00e9ho syst\u00e9mu p\u0159enesen upraven\u00fd soubor authorized_keys) znovu aktivuj\u00ed zlovoln\u00e9 komponenty na hostiteli. Pro komunikaci se pou\u017e\u00edv\u00e1 standardn\u00ed SSH &#8212; zlovoln\u00fd software nav\u00edc spou\u0161t\u00ed lok\u00e1ln\u00ed &#171;netcat&#187;, kter\u00fd se v\u00e1\u017ee k rozhran\u00ed localhost a poslouch\u00e1 provoz na portu 1234, kter\u00e9mu se extern\u00ed uzly p\u0159ipojuj\u00ed prost\u0159ednictv\u00edm SSH tunelu pou\u017e\u00edvaj\u00edc\u00edho pro p\u0159ipojen\u00ed kl\u00ed\u010d z authorized_keys.<br \/>\n<center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.guardicore.com\/wp-content\/uploads\/2020\/08\/frog-attack-1030x601.jpg\"><img decoding=\"async\" alt=\"Byl zji\u0161t\u011bn \u010derv FritzFrog, kter\u00fd napad\u00e1 servery p\u0159es SSH a vytv\u00e1\u0159\u00ed decentralizovanou botnet.\" src=\"\/wp-content\/uploads\/2020\/08\/485d97de035ae93d10692d8934702264.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p> K\u00f3d komponent\u016f FritzFrog je naps\u00e1n v jazyce Go a funguje v multithreadov\u00e9m re\u017eimu. \u0160kodliv\u00fd software zahrnuje n\u011bkolik modul\u016f, kter\u00e9 se spou\u0161t\u011bj\u00ed v r\u016fzn\u00fdch vl\u00e1knech:<\/p>\n<ul>\n<li class=\"l\"> Cracker &#8212; prov\u00e1d\u00ed v\u00fdb\u011br hesel na napadan\u00fdch serverech.\n<li class=\"l\"> CryptoComm + Parser\t&#8212; organizuje \u0161ifrovan\u00e9 P2P p\u0159ipojen\u00ed.\n<li class=\"l\"> CastVotes &#8212; mechanismus spole\u010dn\u00e9ho v\u00fdb\u011bru c\u00edlov\u00fdch hostitel\u016f pro \u00fatok.\n<li class=\"l\"> TargetFeed &#8212; z\u00edsk\u00e1v\u00e1 seznam uzl\u016f pro \u00fatok od sousedn\u00edch uzl\u016f.\n<li class=\"l\"> DeployMgmt &#8212; realizace \u010derva, kter\u00fd \u0161\u00ed\u0159\u00ed zlovoln\u00fd k\u00f3d na napaden\u00fd server.\n<li class=\"l\"> Owned &#8212; zodpov\u00edd\u00e1 za p\u0159ipojen\u00ed k server\u016fm, na kter\u00fdch ji\u017e b\u011b\u017e\u00ed zlovoln\u00fd k\u00f3d.\n<li class=\"l\"> Assemble &#8212; shroma\u017e\u010fuje soubor v pam\u011bti z jednotliv\u011b p\u0159en\u00e1\u0161en\u00fdch blok\u016f.\n<li class=\"l\"> Antivir &#8212; modul potla\u010den\u00ed konkuren\u010dn\u00edch zlovoln\u00fdch program\u016f, identifikuje a ukon\u010duje procesy obsahuj\u00edc\u00ed \u0159et\u011bzec &#171;xmr&#187;, kter\u00e9 spot\u0159ebov\u00e1vaj\u00ed CPU.\n<li class=\"l\"> Libexec &#8212; modul pro t\u011b\u017ebu kryptom\u011bny Monero.\n<\/ul>\n<p>Pou\u017e\u00edvan\u00fd v FritzFrog P2P protokol podporuje p\u0159ibli\u017en\u011b 30 p\u0159\u00edkaz\u016f odpov\u00eddaj\u00edc\u00edch za p\u0159enos dat mezi uzly, spou\u0161t\u011bn\u00ed skript\u016f, p\u0159enos komponent\u016f \u0161kodliv\u00e9ho software, dotazov\u00e1n\u00ed stavu, v\u00fdm\u011bna log\u016f, spu\u0161t\u011bn\u00ed proxy atd. Informace se p\u0159en\u00e1\u0161ej\u00ed p\u0159es samostatn\u00fd \u0161ifrovan\u00fd kan\u00e1l s serializac\u00ed do form\u00e1tu JSON. Pro \u0161ifrov\u00e1n\u00ed se pou\u017e\u00edv\u00e1 asymetrick\u00fd \u0161ifrovac\u00ed algoritmus AES a k\u00f3dov\u00e1n\u00ed Base64. Pro v\u00fdm\u011bnu kl\u00ed\u010d\u016f se pou\u017e\u00edv\u00e1 protokol DH (<noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Diffie%E2%80%93Hellman_key_exchange\">Diffie-Hellman<\/a><\/noindex>). Pro ur\u010den\u00ed stavu si uzly neust\u00e1le vym\u011b\u0148uj\u00ed ping po\u017eadavky. <\/p>\n<p>V\u0161echny uzly botnetu podporuj\u00ed distribuovanou datab\u00e1zi s informacemi o napadan\u00fdch a kompromitovan\u00fdch syst\u00e9mech. C\u00edle \u00fatok\u016f jsou synchronizov\u00e1ny po cel\u00e9m botnetu &#8212; ka\u017ed\u00fd uzel napad\u00e1 jin\u00fd c\u00edl, tedy dva r\u016fzn\u00e9 uzly botnetu nebudou napadat stejn\u00fd hostitel. Uzly tak\u00e9 shroma\u017e\u010fuj\u00ed a p\u0159en\u00e1\u0161ej\u00ed m\u00edstn\u00ed statistiky, jako je velikost voln\u00e9 pam\u011bti, uptime, zat\u00ed\u017een\u00ed CPU a aktivita p\u0159ipojen\u00ed p\u0159es SSH. Tyto informace se pou\u017e\u00edvaj\u00ed k rozhodov\u00e1n\u00ed o spu\u0161t\u011bn\u00ed t\u011b\u017eebn\u00edho procesu nebo k vyu\u017eit\u00ed uzlu pouze k \u00fatok\u016fm na jin\u00e9 syst\u00e9my (nap\u0159\u00edklad t\u011b\u017eba se nespou\u0161t\u00ed na zat\u00ed\u017een\u00fdch syst\u00e9mech nebo syst\u00e9mech s \u010dast\u00fdm p\u0159ipojen\u00edm administr\u00e1tora).<\/p>\n<p>Pro odhalen\u00ed FritzFrog v\u00fdzkumn\u00edci navrhli jednoduch\u00e9 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/guardicore\/labs_campaigns\/blob\/master\/FritzFrog\/detect_fritzfrog.sh\">shell skript<\/a><\/noindex>. Pro ur\u010den\u00ed infikov\u00e1n\u00ed syst\u00e9mu<br \/>\nmohou b\u00fdt pou\u017eity takov\u00e9 znaky jako p\u0159\u00edtomnost naslouchaj\u00edc\u00edho spojen\u00ed na portu 1234, p\u0159\u00edtomnost <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/guardicore\/labs_campaigns\/blob\/master\/FritzFrog\/ssh_key.md\">\u0161kodliv\u00e9ho kl\u00ed\u010de<\/a><\/noindex> v authorized_keys (na v\u0161ech uzlech je nainstalov\u00e1n stejn\u00fd SSH kl\u00ed\u010d) a p\u0159\u00edtomnost v pam\u011bti spu\u0161t\u011bn\u00fdch proces\u016f \u201eifconfig\u201c, \u201elibexec\u201c, \u201ephp-fpm\u201c a \u201enginx\u201c, kter\u00e9 nemaj\u00ed souvisej\u00edc\u00ed spustiteln\u00e9 soubory (\u201e\/proc\/\/exe\u201c ukazuje na vzd\u00e1len\u00fd soubor). P\u0159\u00edznakem tak\u00e9 m\u016f\u017ee b\u00fdt p\u0159\u00edtomnost provozu na s\u00ed\u0165ov\u00e9m portu 5555, kter\u00fd vznik\u00e1 p\u0159i komunikaci \u0161kodliv\u00e9ho softwaru s typick\u00fdm pool web.xmrpool.eu b\u011bhem t\u011b\u017eby kryptom\u011bny Monero.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53573\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Guardicore, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u043e\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e FritzFrog, \u043f\u043e\u0440\u0430\u0436\u0430\u044e\u0449\u0435\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Linux. FritzFrog \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0447\u0435\u0440\u0432\u044c, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u0447\u0435\u0440\u0435\u0437 bruteforce-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u043e\u0440\u0442\u043e\u043c SSH, \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u043e\u0442\u043d\u0435\u0442\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u0431\u0435\u0437 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0437\u043b\u043e\u0432 \u0438 \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0435\u0433\u043e \u0435\u0434\u0438\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 \u043e\u0442\u043a\u0430\u0437\u0430. \u0414\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u043d\u0442\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91920,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91919","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Guardicore, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u0438\u043b\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/vyyavlen-cherv-fritzfrog-porazhayushhij-servery-po-ssh-i-stroyashhij-deczentralizovannyj-botnet\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u044f\u0432\u043b\u0435\u043d \u0447\u0435\u0440\u0432\u044c FritzFrog, \u043f\u043e\u0440\u0430\u0436\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e SSH \u0438 \u0441\u0442\u0440\u043e\u044f\u0449\u0438\u0439 \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Guardicore, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u0438\u043b\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/vyyavlen-cherv-fritzfrog-porazhayushhij-servery-po-ssh-i-stroyashhij-deczentralizovannyj-botnet\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-20T11:41:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-20T11:41:55+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Byl odhalen \u010derv FritzFrog, kter\u00fd napad\u00e1 servery p\u0159es SSH a vytv\u00e1\u0159\u00ed decentralizovan\u00fd botnet | ProHoster","description":"Spole\u010dnost Guardicore, specializuj\u00edc\u00ed se na ochranu datacenter a cloudov\u00fdch syst\u00e9m\u016f, odhalila.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/vyyavlen-cherv-fritzfrog-porazhayushhij-servery-po-ssh-i-stroyashhij-deczentralizovannyj-botnet","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u044f\u0432\u043b\u0435\u043d \u0447\u0435\u0440\u0432\u044c FritzFrog, \u043f\u043e\u0440\u0430\u0436\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e SSH \u0438 \u0441\u0442\u0440\u043e\u044f\u0449\u0438\u0439 \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Guardicore, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u0438\u043b\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/vyyavlen-cherv-fritzfrog-porazhayushhij-servery-po-ssh-i-stroyashhij-deczentralizovannyj-botnet","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-20T11:41:55+00:00","article:modified_time":"2020-08-20T11:41:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91919","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:18:27","updated":"2022-10-04 19:20:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/91919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=91919"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/91919\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/91920"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=91919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=91919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=91919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}