Imizamo yezigebengu ze-Cybercriminal yokusongela izinhlelo ze-IT ihlezi ivela. Isibonelo, phakathi kwamasu esiwabonile kulo nyaka, kufanelekile ukuphawula ezinkulungwaneni zamasayithi e-e-commerce ukuze kwebe idatha yomuntu siqu nokusebenzisa i-LinkedIn ukuze ufake i-spyware. Ngaphezu kwalokho, lezi zindlela ziyasebenza: umonakalo ovela kubugebengu be-cyber ngo-2018 ufinyelelwe .
Manje abacwaningi abavela kuphrojekthi ye-IX-Force Red ye-IBM basungule ubufakazi bomqondo (PoC) obungaba isinyathelo esilandelayo ekuguqukeni kobugebengu be-inthanethi. Kubizwa , futhi ihlanganisa izindlela zobuchwepheshe nezinye, izindlela zendabuko.
Ukusebenza kwemikhumbi yempi
Imikhumbi yempi isebenzisa ikhompuyutha efinyelelekayo, engabizi futhi enamandla aphansi ukuze iqhube ukuhlasela ikude endaweni eseduze yomuntu ohlukunyeziwe, kungakhathaliseki ukuthi zikuphi izigebengu ze-inthanethi ngokwazo. Ukuze wenze lokhu, idivayisi encane equkethe imodemu enokuxhumeka kwe-3G ithunyelwa njengephasela ehhovisi lesisulu ngeposi evamile. Ukuba khona kwemodemu kusho ukuthi idivayisi ingalawulwa ukude.
Ngenxa ye-chip eyakhelwe ngaphakathi engenantambo, idivayisi isesha amanethiwekhi aseduze ukuze igade amaphakethe awo enethiwekhi. UCharles Henderson, inhloko ye-X-Force Red kwa-IBM, uyachaza: “Uma sesibona ‘umkhumbi wethu wempi’ ufika emnyango walowo ohlukunyeziwe, egumbini leposi noma endaweni yokulahla iposi, siyakwazi ukuqapha uhlelo sikude futhi sisebenzise amathuluzi ukuze ngokuthula noma ukuhlasela okusebenzayo kunethiwekhi engenantambo yesisulu.”
Ukuhlasela nge-warshipping
Uma lokho okubizwa ngokuthi “umkhumbi wezempi” kungaphakathi kwehhovisi lesisulu, idivayisi iqala ukulalela amaphakethe wedatha kunethiwekhi engenantambo, engayisebenzisela ukungena kunethiwekhi. Iphinde ilalele izinqubo zokugunyazwa komsebenzisi ukuze ixhume kunethiwekhi ye-Wi-Fi yomuntu ohlukunyeziwe futhi ithumele le datha ngokuxhumana kwamaselula kusigebengu se-inthanethi ukuze sikwazi ukususa ukubethela lolu lwazi futhi athole iphasiwedi kunethiwekhi ye-Wi-Fi yesisulu.
Ngokusebenzisa lolu xhumo olungenantambo, umhlaseli manje usengakwazi ukuhambahamba phakathi kwenethiwekhi yesisulu, efuna amasistimu asengozini, idatha etholakalayo, futhi ebe ulwazi oluyimfihlo noma amagama ayimfihlo omsebenzisi.
Usongo olunamandla amakhulu
NgokukaHenderson, ukuhlasela kunamandla okuba usongo lwangaphakathi olucashile, olusebenzayo: akubizi futhi kulula ukukusebenzisa, futhi kungahamba kungabonakali yisisulu. Ngaphezu kwalokho, umhlaseli angakwazi ukuhlela lolu songo ekude, etholakala kude kakhulu. Kwezinye izinkampani lapho kucutshungulwa inani elikhulu lemeyili namaphakeji nsuku zonke, kulula ukunganaki noma ukunganaki iphakethe elincane.
Esinye sezici ezenza ukuba imikhumbi yempi ibe yingozi kakhulu ukuthi ingadlula ukuphepha kwe-imeyili okubekwe yisisulu ukuze kuvinjwe uhlelo olungayilungele ikhompuyutha nokunye ukuhlaselwa okusatshalaliswa ngokunamathiselwe kwi-imeyili.
Ukuvikela ibhizinisi kulolu songo
Njengoba lokhu kuhilela i-vector yokuhlasela ngokomzimba okungekho ukulawula phezu kwayo, kungase kubonakale sengathi akukho lutho olungamisa lolu songo. Lesi ngesinye salezo zimo lapho ukuqaphela nge-imeyili nokungathembi okunamathiselwe kuma-imeyili kungeke kusebenze. Nokho, zikhona izixazululo ezingamisa lolu songo.
Imiyalo yokulawula ivela emkhunjini wempi ngokwawo. Lokhu kusho ukuthi le nqubo ingaphandle ohlelweni lwe-IT lwenhlangano. misa ngokuzenzakalelayo noma yiziphi izinqubo ezingaziwa ohlelweni lwe-IT. Ukuxhuma kumyalo womhlaseli neseva yokulawula usebenzisa "umkhumbi wezempi" onikeziwe kuyinqubo engaziwa ukuphepha, ngakho-ke, inqubo enjalo izovinjelwa, futhi uhlelo luzohlala luvikelekile.
Okwamanje, umkhumbi wezempi usewubufakazi bomqondo kuphela (PoC) futhi awusetshenziswa ekuhlaselweni kwangempela. Nokho, ubuhlakani obuqhubekayo bezigebengu ze-inthanethi busho ukuthi indlela enjalo ingaba ngokoqobo esikhathini esizayo esiseduze.
Source: www.habr.com