NSA ŷ 7 Ȱ...ڵ ϴ
24ð ģ ɽ ...ڽ ȸϱ
[ȴ ] ε Ŀ(Shadow Brokers) NSA ̹ ũ(WannaCry) ź״ٸ, ̹ ̳зϽ(EternalRocks) Ʈũ ߴ. NSA ͽ÷ 7 Ȱϰ ִ Ÿ. Դٰ 5 ù° ֺ Ʈũ ý ѿԴٰ Ѵ.
ͳηϽ ߰ ũξƼ ħش Ҽ ̷ν (Miroslav Stampar), ڽ ϴ 7 ϴ ýۿ ó ɷ κ м ߴٰ Ѵ. (Github) ε״.
İ м ٿ ͳηϽ ̷ε尡 24ð 2ܰ迡 Ȯȴ. ͳηϽ Ȱϴ 7 NSA ͽ÷ 1) ͳκ(EternalBlue), 2) ͳèǿ(EternalChampion), 3) ͳηθǽ(EternalRomance), 4) ͳνó(EternalSynergy), 5) (DoublePulsar), 6) Űġ(Architouch), 7) ġ(Smbtouch) Ѵ. 1~4 ͽ÷̰, 5 鵵̸, 6~7 ̴.
̷ε尡 ͳηϽ ħ ϳ ܼϴ. ٷ 鵵 ߰ ٿε ġϴ ̴. ù ܰ ֿ UpdateInstaller.exe̸, ʿ .NET ҵ TaskScheduler SharpZLib ͳݿ ٿε ֽϴ. svchost.exe ɾ. ̴ archive.torproject.org C&C κ 丣 ٿεް, ŷϰ, Ű մϴ. ù ܰ ħ.
24ð ° ܰ ۵ȴ. ° ٿε Ǵ taskhost.exe Դϴ. shadowbrokers.zip̶ ͽ÷ Ű ٿεް ŷմϴ. payloads, configs, bins 丮 ˴ϴ. Ŀ 445 Ʈ(SMB Ʈ) ij .
ñ ش ߰ Ӵ ťƼ(Heimdal Security) ü ÿ (BlueDoom)̶ ̸ ٿ. ũ̿ ϸ , ξ ̷ 24ð̳ Ȱ Ѵٴ մϴ. ڽ ȸϱ ̸, ̹ ڵ NSA ͽ÷ ȰϿ غ մϴ.
Ȱ NSA ͽ÷ Ȱ ũ̴ ܱ 븰 ó ̴µ ͳηϽ(Ȥ ) мȴٴ ̴. ͳηϽ ƯҸ NSA ͽ÷ Ȱϰ ִٴ ̴ϴ. NSA پϰ غ ִ иմϴ. ο ۵Ǿٴ .
Ǿٸ ġ ڴʰ Ѵٰ ؼ ͳηϽ ִ ͵ ƴϴ. Ƿ ִ Ȯ ƾ Ѵ. Ĵ ڶ Ʈũ Ʈ 丮 ֱ 丣 ־ Ȯؾ մϴ. ش ý ִ иس ġ ؾ մϴ. ߿ صδ ͵ ƾ մϴ.
[ (globoan@boannews.com)]
24ð ģ ɽ ...ڽ ȸϱ
[ȴ ] ε Ŀ(Shadow Brokers) NSA ̹ ũ(WannaCry) ź״ٸ, ̹ ̳зϽ(EternalRocks) Ʈũ ߴ. NSA ͽ÷ 7 Ȱϰ ִ Ÿ. Դٰ 5 ù° ֺ Ʈũ ý ѿԴٰ Ѵ.
[̹ = iclickart]
ͳηϽ ߰ ũξƼ ħش Ҽ ̷ν (Miroslav Stampar), ڽ ϴ 7 ϴ ýۿ ó ɷ κ м ߴٰ Ѵ. (Github) ε״.
İ м ٿ ͳηϽ ̷ε尡 24ð 2ܰ迡 Ȯȴ. ͳηϽ Ȱϴ 7 NSA ͽ÷ 1) ͳκ(EternalBlue), 2) ͳèǿ(EternalChampion), 3) ͳηθǽ(EternalRomance), 4) ͳνó(EternalSynergy), 5) (DoublePulsar), 6) Űġ(Architouch), 7) ġ(Smbtouch) Ѵ. 1~4 ͽ÷̰, 5 鵵̸, 6~7 ̴.
̷ε尡 ͳηϽ ħ ϳ ܼϴ. ٷ 鵵 ߰ ٿε ġϴ ̴. ù ܰ ֿ UpdateInstaller.exe̸, ʿ .NET ҵ TaskScheduler SharpZLib ͳݿ ٿε ֽϴ. svchost.exe ɾ. ̴ archive.torproject.org C&C κ 丣 ٿεް, ŷϰ, Ű մϴ. ù ܰ ħ.
24ð ° ܰ ۵ȴ. ° ٿε Ǵ taskhost.exe Դϴ. shadowbrokers.zip̶ ͽ÷ Ű ٿεް ŷմϴ. payloads, configs, bins 丮 ˴ϴ. Ŀ 445 Ʈ(SMB Ʈ) ij .
ñ ش ߰ Ӵ ťƼ(Heimdal Security) ü ÿ (BlueDoom)̶ ̸ ٿ. ũ̿ ϸ , ξ ̷ 24ð̳ Ȱ Ѵٴ մϴ. ڽ ȸϱ ̸, ̹ ڵ NSA ͽ÷ ȰϿ غ մϴ.
Ȱ NSA ͽ÷ Ȱ ũ̴ ܱ 븰 ó ̴µ ͳηϽ(Ȥ ) мȴٴ ̴. ͳηϽ ƯҸ NSA ͽ÷ Ȱϰ ִٴ ̴ϴ. NSA پϰ غ ִ иմϴ. ο ۵Ǿٴ .
Ǿٸ ġ ڴʰ Ѵٰ ؼ ͳηϽ ִ ͵ ƴϴ. Ƿ ִ Ȯ ƾ Ѵ. Ĵ ڶ Ʈũ Ʈ 丮 ֱ 丣 ־ Ȯؾ մϴ. ش ý ִ иس ġ ؾ մϴ. ߿ صδ ͵ ƾ մϴ.
[ (globoan@boannews.com)]
<۱: ȴ(www.boannews.com) ->