{"id":220354,"date":"2022-11-08T17:31:00","date_gmt":"2022-11-08T14:31:00","guid":{"rendered":"https:\/\/geek.mediadoma.com\/?p=220354"},"modified":"2022-04-01T15:44:14","modified_gmt":"2022-04-01T12:44:14","slug":"uus-crackonoshi-krueptomuendi-pahavara-sihib-videomaengupiraate","status":"publish","type":"post","link":"https:\/\/geek.mediadoma.com\/et\/uus-crackonoshi-krueptomuendi-pahavara-sihib-videomaengupiraate\/","title":{"rendered":"Uus Crackonoshi kr\u00fcptom\u00fcndi pahavara sihib videom\u00e4ngupiraate"},"content":{"rendered":"\n<p><a href=\"https:\/\/decoded.avast.io\/danielbenes\/crackonosh-a-new-malware-distributed-in-cracked-software\/\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">Avasti<\/a> teadlased avastasid pahavara t\u00fcve, mis muudab videom\u00e4ngupiraatide arvutid vaikselt kr\u00fcptot\u00f6\u00f6tlemismasinateks. Crackonoshiks kutsutud pahavara j\u00e4\u00e4b ohvritele sageli m\u00e4rkamatuks, kuna see sunnib arvutid Windowsi turvare\u017eiimi ja kustutab viiruset\u00f5rjetarkvara.<\/p>\n<p>Kr\u00fcptom\u00fcndi pahavara kasutab arvuti t\u00f6\u00f6tlemisv\u00f5imsust keerukate m\u00f5istatuste lahendamiseks ja digitaalvaluuta &quot;kaevandamiseks&quot;, tavaliselt selleks, et aidata kaasa kr\u00fcptomineerimisseadmete kogumile, mida juhib h\u00e4kker v\u00f5i kuritegelik r\u00fchmitus. Kuigi kr\u00fcptomine pahavara ei riku teie arvutit, v\u00e4hendab see arvuti j\u00f5udlust., <a href=\"https:\/\/www.getmonero.org\/\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">kuluvad komponendid<\/a> ja raiskavad elektrit.<\/p>\n<p>Arvutim\u00e4ngijad on selle pahavara maitse jaoks ideaalsed sihtm\u00e4rgid, kuna nende arvutitel on sageli v\u00f5imsad GPU-d, mis sobivad h\u00e4sti digitaalse valuuta kaevandamiseks. Lisaks on lauaarvutid m\u00e4ngijate seas populaarsed, nii et h\u00e4kkeritel on suurem v\u00f5imalus nakatada \u00f6\u00f6p\u00e4evaringselt t\u00f6\u00f6le j\u00e4etud masinaid.<\/p>\n<p>Avast \u00fctleb, et on tuvastanud 30 pahavara variatsiooni, millest vanimad versioonid p\u00e4rinevad 2018. aastast. K\u00f5ik Crackonoshi versioonid j\u00e4rgivad siiski sama p\u00f5hiprotsessi.<\/p>\n<p>Esiteks laadib ohver alla murtud tarkvara (tavaliselt m\u00e4ngu) torrent-platvormi, foorumi v\u00f5i failide levitamise veebisaidi kaudu (Google Drive on populaarne valik). Kui ohver proovib seda tarkvara installida, k\u00e4ivitab see peamise pahavara k\u00e4ivitatava faili \u201eserviceinstaller.exe&quot;.<\/p>\n<p>Seej\u00e4rel redigeerib pahavara Windowsi registrit, andes endale loa turvare\u017eiimis t\u00f6\u00f6tamiseks ja sundides ohvri arvutit j\u00e4rgmisel k\u00e4ivitamisel turvare\u017eiimi sisenema. Kuna viiruset\u00f5rjetarkvara selles re\u017eiimis ei t\u00f6\u00f6ta, on Crackonoshil v\u00f5imalus viiruset\u00f5rjetarkvara teie arvutist desinstallida. Huvitaval kombel asetab pahavara ohvri tegumiriba salve v\u00f5ltsitud Windowsi turbeikooni ja keelab Windowsi v\u00e4rskendused (t\u00f5en\u00e4oliselt takistab see Windows Defenderit uuesti installimast).<\/p>\n<p>L\u00f5puks k\u00e4itab Crackonosh tarkvara XMRig, mis kasutab <a href=\"https:\/\/www.getmonero.org\/\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">Monero<\/a> digitaalvaluuta kaevandamiseks teie arvutit.<\/p>\n<p>Avast \u00fctleb, et Crackonosh on teeninud 2 miljoni dollari ekvivalenti Monero valuutas, kasutades ohvri arvutite v\u00f5imsust. Avasti uuringute kohaselt nakatub iga p\u00e4ev umbes 1000 arvutit, kuigi tegelik arv v\u00f5ib olla palju suurem.<\/p>\n<p>Crackonoshi eemaldamine arvutist on praktiline \u00fclesanne. Kui kahtlustate, et teie arvuti on nakatunud, v\u00f5ite j\u00e4rgida eemaldamise samme <a href=\"https:\/\/decoded.avast.io\/danielbenes\/crackonosh-a-new-malware-distributed-in-cracked-software\/\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">Avast veebisaidil<\/a> (alapealkirja \u201eCrackonoshi eemaldamine&#8221; all).<\/p>\n<p>Allikas: <a href=\"https:\/\/decoded.avast.io\/danielbenes\/crackonosh-a-new-malware-distributed-in-cracked-software\/\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">Avast<\/a> <a href=\"https:\/\/www.zdnet.com\/article\/crackonosh-malware-abuses-windows-safe-mode-to-quietly-mine-for-cryptocurrency\/\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">ZDNeti<\/a> kaudu<a href=\"https:\/\/www.zdnet.com\/article\/crackonosh-malware-abuses-windows-safe-mode-to-quietly-mine-for-cryptocurrency\/\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external\"><\/a><\/p>\n<p><div id=\"PostUnique_PostSource\" style=\"padding-top: 50px\">:  <a target=\"_blank\" rel=\"noopener nofollow\" href=\"\/\/www.reviewgeek.com\" class=\"external external_icon\">www.reviewgeek.com<\/a><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Avasti teadlased avastasid pahavara t\u00fcve, mis muudab videom\u00e4ngupiraatide arvutid vaikselt kr\u00fcptot\u00f6\u00f6tlemismasinateks. Crackonoshiks kutsutud pahavara j\u00e4\u00e4b ohvritele sageli m\u00e4rkamatuks, kuna see sunnib arvutid Windowsi turvare\u017eiimi ja kustutab viiruset\u00f5rjetarkvara.<\/p>\n","protected":false},"author":1,"featured_media":162167,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wp_rev_ctl_limit":""},"categories":[680,670,754,724],"tags":[],"class_list":["post-220354","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-elujouline","category-maengi","category-turvalisus","category-uudis"],"_links":{"self":[{"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/posts\/220354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/comments?post=220354"}],"version-history":[{"count":0,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/posts\/220354\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/media\/162167"}],"wp:attachment":[{"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/media?parent=220354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/categories?post=220354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/tags?post=220354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}