Mirai clone ntxiv ib lub kaum os tshiab exploits rau lub hom phiaj enterprise IoT li

Cov kws tshawb fawb tau tshawb pom ib qho tshiab clone ntawm Mirai botnet paub zoo, tsom rau IoT cov khoom siv. Lub sijhawm no, cov cuab yeej siv tau tsim los siv rau hauv kev lag luam ib puag ncig raug kev hem thawj. Lub hom phiaj kawg ntawm cov neeg tawm tsam yog los tswj cov khoom siv nrog bandwidth thiab ua kom muaj kev tawm tsam DDoS loj.

Lus Cim:
Thaum lub sijhawm sau ntawv txhais lus, kuv tsis paub tias lub hub twb muaj lawm kab lus zoo sib xws.

Cov kws sau ntawv ntawm thawj Mirai twb raug ntes, tab sis muaj qhov chaws, luam tawm xyoo 2016, tso cai rau cov neeg tawm tsam tshiab los tsim lawv tus kheej botnets raws li nws. Piv txwv li, satory и Okiru.

Thawj Mirai tshwm sim hauv 2016. Nws kis tus kab mob routers, IP koob yees duab, DVRs thiab lwm yam khoom siv uas feem ntau muaj tus password tsis zoo, nrog rau cov khoom siv siv cov versions ntawm Linux.

Tshiab Mirai variant yog tsom rau cov khoom lag luam

Ib qho botnet tshiab tau tshawb pom los ntawm pab pawg kws tshawb fawb Unit 42 los ntawm Palo Alto Network. Nws txawv ntawm lwm cov clones nyob rau hauv uas nws yog tsim los rau cov lag luam li, xws li WePresent WiPG-1000 wireless nthuav qhia systems thiab LG Supersign TVs.

Ib qho chaw taws teeb nkag mus rau qhov kev siv dag zog rau LG Supersign TVs (CVE-2018-17173) tau tsim muaj nyob rau lub Cuaj Hli xyoo tas los. Thiab rau WePresent WiPG-1000, tau luam tawm xyoo 2017. Nyob rau hauv tag nrho, lub bot yog nruab nrog 27 exploits, ntawm uas 11 yog tshiab. Cov txheej txheem ntawm "cov ntaub ntawv tsis raug cai tsis zoo" rau kev ua phau ntawv txhais lus tawm tsam kuj tau nthuav dav. Tus tshiab Mirai variant kuj tseem tsom rau ntau yam khoom siv kho vajtse xws li:

• Linksys routers
• ZTE routers
• DLink routers
• Network cia khoom
• NVR thiab IP koob yees duab

"Cov yam ntxwv tshiab no muab rau botnet loj dua qhov chaw nres," Unit 42 cov kws tshawb fawb tau hais hauv blog ncej. "Tshwj xeeb, kev tsom mus rau kev sib txuas lus hauv tuam txhab tso cai rau nws los tswj hwm ntau qhov bandwidth, uas thaum kawg ua rau muaj zog ntxiv rau cov botnet los ua DDoS tawm tsam."

Qhov xwm txheej no qhia txog qhov xav tau rau cov lag luam los saib xyuas IoT cov cuab yeej ntawm lawv lub network, teeb tsa kev ruaj ntseg kom zoo, thiab tseem xav tau kev hloov kho tsis tu ncua.
.

Tau qhov twg los: www.hab.com