Kucashunwe encwadini ethi “Invasion. Umlando omfushane wabaduni baseRussia"
NgoMeyi walo nyaka endlini yokushicilela Individum intatheli uDaniil Turovsky "Ukuhlasela. Umlando omfushane wabaduni baseRussia." Iqukethe izindaba ezivela ohlangothini olumnyama lwemboni ye-IT yaseRussia - mayelana nabafana, abaye bathanda amakhompiyutha, bafunda hhayi nje ukuhlela, kodwa ukuphanga abantu. Le ncwadi ithuthuka, njengaso lesi simo ngokwaso - kusukela ebuhlotsheni bentsha kanye namaqembu ezinkundla kuya emisebenzini yokugcinwa komthetho kanye namahlazo omhlaba.
UDaniel waqoqa izinto zokwakha iminyaka eminingana, ezinye izindaba , ngokulandisa kabusha kwakhe izindatshana zikaDaniel, u-Andrew Kramer we-New York Times uthole uMklomelo wePulitzer ngo-2017.
Kodwa ukugebenga, njenganoma yibuphi ubugebengu, kuyisihloko esivalekile. Izindaba zangempela zidluliselwa ngomlomo kuphela phakathi kwabantu. Futhi le ncwadi ishiya umbono wokungapheleli okuxakile - njengokungathi iqhawe ngalinye lingahlanganiswa libe incwadi enemiqulu emithathu yokuthi "indlela okwakuyiyo ngempela."
Ngemvume yomshicileli, sishicilela isiqephu esifushane mayelana neqembu laseLurk, elaphanga amabhange aseRussia ngo-2015-16.
Ehlobo lika-2015, i-Russian Central Bank yakha i-Fincert, isikhungo sokuqapha nokuphendula izigameko zekhompyutha emkhakheni wezikweletu kanye nezezimali. Ngayo, amabhange ashintshisana ngolwazi mayelana nokuhlaselwa kwamakhompiyutha, awahlaziye futhi athole izincomo mayelana nokuvikelwa ezikhungweni zezobunhloli. Kuningi ukuhlaselwa okunjalo: Sberbank ngoJuni 2016 ukulahlekelwa komnotho waseRussia kusukela ebugebengwini be-inthanethi kwaba ngama-ruble ayizigidi eziyizinkulungwane ezingama-600 - ngesikhathi esifanayo ibhange lathola inkampani engaphansi, i-Bizon, ephathelene nokuphepha kolwazi lwebhizinisi.
Kwesokuqala imiphumela yomsebenzi kaFincert (kusukela ngo-Okthoba 2015 kuya kuNdasa wezi-2016) ichaza ukuhlaselwa okuhlosiwe okungu-21 kungqalasizinda yamabhange; Ngenxa yalezi zigameko, kwaqalwa amacala obugebengu angu-12. Iningi lalokhu kuhlasela kwakuwumsebenzi weqembu elilodwa, elaqanjwa ngokuthi i-Lurk ngokuhlonipha igciwane legama elifanayo, elakhiwe ngabaduni: ngosizo lwalo, imali yebiwe emabhizinisini okuhweba namabhange.
Amaphoyisa nongoti bezokuphepha ku-inthanethi bebefuna amalungu aleli qembu kusukela ngo-2011. Isikhathi eside, ukusesha akuphumelelanga - ngo-2016, leli qembu lintshontshe ama-ruble ayizigidi eziyizinkulungwane ezintathu emabhange aseRussia, ngaphezu kwanoma yimuphi omunye abaduni.
Igciwane le-Lurk lalihlukile kulaba baphenyi ababeke bahlangana nalo ngaphambili. Ngenkathi lolu hlelo luqhutshwa elabhorethri ukuze luhlolwe, aluzange lwenze lutho (yingakho lwabizwa ngokuthi Lurk - kusukela esiNgisini "ukufihla"). Kamuva ukuthi i-Lurk yakhelwe njengohlelo lwe-modular: uhlelo kancane kancane lulayisha amabhulokhi engeziwe ngokusebenza okuhlukahlukene - kusukela ekubambeni izinhlamvu ezifakwe kukhibhodi, ukungena ngemvume namaphasiwedi ukuya ekhonweni lokurekhoda ukusakazwa kwevidiyo kusuka kusikrini sekhompyutha enegciwane.
Ukusabalalisa leli gciwane, leli qembu langena kumawebhusayithi avakashelwe abasebenzi basebhange: kusukela kwabezindaba ze-inthanethi (isibonelo, i-RIA Novosti ne-Gazeta.ru) kuya ezinkundleni zokubala. Izigebengu ze-inthanethi zisebenzise ubungozi ohlelweni lokushintshisana ngezibhengezo zokukhangisa futhi basabalalisa uhlelo olungayilungele ikhompuyutha ngazo. Kwamanye amasayithi, abaduni bathumele isixhumanisi saleli gciwane kafushane nje: esithangamini somunye womagazini be-accounting, lalivela phakathi nesonto ngesikhathi sesidlo sasemini amahora amabili, kodwa nangalesi sikhathi, uLurk wathola izisulu ezimbalwa ezifanele.
Ngokuchofoza isibhengezo, umsebenzisi uyiswe ekhasini elinokuxhashazwa, okwathi ngemva kwalokho ulwazi lwaqala ukuqoqwa kukhompuyutha ehlaselwe - abaduni babenesithakazelo kakhulu ohlelweni lokubhanga okude. Imininingwane kuma-oda okukhokha asebhange yathathelwa indawo leyo edingekayo, futhi ukudluliselwa okungagunyaziwe kwathunyelwa kuma-akhawunti ezinkampani ezihambisana neqembu. Ngokusho kukaSergei Golovanov waseKaspersky Lab, ngokuvamile ezimweni ezinjalo, amaqembu asebenzisa izinkampani zamagobolondo, "okufana nokudlulisa nokukhipha imali": imali etholiwe ikhishwa lapho, ifakwe ezikhwameni futhi ishiye amabhukumaka emapaki edolobha, lapho abaduni bethatha khona. bona . Amalungu eqembu afihle izenzo zawo ngenkuthalo: abhala ngekhodi zonke izincwadi zansuku zonke nezizinda ezibhalisiwe ezinabasebenzisi mbumbulu. "Abahlaseli basebenzisa i-VPN kathathu, i-Tor, izingxoxo eziyimfihlo, kodwa inkinga ukuthi ngisho nomshini osebenza kahle uyahluleka," kuchaza uGolovanov. - Kuphakathi kokuthi i-VPN iyawa, bese ingxoxo eyimfihlo ijika ibe yimfihlo, bese kuba eyodwa, esikhundleni sokufona ngeTelegramu, ebizwa nje ocingweni. Lesi yisici somuntu. Futhi lapho usuneminyaka uqongelela i-database, udinga ukubheka izingozi ezinjalo. Ngemva kwalokhu, abomthetho bangathintana nabahlinzeki ukuthola ukuthi ubani ovakashele ikheli le-IP elinjalo nelinjalo nokuthi ngasiphi isikhathi. Bese kwakhiwa icala.”
Ukuboshwa kwabaduni abavela ku-Lurk njengefilimu yesenzo. Izisebenzi zoMnyango Wezimo Eziphuthumayo zanqamula izingidi ezindlini zasemaphandleni nasezindlini zabaduni ezingxenyeni ezihlukene zaseYekaterinburg, okwathi ngemva kwalokho amaphoyisa e-FSB aqhuma eklabalasa, abamba abagebengu abalahla phansi, asesha indawo. Ngemuva kwalokhu, abasolwa bafakwe ebhasini, bayiswa esikhumulweni sezindiza, bahamba emgwaqweni wezindiza bagibela ibhanoyi elithwala impahla, elibangise eMoscow.
Izimoto zitholwe emagaraji ama-hackers - izinhlobo ezibizayo ze-Audi, Cadillac, neMercedes. Kuphinde kwatholakala iwashi elifakwe amadayimane angu-272. ubucwebe obubiza ama-ruble ayizigidi eziyi-12 nezikhali. Sebebonke, amaphoyisa enze ukusesha okungaba ngu-80 ezifundeni ezingu-15 futhi abophe abantu abangaba ngu-50.
Ikakhulukazi, bonke ochwepheshe bezobuchwepheshe beqembu baboshwa. URuslan Stoyanov, isisebenzi saseKaspersky Lab owayebambe iqhaza ophenyweni lobugebengu baseLurk kanye nabezobunhloli, uthe abaphathi babheke iningi labo ezindaweni ezijwayelekile zokuqasha izisebenzi ezikude. Izikhangiso azizange zisho lutho mayelana neqiniso lokuthi umsebenzi wawuzoba ngokungemthetho, futhi iholo laseLurk lalinikezwa ngaphezu kwemakethe, futhi kwakungenzeka ukusebenzela ekhaya.
“Njalo ekuseni, ngaphandle kwangezimpelasonto, ezindaweni ezihlukahlukene zaseRussia nase-Ukraine, abantu behlala phansi kumakhompyutha abo baqale ukusebenza,” kuchaza uStoyanov. "Abahleli balungise imisebenzi yenguqulo elandelayo [yaleli gciwane], abahloli balihlola, umuntu obhekele i-botnet walayisha yonke into kuseva yomyalo, okwathi ngemva kwalokho kwabuyekezwa okuzenzakalelayo kumakhompyutha e-bot."
Ukucutshungulwa kwecala leqembu enkantolo kwaqala ekwindla ka-2017 futhi kwaqhubeka ekuqaleni kuka-2019 - ngenxa yomthamo wecala, eliqukethe imiqulu engaba ngamakhulu ayisithupha. Ummeli we-Hacker ufihla igama lakhe ukuthi akekho kubasolwa ozokwenza isivumelwano nophenyo, kodwa abanye bavumile ingxenye yamacala. “Amakhasimende ethu enze umsebenzi wokuthuthukisa izingxenye ezahlukene zegciwane iLurk, kodwa abaningi bebengazi ukuthi iTrojan,” echaza. "Othile wenze ingxenye yama-algorithms angasebenza ngempumelelo ezinjinini zokusesha."
Icala lomunye wabaduni beqembu lafakwa ezinqubweni ezihlukene, futhi wathola iminyaka engu-5, kuhlanganise nokugebenga inethiwekhi yesikhumulo sezindiza saseYekaterinburg.
Emashumini eminyaka amuva eRussia, izinsizakalo ezikhethekile zikwazile ukunqoba iningi lamaqembu amakhulu ama-hacker aphule umthetho oyinhloko - "Ungasebenzi ku-ru": I-Carberp (intshontshe ama-ruble ayizigidi eziyinkulungwane nengxenye kuma-akhawunti amabhange aseRussia), U-Anunak (weba ama-ruble angaphezu kwezigidi eziyinkulungwane kuma-akhawunti amabhange aseRussia), uPaunch (bakha izinkundla zokuhlasela okwadlula kuzo ingxenye yezifo emhlabeni wonke) njalonjalo. Imali engenayo yamaqembu anjalo iqhathaniswa neholo labathengisi bezikhali, futhi bahlanganisa inqwaba yabantu ngaphezu kwabaduni ngokwabo - onogada, abashayeli, abashicileli, abanikazi bezindawo lapho kuvela khona izinto ezintsha, njalonjalo.
Source: www.habr.com