Pūmanawa kino, he whakarāpopototanga o "pūmanawa kino," He kupu whakamataku te kupu ""ā, kāore e kore ka whakaoho i ngā kare āwangawanga i roto i te ao rorohiko, ā, he take pai anō hoki. Ko te kaupapa o ēnei kaupapa huna he kuhu, he whakararuraru, he whakararuraru i tētahi pūnaha rorohiko, he tikanga kino te nuinga. Kua roa tēnei e haere mai ana, ā, i te whanaketanga o te hangarau, kua pērā anō hoki te pūmanawa kino, ā, kua whānui haere, kua kino haere. Nō reira, he mea nui te mārama ki te āhua o ngā whakaeke pūmanawa kino mō ngā mahi haumarutanga tukutuku whai hua, nā te mea he tūmomo riri nui ēnei whakaeke ki ngā tāngata takitahi me ngā whakahaere.
I te rautau 21, kua kite te ao i tētahi āhuatanga nui rawa atu noa o ngā whakaekenga pūmanawa kino me ngā kaupapa tino kaha. I te tau 2023, i uru atu te pūmanawa kino ki roto 40% o ngā takahi raraunga, he pikinga 30% mai i te tau 2022Neke atu i te 100 miriona momo pūmanawa kino i kitea e AV-Test, ā, tera pea kaore i te pai ngā tono (PUA). Hei tāpiri, 81% o ngā whakahaere i pāngia e ngā tūmomo mōrearea mai i te pūmanawa kino, ngā whakaeke hītinihanga, me ngā takahi kupuhipa.
I roto i ētahi atu, kua tino whanake te ransomware hei āwangawanga nui. E ono tekau ōrau o ngā pakihi iti i pāngia e te mate ki ngā takahi raraunga Tuhinga o mua kati tonu. Kāore he tauira kaha ake e whakaatu ana i te hiranga o te haumarutanga tukutuku pakari me te tiakitanga mai i te tukino i te tūmataitinga i te ao whānui.
I roto i tēnei raupapa hītori whakaeke pūmanawa kino, ka tūhuratia e tātou te whanaketanga o te pūmanawa kino – he kēmu ngeru-me-kiore i waenganui i ngā kaihara ipurangi me ngā kaiwawao. Heoi, kia tūpato koutou, nā te mea ka tūhuratia e tātou ngā kokonga me ngā kokonga o te ao matihiko, te wāhi e hanga ai ngā rārangi waehere i ngā ture, ā, ko te mōhiotanga te mea nui ki te whakarite i a tātou anō ki te Pūmanawa Kino Kaha Rawa.
He Tirohanga Whānui mō ngā Whakaeke Pūmanawa Kino i roto i te Hītori
Kutukutu Shai-Hulud i roto i ngā Mōkihi npm (2025)
Whakamārama:
Shai Hulud I puta mai hei kutukutu tārua-ake e huna ana i roto i ngā mōkihi npm. Kāore i rite ki ngā Trojan motuhake, i whakakotahi i te tahae tohu, te tango aunoa i te raraunga, me te horapa tere. I hangaia e ia ngā putunga GitHub i tapaina ko "Shai-Hulud," i tango i ngā mea ngaro, ā, i whakaputa anō i ngā putanga kua pangia puta noa i ngā rau mōkihi i roto i ngā hāora.
Pānga:
I whakararuraru te whakaekenga i te pūnaha npm i te tauine nui. Ngā kaiwhakawhanake me CI/CD pipelineKo te tango i ngā mōkihi tūmatanui i tūpono tonu ki te turuturu o ngā tohu tuakiri, te takahi i ngā pūkete kapua, me te whakarerekē tonu i te rerema mahi GitHub. I tere te tipu o te whānuitanga o te pahūtanga i te mea he maha atu ngā mōkihi i pangia.
Akoranga:
I whakakitea e Shai-Hulud te ngoikore o te ao hou pipelineKoia ēnei. Me whakaaro ngā tāutanga whakawhirinaki katoa he whakatinanatanga waehere. Me matawai aunoa ngā whakahaere, me whakatinana i ngā kōnae maukati, me te whakahaere tohu pakari hei aukati i ngā tūponotanga i mua i te horapa.
Matatini:
I whakamahia e te kutukutu te whakapōrearea, ngā kawenga nui kua whakaurua ki roto i te Webpack, me te whakahaere waehere hihiri hei karo i te kitenga. He whai hua tana horapa, i hurihia ai te tohu kotahi i tahaetia hei rau o ngā mōkihi kua takahia. Nā tēnei taumata aunoatanga i whakaara ake i a ia mai i te tauira pūmanawa kino noa ki te kutukutu mekameka tuku nui.
Pūmanawa Ransomware Lapsus$ (2022)
Whakamārama:
Rapu$ i whakanuia te hiranga o ngā mahi haumarutanga tukutuku pakari. Nō reira, he mea nui ngā tārua auau, te wehewehe whatunga, me te whakangungu kaimahi hei ārai me te whakaiti i ngā whakaekenga ransomware. Heoi anō, kaua rawa ngā whakahaere e whakawhirinaki ki te utu utu anake hei otinga.
Pānga:
I pāngia ngā whakahaere e te mataku whānui me ngā mate pūtea i Lapsus$. I pāngia rātou e te raruraru o te utu i te utu, te tūpono rānei ki te huraina o ngā raraunga muna. I whakaae ētahi o ngā tāngata i pāngia, ko ētahi i whiriwhiri ki te hanga anō i ā rātou pūnaha mai i te tīmatanga.
Akoranga:
I whakanuia e Lapsus$ te hiranga o ngā mahi haumarutanga tukutuku pakari. Nō reira, he mea nui ngā tārua auau, te wehewehe whatunga, me te whakangungu kaimahi hei ārai me te whakaiti i ngā whakaekenga ransomware. Heoi anō, kaua rawa ngā whakahaere e whakawhirinaki ki te utu utu hei otinga anake.
Matatini:
Rapu$ i whakamatauhia ngā tikanga matatau, tae atu ki te waehere maha-whakaahua, ngā rautaki karo, me te horapa whai hua. Kāore i kitea ngā kaihanga, ā, i waiho ngā tohunga haumarutanga tukutuku kia pōhēhē mō ō rātou tuakiri me ngā kaupapa.
Te Ratonga Ransomware DarkSide (RaaS) 2020
Whakaahuatanga:
Darkside i puta mai i te marama o Ākuhata 2020 hei kaitākaro nui i roto i te ao o te ransomware. Kei te mahi a DarkSide hei Ransomware-as-a-Service (RaaS), ā, ka tukuna e ia āna pūmanawa kino ki ngā hononga e whakahaere ana i ngā whakaeke.
Pānga:
I rongonui te rōpū DarkSide mō te whakarite i te whakaekenga ransomware ki Colonial Pipeline i te marama o Mei 2021. Nō reira, nā tēnei whakaekenga hanganga nui i akiaki te kamupene ki te kati wawe i tana 5,500-maero pipeline, e whakarato ana i te 45 ōrau o te wahie e whakamahia ana i te Tai Rāwhiti o te Hononga o Amerika.
Akoranga:
Te Koroni Pipeline I whakaatuhia e te aituā te hiahia mō ngā mahi haumarutanga tukutuku pakari. Me tiaki ngā whakahaere mai i te pūmanawa utu-kore mā te whakatinana i ngā rautaki ārai, pērā i te tārua auau, te wehewehe whatunga, me te whakangungu kaimahi. Hei tāpiri, he mea nui te whai i tētahi mahere urupare aituā hei whakaiti i te pānga o aua whakaeke.
Matatini:
He ratonga a DarkSide, e tohatoha ana i ngā hua o te pahua i waenga i ngā rangatira RaaS me ā rātou hononga. Ka whiriwhiria e ia hononga ngā tikanga utu me ngā patunga, ā, ka whakamahia te ransomware mā te whakamahi i āna tikanga urutomo. Kāore te FBI e tino ārai i te utu utu, nā te mea ka haere tonu ngā whakaeke me ngā ewhakatenatena ngā mahi taihara.
Te Whakaekenga Ransomware Conti (2019)
Whakamārama:
Te whakaekenga a Conti ransomware he aituā rongonui tēnei i roto i te ao o ngā tūmomo riri ipurangi. Ina koa, i puta ake hei momo pūmanawa kino tino whai hua, ā, i pāngia ngā whakahaere puta noa i te ao.
Pānga:
Kua nui ngā mate pūtea me ngā raruraru mahi kua pā ki ngā hinonga kua tohua nā te pūmanawa kino a Conti. He mea nui, ka whakamunatia e ia ngā kōnae nui, ā, ka tono utu hei utu mō ngā kī wetewete. Nō reira, ka uaua te wetewete i ngā whakahaere e pāngia ana e Conti.cisngā ion: utua te utu, ki te kore ka tūpono koe ki te ngaronga raraunga tuturu.
Akoranga:
Te whakaekenga a Conti hngā mea nui te hiranga o ngā mahi pakari mō te haumarutanga tukutuku. Me whakarite e ngā whakahaere ngā mahi ārai, pērā i te tārua auau, te wehewehe whatunga, me te whakangungu kaimahi. Hei tāpiri, mā te whai i tētahi mahere urupare aituā ka taea whakaiti te pānga o ngā whakaekenga ransomware.
Matatini:
He matatau te mahi a Conti, mā te whakamahi i ngā tikanga whakamuna matatau me te karo i ngā tikanga kimi. Ko tōna whanaketanga pea he rōpū taihara kua utua pai, he kaiwhakaari rānei e tautokona ana e te kāwanatanga. Nō reira, me mataara me mahi tahi puta noa i ngā rāngai te tiaki i a Conti.
Te Whakaekenga Ransomware WannaCry (2017)
Whakamārama:
WannaCry, e mōhiotia ana ko WannaCrypt, he whakaeke ransomware i pakaru te ao katoa i te marama o Mei 2017. Ina koa, i whakamahia e tēnei pūmanawa kino tētahi ngoikoretanga i roto i ngā pūnaha whakahaere a Microsoft Windows, me te aro nui ki ngā putanga tawhito kāore anō kia whakahoutia ki ngā papaki e tika ana.
Pānga:
Neke atu i te 200,000 ngā rorohiko i pāngia e WannaCry puta noa i te 150 whenua, ā, i whakararuraru i ngā hōhipera, ngā pakihi, me ngā tari kāwanatanga. Nō reira, i tono ngā kaiwhakaeke i ngā utu Bitcoin hei utu mō ngā kī wetewete hei iriti i ngā pūnaha kua pangia.
Akoranga:
He mea nui te whakatikatika me te whakahōu i te wā tika. Me whakarite e ngā whakahaere ngā whakatikatika haumarutanga kia kore ai e whakamahia kinotia ngā ngoikoretanga. Mā te whakahōu i ngā pūmanawa i ia wā ka āwhina i te tiaki i a rātou mai i ngā ngoikoretanga e mōhiotia ana.
Taunga:
I whakaatuhia e te whakaekenga WannaCry te hiranga o ngā whakahoutanga haumarutanga i te wā tika me ngā mahi haumarutanga tukutuku pakari. I whakaatuhia hoki te pānga whānui pea o ngā whakaekenga ransomware ki ngā ratonga me ngā hanganga nui.
Te Whakaeke Pūmanawa Kino a NotPetya (2017)
Whakamārama:
I te tīmatanga i whakaponohia he momo kē atu o te Petya ransomware, NoPetya i muri mai ka tautuhia hei kaihoroi whakangaro e whakaahua ana i a ia he ransomware. Ko Ukraine te kaupapa matua o tēnei pūmanawa kino, engari i puta he kino nui ki te ao katoa.
Pānga:
I pāngia ngā kamupene nui pēnei i a Maersk me Merck e ngā mate nui nā NotPetya. He rerekē ki te pūmanawa utu-kore noa, ko te kaupapa matua o NotPetya he whakangaromanga, kaua ki te whiwhi moni.
Akoranga:
Ka taea e ngā whakaeke ipurangi te haumaru ngā hua o te ao whānui. Ahakoa ka aro tuatahi te whakaeke ki tētahi rohe motuhake, ka tere te horapa me te pā ki ngā whakahaere puta noa i te ao. He mea nui ngā mahi haumarutanga tukutuku pakari mō ngā pakihi katoa.
Tohu:
I whakaatu a NotPetya i te pānga pea o ngā whakaekenga ipurangi ki ngā hanganga nui me ngā mekameka tuku taonga o te ao, me te whakanui i te hiahia mō ngā mahi whānui mō te haumarutanga ipurangi puta noa i ngā rāngai katoa.
Pene Whakaeke Pūmanawa Kino(2010)
Whakamārama:
Pene he kutukutu auaha i hangaia hei whakararu i te kaupapa karihi a Iran. Ina koa, i aro atu ki ngā pūnaha whakahaere ahumahi (ICS) e whakamahia ana i roto i ngā tukanga whakapai ake i te uranium.
Pānga:
I pāngia ngā pūwhakapūngao i te whare karihi o Natanz i Iran e Stuxnet, he wā nui tēnei i roto i te pakanga ipurangi. Nō reira, i whakaatuhia e ia ka taea e ngā whakaekenga mamati te arahi ki te kino tinana.
Akoranga:
He tūturu te pakanga ipurangi. Stuxnet whakaaturia ka taea e ngā whakaeke matihiko te whakararu tinana. Me tiaki ngā hanganga nui, ngā pūnaha whakahaere ahumahi, me ngā whakaurunga karihi mai i ēnei tūmomo tūmomo riri.
Matatini:
He tino matatau a Stuxnet, he maha ngā ngoikoretanga zero-day i whakamahia, ā, he tikanga horapa puku hoki. Heoi anō, he nui ngā rauemi i whakamahia mō tana whanaketanga, e tohu ana i te whai wāhi mai o te kawanatanga.
I LOVEYOU (2000)
Whakamārama:
AROHA KI A KOE he kutukutu i horapa mā te īmēra me ngā whatunga tiritiri kōnae, i tīmata mai i Philippines. He mea nui, i hunaia hei tāpiri reta aroha, hei whakamahi i te whakawhirinaki o ngā kaiwhakamahi.
Pānga:
Nā te tuhirua i ngā kōnae me te tere o te tipu haere, i pāngia ai e te kutukutu ILOVEYOU ngā piriona tāra. Nō reira, i whakaatuhia te ngoikore o ngā pūnaha īmēra me te hiranga o te mōhiotanga o ngā kaiwhakamahi ki te haumarutanga tukutuku.
Akoranga:
He mea nui te mōhiotanga o ngā kaiwhakamahi. Hei tauira, ka horapa a ILOVEYOU mā roto i ngā tāpiritanga īmēra, ka whakamahia te whakawhirinaki o ngā kaiwhakamahi. Nō reira, he mea nui te whakaako i ngā kaiwhakamahi ki ngā tikanga haumaru īmēra me ngā tāpiritanga whakapae.
Conficker (2008)
Whakamārama:
Konikara he kutukutu i whakamahi i ngā ngoikoretanga i roto i a Microsoft Windows, ā, i hangaia ai tētahi o ngā whatunga karetao nui rawa atu i mōhiotia i te Whiringa-ā-rangi 2008.
Pānga:
I tukinotia e Conficker ngā miriona rorohiko, e whakaatu ana i te hiahia nui mō te whakatikatika i te whatunga i te wā tika me ngā mahi haumarutanga whatunga pakari.
Akoranga:
Mā te kore e aro ki ngā whakahōunga haumarutanga ka raru peasastĀe. I tino angitu a Conficker i runga i ngā pūnaha kāore anō kia whakatikatikaina. Nō reira, me whakatairanga ngā whakahaere i te akuaku haumarutanga, tae atu ki te whakahaere whakatikatika auau.
Tuutuu:
Ahakoa ngā mahi hei pupuri i tēnei, i haere tonu a Conficker ki te whanake me te whakapoke i ngā pūnaha, me te kite i te wero tonu o te whawhai ki on me ngā pūmanawa kino e taea te urutau.
Opaniraa
He rite ki te hoari mata rua, he rite ēnei whakaekenga pūmanawa kino whakamataku ki nui he tauira mō te āhua o te huringa tonu o te ao matihiko. Ka whakakaha ake i te hiahia mō te haumarutanga pakari, te whakatikatika, me te mātauranga kaiwhakamahi hei tiaki i a rātou anō ngā mōrearea o te pūmanawa kino. Engari he māmā noa iho tā mātou karere: Me noho tonu koe mataara a ka kua rite ki te mahi te haumarutanga tukutuku pai.
Me pēhea te mahi a Xygeni Open Source Security Ka tiakina koe e te otinga mai i ngā whakaekenga pūmanawa kino
E ai ki tā tātou i kite ai, kei te whanake haere tonu ngā tūmomo riri ipurangi, kei te mātau haere, kei te uaua haere hoki te kite. Ko ngā pūmanawa tuwhera pūtake, e whakawhirinakihia ana e tātou katoa, kua waiho hei whāinga matua mā ngā kaiwhakaeke e ngana ana ki te whakauru puku i ngā pūmanawa kino ki roto i te mekameka tuku pūmanawa. Koinei te wāhi e Xygeni's Open Source Security otinga ka tae mai, ka tuku i te tiakitanga e hiahiatia ana e koe.
Kia Kaha Tonu me te Aroturuki Tonu
Whakaarohia te maha o aua whakaeke kino rongonui i taea te aukati mā te kimi wawe. Ka tirotirohia e te otinga a Xygeni ngā wāhanga pūtake tuwhera, ka matawai i ngā rēhita tūmatanui nui pēnei i a NPM, Maven, me PyPI i te wā tonu. Ka hopukina, ka āraihia hoki e tēnei huarahi matatau ngā mōkihi kino i mua i te wā e puta ai he raruraru.
Te Hopu i ngā Tūraru Huna mā te Kimi Matatau
Kia pono tātou: he maha ngā wā ka ngaro i ngā taputapu haumarutanga tuku iho ngā pūmanawa kino kore-rā. Koia te take e whakamahi ai a Xygeni i te tātari whanonga matatau hei kimi i ēnei tūmomo riri huna. Mā te titiro ki te whanonga o te waehere, ka taea e Xygeni te kimi me te whakakore i ngā pūmanawa kino matatini e ngaro pea i ētahi atu otinga. Ko te mutunga? Ka noho haumaru tō pūmanawa mai i ngā tūmomo riri hou.
Te Arotahi ki ngā Mea Tino Hira
Kāore e ranea te kimi noa i ngā tūmomo riri—me mōhio koe ko ēhea hei aro atu i te tuatahi. Mā Xygeni koe e āwhina mā te whakarite i ngā ngoikoretanga i runga i te kaha o aua ngoikoretanga, te tūponotanga ka whakamahia kinotia, me ō rātou pānga pea ki tō pakihi. Mā tēnei, ka taea e tō rōpū haumarutanga te arotahi ki ngā mea nui, ā, ka ārai i ngā take iti kei huri hei raruraru nui.
Te Whakauru Maeneene ki tō Rerenga Mahi
I tēnei ao whanaketanga tere o ēnei rā, me whai haumarutanga koe e mahi tahi ana me koe, kaua e whawhai ki a koe. Ka uru pai te otinga a Xygeni ki roto i tō pūnaha o nāianei. CI/CD pipelines, e whakarato ana i ngā matawai aunoa me ngā whakatūpato wā-tūturu me te kore e whakaroa i a koe. Ko te tikanga o tēnei kei te tū tonu tō parepare ki te pūmanawa kino, kei te mataara tonu, ā, kei te rite tonu ki te whakautu.
Kua rite koe ki te tiaki i tō pūmanawa mai i ngā tūmomo riri hou? Ako atu mō Xygeni's Open Source Security otinga ā, tīmata te tiaki i ō tono i tēnei rā!
