ransomware akan Linux
Duba Point Research jama'a Nazarin kwatankwacin kan harin ransomware akan Linux da Windows kuma a cikin wannan muhimmin yanayin yana bayyana, karuwar hare-hare akan tsarin Linux.
A cikin binciken su na baya-bayan nan, CPR yana bayyana yanayin sauƙaƙawa a cikin iyalai na ransomware da ke hari akan Linux, tare da ayyuka masu mahimmanci an rage su zuwa matakan ɓoyewa na asali waɗanda ke ba da damar waɗannan barazanar su zama marasa fahimta da wuyar ganewa.
Ante karuwar hare-haren ransomware akan Linux a cikin 'yan shekarun nan (musamman akan tsarin ESXi), Binciken ya kafa kwatancen dabaru boye-boye tsakanin Windows da Linux da fifiko ga ChaCha20/RSA da AES/RSA algorithms a cikin ransomware akan Linux an bayyana.
Yau Karanta ko jin labarai game da harin ransomware akan Linux ba kowa bane, a matsayin tarihi, barazanar ransomware sun fi mayar da hankali kan mahallin Windows. Kuma ba saboda Linux yana da 100% amintacce ba (saboda a zahiri ba haka bane kuma babu wani tsarin da zai kasance), amma saboda Windows tsarin "mafi yawan kasuwanci" ne kuma ya mamaye kasuwar tsarin tebur, hackers yawanci suna da shi a matsayin babban manufa.
Koyaya, yayin da yanayin ke faruwa, Linux ransomware yana samun ƙasa. Wannan shi ne abin da yake gaya mana CPR a cikin bincikensa, wanda ya ambaci cewa ya bincika iyalai 12 na ransomware cewa ko dai sun yi niyya ga tsarin Linux kai tsaye ko kuma suna da damar yin amfani da dandamali wanda ke ba su damar kamuwa da Windows da Linux.
Ofaya daga cikin keɓantattun kayan fansa akan Linux shine sauƙin ɗan adam idan aka kwatanta da takwarorinsa na Windows. Yawancin waɗannan barazanar Linux suna mai da hankali kan OpenSSL.
Hoto 1: Iyalan ransomware don Linux.
Hoto 2: Iyalan Ransomware don Windows
A cikin Hotunan da CPR ta raba, za mu iya lura da juyin halittar kayan fansho na tarihi, samfurin farko da aka gano tun daga 1989 kuma ya shafi Windows. Sai 2015, tare da Linux.Encoder.1, cewa ransomware akan Linux ya sami karɓuwa.
Binciken CPR yana bayyana karkata zuwa ga sauƙaƙawa na iyalan ransomware akan Linux. Wannan lamari Yana da alaƙa da raguwar mahimman ayyuka zuwa matakan ɓoyewa na asali, dogara sosai akan saiti na waje da rubutun. Wannan dabarar ba wai kawai tana sa gano ta cikin wahala ba, har ma tana nuna kashe lokaci mai yawa wajen gano ta. Binciken ya nuna takamaiman dabaru, musamman dangane da tsarin ESXi, lura da cewa lallausan hidimomin da aka fallasa sune manyan abubuwan da ke kawo hari.
Ransomware da ke niyya Linux yana nuna bambance-bambance masu ban mamaki dangane da wadanda aka kai hari da wadanda abin ya shafa idan aka kwatanta da takwarorinsu na Windows. Yayin da Windows ta fi rinjaye akan kwamfutoci na masu amfani da wuraren aiki, Linux yana yin galaba a yawancin aiwatar da sabar. A cikin wannan mahallin, ransomware akan Linux galibi an mayar da hankali ne akan sabar masu isa ga jama'a ko waɗanda ke kan hanyar sadarwa ta ciki, sau da yawa yana cin gajiyar raunin da cututtuka ke haifarwa a cikin tsarin Windows.
Wannan yanayin yana nuna yanayin da ya dace: ransomware akan Linux an tsara shi ta hanya mai mahimmanci don matsakaita da manyan kamfanoni, sabanin barazanar da ke yaduwa ta hanyar ransomware akan Windows. Takamaiman tsarin ciki na tsarin biyu kuma yana tasiri hanyoyin maharan don zaɓar manyan manyan fayiloli da fayiloli don ɓoyewa. Samfuran Linux galibi suna barin kundayen adireshi masu mahimmanci don hana lalacewar tsarin. Wannan yana tabbatar da hadaddun da takamaiman yanayin ransomware akan Linux idan aka kwatanta da takwarorinsa na Windows.
Babban makasudin binciken CPR ya kamata a fahimta mafi kyau manyan abubuwan motsa jiki don haɓaka ransomware masu niyya Linux maimakon Windows, wanda a ko da yaushe shine babban burin har yanzu. Hakanan yana da nufin gano manyan kamanceceniya da bambance-bambance tsakanin ransomware da waɗannan iyalai suka haɓaka tare da kwatanta su da ransomware da aka haɓaka don tsarin Microsoft.
LBabban kuma sanannen dalili shi ne babu shakka musamman sha'awa a cikin tsarin ESXi kama-da-wane. A gaskiya ma, ta hanyar kai hari ga waɗannan tsarin, maharan na iya samun tasiri mai mahimmanci akan ayyuka da na'urori masu yawa (duk masu amfani da wannan fasaha) ta hanyar mayar da hankali kawai akan wannan uwar garken ESXi maimakon ƙoƙarin matsawa zuwa wasu kwamfutoci da sabobin da ke gudana Windows.
Wataƙila wannan shine dalilin da ya sa mafi yawan iyalai na ransomware ke niyya Linux, duk da samun ƴan iyakoki a waje da ɓoyayye kanta, sukan aiwatar da takamaiman umarni da aka yi niyya don yin hulɗa tare da malware.
a karshe idan kun kasance sha'awar ƙarin sani game da shi, zaku iya bincika cikakkun bayanai a cikin bin hanyar haɗi.