{"id":33529,"date":"2019-10-31T21:53:08","date_gmt":"2019-10-31T18:53:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange\/"},"modified":"2019-10-31T21:53:08","modified_gmt":"2019-10-31T18:53:08","slug":"bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","title":{"rendered":"La porte d\u00e9rob\u00e9e du groupe cybercriminel Turla permet de prendre le contr\u00f4le des serveurs Microsoft Exchange","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La soci\u00e9t\u00e9 ESET a analys\u00e9 le logiciel malveillant LightNeuron, utilis\u00e9 par les membres du c\u00e9l\u00e8bre groupe de cybercriminalit\u00e9 Turla.<\/p>\n

\"La<\/p>\n

L'\u00e9quipe de hackers Turla s'est fait conna\u00eetre en 2008 apr\u00e8s avoir pirat\u00e9 le r\u00e9seau du Commandement central des forces arm\u00e9es am\u00e9ricaines. L'objectif des cybercriminels est de voler des donn\u00e9es confidentielles ayant une importance strat\u00e9gique.<\/p>\n

Au cours des derni\u00e8res ann\u00e9es, des centaines d'utilisateurs dans plus de 45 pays ont \u00e9t\u00e9 victimes des actions des malfaiteurs de Turla, notamment des institutions gouvernementales et diplomatiques, des organisations militaires, \u00e9ducatives et de recherche, etc.<\/p>\n

Revenons maintenant \u00e0 la menace LightNeuron. Ce cheval de Troie permet de prendre un contr\u00f4le presque total sur les e-mails serveurs tr\u00e8s charg\u00e9s<\/a> de Microsoft Exchange. En acc\u00e9dant \u00e0 l'agent de transport de Microsoft Exchange, les attaquants peuvent lire et bloquer des e-mails, remplacer des pi\u00e8ces jointes et modifier du texte, ainsi qu'\u00e9crire et envoyer des messages au nom des employ\u00e9s de l'organisation.<\/p>\n

<\/center>
\n\"La<\/p>\n

L'activit\u00e9 malveillante est dissimul\u00e9e dans des documents PDF sp\u00e9cialement cr\u00e9\u00e9s et des images JPG ; la communication avec le cheval de Troie s'effectue en envoyant des requ\u00eates et des commandes via ces fichiers.<\/p>\n

Les experts d'ESET soulignent que nettoyer un syst\u00e8me de la menace LightNeuron est une t\u00e2che assez complexe. En effet, la suppression des fichiers malveillants n'apporte pas de r\u00e9sultats et peut entra\u00eener des dysfonctionnements de Microsoft Exchange.<\/p>\n

Il y a des raisons de croire que ce cheval de Troie est \u00e9galement utilis\u00e9 pour des syst\u00e8mes Linux. <\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Source : 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b LightNeuron, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla. \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Turla \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0449\u0451 \u0432 2008 \u0433\u043e\u0434\u0443 — \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0438 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u043e\u043e\u0440\u0443\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u043b \u0421\u0428\u0410. \u0426\u0435\u043b\u044c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 — \u043a\u0440\u0430\u0436\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 Turla \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0441\u043e\u0442\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 45 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25227,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33529","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Le cheval de Troie du groupe cybercriminel Turla permet de prendre le contr\u00f4le des serveurs Microsoft Exchange | ProHoster","description":"La soci\u00e9t\u00e9 ESET a analys\u00e9 le logiciel malveillant LightNeuron, utilis\u00e9 par les membres du c\u00e9l\u00e8bre groupe de cybercriminalit\u00e9 Turla.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u044d\u043a\u0434\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Microsoft Exchange | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b LightNeuron, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:08+00:00","article:modified_time":"2019-10-31T18:53:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33529","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-19 09:14:07","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:22","updated":"2026-02-19 09:14:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33529","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=33529"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33529\/revisions"}],"predecessor-version":[{"id":161791,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33529\/revisions\/161791"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/25227"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=33529"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=33529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=33529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}