ãïœKittyãã«ãŠã§ã¢ã¯ããé¡ãã ããåé€ããªãã§ãç§ã¯ç¡å®³ãªå¯æãåç«ãªã®ããšèšŽãã
ãªãŒãã³ãœãŒã¹ã®ã³ã³ãã³ã管çã·ã¹ãã ïŒCMSïŒãDrupalãã®è匱æ§ãçªãæ»æã暪è¡ããŠããã
ã»ãã¥ãªãã£äŒæ¥ã®Imperva Incapsulaã¯ãä»®æ³é貚ãMoneroããæ¡æããæ°æã®ãã«ãŠã§ã¢ãKittyããèŠã€ãã£ããšäŒããã
Impervaã®ããã°ã«ãããšãæªçšãããŠããã®ã¯Drupalã3æ28æ¥ãªãªãŒã¹ã®æŽæ°çã§å¯ŸåŠãããªã¢ãŒãã³ãŒãå®è¡ã®è匱æ§ïŒCVE-2018-7600ïŒã
2018幎4æäžæ¬ã«ã¯æªçšã確èªããã以åŸãããŸããŸãªåœ¢ã§äŸ¿ä¹æ»æãçºçããŠããã
æ°æã®ãã«ãŠã§ã¢Kittyã¯ããã®æ»æã«ã€ããŠèª¿æ»ããéçšã§çºèŠãããã
ææãããšããµãŒãã«åžžé§ããŠMoneroæ¡æããã°ã©ã ã®ãkkworkerããã€ã³ã¹ããŒã«ãããæ¡æããã»ã¹ãéå§ãããšããã
åçïŒãã«ãŠã§ã¢ãåé€ãããªãããããé¡ãã ããåé€ããªãã§ãç§ã¯ç¡å®³ãªå¯æãåç«ãªã®ããšè¡šç€ºãããšãã
æ»æè ã¯ããã«ãæ§ã ãªWebãªãœãŒã¹ã«ææãåºããããšãçã£ãŠæ¡æçšã¹ã¯ãªããã®ãme0w.jsããä»èŸŒã¿ãWebãµãŒããµã€ããé²èŠ§ãããŠãŒã¶ãŒã«ãã«ãŠã§ã¢ãææãããããšããã
ãç«å¥œãã®å¿ãã€ãããããæ»æè ã¯ããé¡ãã ããåé€ããªãã§ãç§ã¯ç¡å®³ãªå¯æãåç«ãªã®ããšè¡šç€ºããããšã«ãã£ãŠããã«ãŠã§ã¢ããã£ãšããŠãããŠã»ãããšèšŽããããšããã
å瀟ãçºèŠãããã«ãŠã§ã¢Kittyã®ç¬¬1äžä»£ã¯ããŒãžã§ã³1.5ã ã£ãããææ°ããŒãžã§ã³ã¯1.6ã«æŽæ°ãããŠãããšããããæ»æè ã¯çµç¹ã§ãœãããŠã§ã¢è£œåã®ããã«ãã«ãŠã§ã¢ãéçºãããã°ä¿®æ£ãæ°æ©èœã®è¿œå ãè¡ã£ãŠããããšãããããããããšmpervaã¯è§£èª¬ããŠããã
ITã¡ãã£ã¢ãšã³ã¿ãŒãã©ã€ãºã2018幎05æ07æ¥ 08æ40å
http://www.itmedia.co.jp/enterprise/articles/1805/07/news039.html
ç¬ã¯èšããã©ãª
ãšãžããè»ïŒ¶ïŒ³ãã«ã·ã¢è»ãæãåºããã
察象ã¯å¥ã«ãªãã§ããããããšã«ããæçããããããªã¢ãã¿ãŒããããŠè¡šã«åºããŠè¢«å®³è ãšäº€æµãããŠããå ã«ãã€ãã³ã°ãããããã
ãã®å ããããæ¯ã蟌ãŸãªããšæ¶ãã¡ãããæ»ãããããšèšã£ãŠåæ ãèªã£ãããç¡å®³ãªãµãããŠè²ã èãåºãããšãããã€ãåºãŠããã ãã
æåã¯æ¬åœã«ç¡å®³ã§ãé åããèŠãŠäººå·¥ç¥èœã¢ãã¿ãŒã人質ã«ãããšããææ³ããããé ããªãå°æ¥èµ·ããã ãããª
ãªããªããã¡ã³ããŒãªæªæ¥äºæž¬ã w
æ®éã«ãããã
äœå¹Žãåã®ãã¡äºã«ãã£ããª
æç湧ãåã«å³åº§ã«æ¶ãã ããæ®é
å¥ã«æ°ããäºãããªããããã
https://dotup.org/uploda/dotup.org1527628.jpg
https://dotup.org/uploda/dotup.org1527630.jpg
ãããšã
ããã€ãplzã£ãŠèšã
ã¿ãã
åé€ãããªãæ茩ã¯å¯æãåç«ã§ãããååã¯ãŸã ãªãã
ã¿ããã
䜿çšæã®ä»£ããã«äœã£ãŠãCPUãã¯ãŒãåç·å®¹éãæ¡æã«æäŸãããããŠãã
ããžãã¹ã¢ãã«ã ã£ãŠæãç«ã¡ããã ãªã
ããããµãŒãã¹ã®å¯ŸäŸ¡ã«å人æ å ±ããŸãããšèŠããããããã·ããã?
åŒçšå
ïŒã ðº ãŠã€ã«ã¹ãããé¡ãã ããåé€ããªãã§ãç§ã¯ç¡å®³ãªå¯æãåç«ãªã®ããä»®æ³é貚æ¡æãã«ãŠã§ã¢ãKittyãã¯ç«å¥œããçã
http://ai.2ch.sc/test/read.cgi/newsplus/1525655432