Mirai clone e eketsa lintho tse ncha tse XNUMX ho lebisa lisebelisoa tsa IoT tsa khoebo

Bafuputsi ba fumane clone e ncha ea botnet e tsebahalang ea Mirai, e shebaneng le lisebelisoa tsa IoT. Lekhetlong lena, lisebelisoa tse kentsoeng tse etselitsoeng ho sebelisoa libakeng tsa khoebo li kotsing. Sepheo sa ho qetela sa bahlaseli ke ho laola lisebelisoa tse nang le bandwidth le ho etsa litlhaselo tse kholo tsa DDoS.

Maikutlo:
Ha ke ngola phetolelo, ke ne ke sa tsebe hore Habré o se a ntse a e-na le eona sengoloa se ts'oanang.

Bangoli ba Mirai ea pele ba se ba tšoeroe, empa ho fumaneha mohloli oa khoutu, e hatisitsoeng ka 2016, e lumella bahlaseli ba bacha hore ba iketsetse li-botnets tse thehiloeng ho eona. Ka mohlala, satory и Okiru.

Mirai ea pele e hlahile ka 2016. E tšoaelitse li-routers, lik'hamera tsa IP, li-DVR, le lisebelisoa tse ling tseo hangata li nang le password ea kamehla, hammoho le lisebelisoa tse sebelisang mefuta ea khale ea linux.

Mofuta o mocha oa Mirai o etselitsoeng lisebelisoa tsa khoebo

Botnet e ncha e fumanoeng ke sehlopha sa bafuputsi Unit 42 ho tsoa ho Palo Alto Network. Phapang ea eona ho li-clones tse ling ke hore e etselitsoe lisebelisoa tsa khoebo, ho kenyelletsa le WePresent WiPG-1000 lisebelisoa tsa tlhahiso ea mohala le LG Supersign TVs.

Ts'ebeliso ea phihlello e hole bakeng sa LG Supersign TVs (CVE-2018-17173) e fumaneha ka Loetse e fetileng. Mme bakeng sa WePresent WiPG-1000, e phatlalalitsoe ka 2017. Ka kakaretso, bot e na le li-exlayers tse 27, tseo tse 11 li ncha. Phapang e ncha ea Mirai e boetse e shebile lisebelisoa tse fapaneng tse kentsoeng joalo ka:

• Li-routers tsa Linksys
• Li-routers
• Li-routers tsa DLink
• Lisebelisoa tsa polokelo ea marang-rang
• Lik'hamera tsa NVR le tsa IP

"Likarolo tsena tse ncha li fa botnet sebaka se seholo sa tlhaselo," bafuputsi ba Unit 42 ba ngotse posong ea blog. "Haholo-holo, ho tsepamisa maikutlo ho liteishene tsa puisano tsa khoebo ho e lumella ho ts'oara li-bandwidth tse ngata, tse qetellang li lebisa keketseho ea matla a mollo oa botnet bakeng sa litlhaselo tsa DDoS."

Ketsahalo ena e totobatsa tlhoko ea hore likhoebo li laole lisebelisoa tsa IoT marang-rang a tsona, ho hlophisa ts'ireletso hantle, le ho ntlafatsa khafetsa.
.

Source: www.habr.com