Iyini i-RAT Trojan nokuthi ungazivikela kanjani kulolu songo?

Ukuphepha kwe-inthanethi kuyisici esibalulekile namuhla, futhi olunye lwezinhlobo eziyingozi kakhulu ze -malware yi- remote access Trojan (RAT) . Lolu hlobo lwesofthiwe enonya luvumela izigebengu ze-inthanethi ukuthi zilawule ngokuphelele idivayisi ngaphandle kolwazi lomsebenzisi. Amandla ayo okufihla nokukhohlisa ayenza ibe ngelinye lamathuluzi asetshenziswa kakhulu ekuhlaselweni kwe-inthanethi.

Kulesi sihloko, sizobheka kabanzi ukuthi iyini iRAT, ukuthi isebenza kanjani, ukuthi isakazeka kanjani, ibeka ziphi izinhlobo zezinsongo, futhi, okubaluleke kakhulu, ukuthi ungazivikela kanjani kulolu hlobo oluyingozi lohlelo olungayilungele ikhompuyutha.

Iyini i-RAT Trojan?

I -Trojan yokufinyelela kude , noma i-RAT , uhlobo lwe-malware eyenzelwe ukunikeza umhlaseli ukufinyelela okuphelele nokulawula idivayisi ethelelekile. Ngokungafani namagciwane nezikelemu, i-RAT ayiziphindaphindi; kunalokho, ikhohlisa isisulu ukuba siyilande futhi siyifake ngaphandle kolwazi lwaso.

Ama-RAT avame ukuzifihla njengamafayela asemthethweni , njengezinamathiselo ze-imeyili, izinhlelo zokusebenza ezibonakala zingenangozi, noma amafayela alandiwe kumawebhusayithi anonya . Uma esengaphakathi ohlelweni, i-malware iyafihla futhi yakhe uxhumano nomhlaseli, okuwavumela ukuthi asebenzise idivayisi njengokungathi ahleli phambi kwayo. Ukuze uthole ulwazi olwengeziwe ngalolu hlobo lwe-malware, ungabheka umhlahlandlela wethu mayelana nama -banking trojans e-Android.

Isebenza kanjani i-RAT Trojan?

Ama-RAT Trojans angena kumadivayisi bese esungula isiteshi sokuxhumana esiyimfihlo nomdubuli. Lesi siteshi sokuxhumana, esaziwa ngokuthi umyalo nokulawula ( C2 ), sivumela umhlaseli ukuthi athumele imiyalo ohlelweni oluthelelekile futhi athole ulwazi emuva.

Ezinye zezenzo umhlaseli angakwazi ukuzenza nge-RAT zihlanganisa:

• Ukuphanga izifakazelo kanye nedatha yomuntu siqu.
• Ukungena ngokhiye ikhibhodi (keylogging).
• Ukufinyelela kufayela le- webcam nakumakrofoni yedivayisi.
• Ukulawulwa kwe- uhlelo lwefayela kanye nokulanda ezinye izinhlelo ezinonya.
• Ukubulawa kwe imiyalo kanye nokusetshenziswa kwezinqubo zangemuva.

Ngabe iRAT isakazeka kanjani?

Ama-RAT angafinyelela idivayisi ngokusebenzisa izindlela eziningi zokutheleleka. Ezinye ezivame kakhulu yilezi:

• Ama-imeyili obugebengu bokweba imininingwane ebucayi: Abahlaseli bathumela ama-imeyili mbumbulu anezinanyathiselwa noma izixhumanisi ezilanda iRAT.
• Ukulandwa kohlelo lokusebenza okungelona iqiniso: Izinhlelo ezibonakala zisemthethweni ezifaka i-RAT kukhodi yazo.
• Ukuxhashazwa kokuba sengozini: Ukusebenzisa iziphazamisi kusofthiwe yesistimu yokusebenza noma izinhlelo zokusebenza eziphelelwe yisikhathi.
• Amadivaysi USB isifo: Uma idivayisi eyonakele ixhunyiwe, uhlelo olungayilungele ikhompuyutha ludluliselwa ngokuzenzakalelayo.

Ukuqonda ukuthi i-malware isakazeka kanjani kubalulekile ekuqaliseni izinyathelo zokuvimbela ezisebenzayo. Ukuze uthole imininingwane eyengeziwe ngokuphepha, ungafunda ngokufaka izibuyekezo ze-Windows.

Izinsongo eziyinhloko zeRAT

Ubuchwepheshe bokufinyelela kude (ama-RAT) buyingozi enkulu ngenxa yekhono labo lokusebenza ngokunyenya nokubeka engcupheni ulwazi oluyimfihlo. Ezinye zezinsongo ezifanele kakhulu yilezi:

• Ukwebiwa kwedatha yezimali: Ama-RAT angathwebula imininingwane yasebhange futhi enze imisebenzi yomgunyathi.
• Ukusetshenziswa kabi kwezinsiza: Bangasebenzisa amandla esistimu ukumba imayini cryptocurrencies ngaphandle kwemvume yomsebenzisi.
• Ukufinyelela kukhamera nemakrofoni: Thwebula izithombe kanye nomsindo ukuze inhloli noma ukubhuqa isisulu.
• Ukwakhiwa kwama-botnets: Ukwenza idivayisi ingxenye yenethiwekhi esetshenziselwa ukuhlasela kwe-DDoS noma ukusatshalaliswa kwe-malware.

Ngaphezu kwezinsongo ezishiwo, kuyalulekwa ukuqaphela ezinye izinhlobo ze-malware, njenge- PlayPraetor ku-Android , nazo ezibangela izingozi ezinkulu.

Ungazivikela kanjani kumaRAT Trojans

Ukuzivikela ku-RAT kudinga ukuhlanganisa imikhuba emihle yokuphepha namathuluzi akhethekile. Nazi ezinye izincomo ezibalulekile:

• Gcina isofthiwe isesikhathini samanje: Faka isistimu yokusebenza nezibuyekezo zohlelo lokusebenza ukubhekana nobungozi.
• Gwema ukulanda amafayela asolisayo: Ungawavuli ama-imeyili avela kubathumeli abangaziwa noma ulande okunamathiselwe ngaphandle kokukuqinisekisa.
• Sebenzisa isofthiwe yezokuphephaI-antivirus esebenzayo ingathola futhi ivimbe ama-RAT ngaphambi kokuthi athelele uhlelo lwakho.
• Gada ithrafikhi yenethiwekhi: Ukuqapha ukuxhumana okungajwayelekile kungasiza ekuboneni ubukhona beRAT.
• Setha i-multi-factor authentication (MFA): Engeza isendlalelo esengeziwe sokuvikela kuma-akhawunti abucayi.

Ukusebenzisa le mikhuba kubalulekile ukugcina ulwazi lwakho luphephile futhi kuvimbele ukuhlaselwa kwe-cyber. Kulabo abafuna ukubuyisela ukuphepha kwabo ngemva kwesigameko, ungabheka ukuthi ungawabuyisa kanjani amafayela asusiwe ku-Windows.

Ama-Trojan afinyelela kude ayingozi enkulu kubantu ngabanye kanye namabhizinisi ngenxa yekhono lawo lokungena ezinhlelweni futhi asebenze ngokunyenya. Asetshenziswa ekuhlaselweni okuqondiswe kakhulu futhi adinga isu eliqinile lokuphepha lokuthola nokuvimbela. Ukusebenzisa imikhuba emihle kakhulu nokusebenzisa amathuluzi okuphepha athuthukile kubalulekile ukuvikela kulezi zinsongo ze-cyber.

I-athikili ehlobene:

Iyini ngempela i-POI? Ungawaqeda kanjani amagciwane ajwayelekile