I-Ragnar Locker Ransomware
Isingeniso
In 2022, iRagnar Locker ransomware esetshenziswa yiqembu lezigebengu elaziwa ngokuthi i-Wizard Spider, yasetshenziswa ekuhlaseleni inkampani yobuchwepheshe yaseFrance i-Atos. I-ransomware yabhala ngemfihlo idatha yenkampani futhi yafuna isihlengo sezigidi eziyishumi zamaRandi ku-Bitcoin. Incwadi yesihlengo ithi abahlaseli bebentshontshe imininingwane yenkampani engu-10 gigabytes, okuhlanganisa nemininingwane yabasebenzi, imibhalo yezezimali kanye nedatha yamakhasimende. I-ransomware iphinde yathi abahlaseli bathole ukufinyelela kumaseva e-Atos ngokusebenzisa ukuxhashazwa kwezinsuku ezingu-10 kumshini wayo we-Citrix ADC.
U-Atos ukuqinisekisile ukuthi uyisisulu sokuhlaselwa kwe-cyberattack, kodwa akazange aphawule ngesidingo sesihlengo. Kodwa-ke, inkampani ithe "isebenze zonke izinqubo zangaphakathi ezifanele" ukuphendula kulokhu kuhlasela. Akukacaci ukuthi u-Atos ukhokhe isihlengo noma cha.
Lokhu kuhlasela kugqamisa ukubaluleka kokuchibiyela amasistimu nokuqinisekisa ukuthi yonke isoftware isesikhathini samanje. Kuphinde kube yisikhumbuzo sokuthi ngisho nezinkampani ezinkulu zingaba yizisulu zokuhlaselwa kwe-ransomware.
Iyini i-Ragnar Locker Ransomware?
I-Ragnar Locker Ransomware iwuhlobo lohlelo olungayilungele ikhompuyutha olufihla amafayela esisulu futhi ifune ukuthi kukhokhwe isihlengo ukuze kususwe ukubethela. I-ransomware yaqala ukubonwa ngoMeyi ka-2019, futhi kusukela ngaleso sikhathi ibisetshenziswa ekuhlaselweni kwezinhlangano emhlabeni jikelele.
I-Ragnar Locker Ransomware ivamise ukusabalala ukuphinga ama-imeyili noma ngamakhithi okuxhaphaza asizakala ngokuba sengozini kwesofthiwe. Uma uhlelo seluthelelekile, i-ransomware izoskenela izinhlobo ezithile zamafayela futhi iwabethele kusetshenziswa ukubethela kwe-AES-256.
I-ransomware izobe isiveza inothi lesihlengo eliyalela isisulu ukuthi singasikhokha kanjani isihlengo futhi sisuse ukubhala phansi amafayela aso. Kwezinye izimo, abahlaseli bazophinde basabise ngokukhulula idatha yesisulu esidlangalaleni uma isihlengo singakhokhiwe.
Ungayivikela Kanjani Ku-Ragnar Locker Ransomware
Kunezinyathelo ezimbalwa izinhlangano ezingazithatha ukuze zizivikele ku-Ragnar Locker Ransomware nezinye izinhlobo zohlelo olungayilungele ikhompuyutha.
Okokuqala, kubalulekile ukugcina yonke isoftware isesikhathini futhi inamachibi. Lokhu kuhlanganisa izinhlelo zokusebenza, izinhlelo zokusebenza, nesofthiwe yezokuphepha. Abahlaseli bavame ukusizakala ngokuba sengozini kwesofthiwe ukuthelela amasistimu nge-ransomware.
Okwesibili, izinhlangano kufanele zisebenzise izinyathelo zokuphepha eziqinile ze-imeyili ukuvimbela ama-imeyili obugebengu bokweba imininingwane ebucayi ukuthi angafinyeleli amabhokisi okungenayo abasebenzisi. Lokhu kungenziwa ngokusebenzisa ukuhlunga kwe-imeyili kanye namathuluzi okuvimbela ogaxekile, kanye nokuqeqeshwa kwabasebenzi kokuthi bangawabona kanjani ama-imeyili obugebengu bokweba imininingwane ebucayi.
Okokugcina, kubalulekile ukuba nesipele esiqinile kanye nohlelo lokuhlenga izinhlekelele endaweni. Lokhu kuzoqinisekisa ukuthi uma isistimu itheleleke nge-ransomware, inhlangano ingakwazi ukubuyisela idatha yayo kuma-backups ngaphandle kokukhokha isihlengo.
Isiphetho
I-Ransomware iwuhlobo lohlelo olungayilungele ikhompuyutha olufihla amafayela esisulu bese lufuna ukuthi kukhokhwe isihlengo ukuze kususwe ukubethela. I-Ragnar Locker Ransomware iwuhlobo lwe-ransomware eyaqala ukubonwa ngo-2019 futhi kusukela lapho ibisetshenziswa ekuhlaselweni kwezinhlangano emhlabeni jikelele.
Izinhlangano zingazivikela ku-Ragnar Locker Ransomware nezinye izinhlobo zohlelo olungayilungele ikhompuyutha ngokugcina yonke isofthiwe isesikhathini futhi ifakwe nezichibiyelo, zisebenzisa izinyathelo zokuphepha eziqinile ze-imeyili, nokuba nekhophi eyisipele eqinile nohlelo lokutakula inhlekelele endaweni.
