Amathuluzi e-DAEMON atheleleke nge-malware: okwenzekile nokuthi ungazivikela kanjani

Informatec Digital » Izinsiza » Amathuluzi e-DAEMON atheleleke nge-malware: okwenzekile nokuthi ungazivikela kanjani

Lezi zindaba zishaqise kakhulu: izinguqulo ezisemthethweni ze-DAEMON Tools Lite bezilokhu zisabalalisa i-malware ezinkulungwaneni zamakhompyutha emazweni angaphezu kwekhulu ngokuhlasela kochungechunge lokunikezela okubambe abasebenzisi nezinkampani bengalindele. Asikhulumi ngamakhophi antshontshiwe noma amawebhusayithi okukhwabanisa, kodwa kunalokho abafaki abalandiwe ngqo kusayithi elisemthethweni lonjiniyela, abasayinwe ngedijithali futhi, kubonakala sengathi, basemthethweni ngokuphelele.

Lesi sigameko siyakhathaza kakhulu ngoba sihilela ithuluzi elidala nelidumile kakhulu. I-DAEMON Tools ibilokhu iyisofthiwe ehamba phambili yokufaka izithombe ze-ISO nokudala ama-virtual drive iminyaka engaphezu kwengu-15 , iqhayisa ngezigidi zabasebenzisi benyanga abavela kubantu ngabanye kanye nezinhlangano. Iqiniso lokuthi isofthiwe enjalo eyaziwayo ibilokhu isetshenziswa njengemoto ye-backdoor kanye ne-Trojan entshontsha idatha libonisa izinga ukuhlaselwa kwe-supply chain okuye kwaba yinselele enkulu ekuphepheni kwe-cyber kwanamuhla.

Kwenzekani ngempela ku-DAEMON Tools?

Abacwaningi beKaspersky bathole umkhankaso obanzi lapho abafaki be-DAEMON Tools Lite abasemthethweni bashintshwa khona ukuze bafake umthwalo onobungozi. Kubikwa ukuthi ukuhlasela kwaqala ngo-Ephreli 8, 2026, futhi kwakusaqhubeka lapho kuvela imibiko yokuqala, okubonisa ukuthi abahlaseli bakwazile ukuhlala bengatholakali amasonto amaningana.

I-athikili ehlobene:

I-Podman, i-KVM kanye neziqukathi: umhlahlandlela osebenzayo wokuvikela i-virtualization

Kulesi simo, akusetshenziswanga amawebhusayithi mbumbulu noma amakhophi ohlelo antshontshiwe . Amafayela e-Trojanized abanjwe kwingqalasizinda yokusabalalisa ye-DAEMON Tools futhi asayinwa ngesitifiketi sedijithali esisebenzayo esivela ku-AVB Disc Soft, inkampani enesibopho sokuthuthukisa isofthiwe. Kunoma yimuphi umsebenzisi, kanye nezinhlelo eziningi zokuphepha, laba bafaki babonakala bethembekile ngokuphelele.

Ngokusho kokuhlaziywa okushicilelwe, lokhu kwakuwukuhlasela kochungechunge lokunikezwa kwempahla okuhlelwe ngokucophelela lapho izigebengu zikwazile ukufaka ikhodi enonya kuma-executable amaningana afakiwe ezinguqulweni zohlelo ezithintekile. Lawa ma-binary aguquliwe asebenza ngokuzenzakalelayo lapho uhlelo luqala, esungula ukuxhumana buthule namaseva omyalo nokulawula ngaphansi kokulawulwa kwabahlaseli.

Lo mkhankaso uholele ezinkulungwaneni zemizamo yokutheleleka emazweni angaphezu kwe-100 . Iningi lezisulu laliyizisebenzi zasemakhaya, kodwa cishe u-10% wokufakwa okunonya kwatholakala ezinhlelweni zezinhlangano. Lokhu kwakuhlanganisa imikhakha ebiza kakhulu njengokuphathwa komphakathi, ucwaningo lwesayensi, ukukhiqiza, kanye nokuthengisa.

Lokhu kuhlasela kwakungekona nje ukutheleleka okungakhethi ; kwakuqondiswe kubantu abathile. Isigaba sokuqala sasisebenza njengesihlungi, siqoqa idatha yesistimu, futhi ngokusekelwe kulolo lwazi, abahlaseli banquma ukuthi ngabe kufanelekile yini ukusebenzisa isigaba sesibili esiyinkimbinkimbi kakhulu esinobunhloli obuthuthukisiwe kanye namakhono okulawula kude.

Izinguqulo ezithintekile kanye nezingxenye ezonakele

Imibiko iyavuma ukuthi inkinga ikhawulelwe kububanzi obuthile bezinguqulo ze-DAEMON Tools Lite. Izinguqulo ezithintekile zesofthiwe ziphakathi kuka-12.5.0.2421 no-12.5.0.2434, kufaka phakathi. Noma ubani ofake enye yalezi zakhiwo, ikakhulukazi ngemva kuka-Ephreli 8, 2026, kufanele aqaphele ingozi yangempela yokuyekethisa.

Ngaphakathi kwalelo banga, abahlaseli bashintshe ama-executable amathathu abalulekile ohlelo , afakwe ku-directory yempande ye-DAEMON Tools futhi alayishwa ngokuzenzakalelayo ngohlelo noma isofthiwe uqobo. Ama-binary ahlonzwe njengononya yile:

• I-DTHelper.exe
• I-DiscSoftBusServiceLite.exe
• I-DShellHlp.exe

Lawa ma-executable eTrojanized aziphatha njengezilayishi: lapho eqala, asungula uxhumano nesizinda esilawulwa abahlaseli futhi akwazi ukwenza imiyalo nge-cmd.exe ukulanda nokuqalisa ezinye izingcezu ze-malware. Ukuhlaziywa kobuchwepheshe kukhuluma, isibonelo, ukusetshenziswa kwamafayela afana ne -envchk.exe , cdg.exe , kanye ne -cdg.tmp , asebenza njengezingxenye ezengeziwe ngaphakathi kochungechunge lokutheleleka.

I-telemetry eqoqwe yizixazululo zokuphepha ivumele lo msebenzi ukuthi uxhunywe ekusebenzeni komhlaba wonke okuqondiwe . Nakuba inani lemizamo yokutheleleka laliphezulu, isigaba sesibili sasetshenziswa ngokumelene nenani elincane kakhulu lezisulu ezikhethwe ngokucophelela, okuqinisa umqondo wokuthi lokhu kwakungeyona nje umkhankaso omkhulu, kodwa ukuhlaselwa okuqondiwe ezinhlanganweni ezinolwazi olubucayi noma ingqalasizinda ebalulekile.

Ukuze kuvinjelwe lesi sigameko, i-AVB Disc Soft ikhiphe inguqulo 12.6.0.2445 ye-DAEMON Tools Lite , eqinisekiswe ukuthi ihlanzekile yizinkampani ezahlukene zokuphepha. Lesi sibuyekezo sisusa ama-executable asengozini futhi sethula izingxenye ezisemthethweni ngaphandle kwekhodi enonya, okwenza kube yinguqulo ephephile kuphela kulabo abadinga ukuqhubeka nokusebenzisa uhlelo.

Indlela ukuhlasela okusebenza ngayo: kusukela esigabeni sokuqala kuya kwesesibili

Ukuziphatha kwe-malware okuhlotshaniswa ne-DAEMON Tools kulandela iphethini yokuhlasela ejwayelekile yezigaba ezimbili , evame kakhulu emisebenzini eqondiwe. Okokuqala, kusetshenziswa ingxenye yokuhlola elula, futhi ezimweni ezithile kuphela lapho kusetshenziswa amathuluzi ayinkimbinkimbi kakhulu ukulawula uhlelo.

Esigabeni sokuqala, ikhodi enonya efakwe kuma-binary aguquliwe isebenza njalo njalo uma iWindows iqala. Kusukela ngaleso sikhathi kuqhubeke, ikhompyutha ethintekile ithumela isicelo kuseva yomyalo nokulawula isebenzisa isizinda esibonakala sisemthethweni, njenge-env-check.daemontools.cc, ukuze ithole imiyalelo eyengeziwe.

"Inkambo yokuqala" yokuhlasela iyimodyuli eyisisekelo yokuqoqa ulwazi . Le ngxenye ikhipha futhi ithumele idatha yabahlaseli njengekheli le-MAC, igama lomphathi, isizinda se-DNS, uhlu lwezinqubo ezisebenzayo, isofthiwe efakiwe, kanye nezilungiselelo zesifunda nezilimi zesistimu. Ngalo lonke lolu lwazi, izigebengu ze-cyber zakha iphrofayili eningiliziwe yomshini onegciwane.

Eziningi zezifo ezitholakele, isimo asizange sidlule kuleli zinga lokuqala lobunhloli . Izinhlelo zamukela kuphela umqoqi wedatha, ngaphandle kokuthi kulandwe amanye amamojula anamandla kakhulu. Noma kunjalo, kungukungenelela okukhulu ngoba kuvumela abahlaseli ukuthi babone izindawo ezikhangayo zokuhlaselwa okulandelayo kanye nokuvuza ulwazi olungase lube bucayi mayelana nengqalasizinda yesisulu.

Ezimweni ezincane kakhulu, ezihlotshaniswa kakhulu nezinhlangano zikahulumeni, izikhungo zocwaningo, kanye nezinkampani zezimboni nezitolo emazweni afana neRussia, iBelarus, noma iThailand, iseva yomyalo iphendule ngokuthumela umthwalo wesibili: umnyango wangemuva omncane onamakhono okulawula kude athuthukile kakhulu.

Lo mnyango wesibili ongangemuva ungalanda futhi usebenzise imithwalo emisha yokukhokha, uqalise imiyalo yegobolondo, futhi usebenzise ikhodi ngqo kwimemori ngaphandle kokuthola umkhondo kudiski, okwenza ukutholakala kube nzima kakhulu. Ukusuka lapho, uhlelo lungaphansi kwesandla sabahlaseli, abangaphendukela kweminye imishini, bakhiphe amadokhumenti, noma basebenzise amathuluzi engeziwe obunhloli.

Ezimweni ezibucayi kakhulu, kubonwe ukuthunyelwa kwe-implant ebizwa ngokuthi i-QUIC RAT . Le Trojan yokufinyelela kude isekela amaphrothokholi ahlukahlukene okuxhumana ngeseva yomyalo nokulawula futhi iyakwazi ukufaka ikhodi enonya ezinqubweni ezisemthethweni njenge-notepad.exe noma i-conhost.exe. Lolu hlobo lwendlela yokujova lusiza ukufihla umsebenzi ononya phakathi kwezinqubo zesistimu yokusebenza ezithembekile.

Ubukhulu besigameko kanye namazwe athintekile

Idatha eqoqwe kuze kube manje ikhombisa ukuhlasela okukhulu, kodwa ngokusetshenziswa okukhethekile kwamakhono alimaza kakhulu . Kusukela ekuqaleni kuka-Ephreli, kuye kwaqoshwa imizamo eyizinkulungwane eziningana yokufaka imithwalo eyengeziwe enonya ngokusebenzisa abafaki be-DAEMON Tools Lite abasengozini.

Iningi lamakhompyutha athintekile lingelabasebenzisi basekhaya, okunengqondo uma ubheka ukuthi i-DAEMON Tools ibilokhu isetshenziswa iminyaka eminingi njengethuluzi elijwayelekile lokufaka izithombe ze-ISO nokudala ama-CD, i-DVD, noma ama-Blu-ray drive angokoqobo. Umthelela usakazeka emazweni nasezindaweni ezingaba yikhulu, kanye nenani elikhulu lezisulu eRussia, eBrazil, eTurkey, eSpain, eJalimane, eFrance, e-Italy naseShayina.

Kodwa-ke, abacwaningi bagcizelela ukuthi amadivayisi ayishumi nambili kuphela akhethwe esigabeni sesibili sokuhlasela , lapho kwasetshenziswa khona umnyango wangemuva olula kanye ne-RAT esekelwe ku-QUIC. Lokhu kwakuhlanganisa izinhlelo zezinhlangano zikahulumeni, izikhungo zesayensi, izinkampani zokukhiqiza, kanye nengqalasizinda yokuthengisa, okuhambisana kakhulu nomsebenzi oqondiwe kunokuhlasela okulula, okunamathuba, nokwanda kwabantu.

Le ndlela iphakamisa ukuthi abahlaseli basebenzise i-DAEMON Tools njengendawo yokungena ebanzi , kodwa inhloso yangempela kwakuwukuhlola noma ukulimaza amanethiwekhi athile anenani eliphezulu lecebo. Izisulu ezisele zazisebenza kakhulu njengomsindo wangemuva kanye nokumboza ukuze kufihlwe kangcono umsebenzi oqondiswe kulezo zinhloso ezibalulekile.

Enye imininingwane ephawulekayo ukuba khona kwezingxenye ze-malware ezibhalwe ngesiShayina . Abanye abahlaziyi basikisela ukuthi lokhu kungabonisa ukuthi kungenzeka ukuthi kukhona umsuka wabathuthukisi bohlaselo, yize kungenzeka futhi ukuthi kuyindlela yokuphambukisa ukunaka emazweni noma emaqenjini athile futhi kwenze kube nzima ukuhlukanisa.

Ngokombono womsebenzisi ojwayelekile, inkinga enkulu ukuthi konke lokhu kuhlasela kuncike ekuthembekeni okukhulu okudalwe yisofthiwe esakazeke kangaka . Izigidi zabantu sezilokhu zicabanga iminyaka eminingi ukuthi uma zilanda isifaki kuwebhusayithi esemthethweni futhi sinesiginesha yedijithali esebenzayo, akukho okufanele sikhathazeke ngakho. Leli cala libonisa ukuthi ngisho nalezi zimpawu zokwethenjwa azinaphutha.

Amathuluzi e-DAEMON, i-classic ezinikele kakhulu esezingeni layo eliphezulu

Ukuze uqonde ububanzi benkinga, kubalulekile ukukhumbula ukuthi i-DAEMON Tools akuyona uhlelo lokusebenza oluyimfihlo , kodwa iyithuluzi elisekelwe kahle ohlelweni lwe-Windows. Sekungamashumi eminyaka isetshenziswa ukufaka izithombe zediski ngamafomethi afana ne-ISO, IMG, UDF, BIN, kanye ne-NRG, aqukethe isakhiwo esiphelele sama-CD, ama-DVD, ngisho nama-hard drive nama-SSD.

Ngesikhathi sesikhathi segolide semidiya ye-optical, i-DAEMON Tools yaba yindinganiso ecishe ibe ngokoqobo kulabo ababedinga ukusebenza ngezithombe zediski nsuku zonke. Nakuba kunezinye izindlela ezilula noma ezivulekile namuhla—njenge-WinCDEmu endaweni ye-Windows—lolu hlelo lusenabasebenzisi abaningi, kokubili ezindaweni zasekhaya nasebhizinisini.

Abathuthukisi balolu hlelo lokusebenza babonisa ukuthi isofthiwe igcina abasebenzisi abangaphezu kwezigidi ezintathu ngenyanga , okuyisibalo esichaza ukuthi kungani umkhankaso walolu hlobo ungafinyelela ngokushesha kangaka ezinkulungwaneni zamakhompyutha emhlabeni jikelele. Lapho ithuluzi lithandwa kakhulu, kulapho likhanga khona kakhulu ngabahlaseli ukungena ochungechungeni lwalo lokusabalalisa.

Kulesi simo, iqiniso lokuthi bonke abafaki abanonya basayinwe ngesitifiketi esivumelekile liyakhathaza kakhulu. Ezimweni eziningi, abasebenzisi kanye namapulatifomu okuphepha ngokwabo bathatha isiginesha yedijithali njengesibonakaliso sobuqiniso, becabanga ukuthi ifayela le-binary alizange liphazanyiswe. Nokho, lapha, abahlaseli bakwazile ukufaka ikhodi yabo ngaphambi kokuba isiginesha sitholakale noma basebenzise kabusha ingqalasizinda yokusayina esemthethweni yenkampani.

Isigameko se-DAEMON Tools sinezela ohlwini olukhulayo lokuhlaselwa kwe-software supply chain okutholakale kusukela ekuqaleni konyaka. Imibiko yezokuphepha ikhuluma ngamacala afanayo athinta izixazululo ezifana ne-eScan ngoJanuwari, i-Notepad++ ngoFebhuwari, kanye ne-CPU-Z ngo-Ephreli, iqokomisa ukuthambekela okucacile: esikhundleni sokuqondisa ngqo abasebenzisi ngabanye, izigebengu ze-cyber zikhetha ukuyekethisa isixhumanisi esiphakathi bese zivumela ukusatshalaliswa kwesofthiwe ngokwayo kwenze okunye.

Izingozi ezithile kubasebenzisi nezinhlangano

Ngaphandle kwenkulumo-ze yabezindaba, okubaluleke kakhulu yilokho okungenzeka kukhompyutha lapho kufakwe khona inguqulo ye-DAEMON Tools ethelelekile . Izingozi ziyahlukahluka kuye ngokuthi uchungechunge lokutheleleka seluthuthuke kangakanani, kodwa ngisho nasezimweni ezingatheni kangako, umthelela ubalulekile.

Esigabeni sokuqala, umthelela omkhulu ukwebiwa buthule kolwazi lwesistimu . Idatha efana nekheli le-MAC, igama lomethuleli, indawo, noma uhlu lwesofthiwe efakiwe ingase ibonakale ingabalulekile, kodwa ezandleni zomhlaseli, zimvumela ukuthi abhale iphrofayili yenethiwekhi, akhombe izinguqulo ezisengozini zezinye izinhlelo, futhi alungiselele ukuhlaselwa okulandelayo okuyinkimbinkimbi kakhulu.

Uma uhlelo lukhethelwe isigaba sesibili, ingozi iyanda kakhulu. Umnyango wangemuva olula uvumela ukwenziwa kwemiyalo ekude kanye nokulandwa kwamafayela engeziwe , okuvula umnyango wezingozi eziningi: kusukela ekwebiweni kweziqinisekiso kanye namadokhumenti abucayi kuya ekufakweni kwe-ransomware noma ukusetshenziswa kwekhompyutha njengendawo yokungena yokubeka engcupheni inethiwekhi yonke yenkampani.

Ngokusetshenziswa kwe-QUIC RAT, abahlaseli bathola ukufinyelela okude okucishe kube okuphelele kudivayisi . Bangafaka ikhodi ezinqubweni ezisemthethweni, badlule ezinye izilawuli zokuphepha, bahambe eceleni kunethiwekhi, futhi baqhubeke nokuphikelela isikhathi eside ngaphandle kokuphakamisa izinsolo. Ezandleni zomlingisi onezinsizakusebenza eziningi, lolu hlobo lwethuluzi lufanele imikhankaso yobunhloli bezimboni noma ukuthola ukufinyelela isikhathi eside engqalasizinda ebalulekile.

Ezinhlanganweni ezinezidingo zokuphepha eziqinile, ukungena ngesofthiwe evamile njenge-DAEMON Tools kuyinkinga enkulu. Izindawo eziningi zokusebenza zicabanga ukuthi izinsiza ezaziwayo, ezisayinwe ngedijithali ziphephile ngokuzenzakalelayo, ngakho-ke ukuqapha ukuziphatha kwazo kungaba lula kakhulu kunamathuluzi angaziwa noma asanda kukhishwa.

Ngaphezu kwalokho, lolu hlobo lwesigameko luqeda ukwethenjwa okuphelele eketangeni lokusatshalaliswa kwesofthiwe . Uma umfakisi osemthethweni osayiniwe engasanele isiqinisekiso, izinkampani ziphoqeleka ukuqinisa ukuqinisekiswa kwazo kwangaphakathi, ukuqapha, kanye nezinqubo zokuphendula kusenesikhathi, okuhlanganisa ukutshalwa kwezimali okwengeziwe kwesikhathi kanye nezinsizakusebenza.

Ungazi kanjani ukuthi usengozini nokuthi yini okufanele uyenze uma usebenzisa amathuluzi e-DAEMON

Esimweni esinjalo, umbuzo wokuqala onengqondo usobala: Ingabe nginayo inguqulo ethintekile efakwe kukhompyutha yami? Ukuhlola okuyisisekelo kuhilela ukubukeza inombolo yenguqulo ye-DAEMON Tools Lite. Uma iwela phakathi kuka-12.5.0.2421 no-12.5.0.2434, futhi yafakwa noma yabuyekezwa ngomhlaka-8 Ephreli 2026 noma ngemva kwalokho, kunesizathu esanele sokukhathazeka.

Ukuze kuncishiswe izingozi, ochwepheshe batusa uchungechunge lwezinyathelo ezicacile. Okokuqala, khipha ngokushesha noma iyiphi inguqulo ye-Lite ngaphakathi kobubanzi obusengozini , futhi uma ufisa ukuqhubeka nokusebenzisa uhlelo lokusebenza, thuthela kunguqulo 12.6.0.2445 noma ngaphezulu, okuqinisekiswe ukuthi ayinazo izinguquko ezinonya ezitholiwe.

Okulandelayo, kubalulekile ukwenza ukuhlaziywa kwesistimu okuphelele kusetshenziswa isisombululo sokuphepha esithembekile . Ama-suite okuphepha ahamba phambili kakade afaka phakathi ukutholwa okuthile kwama-binary aguquliwe kanye nemithwalo ehambisana nalo mkhankaso, ngakho-ke ukuskena okugcwele kungasiza ekutholeni iminonjana ye-malware, noma ngabe abafaki bokuqala sebesusiwe.

Ezindaweni zezinkampani, izinyathelo kumele zibe nzima nakakhulu. Izinhlangano kumele zihlukanise ama-endpoints lapho i-DAEMON Tools itholakale khona njenge-effective , zibuyekeze ama-log ukuze zithole umsebenzi ongajwayelekile kusukela ekuqaleni kuka-Ephreli, futhi ziqinisekise ubuqotho be-executables ezisayiniwe ezinhlelweni zazo. Ukuqapha ithrafikhi yenethiwekhi ukuze kutholakale ukuxhumana nezizinda ezisolisayo ezihlobene nomkhankaso nakho kuyanconywa.

Okokugcina, kokubili ekhaya nasemsebenzini, kuyalulekwa ukuhlola ngokucophelela noma yiziphi izinqubo ezingajwayelekile noma ezisanda kufakwa , kanye nanoma yikuphi ukusebenza okungajwayelekile okuvela kumafolda esikhashana noma ama-directory angajwayelekile. Nakuba ama-backdoor nama-QUIC RAT ezama ukusebenza ngokunyenya, ezimweni eziningi ashiya izinkomba ezincane ezingatholakala, ngokuqapha okufanele.

Impikiswano yamathuluzi e-DAEMON ikhombisa ukuthi ukugxila nje emsukeni womfaki akusanele . Ukuqinisekisa amasignesha edijithali kusabalulekile, kodwa sekubalulekile ukuhambisana nalokhu kulawula ngezendlalelo ezengeziwe zokuphepha: ukuhlaziywa kokuziphatha, uhlu lwangaphakathi lwabamhlophe, ukuhlukaniswa kwenethiwekhi, kanye nezinqubomgomo eziqinile zokuthi iyiphi isofthiwe engasetshenziswa endaweni ngayinye, kufaka phakathi imikhuba evikelekile ye-virtualization.

Ngaphakathi kwendawo yosongo yamanje, ukuhlaselwa kwe-DAEMON Tools sekuyisibonelo sendlela isofthiwe esemthethweni, esungulwe kahle engasetshenziswa ngayo njengehhashi leTrojan ukuze kuncishiswe izinhlelo ngobuningi futhi, ngesikhathi esifanayo, kuqhutshwe imisebenzi eqondiswe kakhulu eqenjini elincane lezisulu ezibiza kakhulu. Kubasebenzisi bansuku zonke, isifundo sicacile: kuyalulekwa ukuhlola ngokucophelela noma yikuphi ukufakwa kwamuva kohlelo, ukuvuselela ngokushesha, nokuhlala uqaphile noma ngabe isofthiwe ngokwemfundiso ivela emthonjeni osemthethweni kakhulu ngangokunokwenzeka.