Na očiach, ale napriek tomu skryté

Napísal Matej Krajčovič 03. február 2025

Útočníci vkladajú malvér priamo do obrázkov na webových stránkach. Spoločnosť HP zistila, že vďaka nástrojom označovaným ako malware-by-numbers a Gen AI útočia kyberzločinci jednoduchšie než doteraz.

freepik_hacker_holding_mask25

Spoločnosť HP Inc. vydala svoju najnovšiu správu Threat Insights Report, ktorá popisuje, ako kyberzločinci využívajú predpripravené sady umožňujúce aj tým menej skúseným z nich vytvoriť malvér (malware-by-numbers) a generatívnu umelú inteligenciu (GenAI) na zefektívnenie svojich útokov. Tieto nástroje zjednodušujú a zrýchľujú tvorbu útočných komponentov, takže kyberzločinci sa  môžu sústrediť na experimentovanie so spôsobmi ako obísť detekciu, oklamať obete a infikovať ich zariadenia.

Správa analyzuje skutočné kybernetické útoky a pomáha firmám držať krok s najnovšími technikami, ktoré sa v rýchlo meniacom prostredí kybernetickej kriminality aktuálne používajú na obchádzanie detekčných nástrojov a prieniky. Na základe údajov z miliónov koncových zariadení vybavených systémom HP Wolf Security experti na hrozby spoločnosti HP identifikovali nasledujúce kampane:

  • Súbory malware-by-numbers: experti na hrozby spoločnosti HP zaznamenali rozsiahle kampane šíriace malvé VIP Keylogger a 0bj3ctivityStealer, ktoré využívajú rovnaké techniky a loadery. To naznačuje, že na doručenie rôzneho obsahu používajú rovnaké sady malvéru. V oboch kampaniach ukryli útočníci rovnaký škodlivý kód do obrázkov na webových stránkach na hosťovanie súborov, ako napríklad archive.org, a na inštaláciu škodlivého obsahu použili rovnaký loader. Obrázky z dobre známych webových stránok sa javia mnohým systémom detekcie ako neškodné – obchádzajú sieťové zabezpečenie ako sú webové proxy servery, ktoré sa spoliehajú na reputáciu webových stránok.
  • GenAI pomáha vytvárať škodlivé dokumenty HTML: výskumníci tiež identifikovali kampaň s trójskym koňom XWorm (RAT) začatou metódou HTML smugglingu, pri ktorom je do dokumentu vložený škodlivý kód umožňujúci stiahnutie a spustenie malwaru. Podobne ako v kampani AsyncRAT analyzovanej v predchádzajúcom štvrťroku, mal loader znaky naznačujúce, že bol vytvorený pomocou GenAI – napríklad obsahoval popis po jednotlivých riadkoch a špecifický dizajn HTML stránky.
  • Podvádzať sa nevypláca: útočníci zneužívajú cheaty a modifikačné repozitáre v hrách na GitHube tým, že do nich vkladajú spustiteľné súbory obsahujúce malware Lumma Stealer. Tento infostealer vykráda heslá obetí, kryptopeňaženky a zhromažďuje informácie z prehliadačov. Požívatelia často deaktivujú bezpečnostné nástroje, aby mohli sťahovať a používať cheaty, čím sa vystavujú väčšiemu riziku infekcie, pokiaľ nepoužívajú technológie izolácie.

Alex Holland, hlavný expert na hrozby v HP Security Lab, k tomu hovorí: „Analyzované kampane sú ďalším dôkazom sprístupnenia kyberkriminality. Pretože sú sady malware-by-numbers dostupnejšie, cenovo prístupnejšie a ľahko použiteľné, aj začiatočníci s obmedzenými schopnosťami môžu vytvoriť efektívny sled krokov pre šírenie infekcie. Keď sa k tomu pridá GenAI, ktorá skripty napíše, vstupné bariéry sa ešte znižujú. Skupiny útočníkov sa tak môžu sústrediť na to, ako najlepšie oklamať svoje obete a aké nástroje na to využiť – napríklad útočiť na hráčov prostredníctvom infikovaných úložísk pre cheaty.“

HP Wolf Security má špecifický prehľad o najnovších technikách používaných kyberzločincami vďaka tomu, že vie ako izolovať hrozby, ktoré sa vyhli detekčným nástrojom v počítačoch, tak malware bezpečne detonovať. K dnešnému dňu zákazníci HP Wolf Security klikli na viac ako 65 miliárd e-mailových príloh, webových stránok a stiahnutých súborov bez toho, aby bolo zaznamenané akékoľvek narušenie.

Správa vychádza z dát za 3. štvrťrok roku 2024 a podrobne popisuje, ako rôznorodé spôsoby útokov kyberzločinci používajú:

  • Najmenej 11 % e-mailových hrozieb identifikovaných nástrojom HP Sure Click obišlo jeden alebo viac skenerov e-mailových brán
  • Najobľúbenejším typom malwaru boli spustiteľné súbory (40 %), nasledované archívnymi súbormi (34 %)
  • Pozoruhodný nárast bol zaznamenaný u súborov .lzh, ktoré tvorili 11 % analyzovaných archívnych súborov – väčšina škodlivých archívnych súborov .lzh bola zameraná na japonsky hovoriacich používateľov.

Dr. Ian Pratt, riaditeľ divízie Security for Personal Systems v spoločnosti HP, k tomu hovorí: „Kyberzločinci stále zvyšujú rozmanitosť, mohutnosť a rýchlosť svojich útokov. Aj keď sa teraz podarí zachytiť škodlivý súbor Excelu, môže nabudúce prekĺznuť archívny súbor. Namiesto pokusov o detekciu rýchlo sa meniacich spôsobov útoku by sa organizácie mali zamerať na minimalizáciu zraniteľných miest. To znamená izolovať a obmedziť rizikové činnosti, ako je otváranie príloh e-mailov, klikanie na odkazy a sťahovanie z prehliadača, aby sa znížila pravdepodobnosť infekcie.“

HP Wolf Security1 spúšťa rizikové úlohy v izolovaných, hardvérovo zabezpečených virtuálnych strojoch bežiacich na koncovom zariadení, aby ochránil používateľov bez toho, aby ovplyvnil ich produktivitu. Zachytáva tiež podrobne stopy pokusov o infekciu. Technológia izolácie aplikácií HP zmierňuje hrozby, ktoré môžu uniknúť iným bezpečnostným nástrojom, a poskytuje jedinečný prehľad o technikách prieniku a správania útočníkov. Tieto údaje boli zhromaždené so súhlasom zákazníkov spoločnosti HP Wolf Security v období od júla do septembra 2024.

HP Wolf Security predstavuje špičkové zabezpečenie koncových zariadení. Portfólio bezpečnostných riešení spoločnosti HP, založené na hardvérovom zabezpečení a službách zameraných na koncové zariadenia, pomáha organizáciám chrániť počítače, tlačiarne a užívateľov pred kybernetickými hrozbami. HP Wolf Security ponúka komplexnú ochranu a odolnosť, ktorá začína na úrovni hardvéru a zahŕňa aj softvér a služby. Viac informácií nájdete na https://hp.com/wolf.

Zdroj foto: Freepik

3 komentárov

  • Komentár Testosterone Vs Steroids %PM, %03 %905 %2025 %20:%apr napísal Testosterone Vs Steroids

    70918248

  • Komentár Steroids|2Ahukewjy0Cqyv7Hnahvpes0Khayodxuq4Lyoahoecaeqfq %AM, %27 %057 %2025 %00:%mar napísal Steroids|2Ahukewjy0Cqyv7Hnahvpes0Khayodxuq4Lyoahoecaeqfq

    Creatine dietary supplements assist preserve
    power during high-intensity train and will allow an athlete to carry out extra repetitions
    before turning into fatigued. In one study, football players who took creatine may run for longer earlier than turning into exhausted.
    The International Society of Sports Diet states that creatine supplementation may enhance muscle power by about eight percent and enhance anaerobic capacity by 14 %.
    Whereas a loading part may help saturate your muscles with creatine extra
    rapidly, it’s not essential to see advantages. A consistent daily
    dose of 3-5 grams is adequate to realize and preserve elevated muscle
    creatine levels over time. Researchers contemplate 3 to
    5 g a day or 0.1 g per kg of body mass a day of creatine monohydrate a secure, effective,
    long-term daily dosage. However, many merchandise comprise 5 g,
    which can enhance a person’s muscle creatine quickly but haven't any significant
    impression on health markers.
    The key ingredient in Optimum Diet Critical Mass
    is whey protein concentrate, which is known for its excessive bioavailability and effectiveness in muscle restoration. Elevate your athletic prowess with Agym Nutrition’s HALAL-certified Creatine Monohydrate Powder, specifically formulated for dedicated athletes seeking
    top-tier performance. Crafted with meticulous care on the
    MESTI KKM manufacturing facility, this product additionally caters to the wants of Muslim shoppers as a trusted
    Muslim Product. Creatine is sometimes marketed, notably to older adults, as one thing that may work by itself to build muscle tissue even in sofa potatoes.
    "But just taking the powder by itself isn't going to (work)," Bouwmeester says.
    Efficiency specialists and professors at Northeastern College say the latest research shows creatine may help older
    individuals stay stronger longer. However it’s not a miracle elixir — individuals have to put within the
    work and keep active to see benefits.
    These gummies come in quite lots of flavors, so you're not stuck
    with just one choice. However, they are dearer than most gummies available
    on the market, so budget-conscious customers could have to look elsewhere.

    These gummies are good for those who want extra than just creatine of their supplements, offering a
    well-rounded choice for boosting energy and focus along with muscle features.
    One of the key advantages of this complement is its assist in muscle restoration by replenishing ATP levels,
    permitting users to coach more durable and for longer durations.
    This added endurance could be invaluable for males
    over 50 looking for to maintain or enhance their health levels.
    The formulation of BSN Micronized Creatine Monohydrate Powder is optimized for max efficacy and constructive outcomes.
    Many customers have reported experiencing improved vitality, strength,
    and muscle mass when utilizing this supplement consistently as part of their
    workout regimen.
    Your endurance will be increased, leading to longer,
    extra demanding workouts. At anybody time, your body has a sure quantity of ATP stored in the muscle tissue.

    Take your creatine EVERY DAY, even should you're not figuring out, to help your muscle tissue and maintain them
    saturated. Whether you're an experienced, occasional, or straight up noob athlete,
    including creatine to your supplement regimen can help you reach your targets, no matter what they could be.
    "There are many many alternative versions of creatine out there, all touted as having superior benefits," MacDonald says.
    "However, monohydrate is essentially the most well-studied model of creatine, and different versions have but to show any additional profit within the research."
    Creatine supplementation has been confirmed to be successful time and time once more as long as
    you stick to regular usage. Moreover, we have not discovered any printed literature suggesting it is
    unsafe. All The Time seek the guidance of with a healthcare professional or
    nutritionist before starting any supplementation, especially if you
    have underlying well being situations or are on medicine.
    Our check results verify that it offers fairly a significant vitality enhance and
    recovery times are often reduce in half. Whereas effective, this protocol requires frequent dosing and can be inconvenient for some athletes, especially in the
    event that they should take it around their workouts
    or with meals.
    By Amy Brownstein, MS, RDNAmy Brownstein, MS, RDN, is a personal apply
    dietitian and diet advisor primarily based on the West Coast.
    She is keen about translating vitamin science into digestible and actionable academic info and
    proposals. Males looking for various creatine forms might find CEE to be
    an interesting possibility, although the evidence is not as sturdy as different
    types like monohydrate or HCl.
    However, earlier trials have started supplementation and train packages on the
    identical day, making it troublesome to separate the effect of every on muscle positive aspects, Dr
    Hagstrom stated. They’ve additionally overlooked the potential for creatine to cause water
    retention, although more research was needed to verify
    this. Analysis on wholesome adults suggests creatine supplementation does not negatively influence kidney perform when taken at recommended doses.
    Take 3 g to five g of creatine monohydrate
    day by day for muscle and cognitive advantages.
    Maintaining this stage requires someone to get about 2 grams of creatine
    a day2 (typically with 1 gram coming from the diet and 1 gram coming from inner production).
    During that first week folks taking creatine gained extra lean physique mass, significantly ladies, gaining a median of zero.5 kilograms more
    than the control group. Nevertheless, the additional gains they made various tremendously, and
    shortly dropped again to match these of the control group.

    People hoping to construct muscle with the support of a creatine complement may
    be disenchanted by new research which shows it has little to no
    effect when taken at the recommended degree.

    Li says she advises folks taking creatine dietary supplements
    to examine with their doctor or dietitian and always buy from a dependable supply.

    "What we're seeing now is increasingly more analysis coming out exhibiting the rise in cellular energy availability may help in all processes of the body, from muscle growth to cognitive benefits," Clark says.


    The info offered on this information is for academic
    purposes solely and should not exchange professional medical advice.
    All The Time seek the assistance of with a healthcare skilled earlier than starting
    any new dietary supplement or train program. Besides 5g of Creapure® creatine monohydrate, you’ll discover tingle-reduced beta-alanine,
    and L-theanine. Once I opened GHOST Measurement V2 I noticed the mouthwatering smell of Warheads® Bitter Watermelon – so SO good!

    The style was out of this world and nostalgic – introduced me
    proper back to my childhood.

  • Komentár bodybuilders before steroids were invented %PM, %24 %893 %2025 %20:%mar napísal bodybuilders before steroids were invented

    His dieting objective is to get sufficient protein to aid lean muscle
    progress. All his meals are very precisely measured relying on what he
    trains for the day. He focuses primarily on plenty of protein, good carbs, and vegetables.
    Some of his most well-liked foods in his food plan are egg whites, filet mignon, chicken, fish, oatmeal, broccoli,
    asparagus, a baked potato, cream of rice and salad, together with extra
    complicated carbs. The Rock has a ton of protein and carbohydrates in his food regimen, which is each needed for proper
    vitamins and vitality. Nevertheless, many proteins are
    excessive in saturated fat that may trigger heart problems, whereas unhealthy
    carbs may contribute to diabetes and metabolic syndrome, together with weight achieve.

    Considering he is an action hero, he must have a sure demeanor.
    Adapting a strict food regimen plan was required to create and keep
    his muscular form. For Michael, the early morning surge is a robust
    emotion and the sensation of carrying out his health objectives very first thing within the morning has become addictive for him.
    It makes him feel good and sets him perfectly for the
    remainder of the day. Michael is an old style fitness enthusiast and believes that
    best time to exercise is in the morning. The more energizing air
    and quiet and peaceful setting help concentrate on the fitness regime in a better
    method. With a great night’s sleep, the body is recent so
    you can give more to your workout in comparability to evening
    regime, where your body is already tired out from full day’s work.

    And there’s additionally scientific proof that compound exercises assist with sooner muscle tissue progress,
    based on the Asian Journal of Sports Activities Medicine [1].
    I’ve compiled his workout and diet plan from numerous interviews
    and his social media insights, and I'm about to share ideas and tricks on how he accomplishes his impeccable physique.
    Inside this routine, White performs 8 exercises, for various
    sets and rep ranges. Michael Jai White is an incredibly proficient actor, and mixed
    martial artist, but recently hasn’t been getting A-list roles.


    White underscores the significance of diet high
    quality in enhancing exercise outcomes. Regardless Of a
    penchant for Town Home crackers, he prioritizes a food regimen wealthy
    in contemporary fruits, vegetables, and grass-fed purple meat.
    The macro profile of his diet varies slightly relying on the training part
    he’s in. Head for the heavy-weight plates if you’re severe about getting
    a physique like White. The more you battle with the final two repetitions, the better.

    It must be famous right here that White is an enormous fan of sprinter’s physique, which together with being ripped and buff, additionally has highly effective
    and helpful muscles. To train like a sprinter means going for explosiveness when it comes to
    exercise execution as nicely as the finish outcome.
    As he's not aiming to add bulk to his muscle tissue and only lifts
    weight for muscle tone, he retains each train limited to about
    three or 4 units with reps ranging from 12 to 15.
    Additionally, Michael believes that understanding in the morning
    help burn more fats and revs up body metabolism to torch
    extra fats throughout the day. Also, if you have a morning train routine arrange,
    you're less prone to miss your workouts. So, to keep it secret, he used to practice self-taught martial arts
    in abandoned buildings, often punching holes in the walls.
    He additionally used to accompany pals to martial arts courses
    however was solely allowed to observe initially.
    He practices a broad vary of martial arts, sprints, and power training.
    Like all all execs who have to make weight, St-Pierre pays careful attention to his food plan.
    He eats clear, counts macros, and maintains his weight at 185 lbs.

    He does this by eliminating sodium and carbs, and fills up
    with loads of leafy greens and tons of protein.
    Aside from coaching the targeted muscular tissues,
    explosive movements stimulate numerous other muscle groups
    as well. If you are a massive fan of motion motion pictures, you have to have seen a few of the motion flicks of Michael Jai White.
    The grace with which he performs his motion sequences
    is truly mesmerizing. Aside from having 7 completely different black belts
    in numerous styles of martial arts, he also sports
    a physique that makes him look like a superhero. For his
    second day, the actor prefers to concentrate on his back
    and biceps. He follows another intensive course of of seven steps which included
    quarter-hour on the elliptical, some preacher
    curls, cable rows, and barbell curls.
    He additionally eats lean animal protein like
    hen and fish, along with some pink meat. White will often has 5-6 meals per day, and he typically eats at house.
    He will get plenty of nutrients by way of his food, however
    he also supplements with issues like BCAAs, protein and creatine.
    He goes easy on the alcohol and doesn’t have much of a sweet tooth, although he generally succumbs to a snack assault.
    "I used to be like this [rigid] as a result of I did a whole bunch of bench urgent when I was youthful and all the load from my shoulders and arms were in entrance of my middle line. So for years, I needed to really concentrate on again work to steadiness myself out so after I moved, I was on balance. Every Little Thing you do in life pulls your shoulders ahead, so many of us lack back energy and that’s essential to anyone transferring up in age.
    Not solely is a cheat meal psychologically satisfying and might keep you disciplined together with your diet, it additionally causes many modifications within the body which may be beneficial to your metabolism. Dieting can create an vitality deficit, in which your physique usually adapts to the shortfall of energy by burning fewer of them. Having an influx of energy with a cheat meal can interrupt this slowdown. In addition, weight-reduction plan can decrease ranges of thyroid hormones and leptin (which directly have an result on fat-burning) and IGF (insulinlike growth factor, which helps muscle growth). Having an occasional cheat meal can convey them again to normal. As he makes use of weight coaching for pure firming purposes, he performs four units of 15 reps per train and limits every body half coaching to about 12 sets. Also, he performs weight training workouts in a barely totally different way.

Napísať komentár

Uistite sa, že všetky požadované (*) polia ste vyplnili. HTML kód nie je povolený.