³ÌªñÅ¥¨ì¤£¤Ö§L¤Í̤¤©Û¡Aè¦n¬Ý¨ì³o¤Ä·s»D¡A´N¶K¤W¨Ó¡A½Ð¤j®aª`·N¡A¥´¶}¹q¤l¶l¥ó§Cªþ¥ó®É¡An¥d²Ó¦r°Ú¡I
¥I¿ú®ø¨a¡I¹q¸£°Ç¯Á¯f¬r FBI¤]¨SÂá
http://udn.com/news/story/5/1349994
¹ê¦b®£©Æ¡A¬Ý¨ì¡u.pdf¡vÀÉ®×ÂI¶i¥h¡A³ºµM´N¤¤¤F°Ç¯Á¯f¬rcryptowall¡A¥¦¤£¦ý°°¸Ë¦¨§OªºÀÉ®×Ãþ«¬¡AÁÙ·|±N§AªºÀÉ®×¥[±K¡AYn±Ï¦^´N¥²¶·¥I¥X°ªÃB¤ñ¯S¹ô¡C¦p¤µ¡A´N³s¬ü°êÁp¨¹½Õ¬d§½FBI¤]§ô¤âµLµ¦¡C¨¾¬r³nÅé¥d¤Ú´µ°ò¤uµ{®vªí¥Ü¡A¥Ø«e¨¾¬r³nÅé¥i¥H¨¾¬r¡B²M²z±¼¯f¬r¡A¦ýµLªk¹ï³Q¥[±KªºÀɮ׸ѱK¡A¦D¨Æ§½ªí¥Ü¡Aª¾¹D¦¹Ãþ³nÅé¦s¦b¡A¦ý¥¼±µÀò¥ô¦ó³ø®×¡C
³oºØªþ¥[ÀɦW·|°°¸Ë¦¨¡u
.pdf¡v¡B¡u
.exe¡vªº°Ç¯Á¯f¬r¦Û2013¦~°_·½¦Û«Xù´µ¡A¦³
CryptoLocker¡BCryptowall¡BTorrentlockerµ¥¥Dn´XºØ¯f¬r¡A¥¦Ì·|±N¨Ï¥ÎªÌªºÀÉ®×¥[±K¡AYn±Ï¦^¡A½Ð¥I¿ú¸Ñ±K¡Ct³dºÊ·þFBIºô¸ô¦w¥þ»P¹q¸£±¡¸êªº§U²z±´û¬ù·æ¤Ò¡A10¤ë©³¦b¤@³õªi¤h¹yªººtÁ¿¤Wªí¥Ü¡AYÓ¤H¤¤¤F°Ç¯Á¹q¸£¯f¬r¡A³Ì§Öªº¸Ñ±Ï¤è¦¡´N¬O¥I¿úÅ«¦^ÀɮסC
¬°¤F¨¾¤îª÷¬y³Q¬dÀò¡A³oÃþ°Ç¯Á¯f¬rn¨D¨ü®`ªÌ¤ä¥I©¼¯S¹ô¡C¥Ø«e1ªT©¼¯S¹ô§I´«12325.77¥x¹ô¡A¨¾¬r³nÅé¥d¤Ú´µ°ò¤½¥q«ÈªA³¡ªí¥Ü¡A¥xÆW±q¥h¦~´N¶Ç¥X¨a±¡¡A¤µ¦~¦Ü¤µ¥´¹q¸Ü¨Ó¨D§Uªººô¤Í¤w¦³¼Æ¤Q¤H¡A³£³Q°Ç¯Á¤ñ¯S¹ô¡A±oªá¼Æ¸U¤¸¬Æ¦Ü¼Æ¤Q¸U¤¸±Ï¦^¡C¦D¨Æ§½ªí¥Ü¡Aªº½T¦s¦b³o¼Ëªº´c·N³nÅé¡A¦Ü¤µ©|¥¼±µÀò¥Á²³³ø®×¡C
ª÷©m¤uµ{®v«ü¥X¡A±`¨£ªº¤¤¬r²{¶H¬Oì¨Ó¡u.doc¡vªºwordÀÉ¡AÀɦWÅÜ¡u
doc.ccc¡v¦Ó¡u.jpg¡vªº¹Ï¤ùÀÉ¡AÀɦWÅÜ¡u
jpg.ccc¡v¡A¨Ï¥ÎªÌ§â¡uccc¡v¥h±¼¡Aµo²{Àɮפ´µM¥´¤£¶}¡A¨º´N¬O¤¤¬r¤F¡C¡u¾D¨ì·P¬VªºÀɮ׳Q¥HRSA2048¥[±K§Þ³N«Ê³¬¡A°£«D¦³±K½X¡A§_«h§AªºÀɮץû·¸Ñ¤£¶}¡C¡v¦pªG¤£·Q¥I¿ú¡A¥u¦n§R¤F¥¦¡C
ª÷©m¤uµ{®v«ü¥X¡A¡u¤@¯ë¤H¹q¸£¤¤¬r¡A¥i¥H«Äé¡A©ÎªÌ¨Ï¥Î¨¾¬r³nÅé²¾°£¯f¬r¡A¦ý³o©M¸Ñ±K§AªºÀɮ׳£¨S¦³Ãö«Y¡A¨¾¬r³nÅé§@¥Î¦b¨¾¬r¡AµLªk§U¸Ñ±K¡C¡v
°Ç¯Á³nÅé·P¬Vªº¤è¦¡§ó¬O¦h¤¸¡A¤@¯ë±`¨£ªºªþ¥[¦b¹q¤l¶l¥ó¸Ì±ªºexeÀɩΪ̬ݰ_¨Ó«Ü¹³pdfÀɪº¹Ï®×¡C¦¹¥~´N¬O±qjava©ÎªÌflash³nÅ骺º|¬}·P¬V¡C¥d¤Ú´µ°ò«ü¥X¡A³Ì®£©Æªº´N¬OÂǥѻP¦Û¤v³sºôªº¹q¸£·P¬V¡A¨Ò¦pA¹q¸£¦³¸Ë¨¾¬r³nÅé¡BB¹q¸£¤¤¬r¡A¦ýA©MB¦³³z¹L¡uºô¸ô¤WªºªÚ¾F¡v¬Û³s¡A¦]¦¹A¤]²ö¦W¨ä§®¤¤¬r¡C
¨¾¤î¤¤¬rªº¤è¦¡¤w¸g¬O¦Ñ¥Í±`½Í¤F¡A¤£n¶}±Ò¯¥Íªº¶l¥ó¡B¦â±¡¹Ï¤ùÀɮסB¤À¿ë²M·¡«H¥óªþ¥[ÀɮתºÄÝ©Ê¡A¥i¥H°§C¦Û¤v¤¤¬rªº¾÷²v¡A¦³«nªºÀɮסA¾i¦¨¥®É³Æ¥÷¦b¨ä¥LÀx¦s¸Ë¸mªº²ßºD¡C
===== ¥H¤W¬°°Å³ø =====
¦³½s¿èºû°ò¦Ê¬ìºw§ÓÄ@ªÌ¡A¾ã²z¥X³o´Ú£°¯S¬¥¥ì¤ì°¨¯f¬r¯S¼x¦p¤U¡G
https://zh.wikipedia.org/wiki/CryptoLocker
... CryptoLocker ·|°°¸Ë¦¨¤@Ó¦Xªkªº¹q¤l¶l¥óªþ¥ó©Î .exe ®æ¦¡ÀɮסF¦pªG³Q¬¡¤Æ¡A¸Ó´c·N³nÅé´N·|¨Ï¥ÎRSA¤½Æ_¥[±K»PAES¨p¤Hª÷Æ_ªº§Î¦¡¡A¥[±K¥»¦a»P¤º³¡ºô¸ôªº¯S©wÃþ«¬ÀɮסF¦Ó¨p¤Hª÷Æ_«h§â«ù¦b´c·N³nÅé©Ò±±¨îªº¦øªA¾¹¤W¡C
ÅܺءG Crypt0L0cker Ãþ¦üCryptoLockerªº°Ç¯Á³nÅé
¦p¦ó¨¾½d¡H ¿ô³ø¸òÁp¦X³øºw³ø¾ÉÁ¿¤F®ø·¥¤§¹D¡C¿n·¥£°¿ìªk´N«Y¸Ë¤W°÷±j®«ºw³nÅé¨Ó¾×¾r¡C¸Ë¤W¥d¤Ú´µ°ò¨¾¬r³nÅé¤]³\¦³¥Î¡A¦ý¯À¥¦¦bI´ºÀH®ÉºÊ·þ¹BÂà¡A·|©ìºC¤Wºô¸òø¹Ï³nÅ飰³t«×¡A¯»¦h¤H¤£²n°Õ¡I
¦b¤U§ä¨ì³o¤Ä2¥V¥H«eºw¤å³¹¡G
http://www.computerworld.com/art ... -do-if-you-are.html
1. ³nÅé¨îµ¦²¤ (SRPs, Software Restriction Policies)¡A³]¥H«K±±¨î©ÎÁקK³z¹L¸s²Õµ¦²¤¨Ó°õ¦æ¯S©wºwµ{¦¡¡C½Ð°Ñ¦Ò²Ä2¶¡AÁöµM¯ª¦³µ¹µøµ¡XPºw¨BÆJ...
http://www.computerworld.com/art ... you-are.html?page=2
2. À³¥Î³nÅéÂê½X®M¥ó (AppLocker)¡A¯»¥i±¤¡A·í¦~§@ªÌ¯ªöµøµ¡7ºw·¥Pª©©M¥ø·~ª©(Windows 7 Ultimate or Windows 7 Enterprise)¤~¦³®Ä¡I
http://www.computerworld.com/art ... you-are.html?page=3
§@ªÌ¤]ö¡A¤@¥¹¯»¦hÀɮ׳QCryptolocker·P¬V¡An¥Î³Æ¥÷Àɨӫì´_µwºÐùاCªFªF¡A´N¤f¥H¥Î¥t¤@¤U¸ü³nÅéShadowExploror¡A¨Ó¬Ý¨£ÁôÂÃÀɮסA¥d¤è«K׸ɤu§@
http://www.shadowexplorer.com/downloads.html
·íµM¡A©|¦n©|¦n´N«Y¡A§O¶Ã¶}ªþ¥ó¤¤¬r°Ú¡I