I-Kaspersky Lab ifumene isixhobo esikhohlakeleyo esibizwa ngokuba yi-Reductor, ekuvumela ukuba uchithe i-random generator generator esetyenziselwa ukubethela idatha ngexesha lokudluliselwa kwayo kwisikhangeli ukuya kwiisayithi ze-HTTPS. Oku kuvula umnyango kubahlaseli ukuba bahlole imisebenzi yabo yebrawuza ngaphandle kokwazi komsebenzisi. Ukongeza, iimodyuli ezifunyenweyo zibandakanya imisebenzi yolawulo ekude, eyandisa izakhono zale software.
Ukusebenzisa esi sixhobo, abahlaseli baqhube imisebenzi ye-cyber espionage kwi-diplomatic missions kumazwe e-CIS, ngokukodwa ukubeka iliso kwi-traffic yabasebenzisi.
Ukufakwa kwe-malware kwenzeka ikakhulu kusetyenziswa inkqubo ye-COMPfun engalunganga, echongiweyo ngaphambili njengesixhobo seqela le-cyber ye-Turla, okanye ngokufaka endaweni yesoftware "ecocekileyo" ngexesha lokukhuphela kwisixhobo esisemthethweni kwikhompyuter yomsebenzisi. Oku kusenokwenzeka ukuba kuthetha ukuba abahlaseli banolawulo kwijelo lomnatha wexhoba.
“Eli sisihlandlo sokuqala sidibana nolu hlobo lwe-malware, olusivumela ukuba sidlule kwi-encryption ye-browser kwaye sihlale singabonwa ixesha elide. Inqanaba layo lobunzima libonisa ukuba abadali be-Reductor bangabachwephesha abanzulu. Ngokuqhelekileyo i-malware enjalo yenziwa ngenkxaso karhulumente. Nangona kunjalo, asinabo ubungqina bokuba i-Reductor inxulumene naliphi na iqela le-cyber, "utshilo uKurt Baumgartner, ingcali ekhokelayo ye-antivirus eKaspersky Lab.
Zonke izisombululo zeKaspersky Lab ziqaphela ngempumelelo kwaye zivimba inkqubo yeReductor. Ukunqanda usulelo, iKaspersky Lab icebisa:
- kuqhuba rhoqo uphicotho lokhuseleko lweziseko ezingundoqo ze-IT;
- fakela isisombululo esithembekileyo sokhuseleko kunye necandelo lokhuseleko lwezoyikiso zewebhu elikuvumela ukuba uqaphele kwaye uthintele izoyikiso ezizama ukungena kwinkqubo ngokusebenzisa amajelo afihliweyo, anje ngoKhuseleko lweKaspersky kwiShishini, kunye nesisombululo senqanaba leshishini elifumana izoyikiso ezinzima inqanaba lenethiwekhi kwinqanaba lokuqala, umzekelo i-Kaspersky Anti Targeted Attack Platform;
- qhagamshela iqela le-SOC kwinkqubo yobuntlola ukuze ikwazi ukufikelela kulwazi malunga nezisongelo ezintsha nezikhoyo, ubuchule kunye namaqhinga asetyenziswa ngabahlaseli;
- baqhube rhoqo uqeqesho lokuphucula ulwazi lwedijithali lwabasebenzi.
umthombo: 3dnews.ru