Mirai clone na-agbakwunye iri na abuo irighiri ihe ọhụrụ iji lekwasịrị anya ngwaọrụ IoT ụlọ ọrụ

Ndị ọrụ nyocha achọpụtala clone ọhụrụ nke Mirai botnet a ma ama, nke ezubere na ngwaọrụ IoT. Oge a, ngwaọrụ agbakwunyere echere maka iji na gburugburu azụmahịa nọ n'egwu. Ebumnuche kachasị nke ndị na-awakpo bụ ijikwa ngwaọrụ nwere bandwit ma mee mwakpo DDoS buru ibu.

Okwu:
N'oge edere nsụgharị ahụ, amaghị m na ebe ahụ enweelarị isiokwu yiri ya.

E jidere ndị odee nke mbụ Mirai, mana enwere koodu isi mmalite, nke e bipụtara na 2016, na-enye ndị na-awakpo ọhụrụ ohere ịmepụta botnets nke ha dabere na ya. Ọmụmaatụ, akụkọ ifo и Okiru.

Mirai mbụ pụtara na 2016. O butere ndị na-anya ụgbọ ala, igwefoto IP, DVR na ngwaọrụ ndị ọzọ na-enwekarị paswọọdụ ndabara, yana ngwaọrụ na-eji ụdị Linux emechiela.

Emebere ụdị Mirai ọhụrụ maka ngwaọrụ ụlọ ọrụ

Otu ndị nyocha chọpụtara botnet ọhụrụ unit 42 sitere na Palo Alto Network. Ọ dị iche na clones ndị ọzọ n'ihi na emebere ya maka ngwaọrụ ụlọ ọrụ, gụnyere WePresent WiPG-1000 sistemụ ngosi ikuku na LG Supersign TV.

Emere ihe iji nweta ohere dịpụrụ adịpụ maka LG Supersign TV (CVE-2018-17173) na Septemba afọ gara aga. Na maka WePresent WiPG-1000, ebipụtara na 2017. Na mkpokọta, a na-eji bot 27 arụ ọrụ, nke 11 dị ọhụrụ, nke XNUMX. A gbasaalakwa usoro nke "ụkpụrụ ndabara na-adịghị ahụkebe" maka ịme mwakpo akwụkwọ ọkọwa okwu. Ọdịiche nke Mirai ọhụrụ a na-elekwasịkwa anya n'ụdị ngwaike agbakwunyere dị ka:

• Linksys routers
• Ndị na-anya ZTE
• DLink rawụta
• Ngwaọrụ nchekwa netwọkụ
• Igwefoto IP na NVR

"Njirimara ọhụrụ ndị a na-enye botnet nnukwu ọgụ," ndị nchọpụta Unit 42 kwuru na blọgụ blọgụ. "Kpọmkwem, ịchebe ọwa nkwurịta okwu ụlọ ọrụ na-enye ya ohere ịnyekwu bandwidth, nke na-emecha nweta ọkụ ọkụ maka botnet iji mee mwakpo DDoS."

Ihe omume a na-egosipụta mkpa ọ dị ka ụlọ ọrụ nyochaa ngwaọrụ IoT na netwọkụ ha, hazie nchekwa nke ọma yana mkpa maka mmelite oge niile.
.

isi: www.habr.com