{"id":6501,"date":"2021-01-04T12:19:00","date_gmt":"2021-01-04T11:19:00","guid":{"rendered":"https:\/\/webhosting.de\/?p=6501"},"modified":"2025-02-19T18:54:25","modified_gmt":"2025-02-19T17:54:25","slug":"malware-makes-linux-and-windowservers-to-monero-miners","status":"publish","type":"post","link":"https:\/\/webhosting.de\/pl\/malware-macht-linux-und-windowsserver-zu-monero-minern\/","title":{"rendered":"Z\u0142o\u015bliwe oprogramowanie zmienia serwery Linux i Windows w g\u00f3rnik\u00f3w Monero"},"content":{"rendered":"

Pracownicy firmy Intezer, zajmuj\u0105cej si\u0119 analiz\u0105 z\u0142o\u015bliwego oprogramowania, zgodnie z informacj\u0105 Posterunek na blogu<\/a>s odkry\u0142 nowego robaka, kt\u00f3ry atakuje serwery Linux i Windows w celu wykorzystania ich mocy obliczeniowej do wydobywania kryptowaluty Monero. Z regu\u0142y Monero, w przeciwie\u0144stwie do wielu innych kryptowalut, nie jest obliczane za pomoc\u0105 specjalnych Asics, ale konwencjonalnych procesor\u00f3w graficznych i procesor\u00f3w CPU. W zwi\u0105zku z tym porwane serwery x86 uzyskuj\u0105 wysok\u0105 wydajno\u015b\u0107.<\/p>\n\n\n\n

Wed\u0142ug Intezera, robak jest centralnie rozmieszczony i kontrolowany przez serwer komend i kontroli. Regularnie Aktualizacje<\/a> na serwerze sugeruj\u0105, \u017ce sie\u0107 g\u00f3rnicza jest zarz\u0105dzana przez aktywn\u0105 grup\u0119 hakersk\u0105.<\/p>\n\n\n\n

MySQL, Tomcat i Jenkins jako wektory ataku<\/h2>\n\n\n\n

Robak rozprzestrzenia si\u0119 za po\u015brednictwem publicznie widocznych interfejs\u00f3w us\u0142ug, takich jak MySQL<\/a>Tomcat i Jenkins (porty takie jak 8080, 7001 i 3306). Robak pr\u00f3buje odgadn\u0105\u0107 s\u0142abe has\u0142a do tych us\u0142ug za pomoc\u0105 ataku brute force. Pocz\u0105tkowo stosowane jest podej\u015bcie s\u0142ownikowe, w kt\u00f3rym cz\u0119sto u\u017cywane has\u0142a s\u0105 testowane w spos\u00f3b uporz\u0105dkowany.<\/p>\n\n\n\n

Gdy z\u0142o\u015bliwe oprogramowanie odkryje has\u0142o, rozprowadza skrypt kropluj\u0105cy za pomoc\u0105 basha lub powershella, kt\u00f3ry instaluje MXRig miner. Dodatkowo, robak pr\u00f3buje wtedy niezale\u017cny<\/a> w sieci zainfekowanego serwera w celu wykorzystania dalszych zasob\u00f3w do kryptominy. Obecnie z\u0142o\u015bliwe oprogramowanie nie jest wykrywane przez oprogramowanie antywirusowe i dlatego, wed\u0142ug Intezer, jest bardzo niebezpieczne.<\/p>\n\n\n\n

Dlatego tylko silne has\u0142a i, je\u015bli to mo\u017cliwe, uwierzytelnianie dwusk\u0142adnikowe mog\u0105 zapewni\u0107 ochron\u0119. Firma ochroniarska zaleca r\u00f3wnie\u017c wy\u0142\u0105czenie nieu\u017cywanych us\u0142ug i ograniczenie dost\u0119pu do wymaganych us\u0142ug z zewn\u0105trz. Ponadto, wed\u0142ug firmy Intezer, aktualizowane oprogramowanie mo\u017ce cz\u0119sto zapobiega\u0107 infekcji z\u0142o\u015bliwym oprogramowaniem.<\/p>\n\n\n\n

<\/p>","protected":false},"excerpt":{"rendered":"

Niedawno odkryty robak infiltruje serwery Windows i Linux, aby wykorzysta\u0107 ich moc do wydobywania Monero. <\/p>","protected":false},"author":2,"featured_media":6502,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_crdt_document":"","inline_featured_image":false,"footnotes":""},"categories":[685],"tags":[951,963,962],"class_list":["post-6501","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-allgemein","tag-hacker","tag-kryptowaehrung","tag-monero"],"acf":[],"_wp_attached_file":null,"_wp_attachment_metadata":null,"litespeed-optimize-size":null,"litespeed-optimize-set":null,"_elementor_source_image_hash":null,"_wp_attachment_image_alt":null,"stockpack_author_name":null,"stockpack_author_url":null,"stockpack_provider":null,"stockpack_image_url":null,"stockpack_license":null,"stockpack_license_url":null,"stockpack_modification":null,"color":null,"original_id":null,"original_url":null,"original_link":null,"unsplash_location":null,"unsplash_sponsor":null,"unsplash_exif":null,"unsplash_attachment_metadata":null,"_elementor_is_screenshot":null,"surfer_file_name":null,"surfer_file_original_url":null,"envato_tk_source_kit":null,"envato_tk_source_index":null,"envato_tk_manifest":null,"envato_tk_folder_name":null,"envato_tk_builder":null,"envato_elements_download_event":null,"_menu_item_type":null,"_menu_item_menu_item_parent":null,"_menu_item_object_id":null,"_menu_item_object":null,"_menu_item_target":null,"_menu_item_classes":null,"_menu_item_xfn":null,"_menu_item_url":null,"_trp_menu_languages":null,"rank_math_primary_category":"685","rank_math_title":null,"inline_featured_image":null,"_yoast_wpseo_primary_category":"692","rank_math_schema_blogposting":null,"rank_math_schema_videoobject":null,"_oembed_049c719bc4a9f89deaead66a7da9fddc":null,"_oembed_time_049c719bc4a9f89deaead66a7da9fddc":null,"_yoast_wpseo_focuskw":null,"_yoast_wpseo_linkdex":null,"_oembed_27e3473bf8bec795fbeb3a9d38489348":null,"_oembed_c3b0f6959478faf92a1f343d8f96b19e":null,"_trp_translated_slug_en_us":null,"_wp_desired_post_slug":null,"_yoast_wpseo_title":null,"tldname":null,"tldpreis":null,"tldrubrik":null,"tldpolicylink":null,"tldsize":null,"tldregistrierungsdauer":null,"tldtransfer":null,"tldwhoisprivacy":null,"tldregistrarchange":null,"tldregistrantchange":null,"tldwhoisupdate":null,"tldnameserverupdate":null,"tlddeletesofort":null,"tlddeleteexpire":null,"tldumlaute":null,"tldrestore":null,"tldsubcategory":null,"tldbildname":null,"tldbildurl":null,"tldclean":null,"tldcategory":null,"tldpolicy":null,"tldbesonderheiten":null,"tld_bedeutung":null,"_oembed_d167040d816d8f94c072940c8009f5f8":null,"_oembed_b0a0fa59ef14f8870da2c63f2027d064":null,"_oembed_4792fa4dfb2a8f09ab950a73b7f313ba":null,"_oembed_33ceb1fe54a8ab775d9410abf699878d":null,"_oembed_fd7014d14d919b45ec004937c0db9335":null,"_oembed_21a029d076783ec3e8042698c351bd7e":null,"_oembed_be5ea8a0c7b18e658f08cc571a909452":null,"_oembed_a9ca7a298b19f9b48ec5914e010294d2":null,"_oembed_f8db6b27d08a2bb1f920e7647808899a":null,"_oembed_168ebde5096e77d8a89326519af9e022":null,"_oembed_cdb76f1b345b42743edfe25481b6f98f":null,"_oembed_87b0613611ae54e86e8864265404b0a1":null,"_oembed_27aa0e5cf3f1bb4bc416a4641a5ac273":null,"_oembed_time_27aa0e5cf3f1bb4bc416a4641a5ac273":null,"_tldname":null,"_tldclean":null,"_tldpreis":null,"_tldcategory":null,"_tldsubcategory":null,"_tldpolicy":null,"_tldpolicylink":null,"_tldsize":null,"_tldregistrierungsdauer":null,"_tldtransfer":null,"_tldwhoisprivacy":null,"_tldregistrarchange":null,"_tldregistrantchange":null,"_tldwhoisupdate":null,"_tldnameserverupdate":null,"_tlddeletesofort":null,"_tlddeleteexpire":null,"_tldumlaute":null,"_tldrestore":null,"_tldbildname":null,"_tldbildurl":null,"_tld_bedeutung":null,"_tldbesonderheiten":null,"_oembed_ad96e4112edb9f8ffa35731d4098bc6b":null,"_oembed_8357e2b8a2575c74ed5978f262a10126":null,"_oembed_3d5fea5103dd0d22ec5d6a33eff7f863":null,"_eael_widget_elements":null,"_oembed_0d8a206f09633e3d62b95a15a4dd0487":null,"_oembed_time_0d8a206f09633e3d62b95a15a4dd0487":null,"_aioseo_description":null,"_eb_attr":null,"_eb_data_table":null,"_oembed_819a879e7da16dd629cfd15a97334c8a":null,"_oembed_time_819a879e7da16dd629cfd15a97334c8a":null,"_acf_changed":null,"_wpcode_auto_insert":null,"_edit_last":"1","_edit_lock":"1609759142:1","_oembed_e7b913c6c84084ed9702cb4feb012ddd":null,"_oembed_bfde9e10f59a17b85fc8917fa7edf782":null,"_oembed_time_bfde9e10f59a17b85fc8917fa7edf782":null,"_oembed_03514b67990db061d7c4672de26dc514":"