ืืืืืืืืืจ ืคึผืึทืืึทื ื, ืืืฉืขืคืขืจ ืคืื ืึทืืืืึธืงืง ืคึผืืืก, () ืืื ืื ืกืคึผืขืฉืึทืืืืื Safepay ืืืขื ืืืขืืขืจืขืจ ืืืืืจื ืืืืฃ ืื Chromium ืืึธืืึธืจ, ืืขืคึฟืื ื ืืื ืึท ืืืื ืคืื ืื Bitdefender Total Security 2020 ืึทื ืืืืืืจืืก ืคึผืขืงื ืืื ืึทืืืขื ืฆื ืคืึทืจืืจืขืกืขืจื ืื ืืืืขืจืืืื ืคืื ืื ืืึทื ืืฆืขืจ 'ืก ืึทืจืืขื ืืืืฃ ืื ืืืืืืืข ื ืขืฅ (ืืืฉื, ื ืึธื ืืคืืขืืื ืืขืจืืงืืื ืืื ืฆืืืขืฉืืขืื ืืืขื ืึทืงืกืขืก ืฆื ืืึทื ืงืก ืืื ืฆืึธืืื ื ืกืืกืืขืืขื). ืื ืืืึทืื ืขืจืึทืืืืืื ืึทืืึทืื ืืืขืืกืืืขืก ืืขืขืคื ื ืืื ืืขื ืืืขืืขืจืขืจ ืฆื ืืืกืคืืจื ืึทืจืืืืจืึทืจืืฉ ืงืึธื ืืืืฃ ืื ืึทืคึผืขืจืืืืื ื ืกืืกืืขื ืืืจืื.
ืื ืกืืื ืคืื ืืขื ืคึผืจืึธืืืขื ืืื ืึทื Bitdefender ืึทื ืืืืืืจืืก ืคึผืขืจืคืึธืจืื ืืืืข ืื ืืขืจืกืขืคึผืฉืึทื ืคืื HTTPS ืคืึทืจืงืขืจ ืืืจื ืจืืคึผืืืืกืื ื ืื ืึธืจืืืื ืขื TLS ืืึทืืืืึทืื ืคืื ืืขื ืคึผืืึทืฅ. ืึทื ื ืึธื ืืืึธืจืฆื ืืึทืืืืึทืื ืืื ืืื ืกืืึทืืืจื ืืืืฃ ืืขื ืงืืืขื ื ืก ืกืืกืืขื, ืืืึธืก ืืืื ืขืก ืืขืืืขื ืฆื ืืึทืืึทืืื ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโโโืื ืคืึทืจืงืขืจ ืืืจืืงืืง ืกืืกืืขื ืืขื ืืฆื. ืืขืจ ืึทื ืืืืืืจืืก ืืืขืืืฉืื ืืื ืืื ืคึผืจืึธืืขืงืืขื ืคืึทืจืงืขืจ ืืื ืื ืกืขืจืฅ ืืืื ืืืืืขื ืข ืืืฉืึทืืืึทืกืงืจืืคึผื ืงืึธื ืืื ืขืืืขืืข ืืืขืืขืจ ืฆื ืื ืกืืจืืืขื ื ืื ืืืืขืจ ืืื ืคึฟืื ืงืฆืืข, ืืื ืืื ืคืึทื ืคืื ืคึผืจืึธืืืขืืก ืืื ืื ืืืืขืจ ืคึฟืึทืจืืื ืืื ื ืืึทืืืืึทืื, ืขืก ืจืืคึผืืืืกืื ืื ืืืืืขืงืขืจื ืืขืืช ืืืึทื ืืื ืืืื ืืืืืขื ืข. ืืื ื ืื ื ืืึทืข ืืขืืช ืืืึทื ืืื ืืขืืื ื ืืื ืืืืึทืฃ ืคืื ืื ืกืขืจืืืขืจ ืืืึธืก ืืื ืืขืขืคื ื, ืื ืืขืจืข ืืืขืืขืจ ืืืืฃ ืืขื ืกืขืจืืืขืจ ืืึธืื ืคืื ืึทืงืกืขืก ืฆื ืื ืืื ืืึทืื ืื ืกืขืจืืึทื ืืืจื Bitdefender.
ืืืขื ืขืคื ืึท ืคึผืืึทืฅ ืงืึทื ืืจืึธืืื ืืืจื ืึท ืึทืืึทืงืขืจ, ืืขืจ ืคึผืืึทืฅ ืงืขื ืขื ืฉืืงื ืึทื XMLHttpRequest ืืื ืคืึทืจืฉืึทืคื ืคึผืจืึธืืืขืืก ืืื ืื HTTPS ืืึทืืืืึทืื ืืืขื ืจืืกืคึผืึทื ืืื ื, ืืืึธืก ืืืขื ืคืืจื ืฆื ืื ืฆืืจืืงืงืขืจ ืคืื ืึท ืืขืืช ืืืึทื ืกืคึผืึธืึธืคืขื ืืืจื Bitdefender. ืืื ื ืืขืจ ืืขืืช ืืืึทื ืืื ืืขืขืคื ื ืืื ืืขื ืงืึธื ืืขืงืกื ืคืื ืื ืึทืืึทืงืขืจ 'ืก ืคืขืื, ืขืจ ืงืขื ืขื ืืืืขื ืขื ืื ืืื ืืึทืื ืคืื ืื ืกืคึผืึธืึธืคืขื ืืืึทื ืืื Bitdefender ืคึผืึทืจืึทืืขืืขืจืก. ืืขืจ ืืืึทื ืฆืืืขืฉืืขืื ืืืจื Bitdefender ืืืื ืึผืืื ืึท ืกืขืกืืข ืฉืืืกื ืืืึธืก ืึทืืึทืื ืืืจ ืฆื ื ืืฆื ืื ืื ืขืจืืขื Bitdefender API ืฆื ืงืึทืืขืจ ืึท ืืึทืืื ืืขืจ Safepay ืืืขืืขืจืขืจ ืกืขืกืืข, ืกืคึผืขืฆืืคืืฆืืจื ืึทืจืืืืจืึทืจืืฉ ืืึทืคึฟืขืื ืฉืืจื ืคืืึทืืก ืืื ืงืึทืืขืจ ืงืืื ืกืืกืืขื ืงืึทืืึทื ืื ืืื ืื "--utility-cmd-prefix" ืคืึธื. ืึท ืืืืฉืคึผืื ืคืื ืึท ืืืืืจืข (ืคึผืึทืจืึทื1 ืืื param2 ืืขื ืขื ืืืึทืืืขืก ืืืงืืืขื ืคืื ืื ืืขืืช ืืืึทื):
var request = new XMLHttpRequest ();
request.open ("ืคึผืึธืกืื", ืืึทื.ืจืึทื ืืึธื ());
request.setRequestHeader ("ืืื ืืึทืื-ืืืคึผ", "ืึทืคึผืคึผืืืงืึทืืืึธื / ืจืขื ืืืขื -ืืืืืื-ืคืึธืจื-ืืจืืขื ืงืึธืืขื");
request.setRequestHeader(ยซBDNDSS_B67EA559F21B487F861FDA8A44F01C50ยป, param1);
request.setRequestHeader(ยซBDNDCA_BBACF84D61A04F9AA66019A14B035478ยป, param2);
request.setRequestHeader(ยซBDNDWB_5056E556833D49C1AF4085CB254FC242ยป, ยซobk.runยป);
request.setRequestHeader(ยซBDNDOK_4E961A95B7B44CBCA1907D3D3643370Dยป, location.href);
request.send ("ืืึทืื: ืืขืงืกื / HTML, ื ืึทืืึท โutility-cmd-prefix=\"cmd.exe /k whoami & echo\"");
ืืื ืืื ืื ืฆืืจืืงืจืืคื ืึทื ืึท ืืขืจื ืขื ืืขืคืืจื ืืื 2017 ืึทื 24 ืคืื 26 ืืขืกืืขื ืึทื ืืืืืืจืืก ืคึผืจืึธืืืงืื ืืืึธืก ืืืจืืงืืงื HTTPS ืคืึทืจืงืขืจ ืืืจื ืืึทืืืืึทืื ืกืคึผืึธืึธืคืื ื ืจืืืืกื ืื ืงืืืืขืืืืง ืืืืขืจืืืื ืืืจืื ืคืื ืึท HTTPS ืคึฟืึทืจืืื ืืื ื.
ืืืืื 11 ืคืื ืื 26 ืคึผืจืึธืืืงืื ืฆืืืขืฉืืขืื ืงืจืึทื ื ืกืืคืขืจ ืกืืืืฅ. 5 ืกืืกืืขืืขื ืืึธืื ื ืืฉื ืืึทืฉืืขืืืงื ืกืขืจืืืคืืงืึทืฅ (Kaspersky Internet Security 16 Mac, NOD32 AV 9, CYBERsitter, Net Nanny 7 Win, Net Nanny 7 Mac). ืงืึทืกืคึผืขืจืกืงื ืืื ืืขืจื ืขื ืกืขืงืืจืืื ืืื ืืึทื ืฅ ืืืืขืจืืืื ืคึผืจืึธืืืงืื ืืขื ืขื ืืื ืืขืจืืขื ืืง ืฆื ืืึทืคืึทืื , ืืื AVG, Bitdefender ืืื Bullguard ืคึผืจืึธืืืงืื ืืขื ืขื ืงืขืื ะธ . ืืจ.ืืืขื ืึทื ืืืืืืจืืก 11 ืึทืืึทืื ืืืจ ืฆื ืฆืืจืืงืงืจืืื ืฆื ืึทื ืจืืืืืึทืืึทื ืึทืจืืืกืคืืจื ืกืืคืขืจืก (ืืึทืคืึทืื ).
ืืงืืจ: opennet.ru