KeRanger: Yoyamba Mac Ransomware M'tchiwumbidwe

Palo Alto Networks Amapewa Mawombola Target Mac Mac

Pa March 4, 2016, Palo Alto Networks, kampani yotchuka yoteteza chitetezo, adalemba kuti adapeza KeRanger ransomware yotenga Transmission, wotchuka Mac BitTorrent kasitomala. Malware enieni anapezeka mkati mwa installer ya Transmission version 2.90.

Webusaiti ya Transmission imatengera munthu yemwe ali ndi kachilombo koyambitsa kachilomboka ndikukakamiza aliyense wogwiritsa ntchito Transmission 2.90 kuti apitirize kusinthika mpaka pa 2.92, zomwe zatsimikiziridwa ndi Kutumiza kuti akhale opanda KeRanger.

Kutumiza sikungakambirane momwe munthu wotengera kachilomboka amatha kukhalira pa webusaiti yawo, komanso Palo Alto Networks satha kudziwa momwe tsamba loyendera limapangidwira.

KeRanger Ransomware

Chowomboledwa cha KeRanger chimagwira ntchito monga malipiro ambiri amachitira, polemba ma fayilo pa Mac yanu, ndiyeno amafuna kulipira; Pachifukwa ichi, ngati mawonekedwe amodzi (omwe akuwerengedwa pafupifupi $ 400) kuti akupatseni fungulo lofikira kuti mutenge mafayilo anu.

The KeRanger ransomware imayikidwa ndi womangika wotumiza Transmission. Wowonjezera amagwiritsira ntchito chivomerezo chovomerezeka cha Mac Mac, ndikulola kuyika kwawomboledwe kudutsa njira zamakono zowonongeka za OS X's , zomwe zimalepheretsa kukhazikitsa malware pa Mac.

Kamodzi atakhazikitsidwa, KeRanger amapanga kuyankhulana ndi seva yakutali pamtunda wa Tor. Icho chimapita kukagona kwa masiku atatu. Mukamadzuka, KeRanger imalandira fungulo loponyera kuchokera ku seva yakutali ndipo imatha kufotokoza mauthenga pa Mac omwe ali ndi kachilomboka.

Maofesi omwe amatha kufotokozedwa ndi awa omwe ali mu foda / Ogwiritsira ntchito, zomwe zimabweretsa mauthenga ambiri ogwiritsira ntchito pa Mac omwe ali ndi kachilombo koyimbidwa popanda kugwiritsa ntchito. Kuphatikiza apo, Palo Alto Networks amafotokoza kuti fayilo / mavokosi, omwe ali ndi malo okwera pa zipangizo zonse zosungiramo zipangizo, zonse zapafupi komanso pa intaneti, ndizofunikanso.

Panthawiyi, pali zambiri zosiyana zokhudzana ndi Time Machine zomwe zimatulutsidwa ndi KeRanger, koma ngati fayilo yafayilo ikuwonekera, sindiwona chifukwa chimene galimoto ya Time Machine sichidzasinthidwe. Ndikulingalira kuti KeRanger ndiwomboledwe yatsopano kotero kuti mauthenga osakanikirana a Time Machine ndi kokha kachidutswa mu code code ransomware; nthawi zina zimagwira ntchito, ndipo nthawi zina sizili choncho.

Apple Imayankha

Palo Alto Networks inauza KeRanger ransomware kwa Apple ndi Transmission. Onse awiri anachita mofulumira; Apple inaphwanya chitifiketi cha pulojekiti ya Mac yomwe ikugwiritsidwa ntchito ndi pulogalamuyo, motero amalola Wachitsulo kusiya kulembedwa kwa KeRanger. Apple inasinthiranso zolemba za XProject, kulola dongosolo lakuyimira malonda a OS X kuti lizindikire KeRanger ndikuletsa kusungirako, ngakhale GateKeeper ili yolephereka, kapena ikukonzekera kukhazikitsa chitetezo chochepa.

Kutumiza kuchotsedwa Kutumiza 2.90 kuchokera pa webusaiti yawo ndipo mwamsanga kubwezeretsanso kumasulira kwa Transmission, ndi nambala ya 2.92. Titha kuganiza kuti akuyang'anitsitsa momwe webusaiti yawo inasinthidwira, ndikutenga njira zothandizira kuti zisadzachitikenso.

Kodi Chotsani KeRanger?

Kumbukirani, kukopera ndi kukhazikitsa kachilombo ka pulogalamu ya Transmission ndiyo njira yokhayo yopezera KeRanger. Ngati simugwiritsa ntchito Transmission, panopa simuyenera kudandaula za KeRanger.

Malingana ngati KeRanger sanateteze mafayilo a Mac anu pano, muli ndi nthawi yochotsa pulogalamuyi ndikuletsa kutsekedwa kwanu kuti zisadzachitike. Ngati maofesi anu a Mac ali kale kalembedwa, palibe zambiri zomwe mungachite kupatula kuti chiyembekezo chanu sichinatetezedwe. Izi zikusonyeza chifukwa chabwino kwambiri chokhala ndi galimoto yosungira zomwe sizimagwirizana ndi Mac. Mwachitsanzo, ndimagwiritsa ntchito Carbon Copy Cloner kuti ndipange mlungu uliwonse ma data anga a Mac . Nyumba yoyendetsa galimotoyo siikwera pa Mac yanga mpaka ikakhala yofunika kwambiri.

Ngati ndikanakhala ndi vuto la chiwomboledwe, ndikadatha kubwezeretsa ndikubwezeretsa kuchokera kumsonkhano wa sabata. Chilango chokha chogwiritsira ntchito chipangizo cha mlungu ndi mlungu chili ndi mafayilo omwe angakhale oposa sabata imodzi, koma ndibwino kwambiri kuposa kupereka ndalama zokhazokha za cretin.

Ngati mukumva zovuta za KeRanger pokhala kale ndi msampha, sindikudziwa kuti ndingatuluke bwanji pokhapokha ngati ndikulipira dipo kapena kubwezeretsanso OS X ndikuyamba ndi kukhazikitsa koyera .

Chotsani Kutulutsa

Mu Finder , yendani ku / Mapulogalamu.

Pezani pulogalamu yotumizira, ndipo dinani pomwepo chizindikiro chake.

Kuchokera pamasewera apamwamba, sankhani Zolemba Pakati.

Muwindo la Finder limene limatsegulira, yendani ku / Zamkatimu / Resources /.

Fufuzani fayilo yotchedwa General.rtf.

Ngati fayilo ya General.rtf ilipo, muli ndi kachilombo ka Transmission komwe kanayikidwa. Ngati pulogalamu yotumiza ikutha, asiye pulogalamuyo, kukokera ku zinyalala, ndiyeno yonyani zitsulo.

Chotsani KeRanger

Yambani Ntchito Yowunika , yomwe ili pa / Mapulogalamu / Utilities.

Mu Ntchito Monitor, sankhani tsamba la CPU.

Mu Ntchito Monitor yowonjezera, lowetsani zotsatirazi:

kernel_service

ndiyeno yesani kubwerera.

Ngati ntchito ilipo, idzalembedwa pawindo la Ntchito Monitor.

Ngati mulipo, dinani kabuku kachitidwe mu Ntchito Monitor.

Pazenera yomwe imatsegulira, dinani pazithunzi za Open Files ndi Ports.

Lembani dzina la kernel_service pathname; izo zikhoza kukhala chinachake monga:

/ owerenga / homefoldername / Library / kernel_service

Sankhani fayilo, ndipo dinani Chotsani Chotsani.

Bwerezani zomwe zili pamwambazi pa mayina a kernel_time ndi ma kernel_mapemphero osakwanira .

Ngakhale mutasiya ntchito mu Ntchito Monitor, muyenera kuchotsa mafayilo anu ku Mac. Kuti muchite zimenezi, gwiritsani ntchito mayendedwe oyendetsera mafayilo kuti mupite ku kernel_service, kernel_time, ndi mafayilo a kernel_zosakwanira. (Dziwani: Mwinamwake mulibe mafayi onsewa pa Mac yanu.)

Popeza mafayilo omwe mukufuna kuchotsa ali mu fayilo ya Library ya fayilo yanu, muyenera kupanga fayilo yapaderayi. Mungapeze malangizo a momwe mungachitire izi mu OS X Akubisa nkhani yanu ya Folda yamakalata .

Mukatha kupeza fayilo ya Laibulale, tsambulani mafayilo omwe tatchulidwa pamwambawa ndi kuwakokera ku zinyalala, kenako pang'anizani pomwepo chizindikiro chadoti, ndikusankhira Tcherani Tchire.