IMicrosoft iphakamisa ialam: i-LemonDuck ehlaseleyo ihlasela iiwindows kunye neLinux

Microsoft li papashwe ingxelo ecebisa ukuba kukho ingxelo eguqulweyo ye- ILemonDuck leyo, ukongeza kwezemigodi i-cryptocurrencies, ngoku unokuba iziqinisekiso, uqhekeze iingcango zangasemva, kwaye wenze ezinye izinto ezinobungozi kwiikhompyuter ezisengozini. Inguqulelo yokuqala yafunyanwa kwiminyaka eyadlulayo, kodwa into eyenziweyo kukusebenzisa izixhobo zamaqela ethu ukwenza iimali zam ezinje ngeBitcoin. Entsha inobungozi obukhulu, ngokweqela likaMicrosoft 365 Defender Thell Intellligence.

Kwaye kutheni sithetha ngale nto ku LinuxAdictos? Ngenxa yokuba le ntsholongwane Ikwachaphazela iikhompyuter ezisebenzisa iLinux. Phakathi kobuchule bakhe obutsha, ngoku unokubamba iziqinisekiso, ukukhubaza ulawulo lokhuseleko, ukusasaza ii-imeyile zobuqhetseba, kunye nokufaka iingcango zangasemva ukubhengeza iikhompyuter kuhlaselo oluzayo kwezinye izixhobo.

ILemonDuck inokuxhaphaza ukuba semngciphekweni okudala

I-LemonDuck inokusebenzisa ukuba semngciphekweni okudala okungafakwanga. Phakathi kweziphene onokuzisebenzisa, sinazo:

• I-CVE-2019-0708, eyaziwa njenge / enxulumene neBlueKeep.
• I-CVE-2017-0144, eyaziwa njenge / enxulumene neBlueBlue.
• I-CVE-2020-0796, eyaziwa njenge / enxulumene ne-SMBGhost.
• I-CVE-2017-8464, eyaziwa njenge / enxulumene ne-LNK RCE.
• I-CVE-2021-27065, i-CVE-2021-26855, i-CVE-2021-26857 kunye ne-CVE-2021-26858 enxulumene neProxyLogon.

Eyona nto inomdla malunga nale nguqulo yeLemonDuck kukuba inokuphelisa abanye abahlaseli kwindawo leyo. Oko kukuthi, kwikhompyuter esulelekileyo, le dada yelamula zama ukunqanda uhlaselo olutsha ngokudibanisa iibugs ezifanayo ozisebenzisileyo ukufumana ukufikelela kwinkqubo. I-hoarder kunye ne-malware yokuzingca, kodwa asizukuthetha kakuhle ngayo nayiphi na enye into enobungozi.

Ekuqaleni, iLemonDuck yenzelwe abasebenzisi eTshayina, kodwa iyasebenza naseMelika, eFrance, eJamani, eUnited Kingdom, eIndiya, eRashiya, Korea, Canada naseVietnam. Akukho Spain okanye Latin America okwangoku ikuluhlu, kodwa eli lixesha elifanelekileyo lokukhumbula ukuba kufanelekile ukufakela, ubuncinci, zonke iipatches ezikhuselekileyo ukusasazwa kweLinux ukusinika ngokukhawuleza.