ืคืื ืื ืึธื ืืืื ืคืื ืืืึทื ื ืฆื ืื ืคืึธืจืฉืืขืื, JSOC CERT ืขืงืกืคึผืขืจืฅ ืืึธืื ืจืขืงืึธืจืืขื ืื ืืึทืกืืื ืืืืืข ืคืึทืจืฉืคึผืจืืืืื ื ืคืื ืื ืืจืึธืืืขืฉ ืขื ืงืจืืคึผืืื ื ืืืืจืืก. ืืืื ืคืึทื ืืงืฉืึทื ืึทืืืื ืืื ืืจืืืืขืจืขืจ ืืื ืืืืื ืื ืขื ืงืจืืคึผืืึธืจ: ืืื ืึทืืืฉืึทื ืฆื ืื ืขื ืงืจืืคึผืฉืึทื ืืึธืืืืข, ืขืก ืืื ืื ืคืืืืงืืื ืฆื ืจืืืึธืืืื ืงืึธื ืืจืึธืืืจื ืึท ืืืขืจืงืกืืืืฉืึทื ืืื ืืจืืคืงืืคืืข ื ืึธื ืืึทืืืฉืืื. ืืื ืืึทืจืฅ ืคืื ืืขื ืืึธืจ ืืืจ ืฉืืื ืืืขืื ืื ืืจืึธืืืขืฉ ืขืคึผืืืขืืืข - ืืขืจื ืึธื ืืขืจ ืืืืจืืก ืืึทืกืงื ืืืื ืขืงืกืคึผืจืขืก ืืื IoT ืืขืืืืกืขืก. ืืืฆื, ืฉืคึผืืจืขืืืืืง ืืืขืจืกืืขืก ืคืื ืืืึธืจืืคึผืจืขืกืก ืืื ืื cgi-bin ืฆืืืื ื ืืขื ืขื ืืขื ืืฆื ืคึฟืึทืจ ืืขื.
ืื ืืืืืื ื ืืื ืืขืฉืืงื ืคืื ืคืึทืจืฉืืืขื ืข ืึทืืจืขืกืขืก ืืื ืึผืืื ืืื ืื ืืืฃ ืคืื ืื ืืจืืื ืึท ืืื ืง ืฆื ืงืึทืืคึผืจืึทืืืืื ืืืขื ืจืขืกืืจืกื ืืื ืืืึธืจืืคึผืจืขืกืก ืงืึทืืคึผืึธืื ืึทื ืฅ. ืืขืจ ืืื ืง ืึผืืื ืึทื ืึทืจืงืืืื ืืื ืึท ืฉืจืืคื ืืื ืืืฉืึทืืืึทืกืงืจืืคึผื. ืืื ืึท ืจืขืืืืืึทื ืคืื ืืืึทื ืืืจืืคืืจืื ื, ืื Troldesh ืขื ืงืจืืคึผืืึธืจ ืืื ืืึทืื ืืึธืืืื ืืื ืืึธื ืืฉื.
ืืืืืข ืืืืืื ืืขื ืขื ื ืืฉื ืืืืขืงืืึทื ืืืจื ืจืืึฟ ืืืืขืจืืืื ืืืฉืืจืื ืืืืึทื ืืื ืึทื ืืืึทืืื ืึท ืืื ืง ืฆื ืึท ืืึทืืืฉืืืึทืืึทื ืืืขื ืืืื, ืึธืืขืจ ืื ืจืึทื ืกืึธืืืืึทืจืข ืืื ืืื ืืขืจืืืืึทื ืืืืขืงืืึทื ืืืจื ืจืืึฟ ืึทื ืืืืืืจืืก ืืืืืืืืืจื ืืึทื ืืึทืคืึทืงืืฉืขืจืขืจื. ืืึทืืขืจืงืื ื: ืืื ื ืื ืืึทืืืืึทืจืข ืงืึทืืืื ืึทืงืืืฅ ืืื C&C ืกืขืจืืืขืจืก ืืืืฃ ืื Tor ื ืขืฅ, ืขืก ืืื ืืขืืืขื ืฆื ืึธืคึผืืึธืืืจื ื ืึธื ืคืื ืืจืืืกื ืืืง ืืึทืกืข ืืึทืืืฉืืื ืฆื ืื ืื ืคืขืงืืึทื ืืึทืฉืื ืืืึธืก ืงืขื ืขื "ืืึทืจืืึทืืขืจื" ืขืก.
ืขืืืขืืข ืคืื โโืื ืึทืืืขืืืื ืข ืคึฟืขืึดืงืืืื ืคืื ืืขื ื ืืืืขืืขืจ ืึทืจืืึทื ื ืขืืขื:
(1) ืืืึทืฉืคึผืื ืคืื ืึท ื ืืืืขืืขืจ ืื ืืขืจืืขื ืืง - "ืืืขืื ืึธืจืืขืจืื ื"
(2) ืึทืืข ืืื ืงืก ืืขื ืขื ืืืกืืืืื ืืง ืขื ืืขื - ืืื ืึทื ืืืึทืืื ืื ืืขืจืืื ืขื /wp-content/ ืืื /doc/, ืืืฉื:
ืืึธืจืกืขืกืืึธืืื[.]org/wp-content/themes/InspiredBits/images/dummy/doc/doc/
[.]org/wp-content/themes/campus/mythology-core/core-assets/images/social-icons/long-shadow/doc/
chestnutplacejp[.]com/wp-content/ai1wm-backups/doc/
(3) ืื ืืึทืืืืึทืจืข ืึทืงืกืขืก ืคืึทืจืฉืืื ืงืึธื ืืจืึธื ืกืขืจืืืขืจืก ืืืจื ืืึธืจ
(4) ืึท ืืขืงืข ืืื ืืืฉืืคื ืืขืงืข ื ืึธืืขื: C: ProgramDataWindowscsrss.exe, ืจืขืืืกืืจืืจื ืืื ืื ืจืขืืืกืืจื ืืื ืื SOFTWAREMicrosoftWindowsCurrentVersionRun ืฆืืืืึทื (ืคึผืึทืจืึทืืขืืขืจ ื ืึธืืขื - Client Server Runtime Subsystem).
ืืืจ ืจืขืงืึธืืขื ืืืจื ืฆื ืืึทืื ืืืืขืจ ืึทื ืืืื ืึทื ืื-ืืืืจืืก ืืืืืืืืืจื ืืึทืืึทืืืืก ืืื ืืขืจืืืึทื ืืืงื, ืงืึทื ืกืืืขืจืื ื ืื ืืขืืืขืืงืืื ืคืื ืื ืคืึธืจืืื ื ืขืืคึผืืืืื ืืืขืื ืืขื ืกืึทืงืึธื ืข, ืืื ืืืื, ืืืื ืืขืืืขื, ืคึฟืึทืจืฉืืึทืจืงืื ื ืงืึธื ืืจืึธื ืืืืขืจ ืื ืงืึทืืื ื ืืืชืืืช ืืื ืื ืืืืื ืกืืืคึผืืึธืืก.
ืืงืืจ: www.habr.com