Mutu wa coronavirus lero wadzaza nkhani zonse, ndipo wakhalanso nkhani yayikulu pazochitika zosiyanasiyana za owukira omwe amagwiritsa ntchito mutu wa COVID-19 ndi chilichonse chokhudzana nawo. M'nkhaniyi, ndikufuna kuti ndiwonetsere zitsanzo za zochitika zoipa zotere, zomwe, ndithudi, si chinsinsi kwa akatswiri ambiri odziwa chitetezo, koma chidule chake chomwe mucholemba chimodzi chidzakupangitsani kukhala kosavuta kukonzekera kuzindikira kwanu. -kukweza zochitika kwa ogwira ntchito, ena omwe amagwira ntchito kutali ndipo ena amatha kukhala pachiwopsezo chachitetezo chazidziwitso zosiyanasiyana kuposa kale.
Mphindi ya chisamaliro kuchokera ku UFO
Dziko lapansi lalengeza za mliri wa COVID-19, matenda omwe atha kukhala ovuta kupuma chifukwa cha SARS-CoV-2 coronavirus (2019-nCoV). Pali zambiri za HabrΓ© pamutuwu - nthawi zonse muzikumbukira kuti zitha kukhala zodalirika / zothandiza komanso mosemphanitsa.
Tikukulimbikitsani kuti muzitsutsa zomwe zasindikizidwa.
Magwero ovomerezeka
- Mawebusaiti ndi magulu ovomerezeka a likulu logwira ntchito m'madera
Ngati simukukhala ku Russia, chonde onani masamba ofanana m'dziko lanu.
Sambani m'manja, samalirani okondedwa anu, khalani kunyumba ngati n'kotheka ndikugwira ntchito kutali.Werengani zofalitsa za: |
Tiyenera kudziwa kuti palibe ziwopsezo zatsopano zomwe zikugwirizana ndi coronavirus masiku ano. M'malo mwake, tikukamba za ma vectors omwe adakhala achikhalidwe, amangogwiritsidwa ntchito mu "msuzi" watsopano. Chifukwa chake, ndingatchule mitundu yayikulu ya ziwopsezo:
- webusayiti ndi zolemba zamakalata zokhudzana ndi coronavirus ndi nambala yoyipa yofananira
- Chinyengo ndi zidziwitso zabodza zomwe cholinga chake ndikugwiritsa ntchito mantha kapena chidziwitso chosakwanira chokhudza COVID-19
- kuukira mabungwe omwe akuchita nawo kafukufuku wa coronavirus
Ku Russia, kumene nzika mwamwambo sizidalira akuluakulu aboma ndipo amakhulupirira kuti zimawabisira chowonadi, mwayi woti "akweze" bwino malo achinyengo ndi mndandanda wamakalata, komanso zinthu zachinyengo, ndizokwera kwambiri kuposa mayiko omwe ali omasuka kwambiri. akuluakulu. Ngakhale lero palibe amene angadzione kuti ndi otetezedwa kwathunthu kwa anthu ochita chinyengo pa intaneti omwe amagwiritsa ntchito zofooka zonse zaumunthu za munthu - mantha, chifundo, umbombo, ndi zina zotero.
Mwachitsanzo, tengerani malo achinyengo omwe akugulitsa masks azachipatala.
Tsamba lofananira, CoronavirusMedicalkit[.]com, lidatsekedwa ndi akuluakulu aku US chifukwa chogawa katemera wa COVID-19 waulere ndi "zokha" zotumizira mankhwalawo. Pankhaniyi, ndi mtengo wotsika chotere, kuwerengera kunali kwa kufunikira kofulumira kwa mankhwalawa muzochitika za mantha ku United States.
Ichi sichiwopsezo chapamwamba cha cyber, chifukwa ntchito ya omwe akuwukira pakadali pano sikuti awononge ogwiritsa ntchito kapena kuba zidziwitso zawo kapena zidziwitso zawo, koma chifukwa cha mantha kuwakakamiza kuti atuluke ndikugula masks azachipatala pamitengo yokwera. ndi 5-10-30 nthawi kuposa mtengo weniweni. Koma lingaliro lomwelo lopanga tsamba labodza lomwe likugwiritsa ntchito mutu wa coronavirus likugwiritsidwanso ntchito ndi zigawenga zapaintaneti. Mwachitsanzo, nali tsamba lomwe dzina lake lili ndi mawu osakira "covid19", komanso tsamba lachinyengo.
Kawirikawiri, kuyang'anira tsiku ndi tsiku ntchito yathu yofufuza zochitika , mukuwona kuti ndi madambwe angati omwe akupangidwa omwe mayina awo ali ndi mawu akuti covid, covid19, coronavirus, ndi zina. Ndipo ambiri a iwo ndi oipa.
M'malo omwe antchito ena akampani amasamutsidwa kukagwira ntchito kuchokera kunyumba ndipo satetezedwa ndi chitetezo chamakampani, ndikofunikira kwambiri kuposa kale kuyang'anira zinthu zomwe zimachokera kuzipangizo zam'manja ndi pakompyuta za ogwira ntchito, modziwa kapena popanda iwo. chidziwitso. Ngati simukugwiritsa ntchito kuti muwone ndikuletsa madambwe otere (ndi Cisco Kulumikizana ndi ntchitoyi ndikwaulere), ndiye sinthani njira zanu zowunikira kuti muzitha kuyang'anira madambwe omwe ali ndi mawu osakira. Panthawi imodzimodziyo, kumbukirani kuti njira yachikhalidwe yolembera madera, komanso kugwiritsa ntchito nkhokwe zodziwika bwino, imatha kulephera, chifukwa madera oyipa amapangidwa mwachangu kwambiri ndipo amagwiritsidwa ntchito pakuwukira kwa 1-2 kwa nthawi yayitali kuposa maola angapo - ndiye owukira amasintha madera atsopano a ephemeral. Makampani oteteza zidziwitso alibe nthawi yosintha mwachangu maziko awo a chidziwitso ndikugawa kwa makasitomala awo onse.
Zigawenga zikupitilizabe kugwiritsa ntchito njira ya imelo kugawa maulalo achinyengo ndi pulogalamu yaumbanda pazomata. Ndipo mphamvu zawo ndizokwera kwambiri, popeza ogwiritsa ntchito, pomwe amalandila mauthenga ovomerezeka okhudza coronavirus, sangathe kuzindikira chilichonse choyipa pamlingo wawo. Ndipo ngakhale kuchuluka kwa anthu omwe ali ndi kachilomboka kukungokulirakulira, kuchuluka kwa ziwopsezo zotere kumangokulirakulira.
Mwachitsanzo, izi ndi zomwe chitsanzo cha imelo yachinyengo m'malo mwa CDC chimawonekera:
Kutsatira ulalo, zachidziwikire, sikubweretsa tsamba la CDC, koma patsamba labodza lomwe limaba malowedwe ndi mawu achinsinsi a wozunzidwayo:
Nachi chitsanzo cha imelo yachinyengo yomwe ikuyenera kukhala m'malo mwa World Health Organisation:
Ndipo mu chitsanzo ichi, owukirawo akuwerengera kuti anthu ambiri amakhulupirira kuti akuluakulu akubisa kuchuluka kwa matendawa kwa iwo, chifukwa chake ogwiritsa ntchito mosangalala komanso mosazengereza dinani zilembo zamtundu uwu wokhala ndi maulalo oyipa kapena zomata zomwe. akuyenera kuwulula zinsinsi zonse.
Mwa njira, pali malo oterowo , zomwe zimakulolani kuti muzitsatira zizindikiro zosiyanasiyana, mwachitsanzo, imfa, chiwerengero cha osuta, chiwerengero cha mayiko osiyanasiyana, ndi zina zotero. Tsambali lilinso ndi tsamba loperekedwa ku coronavirus. Ndipo kotero pamene ndinapita kwa izo pa March 16th, ndinawona tsamba lomwe kwa kanthawi linandipangitsa ine kukayikira kuti akuluakulu amatiuza zoona (sindikudziwa chifukwa cha ziwerengerozi, mwinamwake kulakwitsa chabe):
Chimodzi mwazinthu zodziwika bwino zomwe owukira amagwiritsa ntchito kutumiza maimelo ofanana ndi Emotet, imodzi mwazowopsa komanso zowopsa zomwe zadziwika posachedwa. Zolemba zamawu zomwe zimaphatikizidwa ndi maimelo zili ndi otsitsa a Emotet, omwe amatsitsa ma module atsopano oyipa pakompyuta ya wozunzidwayo. Emotet poyambilira idagwiritsidwa ntchito kulimbikitsa maulalo amawebusayiti achinyengo akugulitsa masks azachipatala, kulunjika okhala ku Japan. Pansipa mukuwona zotsatira za kusanthula fayilo yoyipa pogwiritsa ntchito sandboxing , yomwe imasanthula mafayilo kukhala oyipa.
Koma owukira sagwiritsa ntchito mwayi wongoyambitsa mu MS Word, komanso mapulogalamu ena a Microsoft, mwachitsanzo, mu MS Excel (umu ndi momwe gulu la hacker la APT36 lidachitira), kutumiza malingaliro othana ndi coronavirus kuchokera ku Boma la India lomwe lili ndi Crimson. KHOWE:
Kampeni ina yoyipa yomwe ikugwiritsa ntchito mutu wa coronavirus ndi Nanocore RAT, yomwe imakulolani kuti muyike mapulogalamu pamakompyuta omwe akhudzidwa kuti apezeke patali, kumenya ma kiyibodi, kujambula zithunzi, kupeza mafayilo, ndi zina zambiri.
Ndipo Nanocore RAT nthawi zambiri imaperekedwa ndi imelo. Mwachitsanzo, m'munsimu mukuwona uthenga wamakalata wokhala ndi zolemba zakale za ZIP zomwe zili ndi fayilo ya PIF yomwe ingagwiritsidwe ntchito. Mwa kuwonekera pa fayilo yomwe ingathe kuchitidwa, wozunzidwayo amaika pulogalamu yolowera kutali (Chida Chofikira Chakutali, RAT) pa kompyuta yake.
Nachi chitsanzo china cha parasitic kampeni pamutu wa COVID-19. Wogwiritsa amalandira kalata yokhudza kuchedwa kuchedwa chifukwa cha coronavirus yokhala ndi invoice yolumikizidwa ndi zowonjezera za .pdf.ace. M'kati mwazosungirako zojambulidwa ndizomwe zingatheke zomwe zimakhazikitsa kulumikizana ndi seva yolamula ndi yowongolera kuti mulandire malamulo owonjezera ndikukwaniritsa zolinga zina zowukira.
Parallax RAT ili ndi magwiridwe antchito ofanana, omwe amagawira fayilo yotchedwa "New virus CORONAVIRUS sky 03.02.2020/XNUMX/XNUMX.pif" ndipo imayika pulogalamu yoyipa yomwe imalumikizana ndi seva yake yolamula kudzera pa protocol ya DNS. Zida zoteteza kalasi za EDR, chitsanzo chake ndi , ndipo mwina NGFW ithandizira kuyang'anira kulumikizana ndi ma seva olamula (mwachitsanzo, ), kapena zida zowunikira DNS (mwachitsanzo, ).
Muchitsanzo chomwe chili pansipa, pulogalamu yaumbanda yakutali idayikidwa pakompyuta ya munthu yemwe, pazifukwa zosadziwika, adagula kuti atsatse kuti pulogalamu yanthawi zonse ya antivayirasi yomwe idayikidwa pa PC ingateteze ku COVID-19 yeniyeni. Ndipo pambuyo pa zonse, wina adagwa chifukwa cha nthabwala zowoneka ngati izi.
Koma pakati pa pulogalamu yaumbanda palinso zinthu zachilendo. Mwachitsanzo, mafayilo anthabwala omwe amatsanzira ntchito ya ransomware. Nthawi ina, gawo lathu la Cisco Talos fayilo yotchedwa CoronaVirus.exe, yomwe idatseka chinsalu panthawi yakupha ndikuyambitsa chowerengera ndi uthenga "kuchotsa mafayilo onse ndi zikwatu pakompyuta iyi - coronavirus."
Atamaliza kuwerengera, batani lomwe lili m'munsi lidayamba kugwira ntchito ndipo litakanikizidwa, uthenga wotsatira udawonetsedwa, kunena kuti zonsezi ndi nthabwala ndipo muyenera kukanikiza Alt + F12 kuti pulogalamuyo ithe.
Kulimbana ndi maimelo oyipa kumatha kukhala kokha, mwachitsanzo, kugwiritsa ntchito , zomwe zimakulolani kuti muzindikire zomwe zili zoipa pazowonjezera, komanso kufufuza maulalo a phishing ndikudina pa iwo. Koma ngakhale zili choncho, musaiwale za kuphunzitsa ogwiritsa ntchito ndikuchita zoyeserera zachinyengo nthawi zonse ndi machitidwe a cyber, zomwe zimakonzekeretsa ogwiritsa ntchito zamisala zosiyanasiyana za omwe akuukira omwe amalimbana ndi ogwiritsa ntchito anu. Makamaka ngati amagwira ntchito patali komanso kudzera pa imelo yawo, nambala yoyipa imatha kulowa mumakampani kapena madipatimenti. Apa nditha kupangira njira yatsopano , zomwe zimalola osati kungochita maphunziro ang'onoang'ono ndi nano-ogwira ntchito pa nkhani za chitetezo cha chidziwitso, komanso kukonza mafanizidwe a phishing kwa iwo.
Koma ngati pazifukwa zina simunakonzekere kugwiritsa ntchito mayankho oterowo, ndiye kuti ndikofunikira kuti mukonzekere makalata okhazikika kwa antchito anu ndi chikumbutso cha ngozi ya phishing, zitsanzo zake ndi mndandanda wa malamulo achitetezo (chinthu chachikulu ndikuti owukira samadzibisa ngati iwo). Mwa njira, chimodzi mwazowopsa zomwe zingatheke pakadali pano ndikutumizirana mauthenga achinsinsi ngati makalata ochokera kwa oyang'anira anu, omwe akuti amalankhula za malamulo atsopano ndi njira zogwirira ntchito zakutali, mapulogalamu ovomerezeka omwe ayenera kukhazikitsidwa pamakompyuta akutali, ndi zina zambiri. Ndipo musaiwale kuti kuwonjezera pa imelo, zigawenga za pa intaneti zimatha kugwiritsa ntchito ma messenger apompopompo komanso malo ochezera a pa Intaneti.
Mu pulogalamu yamtunduwu kapena yodziwitsa anthu, mutha kuphatikizanso chitsanzo choyambirira cha mapu abodza a coronavirus, omwe anali ofanana ndi omwewo. Johns Hopkins University. Kusiyana chinali chakuti polowa patsamba lachinyengo, pulogalamu yaumbanda idayikidwa pakompyuta ya wogwiritsa ntchito, yomwe imaba zidziwitso za akaunti ya ogwiritsa ntchito ndikuzitumiza kwa zigawenga zapaintaneti. Mtundu umodzi wa pulogalamu yoterewu udapanganso ma RDP olumikizirana ndi makompyuta a wozunzidwayo.
Mwa njira, za RDP. Ichi ndi chida china chowukira chomwe owukira ayamba kugwiritsa ntchito mwachangu pa mliri wa coronavirus. Makampani ambiri, akamasinthira ku ntchito zakutali, amagwiritsa ntchito ntchito monga RDP, zomwe, ngati zitakonzedwa molakwika chifukwa chachangu, zitha kupangitsa kuti owukirawo alowe m'makompyuta akutali komanso mkati mwazinthu zamabizinesi. Kuphatikiza apo, ngakhale ndikusintha koyenera, kukhazikitsa kosiyanasiyana kwa RDP kumatha kukhala ndi zovuta zomwe zitha kugwiritsidwa ntchito ndi omwe akuukira. Mwachitsanzo, Cisco Talos ziwopsezo zingapo mu FreeRDP, ndipo mu Meyi chaka chatha, chiwopsezo chachikulu cha CVE-2019-0708 chidapezeka mu ntchito ya Microsoft Remote Desktop, yomwe idalola kuti codeyo ichitidwe pakompyuta ya wozunzidwayo, pulogalamu yaumbanda kuti iwonetsedwe, ndi zina zambiri. Kalata yofotokoza za iye inafalitsidwanso , ndi, mwachitsanzo, Cisco Talos malangizo a chitetezo kwa izo.
Palinso chitsanzo china chakugwiritsa ntchito mutu wa coronavirus - chiwopsezo chenicheni cha matenda a banja la wozunzidwayo ngati akana kulipira dipo mu bitcoins. Kuti izi zitheke, kuti kalatayo ikhale yofunika kwambiri komanso kuti amve kuti ndi wamphamvuyonse wa wolandayo, mawu achinsinsi a wozunzidwayo kuchokera ku akaunti yake, yotengedwa m'malo opezeka anthu ambiri achinsinsi ndi mawu achinsinsi, adayikidwa m'mawu a kalatayo.
Mu chimodzi mwazitsanzo pamwambapa, ndidawonetsa uthenga wachinyengo kuchokera ku World Health Organisation. Ndipo nachi chitsanzo china chomwe ogwiritsa ntchito amafunsidwa thandizo lazachuma kuti athe kulimbana ndi COVID-19 (ngakhale pamutu pamutu wa chilembocho, mawu oti "DONATION" amawoneka nthawi yomweyo). kutsatira cryptocurrency.
Ndipo lero pali zitsanzo zambiri zogwiritsa ntchito chifundo cha ogwiritsa ntchito:
Ma Bitcoins amagwirizana ndi COVID-19 mwanjira ina. Mwachitsanzo, izi ndi zomwe makalata omwe amalandira ndi nzika zambiri za ku Britain omwe akukhala kunyumba ndipo sangathe kupeza ndalama amawoneka ngati (ku Russia tsopano izi zidzakhala zofunikira).
Podziwonetsera ngati nyuzipepala zodziwika bwino ndi masamba ankhani, makalata awa amapereka ndalama zosavuta pogwiritsira ntchito migodi ya cryptocurrencies pamasamba apadera. M'malo mwake, pakapita nthawi, mumalandira uthenga woti ndalama zomwe mwapeza zitha kuchotsedwa ku akaunti yapadera, koma muyenera kusamutsa misonkho yaying'ono isanachitike. Zikuwonekeratu kuti atalandira ndalamazi, achinyengo samasamutsa kalikonse pobwezera, ndipo wogwiritsa ntchito mopupuluma amataya ndalama zomwe zatumizidwa.
Palinso chiopsezo china chokhudzana ndi World Health Organization. Obera adasokoneza zoikamo za DNS za D-Link ndi Linksys routers, zomwe nthawi zambiri zimagwiritsidwa ntchito ndi ogwiritsa ntchito kunyumba ndi mabizinesi ang'onoang'ono, kuti awalondolere kutsamba labodza ndi chenjezo lodziwikiratu lokhudza kufunika kokhazikitsa pulogalamu ya WHO, yomwe ingawasunge. zaposachedwa ndi nkhani zaposachedwa kwambiri za coronavirus. Kuphatikiza apo, pulogalamuyo inali ndi pulogalamu yoyipa ya Oski, yomwe imaba zambiri.
Lingaliro lofanana ndi pulogalamu yomwe ili ndi kachilombo ka COVID-19 ikugwiritsidwa ntchito ndi Android Trojan CovidLock, yomwe imafalitsidwa kudzera mu pulogalamu yomwe imati "yatsimikiziridwa" ndi dipatimenti ya zamaphunziro ku US, WHO ndi Center for Epidemic Control ( CDC).
Ogwiritsa ntchito ambiri masiku ano amadzipatula ndipo, sakufuna kapena sangathe kuphika, amagwiritsa ntchito mwachangu ntchito zobweretsera zakudya, zogulira kapena zinthu zina, monga mapepala akuchimbudzi. Zigawenga zadziwanso vector iyi pazolinga zawo. Mwachitsanzo, izi ndi momwe tsamba loyipa limawonekera, lofanana ndi chida chovomerezeka cha Canada Post. Ulalo wa SMS womwe walandilidwa ndi wozunzidwayo umatsogolera ku tsamba lawebusayiti lomwe limafotokoza kuti zomwe adalamulidwa sizingaperekedwe chifukwa ndi $ 3 yokha yomwe ikusowa, yomwe iyenera kulipidwa mowonjezera. Pachifukwa ichi, wogwiritsa ntchitoyo akutsogoleredwa ku tsamba lomwe ayenera kusonyeza tsatanetsatane wa khadi lake la ngongole ... ndi zotsatira zake zonse.
Pomaliza, ndikufuna ndipereke zitsanzo zina ziwiri zakuwopseza pa intaneti zokhudzana ndi COVID-19. Mwachitsanzo, mapulagini a "COVID-19 Coronavirus - Live Map WordPress Plugin", "Coronavirus Spread Prediction Graphs" kapena "Covid-19" amamangidwa m'malo ogwiritsa ntchito injini yotchuka ya WordPress, komanso kuwonetsa mapu a kufalikira kwa coronavirus, ilinso ndi pulogalamu yaumbanda ya WP-VCD. Ndipo kampani ya Zoom, yomwe, chifukwa cha kuchuluka kwa zochitika zapaintaneti, idakhala yotchuka kwambiri, idakumana ndi zomwe akatswiri amatcha "Zoombombing." Owukirawo, koma kwenikweni zolaula wamba, zolumikizidwa ndi macheza pa intaneti ndi misonkhano yapaintaneti ndikuwonetsa makanema otukwana osiyanasiyana. Mwa njira, chiwopsezo chofananacho chikukumana lero ndi makampani aku Russia.
Ndikuganiza kuti ambiri aife timayang'ana pafupipafupi zinthu zosiyanasiyana, onse ovomerezeka osati ovomerezeka, za momwe mliriwu ulili. Zigawenga zikugwiritsa ntchito mutuwu, ndikutipatsa zidziwitso "zaposachedwa" za coronavirus, kuphatikiza chidziwitso "chomwe aboma akubisalira." Koma ngakhale ogwiritsa ntchito wamba posachedwapa athandiza oukirawo potumiza zizindikiro zotsimikizika kuchokera kwa βodziwana nawoβ ndi βabwenzi.β Akatswiri a zamaganizo amanena kuti ntchito yotereyi ya ogwiritsa ntchito "alarmist" omwe amatumiza zonse zomwe zimabwera m'masomphenya awo (makamaka pa malo ochezera a pa Intaneti ndi amithenga apompopompo, omwe alibe njira zodzitetezera ku ziwopsezo zotere), amawalola kuti adzimva kuti ali nawo pankhondo yolimbana nawo. chiwopsezo chapadziko lonse lapansi ndipo, ngakhale kumva ngati ngwazi zopulumutsa dziko ku coronavirus. Koma, mwatsoka, kusowa kwa chidziwitso chapadera kumabweretsa mfundo yakuti zolinga zabwinozi "zimatsogolera aliyense ku gehena," kupanga ziwopsezo zatsopano za cybersecurity ndikukulitsa chiwerengero cha ozunzidwa.
M'malo mwake, nditha kupitiliza ndi zitsanzo zakuwopseza kwa cyber zokhudzana ndi coronavirus; Komanso, zigawenga zapaintaneti siziima chilili nβkutulukira njira zatsopano zopezera masuku pamutu zilakolako za anthu. Koma ndikuganiza kuti tingalekere pamenepo. Chithunzicho chawonekera kale ndipo chimatiuza kuti posachedwa zinthu zidzangowonjezereka. Dzulo, akuluakulu a boma ku Moscow anaika mzinda wa anthu 10 miliyoni kukhala wodzipatula. Akuluakulu a chigawo cha Moscow ndi madera ena ambiri a Russia, limodzinso ndi anansi athu apafupi kwambiri mβdera lomwe kale linali pambuyo pa Soviet Union, anachitanso chimodzimodzi. Izi zikutanthauza kuti chiwerengero cha anthu omwe akuzunzidwa ndi zigawenga za pa intaneti chidzawonjezeka nthawi zambiri. Chifukwa chake, ndikofunikira kuti musamangoganiziranso zachitetezo chanu, chomwe mpaka posachedwapa chidangoyang'ana pakuteteza maukonde amakampani kapena dipatimenti, ndikuwunika zida zomwe mulibe, komanso kutengera zitsanzo zomwe zaperekedwa mu pulogalamu yanu yodziwitsa anthu ogwira ntchito, yomwe ndi kukhala gawo lofunikira lachitetezo chazidziwitso kwa ogwira ntchito akutali. A wokonzeka kukuthandizani ndi izi!
PS. Pokonzekera nkhaniyi, zida zochokera ku Cisco Talos, Naked Security, Anti-Phishing, Malwarebytes Lab, ZoneAlarm, Reason Security ndi RiskIQ makampani, Dipatimenti Yachilungamo ya US, Zida Zakompyuta Zogona, SecurityAffairs, ndi zina zotero zinagwiritsidwa ntchito.
Source: www.habr.com