{"id":35985,"date":"2019-10-31T22:08:57","date_gmt":"2019-10-31T19:08:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novyj-bekdor-atakuet-polzovatelej-torrent-servisov\/"},"modified":"2019-10-31T22:08:57","modified_gmt":"2019-10-31T19:08:57","slug":"novyj-bekdor-atakuet-polzovatelej-torrent-servisov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/novyj-bekdor-atakuet-polzovatelej-torrent-servisov","title":{"rendered":"Ein neuer Backdoor-Angriff zielt auf Benutzer von Torrent-Diensten ab.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Das internationale Antivirenunternehmen ESET warnt vor dem Auftreten eines neuen Malware-Programms, das Benutzer von Torrent-Websites bedroht.<\/p>\n

\"Ein<\/p>\n

Die Schadsoftware tr\u00e4gt den Namen GoBot2\/GoBotKR. Sie verbreitet sich unter dem Deckmantel verschiedener Spiele und Anwendungen sowie Raubkopien von Filmen und Serien. Nach dem Herunterladen solcher Inhalte erh\u00e4lt der Benutzer zun\u00e4chst harmlos wirkende Dateien. In Wirklichkeit verbirgt sich jedoch Malware darin.<\/p>\n

Die Aktivierung der Schadsoftware erfolgt nach dem Klicken auf eine LNK-Datei. Nach der Installation von GoBotKR beginnt die Sammlung von Systeminformationen: Daten zur Netzwerkkonfiguration, dem Betriebssystem, der CPU und den installierten Antivirenprogrammen. Diese Informationen werden dann an den Command- Server<\/a>, der sich in S\u00fcdkorea befindet, gesendet.<\/p>\n

Die gesammelten Daten k\u00f6nnen von Angreifern verwendet werden, um verschiedene Angriffe im Cyberraum zu planen. Dazu geh\u00f6ren insbesondere verteilte Angriffe vom Typ \u201eDenial of Service\u201c (DDoS).<\/p>\n

<\/center>
\n\"Ein<\/p>\n

Die Schadsoftware ist in der Lage, eine Vielzahl von Befehlen auszuf\u00fchren. Dazu geh\u00f6ren: Torrents \u00fcber BitTorrent und uTorrent verbreiten, den Desktop-Hintergrund \u00e4ndern, ein Backdoor in den Ordnern von Cloud-Speichern (Dropbox, OneDrive, Google Drive) oder auf removable media kopieren, einen Proxy- oder HTTP-Server starten, die Firewall-Einstellungen \u00e4ndern, den Task-Manager aktivieren oder deaktivieren und mehr.<\/p>\n

Es ist m\u00f6glich, dass in Zukunft die infizierten Computer zu einem Botnetz zusammengeschlossen werden, um DDoS-Angriffe durchzuf\u00fchren. <\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Quelle: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u0430\u044f \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0442\u043e\u0440\u0440\u0435\u043d\u0442-\u0441\u0430\u0439\u0442\u043e\u0432. \u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GoBot2\/GoBotKR. \u041e\u043d \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u0433\u0440 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043f\u0438\u0440\u0430\u0442\u0441\u043a\u0438\u0445 \u043a\u043e\u043f\u0438\u0439 \u0444\u0438\u043b\u044c\u043c\u043e\u0432 \u0438 \u0441\u0435\u0440\u0438\u0430\u043b\u043e\u0432. \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u0435 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u0444\u0430\u0439\u043b\u044b. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0434\u0435\u043b\u0435 \u0432 \u043d\u0438\u0445 \u0441\u043a\u0440\u044b\u0442\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430. \u0410\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u044f \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u0441\u043b\u0435 \u043d\u0430\u0436\u0430\u0442\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26900,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Neuer Backdoor greift Nutzer von Torrent-Diensten an | ProHoster","description":"Das internationale Antivirenunternehmen ESET warnt vor dem Auftreten eines neuen Malware-Programms, das Benutzer von Torrent-Websites bedroht.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/novyj-bekdor-atakuet-polzovatelej-torrent-servisov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0442\u043e\u0440\u0440\u0435\u043d\u0442-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 | ProHoster","og:description":"\u041c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u0430\u044f \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0442\u043e\u0440\u0440\u0435\u043d\u0442-\u0441\u0430\u0439\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/novyj-bekdor-atakuet-polzovatelej-torrent-servisov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:08:57+00:00","article:modified_time":"2019-10-31T19:08:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35985","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:52:25","updated":"2026-01-22 01:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/35985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=35985"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/35985\/revisions"}],"predecessor-version":[{"id":172814,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/35985\/revisions\/172814"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media\/26900"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=35985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=35985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=35985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}