{"id":29941,"date":"2019-10-31T21:32:47","date_gmt":"2019-10-31T18:32:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/klon-mirai-dobavlyaet-dyuzhinu-novyh-eksplojtov-dlya-tselevyh-korporativnyh-iot-ustrojstv\/"},"modified":"2019-10-31T21:32:47","modified_gmt":"2019-10-31T18:32:47","slug":"klon-mirai-dobavlyaet-dyuzhinu-novyh-eksplojtov-dlya-tselevyh-korporativnyh-iot-ustrojstv","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/klon-mirai-dobavlyaet-dyuzhinu-novyh-eksplojtov-dlya-tselevyh-korporativnyh-iot-ustrojstv","title":{"rendered":"Kloni Mirai shton nj\u00eb duzin\u00eb exploit-esh t\u00eb reja p\u00ebr pajisjet IoT t\u00eb synuara n\u00eb ambiente korporative","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit zbuluan nj\u00eb klon t\u00eb ri t\u00eb famsh\u00ebm t\u00eb botnet-it Mirai, i orientuar drejt pajisjeve IoT. K\u00ebt\u00eb her\u00eb, n\u00ebn k\u00ebrc\u00ebnim jan\u00eb pajisjet e integruara, t\u00eb destinuara p\u00ebr p\u00ebrdorim n\u00eb mjedise biznesi. Q\u00ebllimi p\u00ebrfundimtar i sulmuesve \u00ebsht\u00eb t\u00eb kontrollojn\u00eb pajisjet me band\u00eb lidh\u00ebse dhe t\u00eb kryejn\u00eb sulme masive DDoS.<\/p>\n

\"Kloni
\n<\/a><\/noindex><\/p>\n

Sh\u00ebnim:
\nN\u00eb momentin e shkruarjes s\u00eb p\u00ebrkthimit, nuk e dija se n\u00eb Habr\u00eb tashm\u00eb kishte nj\u00eb artikull t\u00eb ngjash\u00ebm<\/a><\/noindex>.\n<\/p><\/blockquote>\n

Autor\u00ebt e origjinalit t\u00eb Mirai tashm\u00eb jan\u00eb arrestuar, por disponueshm\u00ebria kodit burimor<\/a><\/noindex>, e publikuar n\u00eb vitin 2016, lejon q\u00eb sulmuesit e rinj t\u00eb krijojn\u00eb botnet-et e tyre bazuar n\u00eb t\u00eb. P\u00ebr shembull, Satory<\/a><\/noindex> dhe Okiru<\/a><\/noindex>.<\/p>\n

Origjinali Mirai u shfaq n\u00eb vitin 2016. Ai infektonte routera, kamera IP, regjistrues video dhe pajisje t\u00eb tjera, n\u00eb t\u00eb cilat shpesh vendoset nj\u00eb fjal\u00ebkalim i paracaktuar, si dhe pajisje q\u00eb p\u00ebrdorin versione t\u00eb d\u00ebshtuara t\u00eb linux. <\/p>\n

Varianti i ri Mirai \u00ebsht\u00eb p\u00ebr pajisjet korporative<\/b><\/p>\n

Botnet-i i ri u zbulua nga ekipi i k\u00ebrkuesve Unit 42<\/a><\/noindex> nga Palo Alto Network. Dallimi i tij nga klonet e tjera \u00ebsht\u00eb se \u00ebsht\u00eb e destinuar p\u00ebr pajisje t\u00eb korporatave, p\u00ebrfshir\u00eb sistemet wireless t\u00eb prezantimit WePresent WiPG-1000 dhe televizor\u00ebt LG Supersign.<\/p>\n

Eksploiti i ekzekutimit t\u00eb aksesit t\u00eb larg\u00ebt p\u00ebr televizor\u00ebt LG Supersign (CVE-2018-17173) ishte n\u00eb dispozicion n\u00eb shtator t\u00eb vitit t\u00eb kaluar. Nd\u00ebrsa p\u00ebr WePresent WiPG-1000, u publikua n\u00eb vitin 2017. N\u00eb total, botneti \u00ebsht\u00eb i pajisur me 27 eksploita, nga t\u00eb cil\u00ebt 11 jan\u00eb t\u00eb rinj. Po ashtu, \u00ebsht\u00eb zgjeruar grumbulli i \"informacioneve t\u00eb pazakonta t\u00eb parazgjedhura\" p\u00ebr t\u00eb kryer sulme me fjal\u00ebkalim. Varianti i ri i Mirai gjithashtu synon pajisje t\u00eb ndryshme harduerike t\u00eb integruara, si\u00e7 jan\u00eb:<\/p>\n