{"id":33529,"date":"2019-10-31T21:53:08","date_gmt":"2019-10-31T18:53:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange\/"},"modified":"2019-10-31T21:53:08","modified_gmt":"2019-10-31T18:53:08","slug":"bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","title":{"rendered":"Bakd\u00f6rren fr\u00e5n cybergruppen Turla m\u00f6jligg\u00f6r kontroll \u00f6ver Microsoft Exchange-servrar.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

ESET har genomf\u00f6rt en analys av skadlig programvara vid namn LightNeuron, som anv\u00e4nds av medlemmar i den k\u00e4nda cyberbrottsliga gruppen Turla.<\/p>\n

\"Bakd\u00f6rren<\/p>\n

Hackarteamet Turla fick k\u00e4nnedom redan 2008 efter en hackning av det centrala kommandot f\u00f6r USA:s v\u00e4pnade styrkor. Cyberbrottslingarnas m\u00e5l \u00e4r att stj\u00e4la k\u00e4nslig information av strategisk betydelse.<\/p>\n

Under de senaste \u00e5ren har Turlas angrepp drabbat hundratals anv\u00e4ndare i mer \u00e4n 45 l\u00e4nder, inklusive myndigheter, diplomatiska institutioner, milit\u00e4ren, utbildnings- och forskningsorganisationer med flera.<\/p>\n

Men l\u00e5t oss \u00e5terv\u00e4nda till det skadliga programmet LightNeuron. Denna bakd\u00f6rr m\u00f6jligg\u00f6r n\u00e4stan fullst\u00e4ndig kontroll \u00f6ver e-posten. servrar<\/a> Microsoft Exchange. Genom att f\u00e5 tillg\u00e5ng till transportagenten f\u00f6r Microsoft Exchange kan angriparna l\u00e4sa och blockera e-postmeddelanden, ers\u00e4tta bilagor och redigera text samt skriva och skicka meddelanden \u00e5 organisationens v\u00e4gnar.<\/p>\n

<\/center>
\n\"Bakd\u00f6rren<\/p>\n

Den skadliga aktiviteten \u00e4r g\u00f6md i speciellt skapade PDF-dokument och JPG-bilder; kommunikationen med bakd\u00f6rren sker genom att skicka f\u00f6rfr\u00e5gningar och kommandon via dessa filer.<\/p>\n

ESET-experter p\u00e5pekar att det \u00e4r en ganska utmanande uppgift att rensa systemet fr\u00e5n skadlig programvara som LightNeuron. Anledningen \u00e4r att borttagning av skadliga filer inte ger resultat och kan leda till funktionsst\u00f6rningar i Microsoft Exchange.<\/p>\n

Det finns anledning att tro att denna bakd\u00f6rr ocks\u00e5 anv\u00e4nds f\u00f6r Linux-system. <\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
K\u00e4lla: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b LightNeuron, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla. \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Turla \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0449\u0451 \u0432 2008 \u0433\u043e\u0434\u0443 — \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0438 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0412\u043e\u043e\u0440\u0443\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u043b \u0421\u0428\u0410. \u0426\u0435\u043b\u044c \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 — \u043a\u0440\u0430\u0436\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043e\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 Turla \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0441\u043e\u0442\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 45 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25227,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33529","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Turla-kungpunkts bakd\u00f6rr m\u00f6jligg\u00f6r kontroll \u00f6ver Microsoft Exchange-servrar | ProHoster","description":"ESET har genomf\u00f6rt en analys av skadlig programvara vid namn LightNeuron, som anv\u00e4nds av medlemmar i den k\u00e4nda cyberbrottsliga gruppen Turla.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u044d\u043a\u0434\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Microsoft Exchange | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b LightNeuron, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Turla.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/bekdor-kibergruppirovki-turla-pozvolyaet-zahvatit-kontrol-nad-serverami-microsoft-exchange","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:53:08+00:00","article:modified_time":"2019-10-31T18:53:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33529","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-19 09:14:07","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:22","updated":"2026-02-19 09:14:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/33529","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=33529"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/33529\/revisions"}],"predecessor-version":[{"id":161791,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/33529\/revisions\/161791"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/25227"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=33529"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=33529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=33529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}