Zvaunoda kuziva pamusoro peStuxnet worm
Stuxnet inogadzirwa nekombiyuta iyo inoshandiswa nemhando dzemabhizimisi ekugadzirisa maitiro (ICS) ayo anowanzoshandiswa mune zvigadzirwa zvehupfumi zvinotsigira zvivako (kureva mashizha emagetsi, nzvimbo dzokurapa mvura, magesi emagetsi, nezvimwe).
Iyo honye inowanzotaurwa kuti yakatanga kuwanikwa muna 2009 kana 2010 asi yakanyatsowanikwa yakarwisa hurongwa hwekireya reIrikania kare muna 2007. Mumazuva iwayo, Stuxnet yakawanikwa kunyanya kuIrish, Indonesia, neIndia, inotarisa kupfuura 85% yezvose zvirwere.
Kubva panguva iyoyo, honye yakagadzirisa zviuru zvemakombiyuta munyika dzakawanda, kunyange kuparadza zvachose mimwe magetsi nekudzima chikamu chikuru che nuclear nuclear centrifuges.
Stuxnet Inoitei?
Stuxnet yakagadzirirwa kushandura Programmable Logic Controllers (PLCs) inoshandiswa mune izvo zvivako. Mumamiriro ezvinhu eICS, PLCs inoshandisa mafashandi emhando dzemabhizimisi zvakadai sekuraira kutenderera kwezinga kuti ichengetedze kushandiswa uye kutaridzika kwekushisa.
Yakagadzirirwa kupararira chete kumakombiyuta matatu, asi imwe neimwe yeiyo inogona kupararira kune vamwe vatatu, ndiyo iyo inoparadzira.
Chimwe chezviitiko zvayo ndezvekupararira kune zvishandiso pane imwe nzvimbo yenzvimbo isingabatanidzi kuInternet. Semuenzaniso, zvinogona kutamira kune imwe kombiyuta kuburikidza ne USB asi zvino inopararira kune imwe mimwe michina yega yega mushure me router isati yasarudzwa kuti iende kune dzimwe nhepfenyuro, zvichikonzera zvakakonzerwa madivirati e-intranet kuti apindirane.
Pakutanga, mapurisa eTyxxnet akaiswa zvinyorwa kubva kune zvinyorwa kubva kune zvikwangwani zvakavimbika zvakashandiswa kumajeri eJMicron na Realtek, izvo zvakabvumira kuti zvive nyore kuzviisa pachako pasina kushungurudza kunoita kumunhu. Kubva panguva iyo, zvakadaro, VeriSign akadzora zviiti.
Kana hutachiona hunoenda pane kombiyuta isina chakanaka Siemens software yakaiswa, icharamba isingabatsiri. Uyu ndiwo musiyano mukuru pakati pehutachiona uye nevamwe, pakuti hwakakonzerwa nechinangwa chakanyanyisa uye hausi "kuda" kuita chero chinhu chisingafadzi kune mamwe mamiriyoni.
Stuxnet Inosvika Sei PLC?
Nezvikonzero zvekuchengeteka, zvakawanda zvezviridzwa zvehurdware zvinoshandiswa mumagetsi ekugadzirisa masangano hazvisi ye-internet-yakabatana (uye kazhinji haisati yakabatanidzwa kune chero mimwe mitambo yenzvimbo). Kutsigira izvi, Stuxnet worm inobatanidza nzira dzakasiyana-siyana dzakanakisisa dzekupararira nechinangwa chekupedzisira kusvika nekudzivirira STEP 7 purojekiti yemafaira inoshandiswa kuronga ma PLC.
Nokutanga kwezvinangwa zvinopararira, mhondi inotanga makombiyuta ari kuita maWindows operating systems, uye kazhinji anoita izvi kuburikidza nefaira rinotyisa . Zvisinei, PLC pachayo haisi yeWindows-based system asi panzvimbo yekushandisa mutauro wemichina yemashini. Nokudaro Stuxnet anongopfuura nemakombiyuta eWindows kuitira kuti asvike kune zvirongwa zvinotarisira PLC, pane iyo inopa mubhadharo wayo.
Kudzokorora zvakare PLC, iyo Stuxnet worm inotsvaka uye inopinza STEP 7 purojekiti yepurojekiti, iyo inoshandiswa na Siemens SIMATIC WinCC, mutungamiri wekutarisira uye kuwanikwa kwezvinhu (SCADA) uye shanduro yevanhu-machine (HMI) inoshandiswa kuronga PLCs.
Stuxnet ine miitiro yakasiyana-siyana kuti ione yakananga PLC. Iyi yekuongorora chekufananidzira inokosha sezvo magetsi ekuraira mazano achasiyana pane zvakasiyana-siyana zvePC. Kana imwe yechirongwa ichi chave ichionekwa uye ichiwana utachiwana, Stuxnet inowana kumira kwekutora zvose dheta dzinopinda mukati kana kunze kwePCC, kusanganisira kukwanisa kuderedza iyo data.
Mazita Stuxnet Anoenda Na
Kutevera ndevamwe nzira yako chirongwa chinonzi antivirus chinogona kuzivisa Stuxnet worm:
- F-Yakachengeteka : Trojan-Dropper: W32 / Stuxnet
- Kaspersky : Rootkit.Win32.Stuxnet.b kana Rootkit.Win32.Stuxnet.a
- McAfee : Stuxnet
- Norman : W32 / Stuxnet.A
- Sophos : Troj / Stuxnet-A kana W32 / Stuxnet-B
- Symantec : W32.Temphid
- Trend Micro : WORM_STUXNET.A
Stuxnet angavewo ane "hama" dzinoenda mazita angu seDuqu kana Flame .
Nzira Yokubvisa Stuxnet
Sezvo Siemens software yakavhiringidzwa kana kombiyuta inotapukirwa neStuxnet, zvakakosha kuonana navo kana utachiona hunofungidzirwa.
Uyewo shandisai system yakazara scan nehurongwa hweAntivirus seAvast kana AVG, kana ye-on-demand virus scanner yakafanana neMalwarebytes.
Zvakakoshawo kuchengetedza Windows yakashandurwa , izvo zvaunogona kuita neWindows Update .
Ona Nzira Yokugadzirisa Zvakanaka Kakombiyuta Yako yeMalware kana uchida rubatsiro.