{"id":38513,"date":"2019-10-31T22:24:14","date_gmt":"2019-10-31T19:24:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows\/"},"modified":"2019-10-31T22:24:14","modified_gmt":"2019-10-31T19:24:14","slug":"vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows","title":{"rendered":"Nodersok pahavara on nakatanud tuhandeid Windowsi arvuteid","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00f5rgustike allikate kohaselt on tuhanded Windowsi p\u00f5hised arvutid nakatunud uue pahavara t\u00fc\u00fcbi t\u00f5ttu, mis laadib alla ja installib Node.js infrastruktuuri koopia, muutes nakatunud s\u00fcsteemid proksiserveriteks, mida kasutatakse petuskeemide l\u00e4biviimiseks.<\/p>\n

\"Nodersok<\/p>\n

Pahavara, mida Microsofti raportis nimetatakse Nodersokiks ja Cisco Talosi raportis Divergentiks, avastati sel suvel. Need levisid pahavara abil, mida kasutati HTML-rakenduste failide sundimiseks arvutitesse. Kasutajad, kes avasid need failid oma arvutites, k\u00e4ivitasid mitmeastmelise nakatumisprotsessi, mis h\u00f5lmas Exceli, JavaScripti ja PowerShelli skripte, mis l\u00f5ppkokkuv\u00f5ttes viis Nodersoki pahavara allalaadimise ja installimise.    <\/p>\n

Kahjurprogrammil on mitu komponenti, mille eesm\u00e4rk on t\u00e4ita erinevaid \u00fclesandeid. N\u00e4iteks kasutatakse PowerShelli moodulit Windowsi v\u00e4rskenduste ja tavakaitse keelamiseks. Samuti on olemas moodul, mis suurendab kahjuri \u00f5igusi s\u00fcsteemis. Siiski sisaldab see ka seaduslikke rakendusi: WinDivert ja Node.js. Esimene t\u00f6\u00f6riist on m\u00f5eldud v\u00f5rgupakettide salvestamiseks ja nendega suhtlemiseks, samas kui viimane v\u00f5imaldab JavaScripti k\u00e4ivitada veebiserverites.<\/p>\n

Microsofti ja Cisco aruannetes \u00f6eldakse, et kahjurvara kasutab kahe seadusliku rakenduse abi proxy-serverile<\/a> nakatunud masinates. Microsofti andmetel muudab kahjurvara nakatunud s\u00f5lmed proxy-serverid<\/a> kahjuliku liikluse edastamiseks. Cisco aruandes \u00f6eldakse, et proxy-servereid kasutatakse petuskeemide tegemiseks.<\/p>\n

<\/center><\/p>\n

Selleks, et v\u00e4ltida nakatumist, soovitavad spetsialistid mitte k\u00e4ivitada HTML rakenduse faile, mis on avastatud arvutis, eriti kui nende p\u00e4ritolu on teadmata. Igal juhul on failid, mis ootamatult laaditakse veebilehtedelt, alati halb m\u00e4rk ning neile ei saa usaldada, olenemata laiendist.     <\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Allikas: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0442\u044b\u0441\u044f\u0447\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u043c \u0432\u0438\u0434\u043e\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043a\u043e\u043f\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b Node.js, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0435 Nodersok \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Microsoft \u0438 Divergent \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Cisco Talos, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043b\u0435\u0442\u043e\u043c \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u041e\u043d\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28899,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38513","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Pahavara Nodersok on nakatanud tuhandeid Windowsi arvuteid | ProHoster","description":"V\u00f5rgallikate teatel on tuhanded Windowsi s\u00fcsteemidel t\u00f6\u00f6tavad arvutid nakatunud uue t\u00fc\u00fcpi pahavaraga, mis laadib alla ja installib Node.js infrastruktuuri koopia, muutes nakatunud s\u00fcsteemid v\u00f5ltsimise operatsioonide jaoks kasutatavaks proksiserveriks. Microsofti aruandes nimetatud pahavara Nodersok ja Cisco Talose aruandes Divergent avastati selle aasta suvel. Need levivad","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Nodersok \u0437\u0430\u0440\u0430\u0437\u0438\u043b\u0430 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Windows | ProHoster","og:description":"\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0442\u044b\u0441\u044f\u0447\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u043c \u0432\u0438\u0434\u043e\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043a\u043e\u043f\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b Node.js, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0435 Nodersok \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Microsoft \u0438 Divergent \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Cisco Talos, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043b\u0435\u0442\u043e\u043c \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u041e\u043d\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:14+00:00","article:modified_time":"2019-10-31T19:24:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38513","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:56:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:08:31","updated":"2026-02-22 15:56:24"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38513","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38513"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38513\/revisions"}],"predecessor-version":[{"id":162049,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38513\/revisions\/162049"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/28899"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38513"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38513"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38513"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}