استفاده بدافزار Vidar از تاکتیکهای جدید برای فرار از شناسایی و ناشناس کردن فعالیتها
?? ????? ??????? ?????? ???? ???? ????? ????? ?????? ??? ??????? Vidar ???????? ?? ?? ??????????? backend ??? ????? ???????? ?? ?????????? ????????? ???? ??????? ? ????? ???? ???? ?????? ??? ?? ???? ?? ????? ????? ?? ???? ???????? ??????? ????? ???.
???? ????? ?????? Team Cymru ?? ????? ????? ?? ?? The Hacker News ?? ?????? ?????? ??? ???? ???[?]: “???????? ????? Vidar ?? ???? ??????? IP backend ??? ????? ?? ???? ? ?? ????? ??????? ?? ??????? ? ????? ????? ?? ????.”
Vidar ?? ??? ??????? ????? ???[?] ?? ?? ????? ??? ???? ???? ???? ???. ?????? ?? ??????? ??? ???? ?? ??? Arkei ???[?] ? ???? ?? ??? ?????? ??? ??? ?? ??? ???? ???? ???? ???? ?? ???.
??? ??????? ?? ??????? ?? ???? ????????? ?????? ? ????????? ?? ???????????? ??? ??? ?? ????? ??????? ????? ??????? ????? ??? ????????? ?? ????????? ???? ???????? ??????? ???? ?? ?????????? ????? ???. ?????? ?????? ??? ???[?] ?? Vidar ?? ???? ??????? ???? ???? ? ?? loader ??????? ?? ??? Bumblebee ????? ??? ???.
??? Cymru? ?? ?????? ?? ????? ?????? ????? ??[?]? ???????? ??? ?? “?????????? ????? ??????? ??? ??? ?? ?? ?? ??? ????? ???? ???? ??? ?? ??????? ?????? ??? ? ????? ???? ??? ??????? ? ?????? ??????? ?????? ????? ?? ???.”
?? ????? ????? ?? ???? ???????? Vidar ??????? ?????? my-odin[.]com ??? ?? ???????? ????? ????? ???? ?????? ???? ????? ???? ?????????[?] ? ???????????? ??????? ??? ??????.
????????? ????? ????? ?????? ??????? ?? ???? ???? ???????? ????? ???? ???? ????? ????? ???? ??? ????? ????? ?? ?? ???? ???? ????? ??????. ????? ???? ???? ??????????? ???? IP ?????? ??? ????? ???.
??? ???? ?????? ?? ?????????[.]?? ?? ?????????[.]??? ?? ?????????[.]?? ?? ????? ???? ???? ???? ????????? ????? ????? ?? ??????? ?? ??????? VPN ??????? ?? ???? ???? ?? ???? ?????? ?????.
??? Cymru ???????? ???: «?? ??????? ?? ??????? VPN ?? ????? ???? ?? ?? ???? ?????? ?? ??????? ??????? ???? ??? ??????? ??????? ????? ??? ?? ????? ????? Vidar ???? ??? ???????? ?? ???? ?????? ???? ?????????? ??????? ??? ?? ?????????? ?? ???? ????? ??????? ????? ????.
??? ???? ????? ?????? ??? ?? ?????? ??????? ????? ?? ?? ?????????[.]?? ?? ?? ??????? ?????? ?? ??? blonk[.]co ? ?????? ?? ?????? ???? ?? ????? (??????????[.]??:???) ??????? ???? ???.
??????????? Vidar ?? ????? ?? ???? IP ???? ??????????[.]??? ?? ?????? ????? my-odin[.]com ????? ?? ??????? ?? ??????? TOR ???? ?? facelift ???? ?? ???? ????????? ???? ?????? ?? ??????? ? ????? ?????????? ??? ?????? ???? ???.
??? ???? ???? ??? ???????? ???? ?????? ?? ???? ?????? «????????» ????? ????? ?????? ?? ????? ??????????? ??????? ?? ? ?????? ?????? ?? ??????? ??????????? ???? ????? ????? ???? ???? ?????? ??????? ??? ?? ???? ??????.
?????
[?] https://www.team-cymru.com/post/darth-vidar-the-aesir-strike-back
[?] https://thehackernews.com/2023/01/the-evolving-tactics-of-vidar-stealer.html
[?] https://thehackernews.com/2022/12/privateloader-ppi-service-found.html
[?] https://thehackernews.com/2023/01/raccoon-and-vidar-stealers-spreading.html
[?] https://www.team-cymru.com/post/darth-vidar-the-dark-side-of-evolving-threat-infrastructure
[?] https://securelist.com/malware-as-a-service-market/109980
[?] https://thehackernews.com/2023/06/vidar-malware-using-new-tactics-to.html
??????? :
???? ??????
???? :
????????? ???? ??????? ????? ???? ????
