- Amagciwane nezinye izinhlobo ze-malware zisakazwa kakhulu ngama-imeyili, ukulanda okungaphephile, ubuthakathaka obungalungiswanga, kanye namadivayisi angaphandle.
- Ukuhlaselwa kwe-inthanethi kwamanje kuhlanganisa ubunjiniyela bezenhlalo, ukuxhashazwa kwamaphutha obuchwepheshe kanye nokusetshenziswa kwama-botnet, i-ransomware kanye nokuvuza kwedatha okukhulu.
- Izibuyekezo zesistimu, ukusetshenziswa kwe-antimalware, ukucushwa kwesiphequluli esiphephile, kanye nokuqeqeshwa kwabasebenzisi kubalulekile ekunciphiseni ubungozi.
- Ukugcina ubufakazi, ukugwema ukukhokha izihlengo ngaphandle kweseluleko, kanye nokuba nokusekelwa okukhethekile kwezomthetho nobuchwepheshe kubalulekile uma kwenzeka isigameko esingathi sína.
Ukuphepha kwe-inthanethi , amagciwane, kanye nokugenca sekuyingxenye yokuphila kwansuku zonke, kokubili kubantu ngabanye kanye namabhizinisi. Asisakhulumi nje ngezigameko ezingavamile noma izinto ezincane ezesabisayo: namuhla, ukuhlaselwa kwe-inthanethi kungavala inkampani yonke, kushiye izinkulungwane zamakhasimende zingenasevisi, noma kukhiphe ama-akhawunti asebhange omuntu ngemizuzu embalwa.
Ngesikhathi esifanayo, umnotho wobugebengu be-inthanethi ubiza izigidigidi , futhi ukuhlaselwa kuya ngokuya kuba nzima. Kodwa iqiniso lokuthi lesi simo siyakhathaza akusho ukuthi awunakuzivikela: ngokuqonda ukuthi amagciwane asebenza kanjani, ukuthi yiziphi izinhlobo zokuhlaselwa kwe-inthanethi ezikhona, ukuthi iyini imiphumela yazo yangempela, nokuthi yiziphi izinyathelo ezisebenzayo ongazithatha, unganciphisa kakhulu ingozi yokuthinteka noma, okungenani, unciphise umonakalo uma kukhona okungahambi kahle.
Iyini igciwane lekhompyutha futhi kungani liseyingozi kangaka?
Igciwane lekhompyutha empeleni liwuhlelo oluyingozi noma ingxenye yekhodi eyenzelwe ukuphindaphinda nokusabalala kusuka kudivayisi eyodwa kuya kwenye ngaphandle kwemvume yomsebenzisi. Uma selingaphakathi, lingonakalisa uhlelo, lintshontshe idatha, libhale amafayela ngemfihlo, lidle izinsiza, noma lithathe ngisho nokulawula ikhompyutha ngokuphelele.
Lawa magciwane ahlukaniswa ngokwendlela asakazeka ngayo, lokho ahlose ukukufeza, noma ukuthi asebenza kanjani . Ngokubanzi, singathola izinhlobo ezenzelwe ubunhloli, ezinye zokuphanga ngokwezimali, kanti ezinye zigxile ekudaleni umonakalo noma ekuphazamiseni izinsizakalo, kungaba ngezizathu zemibono, impindiselo, noma ngenxa nje yodumo lomhlaseli.
Njengoba i-inthanethi, imiyalezo esheshayo, kanye nezinhlelo zokusebenza zamafu zikhula, ukudala nokusabalalisa i-malware kuya ngokuya kuba lula . Izilimi ezifana ne-Java, izikripthi (i-VBScript, i-JavaScript, njll.), ngisho namadokhumenti ehhovisi anama-macro avumela ikhodi enonya ukuthi ifakwe kumakhasi ewebhu abonakala engenangozi, ama-imeyili, noma amafayela, okwandisa ingozi yokutheleleka ngaphandle kokuthi umsebenzisi asole lutho.
Izinhlobo eziyinhloko zama-virus kanye ne-malware okufanele uzazi
Uma sikhuluma nge-malware, asibhekiseli nje kumagciwane avamile, kodwa emndenini wonke wezinhlelo ezinonya ezenzelwe izinjongo ezahlukene. Ukuqonda ukuthi ngayinye yenzani kukusiza ukuthi ubone izimpawu, uthathe isinyathelo, futhi ukhulume ngokwazi uma kuziwa ekuvikeleni izinhlelo zakho.
Phakathi kwezinsongo ezivelele kakhulu kukhona ama-Trojans, i-adware, i-spyware, i-ransomware, ama-botnets, nama-keyloggers , kanye nama-worms, ama-macro virus, kanye nezinye izinhlobo ezithile ze-malware. Zonke zifana ngendlela efanayo: ziyazifaka ngaphandle kwemvume yakho futhi zisebenza ngemuva kwakho.
Amagciwane akudala kanye nezinhlobo zomlando
Amagciwane okuqala ayesebenza ezinhlelweni ezithile ezifana ne-VAX/VMS , kanye nezibonelo ezifana ne-CHRISMAT LETTER. Inhloso yawo kwakuwukonakalisa noma ukuguqula ukusebenza kwesistimu, ngesikhathi lapho indlela eyinhloko yokusakazeka kwakungukusebenzisa ama-floppy disk noma ezinye izinto ezibonakalayo.
Ngokuhamba kwesikhathi, kwavela amagciwane amakhulu , athelela izinhlelo zokusebenza ezidumile njenge-Word, Excel, kanye ne-Adobe Acrobat. Amacala afana ne-MELISSA kanye ne-ETHAN abonise ukuthi ukuvula nje idokhumenti ebonakala ijwayelekile kwanele ukwenza ikhodi enonya bese uyithumela koxhumana nabo abasha noma ezinhlelweni.
Kwavela nama-virus e-script , afakwe emakhasini e-HTML noma kuma-imeyili anekhodi ye-JavaScript noma ye-VBScript. Uma umsebenzisi evakashela ikhasi noma evula umlayezo, iskripthi sisebenza kukhompyutha yakhe futhi singenza izenzo eziyingozi ngaphandle kolwazi lwakhe. Izibonelo zifaka phakathi i-AVM, i-INTERNAL, kanye ne-I LOVE YOU edumile.
Amahhashi eTrojan kanye neminyango yangemuva
Ihhashi leTrojan uhlelo olubonakala luwusizo noma lungenangozi kodwa lufihla imisebenzi enobungozi ngaphakathi . Uma selifakiwe, lingavula umnyango wangemuva womhlaseli, lisuse amafayela, libhale phansi ama-keystrokes, noma lilande i-malware eyengeziwe. Izibonelo ezenze umlando zifaka phakathi i-NetBus ne-Back Orifice.
Iminyango engemuva iyisethi yemiyalelo efakwe kusofthiwe noma ezinhlelweni zokusebenza ezivumela ukufinyelela okukude ngaphandle kokushiya umkhondo kuzilawuli zokuhlola. Ngokuvamile zidalwe ngamabomu ngabathuthukisi abanonya noma zifakwe enye i-malware ukuqinisekisa ukulawula kwesikhathi eside.
Izimpethu nama-botnet
Izikelemu zihlukile kumagciwane ajwayelekile ngoba ziyaphindaphindeka kuwo wonke amanethiwekhi ngaphandle kokudinga umsebenzisi ukuthi asebenzise ifayela elithile. Ziskena amatafula okuqondisa, amaseva, uhlu lwamakheli, noma iziqinisekiso ezigciniwe ukuze zizikopishe futhi zisakazeke njengokusabela kweketanga.
Amandla abo okusabalalisa anganqoba wonke amanethiwekhi (ama-LAN, ama-MAN, njll.), abangele ukuphahlazeka kwesistimu, futhi avule umnyango wokutheleleka okukhulu . Ezinye izibungu zomlando, njenge-SIRCAM, i-LOVETTER, kanye ne-MAGISTR, zaduma ngokusabalala nge-imeyili kanye nezinye izinsizakalo zenethiwekhi.
Uma amakhompyutha amaningi esengozini futhi elawulwa kude, angaba yingxenye ye- botnet : inethiwekhi yamadivayisi e-zombie umhlaseli awasebenzisayo ukuqalisa imikhankaso yogaxekile, ukuhlaselwa kokunqatshelwa kwenkonzo, noma ukumba imali yedijithali, konke lokhu ngaphandle kokuba abanikazi bamakhompyutha beqaphele.
I-Spyware, i-adware kanye nama-keylogger
I-Spyware yenzelwe ukuqapha: iqoqa ulwazi mayelana nemikhuba yakho, iziqinisekiso, izingxoxo , noma imininingwane yasebhange, bese iyithumela kumuntu wesithathu ngaphandle kwemvume yakho. Ingafihlwa kakhulu futhi ihlale ifakiwe izinyanga ngaphambi kokuba itholakale.
I-Adware igxile ekuboniseni izikhangiso eziphazamisayo, ekushintsheni isiphequluli sakho, ekuvuleni amafasitela avelelayo, noma ekuqondiseni kabusha usesho lwakho. Nakuba ngezinye izikhathi iziveza "njengesemthethweni" noma ingxenye yesofthiwe yamahhala, ingafaka izingxenye ezinonya noma iqoqe idatha eyeqile.
Ama-keylogger aqopha konke okuthayiphayo kukhibhodi: amaphasiwedi, ama-imeyili, imiyalezo, amafomu ewebhu… Angamathuluzi asetshenziswa kabanzi ekuhlaselweni kokwebiwa kweziqinisekiso, futhi ingozi yawo iseqinisweni lokuthi asebenza ngemuva, ngaphandle kokunikeza noma yiziphi izimpawu ezibonakalayo.
I-Ransomware, amabhomu e-logic, namagciwane
I-Ransomware ibhala amafayela kukhompyutha yakho noma kuyo yonke inethiwekhi yakho futhi ifuna isihlengo ngokushintshana nokhiye wokususa ukubethela. Ngokuvamile ibonisa isikrini sokukhiya esinemiyalelo yokukhokha, ngokuvamile nge-cryptocurrency. Ukukhokha akuqinisekisi lutho: ungalahlekelwa yimali yakho kodwa ulahlekelwe ukufinyelela kudatha yakho.
Amabhomu e-logic ayizingcezu zekhodi ezihlala zingasebenzi kuze kube yilapho kuhlangatshezwana nesimo esithile: usuku oluthile (njengoLwesihlanu oludumile lwe-13 noma uMichelangelo), inhlanganisela eyinhloko, noma umcimbi othile wesistimu. Ngaleso sikhathi, avuselela futhi enze izenzo ezibhubhisayo noma ezilimazayo.
Lokho okubizwa ngokuthi “amabhaktheriya” noma “amabhomu efoloko” yizinhlelo eziziphindaphinda ngokungapheli ohlelweni olufanayo, zidla inkumbulo, i-CPU, noma isikhala sediski kuze kube yilapho ikhompyutha ingasakwazi ukusetshenziswa. Azihlose njalo ukweba idatha; ngezinye izikhathi zihlose ukukhiya umshini ngokuphelele.
Amanga noma amahemuhemu: ulwazi olungelona iqiniso luyinkinga futhi
Amanga awawona amagciwane ngomqondo oqinile, kodwa ayisongo ekuphepheni kwedijithali ngoba asakaza ukwesaba kanye nokwaziswa okunganembile, echitha isikhathi kanye nezinsiza. Ngokuvamile afika nge-imeyili noma ezinkundleni zokuxhumana, exwayisa ngamagciwane okuthiwa “amabi” noma ekhuthaza abantu ukuba benze izenzo ezingenangqondo.
Isibonelo esivamile kwakuwumyalezo okhuthaza abantu ukuthi bathayiphe u-“Q33 NY” ku-Word bese beshintsha ifonti ibe yi-Wingdings, okusho ukuthi kwakuyikhodi yendiza yenye yezindiza ze-9/11. Le khodi yayingamanga, kodwa amanga asakazeka kakhulu, ebonisa ukuthi ubunjiniyela bezenhlalo bungasebenzisa kanjani ilukuluku nokwesaba.
Indlela amagciwane kanye nezinye izinhlelo eziyingozi ezisakazeka ngayo
Izindlela zokudlulisela igciwane ziye zashintsha ngokuhamba kwesikhathi, kodwa namuhla kusenezindlela ezivamile zokusabalala kwegciwane okufanele zilawulwe kahle uma ufuna ukunciphisa izingozi.
Phakathi kwezindlela ezivame kakhulu zokusabalala kwe-malware ama-imeyili nemiyalezo ye-SMS esolisayo , ukulandwa kwesofthiwe, amawebhusayithi anonya, amadivayisi asuswayo, kanye nokuxhashazwa kwezimbobo zokuphepha ezinhlelweni zokusebenza kanye nezinhlelo zokusebenza.
Ama-imeyili anezinamathiselo noma izixhumanisi ezisolisayo ahlala ewukukhwabanisa okuvamile: ukuvula ifayela nje, ukuchofoza isixhumanisi sokukhwabanisa, noma ukuvumela ama-macro kudokhumenti kwanele ukuqala ikhodi ukuthi isebenze. Lokhu kusebenza futhi emilayezweni yombhalo noma izinhlelo zokusebenza zokuthumela imiyalezo ezifaka izixhumanisi ezifingqiwe noma amafayela angaziwa.
Amadivayisi esitoreji sangaphandle ( ama-USB drive, ama-hard drive aphathekayo, amakhadi ememori) nawo angumthombo obalulekile wengozi. Uma uxhuma i-USB drive ethelelekile kwikhompyutha engavikelekile, i-malware ingazifakela yona ngokuzenzakalelayo noma izikopishe kwamanye amafayela.
Ukulanda kusuka kumawebhusayithi angathembekile , izindawo zokugcina amasela, noma abafaki "bamahhala" abafaka amabha yamathuluzi noma izinhlelo ezengeziwe kungenye indlela evamile. Lokhu kuvame ukuza kuhlanganiswe ne-adware noma i-spyware efakwa ngemuva.
Okokugcina, ukutheleleka okuningi kwenzeka ngokusebenzisa ubuthakathaka ezinhlelweni zokusebenza noma izinhlelo eziphelelwe yisikhathi . Iphutha elincane kusiphequluli, i-plugin, noma uhlelo ngokwalo lungavumela umhlaseli ukuthi asebenzise ikhodi engafanele kukhompyutha yakho ngokumane avakashele ikhasi lewebhu elisengozini.
Kuyini ukuhlaselwa kwe-cyber kanye nezinhlobo ezivame kakhulu
Ukuhlasela kwe-cyber yinoma yisiphi isenzo esihlosiwe lapho umhlaseli ezama ukuphazamisa ubumfihlo, ubuqotho, noma ukutholakala kwezinhlelo, amanethiwekhi, noma idatha. Kungahlasela abantu ngabanye, amabhizinisi, izikhungo zomphakathi, noma ingqalasizinda ebalulekile, futhi izinhloso zayo zisukela ekwebiweni kolwazi kuya ekuqolweni kwezimali noma ubunhloli bezimboni.
Eminyakeni yamuva nje, zonke izinhlobo zokuhlaselwa ziye zanda, ezinye zinobuchwepheshe obukhulu kanti ezinye zisekelwe kakhulu kubunjiniyela bezenhlalo , okungukuthi, ukukhohlisa abantu ukuze bona ngokwabo bavule umnyango wesigebengu ngaphandle kokuqaphela.
Ukunqatshelwa kokuhlaselwa kwesevisi (i-DoS ne-DDoS)
Ekuhlaselweni kwe-DoS noma kwe-DDoS, umgomo uwukukhubaza uhlelo noma iwebhusayithi ngokufaka izinsiza zayo (i-CPU, inkumbulo, i-bandwidth) ngethrafikhi enonya. Ukuhlaselwa kwe-DDoS kusebenzisa izinkulungwane zamakhompyutha asengozini (ama-botnets) athumela izicelo ngasikhathi sinye, okwenza ukuhlunga kube nzima.
Ukuhlaselwa kwe-MITM kanye nokuxhunywa kwezingcingo okungekho emthethweni
Ukuhlasela kwe -Man-in-the-Middle (MITM) kuhilela ukuzibeka phakathi kwama-endpoint amabili okuxhumana (isibonelo, isiphequluli sakho kanye newebhusayithi yebhange lakho) ukuze ubambe, uguqule, noma uqondise kabusha ulwazi. Ukulalela ngokungemthetho, noma ukuhogela, kuncike ekubambeni ithrafikhi yenethiwekhi ukuze ufunde idatha engabethelwe.
Ukwebiwa kobunikazi kanye nobugebengu bokweba imininingwane ebucayi
Ukwebiwa kobunikazi kuyahlukahluka kusukela ekuntshontsheni nge-imeyili okuvamile kuya ezinhlotsheni eziqondiwe kakhulu njengokukhwabanisa nge-spear-phishing noma ukubulala nge-whaling. Ngokuvamile ekuntshontsheni nge-phishing, umhlaseli uthumela imiyalezo eminingi ezenza amabhange, amapulatifomu adumile, noma izinhlangano ezisemthethweni ukuze eba iziqinisekiso.
I-Spear -phishing ihlose abantu abathile noma izinkampani ezisebenzisa ulwazi lomuntu siqu ukuze yenze ukukhohlisa kube lula ukukukholelwa. I-Whaling igxile kubaphathi abaphezulu noma kubantu abanokufinyelela okunelungelo, ngenhloso yokuthola izinzuzo ezinkulu noma ulwazi olubalulekile.
Ukuhlaselwa ngamaphasiwedi kanye namandla okuhlukumeza
Ukuhlaselwa kwamaphasiwedi kusuka ekugcwalisweni kweziqinisekiso ( ukusebenzisa iziqinisekiso eziphumile kwezinye iziphambeko ) kuya ekuhlolweni okuhlelekile kwenhlanganisela kusetshenziswa amandla amakhulu noma izichazamazwi. Uma amaphasiwedi ebuthaka noma esetshenziswa kabusha kumasevisi amaningi, amathuba empumelelo anda kakhulu.
Ukujova kwe-SQL, i-XSS kanye nokuhlaselwa kwewebhu
Ekuhlaselweni kwe -SQL injection , umhlaseli ufaka imiyalo enonya kumafomu noma kumapharamitha e-URL ukuze alawule isizindalwazi esingemuva kohlelo lokusebenza lwewebhu. Lokhu kungaholela ekufundeni, ekushintsheni, noma ekususeni ulwazi olubucayi.
Ukuhlasela kwe -Cross-Site Scripting (XSS) kufaka izikripthi kumakhasi ewebhu abese esetshenziswa yisiphequluli sesisulu, okuvumela abahlaseli ukuthi bantshontshe amakhukhi, bathumbe amaseshini, noma baqondise abasebenzisi kumasayithi anonya. Konke lokhu kuyingxenye yohlu olubanzi lokuhlaselwa kwewebhu (i-CSRF, ukulayishwa kwamafayela, njll.).
Ukukhohlisa, ukuntshontsha iseshini, kanye nokuhumusha i-URL
Ukukhwabanisa kwe-DNS kuhilela ukuguqula ukulungiswa kwegama lesizinda ukuze kuqondiswe kabusha umsebenzisi kuseva elawulwa umhlaseli, noma ngabe ikheli alithayiphile lilungile. Kuyindlela ephumelela kakhulu yokweba iziqinisekiso.
Ukuntshontshwa kweseshini kuhilela ukweba isihlonzi seseshini somsebenzisi osevele eqinisekisiwe (isibonelo, ngokweba amakhukhi) ukuze azenze ongeyena. Ukuphathwa kabi kwe-URL kanye namasu afanayo kusebenzisa indlela iziphequluli namaseva acubungula ngayo amakheli ukuze akhohlise umsebenzisi noma uhlelo.
Izinsongo zangaphakathi kanye nokuhlaselwa kwe-malware
Akuzona zonke izihlaselo ezivela ngaphandle: izinsongo zangaphakathi (izisebenzi ezinganelisekile, izisebenzi zangaphambili, noma abalingani abanokufinyelela okusemthethweni) zingavuza idatha, zichithe izinhlelo, noma zintshontshe impahla yobuhlakani.
Ukuhlaselwa kwe-malware ngokuvamile kuhlanganisa amasu amaningana: ukusebenzisa ubuthakathaka, ukusebenzisa ikhodi enonya, ukusungula ukuphikelela, bese kuhamba kancane kunethiwekhi yesisulu, ukwandisa amalungelo kanye nokweba noma ukubethela ulwazi.
Ubuthakathaka be-Zero-day: umncintiswano phakathi kwabahlaseli nabavikeli
Ubungozi obungenalo usuku olulodwa buyiphutha lokuphepha kusofthiwe, i-firmware, noma ihadiwe engakabi ne-patch esemthethweni evela kumthengisi. Kungenzeka ukuthi seyaziwa esidlangalaleni, noma yaziwa kuphela ngabacwaningi kanye namaqembu athile abahlaseli, kodwa kuze kube yilapho isibuyekezo sikhishwa, abasebenzisi basengozini.
Kubizwa ngokuthi ubungozi "bosuku olungenalutho" ngoba, kusukela ngesikhathi unjiniyela ezwa ngale nkinga, unezinsuku ezingenalutho okufanele asabele ngazo ngaphambi kokuba iqale ukusetshenziswa kabi. Lapho i-patch ekugcineni ikhishwa futhi isatshalaliswa, ubungozi "buyaziwa" noma "usuku olu-n," yize buzoba yingozi uma uhlelo lungabuyekezwa.
Uma abahlaseli bedala ubufakazi bomqondo noma i-malware esebenzayo esebenzisa ubuthakathaka ngaphambi kokuba kutholakale isixazululo, sikubiza ngokuthi ukuhlasela kosuku olungenalutho . Kungumjaho oqhubekayo: abacwaningi bazama ukulungisa ngaphambi kokuba kusetshenziswe, kuyilapho izigebengu ze-inthanethi zizama ukucindezela yonke inzuzo yokugcina kubuthakathaka ngenkathi buhlala buvulekile.
Umthelela wangempela wokuhlaselwa kwe-cyber: izibalo zakamuva nezibonelo
Ubugebengu be-inthanethi bukhuthaza umnotho omkhulu ngesikhathi esifanayo . Izifundo zakamuva zilinganisela ukuthi izindleko zomhlaba wonke zobugebengu be-inthanethi zizoqhubeka nokukhula ngesilinganiso samadijithi amabili unyaka ngamunye, kanye nokulahlekelwa yizigidigidi zamaRandi ngenxa yokweba, ukuphanga, ukuphazamiseka kwebhizinisi, izinhlawulo zomthetho, kanye nokulimala kwedumela.
Ezingeni lomuntu ngamunye, izisulu zibhekene nokwebiwa kobunikazi, ukukhishwa kwama-akhawunti, ukusongelwa, kanye nokuvuza kwedatha yomuntu siqu . Kumabhizinisi, imiphumela ihlanganisa ukumiswa kokukhiqiza, ukuvuza kwempahla yobuhlakani, amakhasimende alahlekile, kanye nezinhlawulo zokwehluleka ukuvikela ulwazi ngokwanele.
Ezindaweni ezifana neLatin America, kuye kwatholakala ukwanda okukhulu kwezigameko. Ngonyaka odlule, cishe ingxenye yesithathu yamacala ahlaziyiwe ahilela ukwephulwa kwedatha , kanti angaphezu kwengxenye yesihlanu ahilela ukuphanga okuqondile (okuvame ukuhlotshaniswa ne-ransomware). Ama-botnet, ukwebiwa kweziqinisekiso, kanye nokukhishwa kwedatha ngobuningi kumelela amaphesenti afanayo esamba.
Ukwephulwa kwedatha okukhulu kanye nokuhlaselwa kwezinkampani ezaziwayo
Esinye sezimo eziphawuleka kakhulu kwaba ukutholakala kwesizindalwazi esikhulu esiqukethe amarekhodi avuzayo angaba yizigidigidi ezingama-26.000 avela kumapulatifomu afana ne-Twitter, i-Dropbox, i-LinkedIn, namanye amaningi. Leli fayela le-12-terabyte liqoqe iziqinisekiso kanye nedatha evela ekuphulweni kwemithetho eminingi yangaphambilini.
Lolu hlobo lokuba sengozini lwenza kube lula ngabahlaseli ukwenza ukuhlaselwa kokufaka imininingwane, ubugebengu bokweba imininingwane ebucayi, kanye nokunye ukuhlukumeza okukhulu. Kubasebenzisi, isifundo sicacile: sebenzisa amaphasiwedi ahlukile futhi aqinile, vumela ukuqinisekiswa kwezinyathelo ezimbili , futhi uqaphele kakhulu ama-imeyili asolisayo ngemuva kwezigameko zalolu hlobo.
Esinye isibonelo kwakuyisigameko esathinta iBhange laseMelika ngemuva kwenkinga nomhlinzeki wezobuchwepheshe (i-Infosys McCamish). Iphutha lokuphepha lavumela ukufinyelela kudatha yamakhasimende angaphezu kuka-57.000, okuhlanganisa amagama, amakheli, izinsuku zokuzalwa, kanye nezinombolo ze-Social Security. Iqembu le-ransomware elaziwa ngokuthi i-LockBit lathi linecala ngalokhu kuhlasela.
Leli cala ligcizelela ukubaluleka kokuphatha ubungozi kahle nabahlinzeki bangaphandle , ukwenza ukuhlolwa kwezokuphepha njalo, kanye nokuchaza ngokucacile ezinkontilekeni ukuthi ubani onesibopho nokuthi kanjani uma kwenzeka ukwephulwa.
Ngisho nezinkunzi zobuchwepheshe ezifana neMicrosoft ziye zahlaselwa kakhulu. Ukwephulwa kwepulatifomu yayo ye-Azure kwalimaza ama-akhawunti abaphathi abaphezulu, futhi kwatholakala ubuthakathaka obukhulu (CVE-2024-21410) ezinkulungwaneni zamaseva e-Exchange avumela abahlaseli ukuthi bandise amalungelo, baphathe ama-hashe e-NTLM, futhi bazenze abasebenzisi.
Emkhakheni wezimboni, amacala afana nalawo e- Volkswagen , ngokwebiwa kwezinkulungwane zemibhalo ngobuchwepheshe bezimoto zikagesi namasu okukhiqiza (okusolwa ukuthi kungokwesimo sobunhloli bamazwe ngamazwe), abonisa ukuthi umgomo awuseyona nje idatha yomuntu siqu, kodwa futhi nempahla yobuhlakani.
Futhi asikwazi ukukhohlwa izinsongo zangaphakathi , njengoba kwenzeka kuTesla, lapho izisebenzi zangaphambilini zavuza khona ulwazi lomuntu siqu lwamashumi ezinkulungwane zezisebenzi endaweni yabezindaba. Nakuba idatha ingazange ishicilelwe, iqiniso nje lokuvuza lidinga ukwenziwa kwezinqubo zomthetho nezokuxhumana, kanye nokubuyekezwa kokuthi ukufinyelela kolwazi kulawulwa kanjani.
Abaduni ababi kanye nabaduni abaziphatha kahle: izinhlangothi ezimbili zohlamvu lwemali olufanayo
Igama elithi “hacker” livame ukusetshenziswa ngendlela engafanele. Ngobuchwepheshe, hacker ngumuntu onamakhono obuchwepheshe athuthukile ongakwazi ukuhlola nokushintsha izinhlelo . Lokhu kufaka phakathi labo abaphula ukuphepha ngezinjongo zobugebengu kanye nalabo abenza kanjalo ukuze bakuthuthukise.
Ngakolunye uhlangothi kukhona izigebengu ze-inthanethi , ezakha imboni yobugebengu yangempela: zithengisa i-malware, zinikeza izinsizakalo zokuhlasela lapho zifunwa, ziphinde zithengise izizindalwazi ezebiwe, noma ziphange izisulu. Izindleko zezenzo zazo kulindeleke ukuthi zifinyelele ezibalweni ezinkulu eminyakeni ezayo.
Ngakolunye uhlangothi kukhona abaduni be-“ethical hackers” , ochwepheshe abasebenzisa ubuchwepheshe babo ukuqinisa ukuphepha, ukubona ubuthakathaka ngaphambi kokuba abanye babaxhaphaze, nokusiza izinkampani nezinhlangano zomthetho ukuthi zilandele izigebengu. Umsebenzi wabo uhlanganisa ukuhlolwa kokungena, ukuhlolwa kwamabhuku, ukuhlaziywa kwe-forensic, kanye nezinhlelo zokuthola amaphutha, phakathi kwezinye izinto.
Ngisho nomthengi oguqula ifoni yakhe ukuze afake isofthiwe yangokwezifiso uwela ngaphansi kwesambulela sobugebengu, ngisho noma engenaso inhloso embi. Inkinga enkulu akuyona ilebula, kodwa inhloso kanye nokuhambisana nomthetho.
Indlela yokuvikela ikhompyutha yakho kanye nebhizinisi lakho kumagciwane kanye nama-hacks
Izindaba ezinhle ukuthi, nakuba ingozi ingelona zero, kunezinyathelo eziningi ezisebenzayo zokunciphisa indawo yokuhlasela . Ukuhlanganiswa kwamathuluzi obuchwepheshe, izindlela eziphephile, kanye nokusabela okufanele kwesigameko kwenza umehluko omkhulu.
Izibuyekezo ze-Antimalware kanye nesistimu
Isinyathelo sokuqala ukusebenzisa uhlelo lokusebenza lwe-antimalware oluthembekile nolusesikhathini . I-Windows ifaka i-Microsoft Defender, evuselela ngokuzenzakalelayo nge-Windows Update, kodwa ungakhetha nezixazululo zezinkampani zangaphandle ezithembekile. Into ebalulekile ukugcina ukuvikelwa kwesikhathi sangempela kusebenza kanye nedathabheyisi yesiginesha isesikhathini.
Okubaluleke kakhulu njengesofthiwe ye-antivirus ukugcina uhlelo lwakho lokusebenza nezinhlelo zisesikhathini . Izibuyekezo zokuphepha zilungisa ubuthakathaka obungasetshenziswa abahlaseli, okuhlanganisa namaphutha aziwayo ezinsuku ezingenalutho. Nakuba ukuqala kabusha kungaba yinkinga ngezinye izikhathi, kungenye yezindlela zokuzivikela ezinhle kakhulu ezitholakalayo.
Isiphequluli, i-SmartScreen namafasitela e-pop-up
Iziphequluli zesimanje zifaka izici zokuphepha ezifanele ukuvunywa. Amathuluzi afana ne -SmartScreen ku-Microsoft Edge asiza ukuvimba amakhasi noma ukulanda okumakwe njengayingozi, okubonisa izixwayiso ezicacile kumsebenzisi.
Ngaphezu kwalokho, ukusebenzisa i -pop-up blocker kunciphisa ukuchayeka ezikhangisweni noma kuma-script anobungozi alayisha kuma-pop-up windows. Nakuba ama-pop-up amaningi emane nje ezikhangiso, amanye angase abe nekhodi engaphephile noma akuholele kumawebhusayithi akhohlisayo.
Izilungiselelo zobumfihlo besiphequluli nazo zibalulekile . Ukukhawulela ukuthi amawebhusayithi angaqoqa idatha engakanani, ukulawula ukulandelela amakhukhi, kanye nokukhawulela izimvume (i-geolocation, ikhamera, imakrofoni) kunciphisa ingozi yokuthi ulwazi lwakho lusetshenziswe ekukhangiseni okunolaka, ukukhwabanisa, noma ukwebiwa kobunikazi.
I-imeyili, i-UAC, kanye nokuvikelwa kokuphazamiseka
Ngokuphathelene ne-imeyili, umthetho wegolide uwukuthi ungalokothi uvule imiyalezo noma izinamathiselo ezivela kubathumeli abangaziwa , noma uchofoze izixhumanisi ezingalindelekile, noma ngabe umthumeli ubonakala ethembekile. Ukuhlaselwa kwe-Phishing kuya ngokuya kuba yinkimbinkimbi futhi kungazenza amakheli noma amasignesha ngendlela ekholisayo.
Ku-Windows, i-User Account Control (UAC) icela ukuqinisekiswa lapho uhlelo lokusebenza luzama ukwenza izinguquko ezidinga amalungelo omlawuli. Ukugcina i-UAC ivuliwe kwenza kube nzima kakhulu nge-malware ukushintsha izilungiselelo ezibalulekile ngaphandle kolwazi lwakho.
Izici ezifana ne-Tamper Protection zivimbela izinhlelo zokusebenza ezingagunyaziwe ukuthi zingakhubazi isixazululo sakho se-antimalware noma zishintshe izilungiselelo zokuphepha. Amagciwane amaningi azama ngqo ukukhubaza isofthiwe ye-antivirus ukuze isebenze ngokukhululeka, ngakho-ke lesi sici siwusizo kakhulu.
Izinyathelo ezithile zezinkampani: ukuqeqeshwa kanye nempendulo yezomthetho
Ebhizinisini, ngaphezu kobuchwepheshe, ukuqwashisa abasebenzi kudlala indima ebalulekile . Ukuqeqesha abasebenzi ekutholeni ama-imeyili asolisayo, ukuphathwa kwamaphasiwedi, ukusetshenziswa kwamadivayisi angaphandle, kanye nemikhuba emihle yokuphequlula kunciphisa kakhulu izinga lempumelelo lokuhlaselwa okuningi.
Kubalulekile ukuba nesu lokuphepha kwe-inthanethi elicacile neliguquguqukayo elihlanganisa izingozi zangaphandle nezangaphakathi, lichaze izilawuli zokufinyelela, limise izinqubo zokuhoxisa izimvume lapho isisebenzi sishiya inkampani, futhi lifaka phakathi ukuhlolwa kwabaphakeli.
Uma kwenzeka isigameko, izisulu eziningi ziyashesha ukuqala kabusha noma ukusula amadivayisi azo, zilahlekelwe ubufakazi obubalulekile . Kungcono ukugcina ama-log, izithombe-skrini, ama-imeyili, amafayela abethelwe, futhi, uma kungenzeka, wenze ama-backups ochwepheshe ukuze ochwepheshe bakwazi ukuhlaziya okwenzekile futhi iziphathimandla zibe nobufakazi obuqinile.
Ezimweni ze-ransomware, ukukhokha isihlengo akuvamile ukuba yindlela enhle. Akukho siqinisekiso sokuthola idatha , futhi kuxhasa nezinhlangano zobugebengu. Ukubonisana nochwepheshe bezokuphepha kwe-inthanethi kanye nommeli kukuvumela ukuthi uhlole ubuchwepheshe (ama-backups, amathuluzi okususa ukubethela komphakathi, ukwakhiwa kabusha kwesistimu) kanye nezinye izindlela zomthetho zokuphendula ngaphandle kokuvumela ukuboshwa.
Izinkampani zomthetho ezikhethekile kanye nabeluleki bezokuphepha bangaxhumanisa izici zobuchwepheshe, zomthetho kanye nezokuxhumana , bafake izikhalazo, bafake izicelo zomonakalo futhi banciphise umthelela wedumela, ikakhulukazi lapho kuhileleke idatha yomuntu wesithathu futhi kumele kuhlangatshezwane nemithethonqubo yokuvikela idatha.
Lonke leli zwe le-malware, ubuthakathaka, kanye nokuhlaselwa kwe-cyber libonisa ukuthi ukuphepha kwe-cyber akuseyona "into eyengeziwe" yokuzikhethela, kodwa kuyisidingo esiyisisekelo kunoma yimuphi umsebenzisi kanye nenkampani efuna ukuqhubeka nokusebenza ngokuthula kwengqondo: ukwazi izinhlobo zamagciwane, ukuthi asakazeka kanjani, ukuthi abahlaseli basebenzisa ziphi izindlela, nokuthi yimaphi amathuluzi esinawo okuzivikela aguqula indawo ebonakala inobutha ibe yisimo esilawulekayo, lapho ukuvimbela, izibuyekezo eziqhubekayo, kanye nokusabela okusheshayo kwenza umehluko phakathi kokwesaba okulula kanye nenkinga enkulu.
