{"id":2104,"date":"2014-03-28T11:30:02","date_gmt":"2014-03-28T10:30:02","guid":{"rendered":"http:\/\/preventista.sk\/info\/?p=2104"},"modified":"2014-03-28T11:34:21","modified_gmt":"2014-03-28T10:34:21","slug":"skodliva-operacia-windigo","status":"publish","type":"post","link":"https:\/\/preventista.sk\/info\/skodliva-operacia-windigo\/","title":{"rendered":"\u0160kodliv\u00e1 oper\u00e1cia Windigo"},"content":{"rendered":"

\u0160kodliv\u00e1 oper\u00e1cia Windigo zneu\u017e\u00edva 25-tis\u00edc serverov, ohrozen\u00fdch je 500-tis\u00edc po\u010d\u00edta\u010dov<\/b><\/p>\n

Bezpe\u010dnostn\u00ed v\u00fdskumn\u00edci zo slovenskej antiv\u00edrusovej spolo\u010dnosti ESET objavili spolu so zahrani\u010dn\u00fdm bezpe\u010dnostn\u00fdmi organiz\u00e1ciami rozsiahlu kybernetick\u00fa krimin\u00e1lnu \u010dinnos\u0165, ktor\u00e1 celosvetovo prevzala kontrolu nad viac ne\u017e 25-tis\u00edckami serverov. Nieko\u013eko z nich sa nach\u00e1dza aj na Slovensku a v \u010ceskej republike.<\/p>\n

\"ESET<\/a>
Krajiny napadnut\u00e9 \u0161kodliv\u00fdm k\u00f3dom Windigo.<\/figcaption><\/figure>\n

\u00datok, ktor\u00fd bezpe\u010dnostn\u00ed experti pomenovali \u201coper\u00e1cia Windigo\u201d, mal za n\u00e1sledok infikovanie serverov, ktor\u00e9 rozosielali mili\u00f3ny spamov\u00fdch e-mailov. Komplexn\u00e1 skupina sofistikovan\u00fdch komponentov \u0161kodliv\u00e9ho k\u00f3du bola vytvoren\u00e1 na prevzatie kontroly nad servermi, infikovanie po\u010d\u00edta\u010dov, ktor\u00e9 ich nav\u0161t\u00edvia a na kr\u00e1de\u017e inform\u00e1ci\u00ed.<\/p>\n

\u201cWindigo naberal na sile viac ne\u017e dva a pol roka a moment\u00e1lne m\u00e1 pod kontrolou 10-tis\u00edc serverov,\u201d hovor\u00ed Marc-\u00c9tienne L\u00e9veill\u00e9, bezpe\u010dnostn\u00fd v\u00fdskumn\u00edk spolo\u010dnosti ESET. \u201cDenne je na e-mailov\u00e9 \u00fa\u010dty nevinn\u00fdch internetov\u00fdch pou\u017e\u00edvate\u013eov t\u00fdmto sp\u00f4sobom odoslan\u00fdch viac ne\u017e 35 mili\u00f3nov spamov\u00fdch e-mailov. Zaberaj\u00fa im e-mailov\u00e9 schr\u00e1nky a vystavuj\u00fa ich syst\u00e9my riziku. E\u0161te hor\u0161ie v\u0161ak je, \u017ee ka\u017ed\u00fd de\u0148 sa riziku vystavuje pol mili\u00f3na po\u010d\u00edta\u010dov, ktor\u00e9 nav\u0161tevuj\u00fa webstr\u00e1nky infikovan\u00e9 \u0161kodliv\u00fdm k\u00f3dom zameran\u00fdm na webov\u00e9 servery. Tento \u0161kodliv\u00fd k\u00f3d na ne umiestnili tvorcovia oper\u00e1cie Windigo, po\u010d\u00edta\u010de s\u00fa t\u00fdmto sp\u00f4sobom presmerovan\u00e9 na \u0161kodliv\u00e9 exploit sady a reklamu,\u201d vysvet\u013euje L\u00e9veill\u00e9.<\/p>\n

\"ESET<\/a>
\u0160tatistika obet\u00ed pod\u013ea opera\u010dn\u00e9ho syst\u00e9mu.<\/figcaption><\/figure>\n

 <\/p>\n

\"ESET<\/p>\n

Zauj\u00edmav\u00e9 je, \u017ee Windigom zasiahnut\u00e9 webstr\u00e1nky sa pok\u00fa\u0161aj\u00fa infikova\u0165 po\u010d\u00edta\u010de s Windowsom cez exploit sadu, pou\u017e\u00edvate\u013eom Macov v\u0161ak pods\u00favaj\u00fa reklamu na zoznamovacie webstr\u00e1nky a majitelia iPhonov s\u00fa presmerov\u00e1van\u00ed na str\u00e1nky s pornografick\u00fdm obsahom.<\/p>\n

Viac ne\u017e 60 percent webstr\u00e1nok na celom svete be\u017e\u00ed na linuxov\u00fdch serveroch. V\u00fdskumn\u00edci ESETu, ktor\u00ed Windigo pomenovali pod\u013ea m\u00fdtick\u00e9ho stvorenia severoamerick\u00fdch Indi\u00e1nov Alqonquinov pre jeho kanibalistick\u00e9 sklony, apeluj\u00fa na administr\u00e1torov unixov\u00fdch syst\u00e9mov a webmasterov, aby vo svojich syst\u00e9moch zadali nasledovn\u00fd pr\u00edkaz, ktor\u00fd im povie, \u010di boli ich servery skompromitovan\u00e9:<\/p>\n

$ ssh -G 2>&1 | grep -e illegal -e unknown > \/dev\/null && echo „System clean“ || echo „System infected“<\/p>\n

 <\/p>\n

 <\/p>\n

Ak syst\u00e9mov\u00ed administr\u00e1tori zistia, \u017ee ich syst\u00e9my s\u00fa infikovan\u00e9, je im odporu\u010den\u00e9 vymaza\u0165 zasiahnut\u00e9 po\u010d\u00edta\u010de a prein\u0161talova\u0165 opera\u010dn\u00fd syst\u00e9m a softv\u00e9r. Je d\u00f4le\u017eit\u00e9, aby boli pou\u017eit\u00e9 nov\u00e9 hesl\u00e1 a priv\u00e1tne \u0161ifrovacie k\u013e\u00fa\u010de. Existuj\u00face musia by\u0165 pova\u017eovan\u00e9 za skompromitovan\u00e9.<\/p>\n

Pre vy\u0161\u0161iu \u00farove\u0148 ochrany pri vstupe do syst\u00e9mov by mali syst\u00e9mov\u00ed a web administr\u00e1tori zv\u00e1\u017ei\u0165 pou\u017eitie technol\u00f3gie dvojfaktorovej autentifik\u00e1cie.<\/p>\n

\u201cUvedomujeme si, \u017ee premaza\u0165 server a za\u010da\u0165 od za\u010diatku m\u00f4\u017ee by\u0165 horkou pilulkou. Ak v\u0161ak hackeri ukradli va\u0161e administr\u00e1torsk\u00e9 loginy a maj\u00fa vzdialen\u00fd pr\u00edstup k va\u0161im serverom, nem\u00f4\u017eete riskova\u0165,\u201d vysvet\u013euje L\u00e9veill\u00e9. \u201cSme v kontakte s niektor\u00fdmi obe\u0165ami tohto \u00fatoku, ktor\u00e9 vedia, \u017ee s\u00fa infikovan\u00e9. Pre vy\u010distenie svojich syst\u00e9mov v\u0161ak bohu\u017eia\u013e ni\u010d nespravili, \u010do m\u00f4\u017ee potenci\u00e1lnemu riziku vystavi\u0165 e\u0161te viac internetov\u00fdch pou\u017e\u00edvate\u013eov.\u201d<\/p>\n

V\u0161etk\u00fdm pou\u017e\u00edvate\u013eom internetu ESET pripom\u00edna, aby jedno heslo nepou\u017e\u00edvali do viacer\u00fdch syst\u00e9mov a aby si ako heslo nevyberali \u013eahko uh\u00e1dnute\u013en\u00fd re\u0165azec.<\/p>\n

\"ESET<\/a>
\u0160tatistika obet\u00ed pod\u013ea prehliada\u010dov.<\/figcaption><\/figure>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Bezpe\u010dnostn\u00ed v\u00fdskumn\u00edci zo slovenskej antiv\u00edrusovej spolo\u010dnosti ESET objavili spolu so zahrani\u010dn\u00fdm bezpe\u010dnostn\u00fdmi organiz\u00e1ciami rozsiahlu kybernetick\u00fa krimin\u00e1lnu \u010dinnos\u0165, ktor\u00e1 celosvetovo prevzala kontrolu nad viac ne\u017e 25-tis\u00edckami serverov. Nieko\u013eko z nich sa nach\u00e1dza aj na Slovensku a v \u010ceskej republike.<\/p>\n","protected":false},"author":1,"featured_media":1957,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[32,43,45],"class_list":["post-2104","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-itbezp","tag-bezpecnost","tag-eset","tag-navod"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t