Inguqulo entsha yohlelo olungayilungele ikhompuyutha ye-AnarchyGrabber empeleni isiguqule i-Discord (isigijimi esisheshayo samahhala esisekelwa i-VoIP kanye nenkomfa ngevidiyo) yaba isela le-akhawunti. Uhlelo olungayilungele ikhompuyutha luguqula amafayela eklayenti le-Discord ngendlela yokuthi luntshontshe ama-akhawunti omsebenzisi lapho ungena kusevisi ye-Discord futhi ngesikhathi esifanayo ahlale engabonakali kuma-antivirus.
Ulwazi mayelana ne-AnarchyGrabber lusabalala ezinkundleni zabaduni nakumavidiyo e-YouTube. Ingqikithi yohlelo lokusebenza ukuthi ngesikhathi sokwethulwa, uhlelo olungayilungele ikhompuyutha luntshontsha amathokheni omsebenzisi omsebenzisi we-Discord obhalisiwe. Lawa mathokheni abe eselayishwa abuyiselwe esiteshini se-Discord ngaphansi kolawulo lomhlaseli, futhi angasetshenziselwa ukungena ngemvume ngemininingwane yomsebenzisi yomunye umuntu.
Inguqulo yokuqala yohlelo olungayilungele ikhompuyutha yasatshalaliswa njengefayela elisebenzisekayo elitholwe kalula izinhlelo zokuvikela amagciwane. Ukwenza i-AnarchyGrabber ibe nzima ukutholwa ngama-antivirus futhi kwandise ukusinda, abathuthukisi babuyekeze ingqondo yabo, futhi manje ishintsha amafayela e-JavaScript asetshenziswa iklayenti le-Discord ukuze ajove ikhodi yawo njalo uma isebenza. Le nguqulo ithole igama langempela elithi AnarchyGrabber2 futhi, lapho yethulwa, ifaka ikhodi enonya efayeleni elithi "%AppData%Discord[version]modulesdiscord_desktop_coreindex.js".
Ngemva kokusebenzisa i-AnarchyGrabber2, ikhodi ye-JavaScript eshintshiwe evela kufolda engaphansi ye-4n4rchy izovela kufayela elithi index.js, njengoba kuboniswe ngezansi.
Ngalezi zinguquko, amafayela e-JavaScript engeziwe azolayishwa lapho i-Discord iqala. Manje uma umsebenzisi engena kusigijimi, imibhalo izosebenzisa i-webhook ukuthumela ithokheni yomsebenzisi esiteshini somhlaseli.
Okwenza lokhu kuguqulwa kweklayenti le-Discord kube yinkinga ukuthi noma ngabe uhlelo olungayilungele ikhompuyutha lwasekuqaleni lutholwa yi-antivirus, amafayela eklayenti azobe eseshintshiwe kakade. Ngakho-ke, ikhodi enonya ingahlala emshinini isikhathi eside ngokunganaki, futhi umsebenzisi ngeke aze asole ukuthi ulwazi lwe-akhawunti yakhe luntshontshiwe.
Akukhona okokuqala ukuthi uhlelo olungayilungele ikhompuyutha luguqule amafayela eklayenti le-Discord. Ngo-Okthoba 2019, enye i-malware kwabikwa ukuthi iguqula amafayela eklayenti, iguqule iklayenti le-Discord libe iTrojan entshontsha ulwazi. Ngaleso sikhathi, inkampani yonjiniyela i-Discord yathi izobheka izindlela zokulungisa lobu sengozini, kodwa inkinga, ngokusobala, ayikaxazululwa.
I-Discord ize ingeze ukuhlola ubuqotho befayela leklayenti ekuqaleni, ama-akhawunti e-Discord azoqhubeka nokuba sengcupheni yohlelo olungayilungele ikhompuyutha eyenza izinguquko kumafayela aleso sithunywa.
Source: 3dnews.ru