绱㈢姣甯峰ㄧ锛瀹涓轰濡姝ゅ剁锛

璧宸ㄦ宸磋瑰2017骞磋′澶т涓琛ㄧず锛浜虹被复澶у缁诲伙告浜芥ц浣姝ㄤ缁诲汇

璇虫斤2017骞512ユ涓20讹WannaCry腑峰ㄧ锛杩璧峰ぇ瑙妯″绱㈣蒋浠舵浜浠讹骞跺ㄦ缁BBCラ锛冲锛ㄧ瓒杩150涓藉冲20涓ㄦ蜂腑冲缇姐卞姐涓姐淇缃瑗跨ぇ┿瓒绛涓句釜藉板哄颁弗褰卞卞芥板瀹跺婚㈣诲伙涓芥茬澶澶у绾风悍涓锛涓灏姣涓姣涓璁捐浠惰ㄥ藉锛寰澶浼涓缃虫缃涔藉垢荤浼涓靛芥惰浜ら绛澶涓涓涓绋搴褰卞

涓版WannaCry瀹剁撅剧ヨ缁

WannaCry绱㈣佃灏琚瀹锛х剧妗ｃ缂╁抽瑙棰ц绋搴澶绉绫诲浠惰瀵锛琚瀵浠跺逛负.WNCRY锛绱㈣蒋浠惰ㄤ楂寮哄害瀵绠娉浣垮句互磋В锛村磋В瑕楂杩绠烘芥瑙ｅ瀹宠戒涔浠辨俱诲昏冲ｏ濡ㄨ瀹堕翠浠憋棰缈诲锛冲ゆ浠躲

琚绱㈣蒋浠舵佃诲昏绱㈣300缇ヨВ锛剧ヨ缁

锛杩板浜锛ㄦ绠璇瑙ｉ锛灏辨佃娌℃跺瑁琛ヤ存帮琚╃ㄧ搴诲伙诲昏灏佃涓浠跺瀵锛寮瑰哄绱㈤〉绱㈣璧杩锛诲昏浼妞ヨ绋舵ㄩ┈璐у跨舵搴

WannaCry涔锛

浠缁拌璁叉ラсWannaCry涔琚О涓WannaCrypt/WannaCrypt0r锛杩娌℃缁涓涓绉帮寰澶濯浣у㈢炕璇涓衡冲姝ょ姣浠剁澶у3.3MB锛娆捐绱㈠舵蒋浠躲Windows 10绯荤澶锛跺瑁MS17-010 琛ヤWindows 绯荤藉借诲汇WannaCry 杩MS17-010 婕杩琛蹇╂ｏ浣跨RSA+AES 瀵绠娉瀵规浠惰琛瀵涔灏辨锛涓涓佃琚锛涓缃缁瀛ㄦ涓绘洪戒琚涓诲ㄦ诲伙姝ゅ涓绘烘伴澧裤讹WannaCry 28涓藉璇锛璋缁淬

WannaCry ㄧ璇锛剧ヨ缁

规ㄤWindows 绯荤MS17-010 婕2017骞314ワ寰蒋甯瀹ㄥMS17-010锛Microsoft Windows SMB ″ㄥㄦ存(4013389)锛绛绾т负涓ラ婕璇存濡诲昏Windows SMBv1 ″ㄥ规璁捐娑ｄ朵腑涓ラ婕藉璁歌绋ц浠ｇ

4锛榛瀹㈢缁Shadow Brokers 瀵瑰浜浠藉藉瀹ㄥ锛NSA锛澶涓Windows 诲诲伐枫WannaCry 绱㈣诲讳唬ㄥ冲轰浜诲诲伐峰涓EtenalBlue锛姘告涔锛

濡3浠界瀹ㄥ4浠界诲诲伐锋婕娌℃琚璧烽瑙璇锛浠浠1涓轰EtenalBlue锛姘告涔锛绱㈣锛涓瀛ㄤ娴宠薄锛瀹ㄦ浠韩杈癸涓ラ褰卞浜宸ヤ涓娲汇

╃Windows绯荤杩绋瀹ㄦ杩琛浼WannaCry 浼445浠跺变韩绔Windows哄ㄦ蜂换浣浣锛瑕寮轰缃锛灏辫藉ㄥㄦ璁＄烘″ㄤ腑妞ユ舵搴褰渚靛ョ缁烘ㄦ讹瀹浼涓娴寮辩佃璁惧锛骞舵瀹浠姝ゅ涓绘烘伴澧裤

剧ヨ缁

板骞村插绘尝姣

璁╂浠板骞翠锛2003骞8锛插绘尝姣锛W32.Blaster.Worm锛ㄧ锛姣杩琛朵涓板╃IP剧缁涓绯荤涓Win2000XP璁＄猴惧板╃DCOM/RPC缂插烘诲昏绯荤锛涓诲绘锛姣浣灏浼琚板硅绠轰腑杩琛锛浣跨郴缁浣寮甯搞涓冲寸郴缁宕╂澶锛璇ョ姣杩浼瀵圭郴缁绾х绔杩琛缁℃诲伙瀵艰磋缃绔靛锛浣跨ㄦ锋娉杩璇ョ绔绾х郴缁

褰讹涓轰惰姣╂ｏㄥ杩ュㄤ富骞茬缁涓灏绂浜445绔锛浣茬澶ч涓缃骞舵病姝ゅㄧョㄧ讲涓惰涓骞舵跺瑁琛ヤ锛浠跺ㄥぇ撮445绔涓瀛ㄦ佃锛姝ゅ翠姝ゆ绱㈣姣涓ラ娉婊ャ

翠WannaCry 绱㈣锛寰蒋冲涓哄凡缁渚存版XPWindows Server 2003 甯浜琛ヤ锛涓杞藉板锛https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/锛骞跺甯浜绱㈢姣Ransom:Win32/WannaCrypt茶淇

ㄥ澶缃WannaCry 绱㈣姣讹浜涓涓浜卞藉ㄧ绌朵汉MalwareTech ㄥ姣浠ｇ跺浜涓涓跨www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com锛姝ゅ骞舵娉ㄥ褰浠娉ㄥ浜姝ゅ杩涓璧锋ュ姣浣缁繁涓涓揣ュ姝㈠筹叉浜澶卞躲姣涓浜姣哄ㄥ浣涔戒浜璁块涓杩涓锛濡杩涓涓瀛灏辩户缁濡璁块锛灏卞姝达杩浣绌朵汉绘浜姣杩涓姝ュぇ寸姐

浣瀹规炬WannaCry 绱㈣缁跺典浼椹姝ュㄤ村锋宸ヤユ村佃寮猴灏浼虹村娓虹硅抽崇姣绉硅存payload 姣绉锛涔浼瀵瑰ㄩ茶澶烘扮

剧ヨ缁

涓轰涔ｄ澶佃娌″跺瑁琛ヤ锛

姣澶х瀹ㄤ浠讹戒缁浜轰滑涓浜涓ュ璀ず锛涔ㄤ瀹ㄧ杩姝ャ浠界ラ锛璁＄虹郴缁淇存版涔瑕锛浣负浠涔杩ｄ澶佃娌℃跺瑁琛ヤ涓昏互涓绉锛

1

涓＄郴缁澶锛娉煎扮浣绯荤锛戒娇ㄩх浣绯荤锛濡Windows XPWindows Server 2003锛寰蒋宸茬瀵硅浜х浣绯荤渚琛ヤ存版涔灏辨锛濡涓瀵硅浜х浣绯荤杩琛ㄩ㈢瀹ㄩ叉わ涓灏涓＄郴缁存伴ㄧ讲版扮浣绯荤涓锛浠澶╀琚WannaCry 诲伙ぉ藉氨浼琚澶姣诲汇

2

板寰杩涓杩搴ㄧ澶ф浜猴瀹ㄤゆ椤逛弗璋ㄣゅ宸ヤ锛浠讳拷澶ф戒涓ラ澶便绛颁寰涓涔涔缁绱㈣浜ら辨讹浼冲颁搴璇ャ

3

璁や负琛ヤ浼瀵圭ǔ瀹ч褰卞缁浣绯荤琛ヤ绉存浣锛浼瀵瑰澧褰卞锛浣缁涓ユ兼璇琛ヤㄦ璇澧涓楠璇锛借芥よ浜浠ョǔ瀹涓哄蹇借瀹寰涓垮け

寰澶浜哄轰ㄤ锛ㄨ绠轰瀹瑁浜绉绗瑰ㄥ╂锛杩浜瀹ㄥ╂寰寰缁煎浜澶绉ㄥ浣锛缁ㄦ峰甫ヤ渚挎枫浣浣跨ㄨ浜绗瑰ㄥ╂涓瀹娉ㄦ寰蒋3浠藉凡缁Win 7 浠ヤ浜琛ヤ存般浣绗瑰ㄥ╂浼抽Windows ㄦ存般浠ヤ绉绋搴ヨ锛瑕瑰璁よ锛绗瑰ㄥ╂骞朵缁瀹ㄤ

剧ヨ缁

澶浠斤瀵规绱㈡舵蒋浠舵

瀵规绱㈡舵蒋浠舵娉浠姐澶浠姐澶浠斤涓瀹瑕瀹ㄤ瀛ㄤ璐ㄤ澶浠戒俊郴缁涓″涓汉版涓瀹涓芥帮涓瀹涓芥渚ュ垢蹇

绱㈡舵蒋浠剁藉缃缁瀹ㄤ甯ヤ扮ㄨ澶骞撮锛藉寰澶缁缁烘瀹ㄧ规惧ㄤ缃绔绡℃广缃绔缁℃诲荤瑙寰归瀵逛版绐楂绾ф缁у涓澶瑙瀵逛瀵圭绔绠鸿琛绱㈢搴浠浠ㄧ缁灞瓒崇锛瑕缃缁灞涓硅澶ㄦ芥插尽ㄦ娆″绱㈣浠朵腑锛寰澶涓缁绔琚婚峰锛濡ATM 恒告虹锛杩撮蹭涓ㄧ绔ㄩ叉ょ涓瓒筹瑕杩琛ㄩ㈢瀹ㄩ叉ゃ

讹姝ゆ绱㈣姣浜浠朵腑澶ч瀹崇ㄦ锋绂诲缃寰澶浜轰瑙璁や负绂诲缃ㄧ锛浣浜瀹ㄧ缁瀹ㄧ澶锛插尽涓瓒筹寰瀹规浠ㄥ璧锋诲汇缃璧浜у版环兼村ぇ锛浜浠跺奖灏甯镐弗锛

61ャ缃缁瀹ㄦ瀹斤瀹ㄥ伴甯搁瑕楂搴涔讳功璁板4.19缃缁瀹ㄤ俊宸ヤ搴ц浼涓宸茬璇浠缃缁瀹ㄧ濞ユ诲绘娈典锛ｇ渚瑁涓ㄨ澶瀹ㄨ蒋浠跺氨虫案淇瀹ㄧ虫宸蹭跺锛瑕绔ㄦ缁煎叉ょ蹇碘浣佃寰澶骞舵病瀹瑁瀹ㄨ澶瀹ㄨ蒋浠剁璁＄哄ㄦ胯浇浜冲介姘涓°浠瀹瑕楂瀹ㄨ璇锛淇瀹ㄨ瑙锛浠娆℃瀹ㄤ浠朵腑稿璁挎璧峰ㄨ璐ｏ璐璧峰ㄨ矗浠伙寤鸿涓诲ㄤゃ缁娴绉插尽蹇搴瀹ㄦ挎ヤ绯伙藉琚ㄤ负涓诲楂藉淇℃瀹ㄦ按骞炽

缂杈锛绾块

锛涓瀹讹璋宄帮涓娴峰淇℃ㄨ涓浼裤涓戒腑灏涓裤ㄥ戒俊ㄦ浼涓瀹躲ュ缃缁瀹ㄤ瀹讹绉腑藉井骞冲棣锛