{"id":33529,"date":"2019-10-31T21:53:08","date_gmt":"2019-10-31T18:53:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange\/"},"modified":"2019-10-31T21:53:08","modified_gmt":"2019-10-31T18:53:08","slug":"bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/novosti-interneta\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","title":{"rendered":"Die Backdoor der Cybergruppe Turla erm\u00f6glicht die Kontrolle \u00fcber Microsoft Exchange-Server.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Das Unternehmen ESET hat eine Analyse der Malware LightNeuron durchgef\u00fchrt, die von Mitgliedern der bekannten Cyberkriminalit\u00e4tsgruppe Turla verwendet wird.<\/p>\n

\"Die<\/p>\n

Das Hacker-Team Turla erlangte 2008 Bekanntheit \u2013 nach dem Hack des Netzwerks des Central Command der US Armed Forces. Das Ziel der Cyberkriminellen ist der Diebstahl vertraulicher Daten, die von strategischer Bedeutung sind.<\/p>\n

In den letzten Jahren sind hunderte von Nutzern in mehr als 45 L\u00e4ndern, darunter Regierungs- und diplomatische Einrichtungen, milit\u00e4rische, edukative und Forschungseinrichtungen, von den Angriffen der Turla-Gruppe betroffen gewesen.<\/p>\n

Zur\u00fcck zur Schadsoftware LightNeuron. Dieses Backdoor erlaubt es, nahezu vollst\u00e4ndige Kontrolle \u00fcber die E-Mail-Server Servern gearbeitet werden.<\/a> Microsoft Exchange zu \u00fcbernehmen. Nach dem Zugriff auf den Transportagenten von Microsoft Exchange k\u00f6nnen die Angreifer E-Mails lesen und blockieren, Anh\u00e4nge ersetzen und Texte bearbeiten sowie Nachrichten im Namen der Mitarbeiter der Organisation schreiben und versenden.<\/p>\n

<\/center>
\n\"Die<\/p>\n

Schadhafte Aktivit\u00e4ten sind in speziell gestalteten PDF-Dokumenten und JPG-Bildern verborgen; die Verbindung zum Backdoor erfolgt durch das Senden von Anfragen und Befehlen \u00fcber diese Dateien.<\/p>\n

ESET-Spezialisten weisen darauf hin, dass die Bereinigung des Systems von der Malware LightNeuron eine eher komplexe Aufgabe darstellt. Der Grund daf\u00fcr ist, dass das Entfernen von b\u00f6sartigen Dateien keine Ergebnisse liefert und die Funktionalit\u00e4t von Microsoft Exchange beeintr\u00e4chtigen kann.<\/p>\n

Es gibt Grund zu der Annahme, dass dieser Backdoor auch f\u00fcr Linux-Systeme verwendet wird. <\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Quelle: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b LightNeuron, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla. \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Turla \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0449\u0451 \u0432 2008 \u0433\u043e\u0434\u0443 — \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0438 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u043e\u043e\u0440\u0443\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u043b \u0421\u0428\u0410. \u0426\u0435\u043b\u044c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 — \u043a\u0440\u0430\u0436\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 Turla \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0441\u043e\u0442\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 45 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25227,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33529","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Der Backdoor der Cybergruppe Turla erm\u00f6glicht die Kontrolle \u00fcber Microsoft Exchange-Server | ProHoster","description":"ESET hat die Malware LightNeuron analysiert, die von Mitgliedern der bekannten Cyberkriminalit\u00e4tsgruppe Turla eingesetzt wird. Die Hackergruppe Turla erlangte bereits 2008 Bekanntheit \u2014 nach dem Hack des Netzwerks des US Central Command. Das Ziel der Cyberkriminellen ist der Diebstahl von vertraulichen Daten, die von strategischer Bedeutung sind. In den letzten Jahren wurden Hunderte von Nutzern in mehr als 45 L\u00e4ndern durch die Aktionen der Turla-Angreifer gesch\u00e4digt.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/novosti-interneta\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u044d\u043a\u0434\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Microsoft Exchange | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b LightNeuron, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla. \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Turla \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0449\u0451 \u0432 2008 \u0433\u043e\u0434\u0443 \u2014 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0438 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u043e\u043e\u0440\u0443\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u043b \u0421\u0428\u0410. \u0426\u0435\u043b\u044c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u2014 \u043a\u0440\u0430\u0436\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 Turla \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0441\u043e\u0442\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 45","og:url":"https:\/\/prohoster.info\/de\/blog\/novosti-interneta\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:08+00:00","article:modified_time":"2019-10-31T18:53:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33529","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-19 09:14:07","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:22","updated":"2026-02-19 09:14:07"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/33529","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=33529"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/33529\/revisions"}],"predecessor-version":[{"id":161791,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/33529\/revisions\/161791"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media\/25227"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=33529"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=33529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=33529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}