{"id":38513,"date":"2019-10-31T22:24:14","date_gmt":"2019-10-31T19:24:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows\/"},"modified":"2019-10-31T22:24:14","modified_gmt":"2019-10-31T19:24:14","slug":"vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows","title":{"rendered":"O malware Nodersok infectou milhares de computadores com Windows","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

De acordo com fontes online, milhares de computadores operando com Windows foram infectados por um novo tipo de malware que carrega e instala uma c\u00f3pia da infraestrutura Node.js, transformando sistemas infectados em servidores proxy utilizados para realizar opera\u00e7\u00f5es fraudulentas.<\/p>\n

\"O<\/p>\n

Os malwares, chamados Nodersok no relat\u00f3rio da Microsoft e Divergent no relat\u00f3rio da Cisco Talos, foram descobertos no ver\u00e3o deste ano. Eles se espalharam por meio de an\u00fancios maliciosos que eram usados para for\u00e7ar o download de arquivos HTML Application nos computadores. Usu\u00e1rios que executaram esses arquivos em seus PCs iniciaram um processo de infec\u00e7\u00e3o em v\u00e1rias etapas utilizando scripts em Excel, JavaScript e PowerShell, que acabaram resultando no download e instala\u00e7\u00e3o do malware Nodersok.    <\/p>\n

O pr\u00f3prio malware cont\u00e9m v\u00e1rios componentes destinados a diferentes finalidades. Por exemplo, um m\u00f3dulo PowerShell \u00e9 usado para desativar o Windows Update e a prote\u00e7\u00e3o padr\u00e3o do Windows. Al\u00e9m disso, h\u00e1 um m\u00f3dulo utilizado para aumentar os privil\u00e9gios do malware no sistema. No entanto, tamb\u00e9m h\u00e1 aplicativos leg\u00edtimos inclu\u00eddos: WinDivert e Node.js. A primeira ferramenta \u00e9 usada para capturar e interagir com pacotes de rede, enquanto a segunda permite executar JavaScript em servidores web.<\/p>\n

Os relat\u00f3rios da Microsoft e da Cisco indicam que o malware utiliza dois aplicativos leg\u00edtimos para lan\u00e7ar proxy-servidor<\/a> em m\u00e1quinas infectadas. De acordo com a Microsoft, o malware transforma n\u00f3s infectados em proxy-servidores<\/a> para transmitir tr\u00e1fego malicioso. O relat\u00f3rio da Cisco menciona que os servidores proxy s\u00e3o utilizados para realizar a\u00e7\u00f5es fraudulentas.<\/p>\n

<\/center><\/p>\n

Para prevenir a infec\u00e7\u00e3o, especialistas recomendam n\u00e3o executar arquivos HTML Application encontrados em PCs, especialmente se sua origem for desconhecida. Em qualquer caso, arquivos que s\u00e3o baixados inesperadamente de p\u00e1ginas da web sempre s\u00e3o um mau sinal, e n\u00e3o devem ser confi\u00e1veis, independentemente da extens\u00e3o.     <\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Fonte: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0442\u044b\u0441\u044f\u0447\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u043c \u0432\u0438\u0434\u043e\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043a\u043e\u043f\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b Node.js, \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044f \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0435 Nodersok \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Microsoft \u0438 Divergent \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 Cisco Talos, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043b\u0435\u0442\u043e\u043c \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u041e\u043d\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28899,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38513","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47O malware Nodersok infectou milhares de computadores com Windows | ProHoster","description":"De acordo com fontes online, milhares de computadores operando com Windows foram infectados por um novo tipo de malware que carrega e instala uma c\u00f3pia da infraestrutura Node.js.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Nodersok \u0437\u0430\u0440\u0430\u0437\u0438\u043b\u0430 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Windows | ProHoster","og:description":"\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0442\u044b\u0441\u044f\u0447\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Windows \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u043c \u0432\u0438\u0434\u043e\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043a\u043e\u043f\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b Node.js.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/vredonosnaya-programma-nodersok-zarazila-tysyachi-kompyuterov-na-baze-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:14+00:00","article:modified_time":"2019-10-31T19:24:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38513","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:56:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:08:31","updated":"2026-02-22 15:56:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/38513","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=38513"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/38513\/revisions"}],"predecessor-version":[{"id":162049,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/38513\/revisions\/162049"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/28899"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=38513"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=38513"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=38513"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}