{"id":120109,"date":"2024-10-08T19:09:47","date_gmt":"2024-10-08T17:09:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/snapekit-novyj-rutkit-naczelennyj-na-sistemy-arch-linux"},"modified":"2024-10-08T19:09:47","modified_gmt":"2024-10-08T17:09:47","slug":"snapekit-novyj-rutkit-naczelennyj-na-sistemy-arch-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/snapekit-novyj-rutkit-naczelennyj-na-sistemy-arch-linux","title":{"rendered":"Snapekit: en ny rootkit som \u00e4r inriktad p\u00e5 Arch Linux-system","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Snapekit: <\/p>\n

Forskarna fr\u00e5n Gen Threat Labs har uppt\u00e4ckt en ny avancerad rootkit, Snapekit, som riktar sig mot Arch Linux version 6.10.2-arch1-1 p\u00e5 x86_64-arkitekturen. Snapekit g\u00f6r det m\u00f6jligt f\u00f6r angripare att f\u00e5 obeh\u00f6rig \u00e5tkomst till systemet och kontrollera det, samtidigt som det f\u00f6rblir osynligt.<\/p>\n

Rootkitet inf\u00f6rlivas i operativsystemets funktioner genom att avlyssna och \u00e4ndra 21 systemanrop \u2014 kommunikationsmekanismer mellan applikationer och operativsystemets k\u00e4rna. Snapekit anv\u00e4nder en specialiserad droppare f\u00f6r deployment. Rootkitet kan k\u00e4nna igen och undvika popul\u00e4ra analys- och debuggingsverktyg, s\u00e5som Cuckoo Sandbox, JoeSandbox, Hybrid-Analysis, Frida, Ghidra och IDA Pro. Vid uppt\u00e4ckten av n\u00e5got av verktygen \u00e4ndrar Snapekit sitt beteende f\u00f6r att undvika att bli uppt\u00e4ckt.<\/p>\n

Snapekits huvudsyfte \u00e4r att d\u00f6lja skadlig kod genom att f\u00f6rbli i anv\u00e4ndarutrymmet ist\u00e4llet f\u00f6r i det mer kontrollerade k\u00e4rnutrymmet. Denna strategi g\u00f6r det betydligt sv\u00e5rare att uppt\u00e4cka och analysera hotet. Dessutom till\u00e4mpar rootkitet skyddsmekanismer som PTrace f\u00f6r att identifiera f\u00f6rs\u00f6k till debugging, vilket ytterligare komplicerar arbetet f\u00f6r analytiker och s\u00e4kerhetsspecialister.<\/p>\n

Snapekit har flerlagrade \u00f6vervakningsmetoder som g\u00f6r det m\u00f6jligt att undvika inte bara automatiserade analysverktyg (sandl\u00e5dor och virtuella maskiner<\/a>), utan g\u00f6r ocks\u00e5 manuell analys sv\u00e5rare. Rootkitets skapare, k\u00e4nd som Humzak711, planerar snart att publicera projektet Snapekit med \u00f6ppen k\u00e4llkod p\u00e5 GitHub.<\/p>\n

K\u00e4lla: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Gen Threat Labs \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u0440\u0443\u0442\u043a\u0438\u0442 Snapekit, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 Arch Linux \u0432\u0435\u0440\u0441\u0438\u0438 6.10.2-arch1-1 \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 x86_64. Snapekit \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0435\u044e, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0441\u0442\u0430\u0432\u0430\u044f\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439. \u0420\u0443\u0442\u043a\u0438\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044f \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u044f 21 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0432\u044b\u0437\u043e\u0432 \u2014 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u044f\u0434\u0440\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120110,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120109","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Snapekit: en ny rootkit som \u00e4r inriktad p\u00e5 Arch Linux | ProHoster","description":"Forskarna fr\u00e5n Gen Threat Labs.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/snapekit-novyj-rutkit-naczelennyj-na-sistemy-arch-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Snapekit: \u043d\u043e\u0432\u044b\u0439 \u0440\u0443\u0442\u043a\u0438\u0442, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Arch Linux | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Gen Threat Labs.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/snapekit-novyj-rutkit-naczelennyj-na-sistemy-arch-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-08T17:09:47+00:00","article:modified_time":"2024-10-08T17:09:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120109","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:33:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:10:22","updated":"2026-02-09 17:33:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/120109","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=120109"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/120109\/revisions"}],"predecessor-version":[{"id":159420,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/120109\/revisions\/159420"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/120110"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=120109"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=120109"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=120109"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}