Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri \u015eimali Koreyan\u0131n \u201cLazarus\u201d qrupuna daxil olan \u201cAndariel\u201d kiberqrupunun yeni h\u00fccumlar\u0131n\u0131 a\u015fkar edibl\u0259r. Onlar tan\u0131nm\u0131\u015f DTrack proqram t\u0259minat\u0131n\u0131n modifikasiyalar\u0131ndan, el\u0259c\u0259 d\u0259 yeni fidy\u0259 proqram\u0131 \u201cMaui\u201d-d\u0259n istifad\u0259 edirl\u0259r. H\u0259d\u0259fl\u0259r aras\u0131nda AB\u015e, Yaponiya, Hindistan, Vyetnam v\u0259 Rusiyadak\u0131 b\u00f6y\u00fck t\u0259\u015fkilatlar yer al\u0131b. \u201cAndariel\u201d he\u00e7 bir x\u00fcsusi \u015firk\u0259t\u0259 diqq\u0259t yetirmir, t\u0259cav\u00fczkarlar \u00fc\u00e7\u00fcn \u0259sas h\u0259d\u0259f h\u0259d\u0259f t\u0259\u015fkilat\u0131n g\u00fccl\u00fc maliyy\u0259 v\u0259ziyy\u0259tidir.<\/p>\n\n\n\n
Qrup on ild\u0259n \u00e7oxdur ki, f\u0259aliyy\u0259t g\u00f6st\u0259rir v\u0259 2022-ci ild\u0259 z\u0259r\u0259rli proqram arsenal\u0131n\u0131 v\u0259 h\u00fccum co\u011frafiyas\u0131n\u0131 geni\u015fl\u0259ndirm\u0259y\u0259 davam etm\u0259kd\u0259dir. AB\u015e-\u0131n Kibert\u0259hl\u00fck\u0259sizlik v\u0259 \u0130nfrastrukturun M\u00fchafiz\u0259si Agentliyinin iyul hesabat\u0131nda<\/a> \u201cAndariel\u201d-in \u201cMaui\u201d fidy\u0259 proqram\u0131 il\u0259 h\u00f6kum\u0259t v\u0259 s\u0259hiyy\u0259 t\u0259\u015fkilatlar\u0131na h\u00fccum etdiyi qeyd olunur.<\/p>\n\n\n\n Kaspersky Threat Attribution Engine<\/a>-in m\u0259lumat\u0131na g\u00f6r\u0259 t\u0259cav\u00fczkarlar h\u0259m\u00e7inin \u201cLazarus\u201d qrupu t\u0259r\u0259find\u0259n yarad\u0131lm\u0131\u015f DTrack casus proqram\u0131ndan istifad\u0259 edir. Z\u0259r\u0259rli proqram qurbanlar\u0131n sisteml\u0259rin\u0259 v\u0259 sisteml\u0259rind\u0259n fayllar\u0131 y\u00fckl\u0259m\u0259k, d\u00fcym\u0259 toxunu\u015flar\u0131n\u0131 qeyd etm\u0259k v\u0259 z\u0259r\u0259rli uzaqdan idar\u0259etm\u0259 al\u0259tin\u0259 (RAT) xas olan dig\u0259r h\u0259r\u0259k\u0259tl\u0259ri yerin\u0259 yetirm\u0259k \u00fc\u00e7\u00fcn istifad\u0259 olunur. DTrack Windows \u0259mrl\u0259ri vasit\u0259sil\u0259 sistem v\u0259 brauzer tarix\u00e7\u0259si haqq\u0131nda m\u0259lumatlar\u0131n\u0131 toplay\u0131r. T\u0259cav\u00fczkarlar h\u00fccuma ba\u015flamazdan \u0259vv\u0259l bir ne\u00e7\u0259 ay se\u00e7ilmi\u015f h\u0259d\u0259fin \u015f\u0259b\u0259k\u0259sind\u0259 qala bil\u0259rl\u0259r.<\/p>\n\n\n\n Kaspersky ekspertl\u0259rinin m\u00fc\u015fahid\u0259l\u0259rin\u0259 g\u00f6r\u0259, \u201cMaui\u201d fidy\u0259 proqram\u0131 DTrack z\u0259r\u0259rli proqram t\u0259minat\u0131n\u0131n korporativ \u015f\u0259b\u0259k\u0259y\u0259 daxil edilm\u0259sind\u0259n sonra i\u015f\u0259 sal\u0131n\u0131b v\u0259 ilk n\u00f6vb\u0259d\u0259 AB\u015e v\u0259 Yaponiya \u015firk\u0259tl\u0259rini h\u0259d\u0259f alan h\u00fccumlarda istifad\u0259 edilib.<\/p>\n\n\n\n \u201cBiz ill\u0259rdir ki \u201cAndariel\u201d-i izl\u0259yirik v\u0259 g\u00f6r\u00fcr\u00fck ki, onlar\u0131n h\u00fccumlar\u0131 daim d\u0259yi\u015fir v\u0259 m\u00fcr\u0259kk\u0259bl\u0259\u015fir. Qrupun b\u00fct\u00fcn d\u00fcnyada fidy\u0259 proqramlar\u0131 yaymas\u0131na diqq\u0259t yetirm\u0259k laz\u0131md\u0131r. Bu, pulun h\u0259l\u0259 d\u0259 bu qrup \u00fc\u00e7\u00fcn motivasiya m\u0259nb\u0259yi oldu\u011funu t\u0259sdiql\u0259yir\u201d, – dey\u0259 Kaspersky-nin Rusiya t\u0259dqiqat m\u0259rk\u0259zinin r\u0259hb\u0259ri Mariya Namestnikova bildirir.<\/p>\n\n\n\n Biznesl\u0259ri fidy\u0259 proqram\u0131 h\u00fccumlar\u0131ndan qorumaq \u00fc\u00e7\u00fcn Kaspersky \u015firk\u0259tl\u0259r\u0259 a\u015fa\u011f\u0131dak\u0131 vacib t\u0259dbirl\u0259ri xat\u0131rlad\u0131r:<\/p>\n\n\n\n SOC m\u0259rk\u0259zi m\u00fct\u0259x\u0259ssisl\u0259rin\u0259 Kaspersky-nin 25 illik f\u0259aliyy\u0259ti \u0259rzind\u0259 toplanm\u0131\u015f kiberh\u00fccumlar haqq\u0131nda m\u0259lumatlar\u0131 ehtiva ed\u0259n Kaspersky Threat Intelligence Portal<\/a> kimi \u0259n yeni t\u0259hl\u00fck\u0259 m\u0259lumatlar\u0131na \u00e7\u0131x\u0131\u015f t\u0259min edin. \u018fsas funksiyalara pulsuz giri\u015f https:\/\/opentip.kaspersky.com\/<\/a> sayt\u0131nda m\u00f6vcuddur.<\/p>\n\n\n\n <\/p>\n","protected":false},"excerpt":{"rendered":" Kaspersky m\u00fct\u0259x\u0259ssisl\u0259ri \u015eimali Koreyan\u0131n \u201cLazarus\u201d qrupuna daxil olan \u201cAndariel\u201d kiberqrupunun yeni h\u00fccumlar\u0131n\u0131 a\u015fkar edibl\u0259r. Onlar tan\u0131nm\u0131\u015f DTrack proqram t\u0259minat\u0131n\u0131n modifikasiyalar\u0131ndan, el\u0259c\u0259 d\u0259 yeni fidy\u0259 proqram\u0131 \u201cMaui\u201d-d\u0259n istifad\u0259 edirl\u0259r. H\u0259d\u0259fl\u0259r aras\u0131nda AB\u015e, Yaponiya, Hindistan, Vyetnam v\u0259…<\/p>\n","protected":false},"author":2,"featured_media":2199,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/2709"}],"collection":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2709"}],"version-history":[{"count":1,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/2709\/revisions"}],"predecessor-version":[{"id":2710,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/posts\/2709\/revisions\/2710"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=\/wp\/v2\/media\/2199"}],"wp:attachment":[{"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2709"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2709"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rockvell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2709"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}