Mune zvakazarurwa, vaongorori vezvekuchengetedza vakafumura yakaomesesa yekumashure yakananga macOS inonzi RustDoor, inozivikanwawo seTrojan.MAC.RustDoor. Ichishanda kubva muna Mbudzi 2023, iyi software yakaipa, yakawanikwa neBitdefender, inozvivharisa seMicrosoft Visual Studio update, ichiisa njodzi kune vashandisi pane ese Intel neArm architecture. Ichi chinyorwa chinotarisa mukuomesesa kweRustDoor, ichiongorora zviito zvayo, zvazvinoreva, uye hukama hwayo hunotyisa kumapoka ane mukurumbira akashata.
Kutarisa muRustDoor macOS Backdoo aka Trojan.MAC.RustDoorr
RustDoor's propagation method inoramba iine zvishoma, iine zvekutanga zvakawanikwa zvichiratidza kupararira kwayo kuburikidza neFAT mabhanari ane Mach-O mafaera. Chinokwidziridza kushushikana ndechekuonekwa kweakasiyana akawanda eiyo malware, zvichiratidza kuenderera mberi kwekusimudzira. Kufambidzana kumashure munaNovember 2, 2023, yekutanga inozivikanwa sampuro inoratidza inoshingirira uye inoshanduka inotyisidzira mamiriro.
Yakashongedzerwa neyakasiyana siyana yemirairo, RustDoor inopa simba vanotyisidzira kuti vatore dhata rakavanzika, kurodha mafaera, uye kuunganidza ruzivo nezve yakakanganisika masisitimu. Kumwe kudzokororwa kweiyo malware inoratidzira zvigadziriso zvinogoneka, zvichitsanangura iyo data yekuunganidza, yakanangwa faira rekuwedzera, akaongororwa madhairekitori, uye asingabatanidzwe madhairekitori. Iyo data yakabiwa inozotumirwa kune yekuraira-uye-kutonga (C2) sevha, ichikurudzira yakarongeka cybercriminal mashandiro.
Multiple RustDoor Versions Inowanikwa
Iyi backdoor inoratidzira kwakasiyana-siyana iterations, kugovera yakafanana musimboti mashandiro pamwe nekusawirirana kudiki. Yakanyorwa mukati ngura, iyo kodhi kodhi inoburitsa mazita ekutanga faira pakuongorora kwebhinari. Rust's yakasarudzika syntax inoisa matambudziko kune vanochengetedza kuchengetedza, ichipa mukana wehunyanzvi kune vanyori vemalware kuti vadzivise kuonekwa uye kuongorora kwakadzama.
Bitdefender inoratidzira hukama hunogona kuitika pakati peRustDoor nemhuri dzine mukurumbira wekudzikinura dzakadai seBlack Basta neBlackCat, ichitaura zvakafanana muC2 zvivakwa. Iyo yekupedzisira, yakanyorwa muRust, yakawana mukurumbira wekupayona bhizinesi rekudonha kweruzhinji risati raputswa nehurumende yeUS muna Zvita 2023. Muongorori wezvekuchengetedza Andrei Lapusneau anosimbisa mamiriro ari kuitika ekutyisidzirwa kwerudzikinuro, achisimbisa kukosha kwekuchenjerera kwakasimba uye matanho akasimba ekuchengetedza cybersecurity pakati. vashandisi ve macOS.
Zvinoreva uye Ramangwana Threat Landscape
Kuwanikwa kweRustDoor kunosimbisa maitiro arikushanduka anoshandiswa nemacybercriminals, kunyanya ayo akabatana nerununuro mashandiro. Iko mukana wekubiwa kwedata uye kukanganiswa kwehurongwa kunoda nzira yekukurumidza kubva kuvashandisi nemasangano zvakafanana. Kunzwisisa zvinorehwa uye kutora maitiro akasimba ekuchengetedza kwakakosha kudzikamisa njodzi dzine chekuita nekutyisidzira kwakaoma kudaro.
Maitiro Akanakisisa Ekudzivirira Kutapukirwa Kweramangwana
- Regular Software Updates: Chengetedza yako sisitimu yekushandisa uye software ichiri kusvika parizvino kuti ugadzire kusasimba nekukasira.
- Dzidzo Yemushandisi: Dzidzisa vashandisi nezve kutyisidzira phishing uye kukosha kwekunzvenga kudhawunirodha kwekufungidzira.
- Network Kuongorora: Shandisa robust network yekutarisa kuona uye kuvharira zviitiko zvakashata.
- Behavioral Analysis: Shandisa zvigadziriso zvekuchengetedza zvinoshandisa maitiro ekuongorora kuti uone zviitiko zvisina kujairika.
- Chiitiko Response Planning: Gadzira uye dzidzira chirongwa chekupindura chiitiko kudzikamisa kukanganisa kwezvingangoitika.
mhedziso
Kuwanikwa kwaRustDoor kunoshanda sechiyeuchidzo chakasimba chehupenyu hunogara huripo hwekutyisidzira kwecybersecurity. Kuziva kwakawedzera, kuenderera kusvinurira, uye kutorwa kwemaitiro ekuchengetedza ekuchengetedza zvakakosha kuti ufambe nemamiriro ekunze ekumusoro kumashure uye anogona kubatanidza ransomware mashandiro.