首页 ›资讯› 安全 › 查看内容

GandCrab成全球首个接受达世币作为赎金的勒索软件

2018-1-31 11:50 |来自: 互联网 5132 57

摘要: 安全研究人员David Montenegro在上周发现了一款名为“GandCrab”的新型勒索软件，正在通过漏洞利用工具分发，并可能是第一个接受达世（DASH）币作为赎金的勒索软件。达世币是一种支持即时交易、以保护用户隐私为目的 ...

安全研究人员David Montenegro在上周发现了一款名为“GandCrab”的新型勒索软件，正在通过漏洞利用工具分发，并可能是第一个接受达世（DASH）币作为赎金的勒索软件。

达世币是一种支持即时交易、以保护用户隐私为目的数字货币。它基于比特币，但更具匿名性，使得交易无法被追踪查询。

Montenegro在公布自己的发现后，更多的安全研究人员表示对GandCrab很感兴趣，他们对这款勒索软件进行了深入的分析，并将结果发布在了Twitter上。

根据渗透代码工具包研究人员“nao_sec”和“Brad”的说法，GandCrab目前正在随着所谓的无缝恶意广告活动被传播。攻击者使用了顶级漏洞利用工具包RIG，以寻找受害者软件中的漏洞，并在未经受害者许可的情况下安装GandCrab。

有趣的是，GandCrab的开发者要求受害者使用达世币作为赎金支付，而大多数勒索软件通常都会选择比特币，即使这种普遍现象已经有所改变，多数勒索软件也只是转向了更为流行的门罗币或者以太币。

这是第一个要求使用达世币作为赎金支付的勒索软件。研究人员认为，这很可能是由于达世币是围绕隐私建立的，因此执法机构难以追踪其所有者。

GandCrab的开发者目前将赎金需求设定为1.54个达世币，按目前的价格，大约为1170美元。

当加密文件时，GandCrab会将.GDCB 扩展名附加到被加密文件的文件名末尾。例如，test.jpg在被加密后，其文件名会变更为test.jpg.GDCB。

不幸的是，目前还没有办法免费解密这些文件。

本文由黑客视界综合网络整理，图片源自网络；转载请注明“转自黑客视界”，并附上链接。

, groupId: 6517016750112899592, itemId: 6517016750112899592, type: 2, subInfo: { isOriginal: false, source: 黑客视界, time: 2018-01-31 09:13:25 }, tagInfo: { tags: [{"name":"软件"},{"name":"比特币"},{"name":"黑客"},{"name":"数字货币"},{"name":"Twitter"}], groupId: 6517016750112899592, itemId: 6517016750112899592, repin: 0, }, has_extern_link: 0 }, commentInfo: { groupId: 6517016750112899592, itemId: 6517016750112899592, comments_count: 0, ban_comment: 0 }, mediaInfo: { uid: 76207630046, name: 黑客视界, avatar: //p3.pstatp.com/large/46e80003c98b9bfd77be, openUrl: /c/user/76207630046/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/76207630046/","avatar_url":"https://p3.pstatp.com/large/46e80003c98b9bfd77be","media_id":1584317604543502,"name":"黑客视界","user_verified":false},"articles":[{"item_id":"6517016855347986957","url":"/item/6517016855347986957","title":"Vericlouds公布2017年世界500强企业员工数据泄露总体态势"},{"item_id":"6517016750112899592","url":"/item/6517016750112899592","title":"GandCrab成全球首个接受达世币作为赎金的勒索软件"},{"item_id":"6517016625709842948","url":"/item/6517016625709842948","title":"Tor代理服务上演“黄雀在后” 半路截取勒索软件赎金"},{"item_id":"6517016451310682638","url":"/item/6517016451310682638","title":"加密货币IOTA辛酸史：一个网络钓鱼网站让其损失近400万美元"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":95,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"普通电脑一天开机24小时，需要多久能挖掘出一枚比特币？","single_mode":true,"gallary_image_count":2,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516712608123322631/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5518000a3c1719661583","group_id":"6516712608123322631"},{"comments_count":21,"media_avatar_url":"//p7.pstatp.com/large/5b510001050b17e7ab6b","is_feed_ad":false,"is_diversion_page":false,"title":"不论你的手机型号是什么，这些事都将使邮件威胁随处可见","single_mode":true,"gallary_image_count":3,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6516281437723820552/","source":"科技新作品","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5e710001b55a8c63ea9c","group_id":"6516281437723820552","is_related":true,"media_url":"/c/user/84838288111/"},{"comments_count":135,"media_avatar_url":"//p3.pstatp.com/large/216f00123b6e35854108","is_feed_ad":false,"is_diversion_page":false,"title":"比特币在慢慢退热，而华强北的矿机却卖疯了","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516675680984367619/","source":"豆哥笔记","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":343,"image_url":"//p3.pstatp.com/list/190x124/5e7200013ce3c637f0b5","group_id":"6516675680984367619","is_related":true,"media_url":"/c/user/61624906809/"},{"comments_count":242,"media_avatar_url":"//p3.pstatp.com/large/39b300034d7935c074cb","is_feed_ad":false,"is_diversion_page":false,"title":"比特币挖矿疯狂背后——深圳华强北第一次站在了金字塔顶端","single_mode":true,"gallary_image_count":6,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6514531586195587597/","source":"区块链研究员威廉","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b4b0000cfc26aedcfe6","group_id":"6514531586195587597","is_related":true,"media_url":"/c/user/68499938991/"},{"comments_count":155,"media_avatar_url":"//p1.pstatp.com/large/438f000291a9d629fe97","is_feed_ad":false,"is_diversion_page":false,"title":"不用买矿机，只要用浏览器上网就能获得数字加密货币，心动了吗","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6516694306709832206/","source":"海辰智汇","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5e77000005cac591ceaf","group_id":"6516694306709832206","is_related":true,"media_url":"/c/user/73467809022/"},{"comments_count":18,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"如何评价靠比特币身价百亿的新东方老师李笑来？","single_mode":true,"gallary_image_count":7,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516332870661832963/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/551700019bc8b66eaa51","group_id":"6516332870661832963"},{"comments_count":373,"media_avatar_url":"//p8.pstatp.com/large/4e63000148c54ab885ec","is_feed_ad":false,"is_diversion_page":false,"title":"中国再次紧急叫停！比特币“挖矿”用电量超过全球100多个国家？","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6515648388552196622/","source":"金十数据","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":250,"image_url":"//p1.pstatp.com/list/190x124/5b5500048871d96552db","group_id":"6515648388552196622","is_related":true,"media_url":"/c/user/5543660331/"},{"comments_count":480,"media_avatar_url":"//p3.pstatp.com/large/470e0000f379df0ab103","is_feed_ad":false,"is_diversion_page":false,"title":"市值等于23个百度、4个阿里、估值2万亿美元：全球最大IPO将诞生","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516733996305482247/","source":"K涛资本","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":625,"image_url":"//p3.pstatp.com/list/190x124/5e740001ea765be475e3","group_id":"6516733996305482247","is_related":true,"media_url":"/c/user/6318472691/"},{"comments_count":87,"media_avatar_url":"//p1.pstatp.com/large/56930005c3823354300a","is_feed_ad":false,"is_diversion_page":false,"title":"「深度长文」为什么区块链将颠覆世界？","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6515906668256035342/","source":"德州微帮生活","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/5b5800039457d178359c","group_id":"6515906668256035342","is_related":true,"media_url":"/c/user/71975435548/"},{"comments_count":151,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"遨游浏览器能挖矿了，收益怎么样？","single_mode":true,"gallary_image_count":7,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516473791579685127/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5517000aa172b01585ba","group_id":"6516473791579685127"},{"comments_count":26,"media_avatar_url":"//p3.pstatp.com/large/2c70000a57b94184ba80","is_feed_ad":false,"is_diversion_page":false,"title":"老虎老鼠傻傻分不清楚？一文看懂真正的新比特币","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6515639176321303044/","source":"比特币大咖分析","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":17603,"image_url":"//p3.pstatp.com/list/190x124/5b54000500d25a9976ca","group_id":"6515639176321303044","is_related":true,"media_url":"/c/user/64270928645/"},{"comments_count":33,"media_avatar_url":"//p5a.pstatp.com/large/5d42000760c3a4ef418a","is_feed_ad":false,"is_diversion_page":false,"title":"聚集300位资深币圈的好友都看好哪个币？","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6515947413683831303/","source":"卖报的小阿原","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":22,"image_url":"//p3.pstatp.com/list/190x124/5e71000011820d151d85","group_id":"6515947413683831303","is_related":true,"media_url":"/c/user/61829548103/"},{"comments_count":23,"media_avatar_url":"//p3.pstatp.com/large/2c70000a57b94184ba80","is_feed_ad":false,"is_diversion_page":false,"title":"李笑来硬币资本2018能否再现百倍神话","single_mode":true,"gallary_image_count":7,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516742168093131277/","source":"比特币大咖分析","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":7,"image_url":"//p1.pstatp.com/list/190x124/47220004571d5555361c","group_id":"6516742168093131277","is_related":true,"media_url":"/c/user/64270928645/"},{"comments_count":132,"media_avatar_url":"//p1.pstatp.com/large/39b00004b2ead9c37aaa","is_feed_ad":false,"is_diversion_page":false,"title":"newifi新路由登陆美国线上开售，打响全球化战略“第一枪”","single_mode":true,"gallary_image_count":2,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6516724697701286414/","source":"科技电商汇","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":2,"image_url":"//p3.pstatp.com/list/190x124/5e6f0005de91707c991d","group_id":"6516724697701286414","is_related":true,"media_url":"/c/user/64869672686/"},{"comments_count":2,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"现在都有哪些虚拟货币？谁是增值最快的？","single_mode":true,"gallary_image_count":2,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516767776453951747/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/5b0000049d14e0b61b57","group_id":"6516767776453951747"},{"comments_count":9,"media_avatar_url":"//p3.pstatp.com/large/402e000378270285ddfb","is_feed_ad":false,"is_diversion_page":false,"title":"超强干货！在数字货币游戏中你不可不知的网站和糖果建议收藏","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516665903243854340/","source":"窝瓜游戏","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":9,"image_url":"//p9.pstatp.com/list/190x124/5e720000d2bc1593d237","group_id":"6516665903243854340","is_related":true,"media_url":"/c/user/72675646814/"},{"comments_count":0,"media_avatar_url":"//p3.pstatp.com/large/59350005f3fe83fd2ffe","is_feed_ad":false,"is_diversion_page":false,"title":"学会用大数据分析数字货币，修炼成百倍币侦探，收藏必备","single_mode":true,"gallary_image_count":7,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516816254076977667/","source":"区块链风云社","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5e750003037a1853431c","group_id":"6516816254076977667","is_related":true,"media_url":"/c/user/5488447312/"},{"comments_count":10,"media_avatar_url":"//p6.pstatp.com/large/5b4000046b2b5dea346d","is_feed_ad":false,"is_diversion_page":false,"title":"论坛贴吧淘宝贴重现江湖，淘宝客推广秘籍！","single_mode":true,"gallary_image_count":5,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516757682395808259/","source":"电商百视通","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5e7200029b38dd92238f","group_id":"6516757682395808259","is_related":true,"media_url":"/c/user/86707572246/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/item/6517016750112899592/, abstract: 安全研究人员DavidMontenegro在上周发现了一款名为“GandCrab”的新型勒索软件。正在通过漏洞利用工具分发，并可能是第一个接受达世币作为赎金的勒索软件。

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除