Eset desarrolló un análisis sobre el nuevo ataque de ransomware que se inició en Ucrania, y cifró información de máquinas de todo el mundo, afectando compañías de distintas industrias como bancos, red eléctrica y empresas postales, entre otras. El ransomware (secuestro de información) es el término genérico para referirse a todo tipo de software malicioso que le exige al usuario del equipo el pago de un rescate.
“El día martes un nuevo ataque de ransomware dejó en evidencia que sigue habiendo sistemas desactualizados, falta de soluciones de seguridad y de planes necesarios para evitar una infección. Los ataques continúan creciendo y evolucionando, por lo que desde Eset seguimos apostando a que la prevención y la concientización son claves para evitar ser víctimas.”, aseguró Camilo Gutierrez, jefe del Laboratorio de Eset Latinoamérica
Con el fin de despejar todas las dudas en torno a este nuevo ataque global, la compañía comparte el siguiente cuestionario:
¿Cuáles son las características de este ransomware?
Se destacan tres aspectos que lo diferencian:
Cifrado: no solo cifra los archivos con una extensión determinada, sino que además intenta cifrar, generalmente con éxito, el MBR (Master Boot Record), que es el registro principal de arranque.
Propagación: tiene la propiedad de un gusano, o sea, puede propagarse a través de diferentes técnicas por la red logrando infectar nuevos equipos.
Exploit: hace uso de ellos para explotar vulnerabilidades en equipos que no han sido actualizados o no se les han instalado los parches correspondientes.
¿Es igual de poderoso que WannaCryptor?
Ambos tienen el mismo impacto: impiden el acceso a la información almacenada en el sistema. Sin embargo, este nuevo ataque no solo cifra la información que se encuentra en los equipos, sino que, luego de que se reinicia el sistema, deja inutilizable al sistema operativo, por lo que las víctimas se ven obligadas a realizar una reinstalación.
¿Qué es lo que hace exactamente esta amenaza?
Luego de que el ransomware es ejecutado, crea una tarea programada con el fin de reiniciar el equipo en un determinado tiempo, que no suele ser más de sesenta minutos. Además, verifica si existen carpetas o discos compartidos para propagarse.
A continuación, comienza a cifrar archivos que contengan una determinada extensión. A diferencia de la mayoría del ransomware, este código malicioso no cambia o agrega una extensión particular luego de cifrar cada archivo, una técnica muy utilizada por los atacantes para distinguir a los archivos infectados.
Por último, el malware intentará eliminar los registros de eventos para no dejar rastro alguno, como también ocultar sus acciones.
¿Cómo se propaga de un país a otro? ¿Llegó a Latinoamérica?
La propagación es una característica destacable de esta amenaza. Una vez que logra infectar un equipo, intenta extraer las credenciales del usuario para luego usarlas con PsExec y WMIC para realizar una búsqueda de carpetas y discos compartidos, y así propagarse por la red a la cual el equipo esté conectado. De esta manera, logra infectar equipos situados en distintos países y regiones.
Sí, llegó a Latinoamérica, en la mayoría de los casos a equipos de empresas multinacionales conectados en red con los de otras filiales en Europa o Asia, desde las cuales se propagó con su capacidad de gusano.
¿Qué se puede hacer para evitarlo?
Tanto en hogares como en empresas, contar con una solución antivirus es imprescindible. La misma tiene que estar correctamente configurada, contemplar qué puertos están abiertos y por qué.
Además, la red debe estar configurada y segmentada correctamente, y monitorear constantemente el tráfico para detectar algún tipo de comportamiento fuera de lo normal. Es esencial realizar un estudio detallado de la información más relevante y hacer backup de la misma, para que, en caso de que se cifre, haya una forma de restaurarla.
En cuanto a las contraseñas, es primordial llevar una buena gestión de las mismas, ya que si tan solo una de las máquinas infectadas posee las credenciales de administrador, podría infectar toda la red.
Si estoy infectado y no puedo acceder al sistema, ¿cómo tendría que avanzar?
Se podrían utilizar técnicas forenses para intentar correr en memoria otro sistema operativo y de esta forma acceder a los archivos cifrados. Sin embargo, no hay mucho que se pueda hacer más que aplicar el backup, lo cual sería crucial para evitar la reinstalación del sistema operativo.
En última instancia, si no hay backup, los cibercriminales siempre ofrecerán la opción extorsiva, pero desde ESET no sugerimos de pagar el rescate ya que mientras siga siendo rentable, el ransomware continuará creciendo.
¿Cómo están operando los atacantes? ¿Esperan un pago a cambio?
El proceso para recuperar la información es el mismo al que nos tiene acostumbrado este tipo de ataques. Una vez finalizada la infección, el ransomware emite las instrucciones, en donde los atacantes solicitan un pago en bitcoins, en este caso, equivalente a 300 dólares.
Pie de imagen: Aviso de que el equipo ha sido infectado.
¿Por qué se ha vuelto tan común el secuestro de datos?
Dentro de los puntos destacables se encuentran la falta de concientización y educación a nivel seguridad que tienen muchos usuarios y empresas. Una gran parte todavía no conoce el impacto que puede tener en un modelo de negocio un ciberataque hasta que es víctima y se ve obligada a pagar para recuperar su información.
Ante esta cuestión, a pesar de la velocidad con que circulan las noticias sobre ataques informáticos y los problemas que generan, los cibercriminales encuentran una motivación importante para continuar desarrollando nuevas amenazas.
¿El ataque está armado por una persona o un grupo? ¿Se necesitan conocimientos técnicos altos?
Resulta difícil pensar que una sola persona puede estar detrás de este ataque, ya que es una amenaza que incorpora varias técnicas en cuanto a exploits, propagación, y cifrado, así como para evadir medidas de seguridad. Sin embargo, no podemos asegurar cuántas son las personas involucradas en el desarrollo de un ataque de tal magnitud.
¿Se puede dar con los autores del ataque?
No por ahora. A diferencia de una botnet, por ejemplo, no hay un Centro de Comando y Control al que se conecte la amenaza como para rastrearlo y dar con los autores; y de usarlo, seguramente sería un servidor ajeno al cual atacaron para tomar el control y accederían desde TOR, logrando anonimidad. Por otro lado, el pago del rescate se hace en bitcoins y, por las características de esta criptomoneda, se hace prácticamente imposible rastrear su destino final.
Para más información ingrese al portal de noticias de ESET llamado WeLiveSecurity en: https://www.welivesecurity.com/la-es/2017/06/29/todo-sobre-nuevo-ataque-de-ransomware/
Las industrias de transformación de un país son las principales piezas de este juego mundial. es donde encontramos los principales esfuerzos en innovación y desarrollo, concentración y ampliación del conocimiento en ciencia y tecnología, modelos y procesos de negocio, metodología y disciplina.
Como parte del programa E-Fan X, Airbus, Rolls-Royce y Siemens contribuirán cada uno con su amplia experiencia y sus conocimientos en su respectivo ámbito de competencia.
Ye Ling, however, remained calm and kept paying attention to the movements of the sea monsters he encountered along the way.Qingwan, Xiaotao and Yuming held Sister Hongtang s hand and were very affectionate.
Ye Ling saw Lin Yusheng s look of horror, and he actually knew his identity now, which made Ye Ling suspicious It stands to reason that when the Zhenghai Pioneer Army conquered the Demon Sealed Ancient Realm of the Demon Saint Palace, the Demon Saint s soul was already dead and had already returned victorious.
How did she know that Mu Han Truth CBD Gummies for Tinnitus: Natural Relief and Reviews
was Ye Ling Still secretly rejoicing Fortunately, Mu Han s use of high level water concealment techniques was not reported to Master Fengzu.Finally, when the demon saw Ye Ling s eyebrows twitching, he couldn t help but feel chills in his heart.
Pass through the canyon vent
UE. Someone is coming out again It s the monks from Xishan Prefecture The monks waiting outside were not qualified to enter Tianfeng Gorge, so they could only watch the team of monks from their own side coming out of the valley, their eyes full of envy and jealousy.If we are discovered by the Xishan City Lord, Still Charlotte Web CBD Gummies: Benefits, Reviews, and Science
can t escape Brother Ye Ling, why don t we go to the back of the rock over there and try it out Ye Ling flatly refused No There are tens of thousands of monks in Xishan Prefecture City, how can the Lord of Jindan City be able to do it Kelly Clarkson Weight Loss: 5 American Working Moms’ Inspirational Success Stories
all Do you know Just do the trial in a big way under his nose.
He opened his mouth and didn t know what to say. He was so anxious that he was sweating profusely.The moon mark between Su Shang s eyebrows flashed, and she suddenly raised her head, looking far away Looking at Ye Ling on the red fire green tailed leopard, in the cold moonlit night, her ethereal voice spread far away, so that the Yue Barbarian tribesmen who followed them fell down and saluted, calling for the Holy Girl Ye Ling was slightly startled.
Hongtang and Qingwan also poked their heads out from the side of the ship, looked around cautiously, nodded to Xia Tong and Siko Tingyan, and said hello to them, telling them to be calm and at the same time secretly guard against the approach of other monks.Ye Ling secretly sighed. He had to get Fusion Keto Gummies Review: Does This Innovative Approach to Weight Loss Deliver Results
the Immortal Returning Grass as soon as possible.
Zhuo Yunfeng was not much better than her, her face changed slightly, and she was a little panicked.We monks are all cultivating against nature, and we cannot retreat just because of a little confusion The more Ye Ling thought about it, the more he was right.
The ringtone that disturbs people s minds ripples out ten miles away, and is about to affect Ye Ling and the four spiritual beasts.The woman was beautiful, and the man was handsome and burly.
If we can t squeeze into the Phantom Cave, wouldn t it be a waste of time Liang Yuzhu learned that many monks had rushed to the entrance of the Phantom Cave, and she couldn t help but feel anxious.It could neither eat spiritual flowers nor spiritual grass, nor could it hunt any prey.
Young Master Canglang couldn t bear the backlash of the disillusionment of the totem phantom.You will go back to where you came from The female disciple of Youyue Xianmen chirped.
Most of the monks were there. He was on alert, fearing that his ancestor would make a mistake and be attacked by the Giant Claw Clan again.leaving only a few skeleton puppets and lonely ghosts wandering around.
They were the hosts of this gathering, and the guests were distinguished enough that other monks in the sect were not qualified to receive them.After going through these things in Qin Hu s mind, he basically figured out that this should be a trap.
Broken Void Sword Intent extended out, forming a pocket dagger only the size of a finger.They are brothers. It is an extremely close relationship among monks.
After doing this, he once again erased the traces. He did everything he could and the rest was down to luck
People who eat melon seeds remind you remember to save it after reading Have you found Master Li This is the most common thing said by monks in Fuel Your Body with Power Keto Gummies: The Perfect Snack for a Ketogenic Diet
Beishu Continent these days when they meet.The method used by Elder Jindan of the Demon Sect to test his disciples is considered relatively normal by Elder Jian.
Looking at it before, although it was said that the sword cultivator of Sword Intent Chongxiao Pavilion ambushed the three murderers of the Ping family, they only relied on the attacks of a mid stage Yuanying sword cultivator and an early Yuanying sword cultivator to kill the Ping family.In addition, they also need to let the immortal world 7 Ways Keto Luxe Gummies Can Help You Achieve Your Summer Body Goals
know the consequences of provoking the Exploring the Benefits of Natural Bliss CBD Gummies on Amazon: A Comprehensive Guide
Yuqing Sect and the Baidi Sect, otherwise such attacks will happen in the future.
The spiritual energy intensity of Tianhai Island is obviously much worse than that of Beishu Continent.The Nascent Soul Rogue Cultivator will kill him, and everything on him will become the opponent s trophies.
But in this situation, it is impossible for him to bribe senior officials because no one dares to get involved with him.He would not do this before thoroughly understanding the origin of the Cloud Taking Jade Tablet.
At What is CBD Gummies Good For: A Comprehensive Guide (ZwSqO)
this time, Feng Lanxin was standing next to the ring, paying attention to the battle on the ring.He also took the five storage bags and hung them all around his waist after checking them casually.
Even if it was more valuable than Li Shiming, she would be satisfied as long as Li Shiming brought it up.It is impossible to exchange for it. Third grade spiritual objects are spiritual objects that only Jindan elders are qualified to touch.
This sword was so weird that it Discover the Best CBD and CBN Gummies for Sleep and Relaxation
looked like a casual swing, but he couldn t even dodge and was hit right before his eyes.He gained a lot of combat experience by wielding sword intention again and again.
road. You are still too reckless. That is to say, you have practiced the Sword Intention Climb to the Sky and mastered the divine foot power, so that you can close the distance with the monks from the outer continent.He saw that the relationship between the Yuan Ying ancestors did not seem Enhancing Intimacy with Marijuana Sex Gummies: A Comprehensive Guide (phvpZ)
to be divided into good and evil.
Jiang Yuebai understood the truth, but he would not use it to kidnap him and embarrass him.Currently, its main function for her was to cultivate ice thorns.
When the consciousness is strong enough, in the later stages of Qi training, one can open up the sea of consciousness, control magical weapons, and prepare for foundation building.Everyone was secretly scolding Lu Nazhi and Xie Jingshan for not being human beings and leaving no way for others to survive.
This place is very prosperous and there are many mortals.Magic weapons are more suitable for use by Jindan monks.
After getting started, she can start learning the spell Sharpness Technique, which doesn t seem too difficult.The sword light struck his face, and Jiang Yuebai held up the golden talisman.
Jiang Yuebai nodded like garlic, fully agreeing with what the man said.There is no way to ascend. But the people of Where to Buy CBD Gummies for Anxiety: A Comprehensive Guide (bbDzl)
Tianwu are not willing to give in, and they also want to fight for the power of heaven and earth.
If you can endure this hardship, I can think of it.Yun Shang was surprised. The old monk said that the training room was tight and this was the only one left.
The sky is filled with yellow sand, talismans and spells are flying around, and the rustling sound makes people s scalp numb.I will teach you the low grade martial Best CBD Gummies in Vermont: Benefits, Laws, and Reviews
arts Star Chasing Step and Wood Chopping Knife Technique.
looked at Tao Fengnian with puzzled eyes. Tao Fengnian didn t look at her, only looked at Jia Wei.Xianyou Mountain is my Fang family s hunting ground.
Ruosheng s eyes were bloodshot and he stared at the old monk, his voice coming out from between his teeth.Jia Xiuchun was like a thunderbolt, and he collapsed in his seat
Xiao Ankuo was horrified, This is an evil method. If the law enforcement hall discovers it, you will definitely die Lin Xiangtian sat at the top, as steady as a mountain.
The heat wave was rolling in the sky, blocking his consciousness and vision, making it difficult to see clearly.Then he wiped away Jiang Yuebai s weak spiritual mark and scanned it into the storage bag, and he couldn t help but raise his eyebrows.
Lu Nanzhi is like this. She is a descendant of three generations of low class elders, and she has no way to use the back door.Just as he was about to leave, he suddenly saw light and shadow flashing on the surface of the pond.
To really get the ranking, The Benefits of Dr Oz Gummies for Blood Pressure: A Comprehensive Review (zpRAw)
you have to look at the senior brothers and sisters of each major sect who are currently in the late stage of foundation establishment and the peak stage of foundation establishment.Fortunately, I didn t completely count on her. I had already collected several earth based exercises in the market.
You can t say that. That Ge Yuchan, you see she doesn t talk much and is always unknown, but she is in the top fifty in the camp s battle merit list, ranking higher than you Calm Plus CBD Gummies Reviews: A Comprehensive Guide to Soothing Your Mind and Body
and me.A bunch of trash. Even a mere Vajra Spiritual Formation can t be broken.
It was the first time that two women, Chen Xinrong and Qin Manman, saw the terrifying appearance of these relatives.He was not surprised to see Qin Guanshan s tombstone here, and suddenly understood why Mr.
Looks like I m looking for a man, and I really can t find someone who is in ED Gummies Video: Exploring Solutions
good health.No matter who I lose, I am still the same. It s Qin Feng.
Seeing his look, Lin Wan er s overwhelming hatred seemed to be extinguished instantly, and her body was trembling slightly.He just stared at the family of three coldly It s too old fashioned to rob people in this way.
don t let them commit suicide. Chu Tiankuo also came over at this time.We were all scared to death. Last night, your breath began to become extremely
Violent, all the power that was released before began to be absorbed into your body, we thought
An Jiuxiao didn t say the second half of the words.
Roar At this time, the poisonous dragon suddenly roared, and the sound directly covered all the noise in the scene.Zou Qi has been training well in the boxing gym during this period.
They just said we were pretending to be the Nirvana team.But from the sword moves of Haibara Rei, his direct disciple, he continued to pick up the sword moves that Onitani Ruri taught her.
So Guigu Liuli sneered Kid, are 5-Day Liquid Diet weight loss Challenge: Turbocharge Your Weight Loss Journey
you sure you want to do it now Do you want to fight me in this state I, Guigu Liuli, kills people, but I never care whether the person is a patient or not.However, only one name was registered at that time, and Ye Rufeng s identity was not stated, but Zhang Sancheng still found it.
Without saluting, he walked over and gave Qin Feng a warm hug.Our Ye family is not short of that money. What is it specifically , wait until you get what I promised.
Yanzi saw that Zhang Ulixy CBD Neon Cubes Reviews: A Comprehensive Analysis of CBD Gummies (CDKDG)
Quyang was injured, He hurriedly shouted We are from the Martial Temple We are here to carry out a mission today, and I have something to ask you Qin Feng had told him not to worry about the mission at critical moments, even if his identity was revealed and he was alerted, it would be fine.
Moreover, after today, Xuanyuan Feng s worth has skyrocketed, and the entire martial arts will know that a genius boy has emerged from Panlong Palace, who is even more amazing than the top ten geniuses that are widely circulated today.Insiders only knew that Zeng Keyi had an extraordinary family background and was born in Sichuan.
Although he now has a well established girlfriend like Chen Chuqing, as a member of her husband s family, she doesn t want people to say that Qin Feng is eating soft food.Intentional humiliation is one thing, the important thing is to see what Qin Feng does.
Needless to say, Nirvana s feelings for Qin Guanshan are natural.Dai Ruolan and the others couldn t go to their activities at all, so they stayed in the special station for one night before letting them out.
Unexpectedly, Jiang Yunshu would do this in front of so many people.After all, if he wants money, let alone other places, the people in Netherworld Prison are more active than the others.
What will he do then Du Shixi still looked indifferent, as if it didn t concern him What will happen to him has nothing to do with you or me.
Eset desarrolló un análisis sobre el nuevo ataque de ransomware que se inició en Ucrania, y cifró información de máquinas de todo el mundo, afectando compañías de distintas industrias como bancos, red eléctrica y empresas postales, entre otras. El ransomware (secuestro de información) es el término genérico para referirse a todo tipo de software malicioso que le exige al usuario del equipo el pago de un rescate.