Key Takeaways
- Cov kws tshaj lij kev nyab xeeb tau tshawb pom tus kab mob tshiab uas tawm tsam hauv internet txuas nrog xws li routers thiab lub koob yees duab kev ruaj ntseg kom hlua lawv mus rau hauv botnet.
- Malware sau ntawv ib txwm nrhiav txoj hauv kev los rhuav tshem cov khoom siv hauv internet kom siv tau rau txhua yam kev ua phem, ceeb toom cov kws tshaj lij.
-
Cov kws tshaj lij qhia tias tib neeg tuaj yeem cuam tshuam cov kev tawm tsam no los ntawm kev txhim kho thaj chaw ruaj ntseg yam tsis muaj ncua sijhawm thiab siv cov khoom lag luam kho mob uas tau hloov kho tag nrho.
Qhov tawg ntawm qhov tsis pom kev ntsaws-thiab-tsis nco qab hauv internet-txuas cov khoom siv ntse tsis yog ua rau lawv tus tswv muaj kev pheej hmoo tab sis kuj tuaj yeem siv los coj cov vev xaib nrov thiab cov kev pabcuam.
Cov kws tshawb fawb tsis ntev los no tau tshawb pom tus kab mob tshiab ntawm malware uas tawm tsam kev nyab xeeb tsis zoo hauv ntau lub routers. Thaum kis tus kab mob, cov kev cuam tshuam routers raug roped hauv siab phem botnets uas cybercriminals siv los tawm tsam lub vev xaib lossis kev pabcuam online nrog cov tsheb khiav tsis zoo thiab choke lawv tawm ntawm kev pabcuam. Qhov no yog lub npe hu ua kev tsis lees paub kev pabcuam (DDoS) nres hauv cybersecurity parlance.
"Hmoov tsis zoo, muaj ntau qhov kev tiv thaiv tsis zoo uas tuaj yeem yooj yim los sib koom ua ke rau hauv cov kev tawm tsam no," Ryan Thomas, VP ntawm Kev Tswj Xyuas Khoom Muag ntawm cybersecurity solutions provider LogicHub, hais rau Lifewire hauv email. "Tus yuam sij rau cov neeg siv kawg tsis yog ib qho ntawm cov hom phiaj yooj yim no."
Peb yog Borg
Cov kws tshawb fawb ntawm cybersecurity ruaj Fortinet tau khiav hla ib qho kev hloov tshiab ntawm qhov nrov botnet-roping malware uas tau kawm txog cov tswv yim tshiab los ua kom cov neeg siv khoom sib txuas. Raws li lawv cov kev soj ntsuam, cov neeg ua phem phem tom qab Beastmode (aka B3astmode) botnet tau "ua phem hloov kho nws cov arsenal ntawm exploits," ntxiv tag nrho tsib qhov kev siv tshiab, nrog peb ntawm lawv tawm tsam qhov tsis zoo hauv Totolink routers.
Qhov tseem ceeb, qhov kev txhim kho no tau los sai sai tom qab Totolink tau tso tawm firmware hloov tshiab los kho peb qhov tsis zoo-qhov tsis zoo. Yog li, thaum qhov tsis zoo tau raug kho, cov neeg tawm tsam tau twv qhov tseeb tias ntau tus neeg siv sijhawm ua ntej hloov kho cov firmware ntawm lawv cov khoom siv, thiab qee tus yeej tsis ua.
Lub Beastmode botnet qiv nws cov lej los ntawm Mirai botnet muaj zog heev. Ua ntej lawv raug ntes hauv 2018, Mirai botnet cov tswv lag luam tau qhib qhov chaws ntawm lawv cov botnet tuag, ua rau lwm tus neeg ua phem cybercriminals zoo li Beastmode luam nws thiab siv cov yam ntxwv tshiab los siv ntau cov khoom siv.
Raws li Fortinet, ntxiv rau Totolink, Beastmode malware kuj tseem tsom rau qhov tsis zoo hauv ntau lub D-Link routers, TP-Link IP lub koob yees duab, network video kaw cov cuab yeej los ntawm Nuuo, nrog rau Netgear's ReadyNAS Kev Tshawb Fawb cov khoom. Kev txhawj xeeb, ntau lub hom phiaj D-Link cov khoom tau raug txiav tawm thiab yuav tsis tau txais kev ruaj ntseg hloov tshiab los ntawm lub tuam txhab, ua rau lawv muaj kev cuam tshuam.
"Thaum cov cuab yeej kis tau los ntawm Beastmode, botnet tuaj yeem siv los ntawm nws cov neeg ua haujlwm los ua ntau yam DDoS tawm tsam feem ntau pom hauv lwm cov botnets Mirai," sau cov kws tshawb fawb.
Botnet cov tswv lag luam tau nyiaj los ntawm kev hawking lawv cov botnet ua los ntawm ntau txhiab cov khoom siv cuam tshuam rau lwm tus cybercriminals, lossis lawv tuaj yeem tso DDoS tawm tsam lawv tus kheej, tom qab ntawd thov tus nqe txhiv los ntawm tus neeg raug tsim txom kom tsis txhob tawm tsam. Raws li Imperva, DDoS tawm tsam muaj zog txaus los cuam tshuam lub vev xaib rau hnub tuaj yeem yuav tau tsawg li $ 5 / teev.
Routers thiab Ntau
Thaum Fortinet qhia tias tib neeg siv kev ruaj ntseg hloov tshiab rau tag nrho lawv cov khoom siv sib txuas hauv Is Taws Nem yam tsis muaj kev ncua, Thomas qhia tias qhov kev hem thawj tsis yog txwv rau cov khoom siv xws li routers thiab lwm yam Is Taws Nem ntawm Yam (IoT) cov cuab yeej zoo li tus menyuam saib. thiab lub koob yees duab kev ruaj ntseg hauv tsev.
"Malware tau dhau los ua qhov tsis txaus ntseeg thiab ntse ntawm kev siv cov neeg siv kawg nkaus los ua ib feem ntawm botnet," taw qhia Thomas. Nws tau hais tias txhua tus neeg siv PC yuav tsum ua kom lawv cov cuab yeej antimalware nyob ruaj khov. Tsis tas li ntawd, txhua tus yuav tsum ua txhua yam lawv ua tau kom tsis txhob muaj qhov chaw tsis txaus ntseeg, nrog rau phishing tawm tsam.
Raws li TrendMicro, kev sib txuas hauv internet tsis zoo yog ib qho ntawm cov cim qhia ntawm kev cuam tshuam router. Ntau lub botnets kuj hloov pauv cov ntawv pov thawj nkag ntawm lub cuab yeej cuam tshuam, yog li yog tias koj tsis tuaj yeem nkag mus rau hauv koj lub cuab yeej txuas nrog hauv internet siv cov ntaub ntawv pov thawj uas twb muaj lawm (thiab koj ntseeg siab tias koj tsis yuam kom yuam kev lo lus zais), muaj feem ntau. malware tau nkag mus rau koj lub cuab yeej, thiab hloov nws cov ntsiab lus nkag.
Thaum nws los txog rau malware kis hauv computer, Thomas tau hais tias cov neeg siv khoom yuav tsum ua kom nws ua tus cwj pwm los saib xyuas CPU siv lawv lub tshuab ntawm ib ntus. Qhov no yog vim muaj ntau cov botnets kuj suav nrog cryptomining malware uas nyiag thiab hogs koj lub computer processor rau kuv cov cryptocurrencies.
"Yog tias koj lub kaw lus khiav nrawm yam tsis muaj kev sib txuas pom tseeb, qhov no tuaj yeem yog qhov qhia tias nws yog ib feem ntawm botnet," ceeb toom Thomas. "Yog li thaum koj tsis siv koj lub laptop, kaw nws tag nrho."
