- Amasu obunjiniyela bezenhlalo akhohlisa umsebenzisi ukuthi asebenzise izikripthi ezinonya ohlelweni lwakhe.
- Ukusebenzisa izexwayiso zamaphutha obuchwepheshe mbumbulu noma ukuqinisekiswa kwe-CAPTCHA ukuze ushintshe ibhodi lokunamathisela le-Windows.
- Ukufakwa kwe-malware eyingozi njenge-infostealers nama-RAT antshontsha iziqinisekiso, amakhukhi, kanye nedatha yezezimali.
Cishe uke wabhekana nalokhu: ngenkathi uphequlula i-inthanethi, isaziso sivele sivele sithi isiphequluli sakho sesiphelelwe yisikhathi noma kunenkinga ngemakrofoni yakho ye-Zoom. Uma uqala ukubuka, kubonakala kungabalulekile noma kuyiphutha elivamile, kodwa kulezi zinsuku izigebengu ze-inthanethi zithuthukise ubuciko bokukhohlisa. Yile ndlela i- ClickFix eyazalwa ngayo , isu lobunjiniyela bezenhlalo elingazami ukugenca i-PC yakho ngokusebenzisa ubuthakathaka bokuphepha kobuchwepheshe, kodwa kunalokho likuqinisekisa ukuthi uvule ikhaya lakho ukuze livikeleke kugciwane.
Isici esiphazamisa kakhulu sale ndlela ukuthi umsebenzisi wenza wonke umsebenzi ongcolile. Awudingi ukulanda ifayela elisebenzisekayo elisolisayo noma uchofoze kusixhumanisi esingajwayelekile; umhlaseli ukuqondisa isinyathelo ngesinyathelo ukuze ukopishe futhi unamathisele ikhodi enhliziyweni yesistimu yakho yokusebenza. Kuyindlela yokukhwabanisa ehlakaniphile ebangele ukwanda kwezifo emhlabeni wonke, ikakhulukazi eLatin America naseYurophu, okuthinta wonke umuntu kusukela kubasebenzisi basekhaya kuya ezikhungweni ezinkulu zomphakathi kanye nezinkampani zobuchwepheshe.
Kuyini ngempela i-ClickFix?
Le ndlela isekelwe kulokho ochwepheshe abakubiza ngokuthi i-pastejacking noma i-clipboard hijacking. Inqubo ivame ukuqala uma uvakashela iwebhusayithi esengozini. Ama-hacker afaka ikhodi ye-JavaScript evula iwindi elivelelayo. Lesi sexwayiso singase sikutshele ukuthi udinga ukufakazela ukuthi ungumuntu ngokugcwalisa i-CAPTCHA mbumbulu noma ukuthi udinga ukulungisa inkinga yobuchwepheshe ukuze ubuke idokhumenti ye-PDF noma ujoyine umhlangano we-Google Meet.
Icebo lisenkinobheni yesenzo, evame ukuthi into efana nokuthi "Lungisa." Uma uyichofoza, kwenzeka into engabonakali: isiphequluli sikopisha ngokuzenzakalelayo umyalo we-PowerShell ebhodini lakho lokunamathisela. Iwebhusayithi bese ikunikeza imiyalelo elula kakhulu: cindezela ukhiye we-Windows + R, unamathisele okuqukethwe (Ctrl + V), bese ucindezela u-Enter. Ngaleso sikhathi esiqondile, umsebenzisi usebenzisa iskripthi esilanda futhi sifaka i-malware ngqo kwimemori yekhompyutha, ngokuvamile edlula ukuvikelwa okuvamile kwesiphequluli.
I-FileFix: Umfowethu oyingozi futhi ofihlayo
Uma i-ClickFix yayicasula, i-FileFix ithatha isinyathelo esiqhubekayo sokukhohlisa. Ngenkathi i-ClickFix isebenzisa ibhokisi lengxoxo elithi "Run", i-FileFix ikhohlisa umsebenzisi ukuthi anamathisele ikhodi enonya kubha yekheli le-Windows File Explorer . Njengoba leli ithuluzi esilisebenzisa njalo ukuhambisa amafolda, abantu abaningi abasoli ukuthi imiyalo yesistimu ingaqaliswa kusukela lapho.
Kulezi zimo, abahlaseli bavame ukusebenzisa izithiyo ezifana nezaziso zokuphepha ze-Facebook ezingamanga noma izithembiso zama-PDF aqukethe imithetho ebalulekile. Ukukhohlisa kucashile kangangokuthi ikhodi enonya ifihla ngemuva kwezikhala eziningi, okwenza umsebenzisi abone ukuphela kwendlela yefayela kuphela hhayi iskripthi se- PowerShell ekuqaleni. Uma ucindezela u-Enter, uhlelo lusebenzisa umthwalo onobungozi ngaphandle kokuphakamisa noma yikuphi ukusola.
Izikhali zomhlaseli: Yimuphi u-malware abawufakayo?
Uma umsebenzisi esewele ogibeni, ikhompyutha yakhe ivezwa ezinsongweni eziningi ezibhubhisayo. Izinhloso eziyinhloko ngokuvamile ama-infostealers , izinhlelo ezenzelwe ngqo ukusesha i-PC yakho futhi zebe amaphasiwedi agciniwe, amakhukhi eseshini, amathokheni okuqinisekisa, ngisho nezihluthulelo zesikhwama semali yedijithali. Phakathi kwezindlela ezivame kakhulu yi- Lumma Stealer, i-Vidar, kanye ne-StealC.
Ngaphezu kwalokho, kukhona ama-Trojans afinyelela kude, noma ama-RAT , njenge-NetSupport noma i-Latrodectus. Lawa ayingozi kakhulu ngoba avumela umgebengu ukuthi alawule ngokuphelele idivayisi , afinyelele ku-webcam, afunde ama-imeyili, futhi asebenzise i-ransomware ukuze abethele yonke idatha yenkampani futhi afune isihlengo. Le mikhankaso isize yafika ngisho naseTikTok, lapho amavidiyo akhiqizwe yi-AI asetshenziswa khona ukuthembisa isofthiwe yamahhala ye-premium ngokushintshana nokwenza le miyalo.
Indlela yokuvikela ikhompyutha yakho nokugwema ukuwela ogibeni
Isivikelo esingcono kakhulu kulezi zinhlobo zokuhlaselwa, ngaphandle kokungabaza, ingqondo nemfundo. Kukhona umthetho wegolide ongafanele uwukhohlwe: ayikho inkampani esemthethweni efana ne-Google, i-Microsoft, noma i-Meta ezokucela ukuthi ukopishe futhi unamathisele ikhodi kumyalo we-PC yakho ukuze kulungiswe iphutha noma kuqinisekiswe ukuthi ungubani. Uma ubona imiyalelo kuwebhusayithi ekhuluma nge -Ctrl+V noma i-Win+R , vala ithebhu ngokushesha.
Ngokombono wobuchwepheshe, kubalulekile ukugcina isofthiwe yakho ye-antivirus isesikhathini futhi unike amandla ukuqinisekiswa kwezinto ezimbili (2FA) kuwo wonke ama-akhawunti akho. Kumabhizinisi, kungcono ukukhawulela amalungelo okuphatha kumakhompyutha abasebenzi nokuvimba ukufinyelela kumathuluzi afana ne-PowerShell ngaphandle uma kudingeka ngempela. Ukwenza izivivinyo zobugebengu bokweba imininingwane ebucayi kanye nokuhlolwa kobunjiniyela bezenhlalo kusiza abasebenzi ukuthi bahlale beqaphile futhi baqaphele la maphethini akhohlisayo ngaphambi kokuba sekwephuze kakhulu.
Uma usola ukuthi uke waba yisisulu sokuhlaselwa okunjalo, isinyathelo esihlakaniphile kakhulu ukunqamula ikhompyutha yakho kwi-inthanethi ngokushesha bese uxhumana nochwepheshe wezokuphepha kwe-inthanethi. Ukuze uvimbele ukwebiwa kwedatha, kuyalulekwa ukuthi ushintshe wonke amaphasiwedi akho kusuka kudivayisi owaziyo ukuthi ihlanzekile. Ukulwa ne-ClickFix kanye nezinhlobo zayo kuyimpi eqhubekayo, ngakho ukuhlala unolwazi futhi uqaphile ngezixazululo zomlingo ezivela kuma-pop-up kuyindlela kuphela yokugcina idatha yakho iphephile.