{"id":1697,"date":"2022-05-19T23:39:22","date_gmt":"2022-05-19T23:39:22","guid":{"rendered":"https:\/\/avestim.com\/atacuri-de-tip-flubot-o-varianta-de-malaware-in-special-pentru-ulilizatorii-sistemului-de-operare-android\/"},"modified":"2022-06-01T12:14:32","modified_gmt":"2022-06-01T09:14:32","slug":"atacuri-de-tip-flubot-o-varianta-de-malaware-in-special-pentru-ulilizatorii-sistemului-de-operare-android","status":"publish","type":"post","link":"https:\/\/avestim.com\/ro\/atacuri-de-tip-flubot-o-varianta-de-malaware-in-special-pentru-ulilizatorii-sistemului-de-operare-android\/","title":{"rendered":"Atacuri De Tip Flubot \u2013 O Variant\u0103 De Malaware \u00cen Special Pentru Ulilizatorii Sistemului De Operare Android"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"1697\" class=\"elementor elementor-1697 elementor-1526\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3b9e293 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3b9e293\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b49ad2e\" data-id=\"b49ad2e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e17de21 elementor-widget elementor-widget-text-editor\" data-id=\"e17de21\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<span style=\"font-weight: 400;\">Atacurile de tip Flubot sunt reprezentate de o variant\u0103 de malware, \u00een special pentru Android care fur\u0103 informa\u021bii delicate prin intermediul unor SMS-uri trimise c\u0103tre utilizatorii din Rom\u00e2nia.<\/span>\r\n\r\n<span style=\"font-weight: 400;\">\u00cen ultima perioad\u0103 utilizatorii primesc notific\u0103ri de tip SMS, nesolicitate, \u00een care erau informa\u021bi ca ar urma s\u0103 primeasc\u0103 un pachet prin curier rapid sau erau informa\u021bi ca au un mesaj vocal neascultat, mesaj \u00eenso\u021bit de linkul unde puteau asculta mesajul vocal primit, dar \u0219i mesaje \u00een care se specific\u0103 ca utilizatorul a fost selectat pentru un job, mesaj \u00eenso\u021bit de un link \u00een care se g\u0103sesc informa\u021bii legate de job.<\/span>\r\n\r\n<span style=\"font-weight: 400;\">\u00cen spatele acestor mesaje se afl\u0103 o tentative de atac de phishing, \u00een care atacatorii \u00eencearc\u0103 sa extraga date sensibile de la utilizatori. Acest atac de tip malware se activeaz\u0103 \u00een momentul \u00een care mediul de pe care se face click este unul cu un sistem de operare de tip Android.<\/span>\r\n\r\n<span style=\"font-weight: 400;\">Mesajele sunt create astfel \u00eenc\u00e2t s\u0103 par\u0103 a veni de la un serviciu de curierat sau un serviciu de mesagerie vocala \u0219i furnizeaz\u0103 un link pentru instalarea unor aplica\u021bii de urm\u0103rire a comenzilor sau de ascultarea si salvarea unor mesaje vocale. De fapt, utilizatorul nu instaleaz\u0103 o aplica\u021bie legitim\u0103, \u00een realitate pe dispozitiv instal\u00e2ndu-se o variant\u0103 de malware denumit\u0103 Flubot.<\/span>\r\n\r\n<b>Malware-ul<\/b><span style=\"font-weight: 400;\">\u00a0este o tipologie de fraud\u0103 care apeleaz\u0103 la aplica\u021bii software ce au rolul de a instala f\u0103r\u0103 \u0219tiin\u021ba posesorului telefonului \u00een cauz\u0103 coduri pentru colectare de date asociate cardurilor bancare, accesarea re\u021belei, interceptarea datelor transmise \u0219i alte informa\u021bii personale.<\/span>\r\n\r\n<span style=\"font-weight: 400;\">FluBot poate primi comenzi prin intermediul unui server de comand\u0103 \u0219i control (C&amp;C), inclusiv comenzi pentru dezinstalarea aplica\u021biilor, blocarea cardului, trimiterea mesajelor SMS, deschiderea adreselor URL (adresele site-ului), extragerea listelor de contacte, dezactivarea Google Play Protect \u0219i diverse alte comenzi.<\/span>\r\n\r\n<span style=\"font-weight: 400;\">Acest tip de atac este des \u00eent\u00e2lnit \u00een Rom\u00e2nia el viz\u00e2nd utilizatorii sistemului de operare de tip Android. Pentru celelalte cazuri \u00een care utilizatorii folosesc alte tipuri de sisteme de operare, atacatorii redirec\u021bioneaz\u0103 eventualele victime c\u0103tre anumite site-uri care g\u0103zduiesc campanii de tip scam. Pentru r\u0103sp\u00e2ndirea rapid\u0103 c\u0103tre alte eventuale victime, acest tip de atac malware ob\u021bine accesul la contactele din telefonul victimei, c\u0103rora le trimite acelea\u0219i mesaje men\u021bionate mai sus.<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-af90b50 elementor-widget elementor-widget-heading\" data-id=\"af90b50\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Cum putem evita infectarea device-ului cu acest tip de malware?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39a348c elementor-widget elementor-widget-text-editor\" data-id=\"39a348c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<span style=\"font-weight: 400;\">\u00cen primul r\u00e2nd, trebuie s\u0103 avem \u00een vedere:<\/span>\r\n<ul>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Verificarea \u00een detaliu a expeditorilor, con\u021binutului mesajelor, link-urilor \u0219i fi\u0219ierelor primite;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Instalarea unui antivirus de la surse de \u00eencredere care s\u0103 fie updatat constant;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">C\u0103utarea num\u0103rului de telefon al expeditorului pe Google \u00een cazul \u00een care nu am mai avut contact cu acesta (numeroase website-uri pot ar\u0103ta dac\u0103 num\u0103rul este asociat unui atac de tip phishing);<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Evita\u021bi accesarea link-urilor \u0219i deschiderea ata\u0219amentelor provenite din surse necunoscute;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Acorda\u021bi permisiuni aplica\u021biilor mobile \u00een mod punctual \u0219i \u00een func\u021bie de necesit\u0103\u021bi;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Verifica\u021bi \u0219i gestionarea periodic\u0103 a permisiunilor aplica\u021biilor mobile;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Utiliza\u021bi solu\u021bii antivirus \u0219i actualiza\u021bi constant semn\u0103turile acestora (update);<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Activa\u021bi op\u021biunea de verificare a securit\u0103\u021bii aplica\u021biilor mobile instalate \u0219i a op\u021biunii de blocare a celor din surse necunoscute;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Actualiza\u021bi sistemul de operare la ultima versiune compatibil\u0103 cu sistemul utilizat;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Utiliza\u021bi o solu\u021bie de securitate (antivirus) pe dispozitiv;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dac\u0103 realiza\u021bi c\u0103 a\u021bi c\u0103zut victim\u0103 acestui tip de atac evita\u021bi cu orice pre\u021b autentificarea pe conturi f\u0103r\u0103 a realiza o resetare din fabric\u0103 a dispozitivului sau recuperarea datelor dintr-un backup creat dup\u0103 instalarea aplica\u021biei mali\u021bioase.<\/span><\/li>\r\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-969dcc7 elementor-widget elementor-widget-text-editor\" data-id=\"969dcc7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<span style=\"font-weight: 400;\">Dac\u0103 din gre\u0219eal\u0103 link-ul din SMS a fost accesat, iar aplica\u021bia malware a fost instalat\u0103, este necesar\u0103 o resetare imediat\u0103 a telefonului la set\u0103rile din fabric\u0103. Se recomand\u0103 s\u0103 nu se \u00eenchid\u0103 dispozitivul mobil, ci s\u0103 se \u00eencerce eliminarea c\u00e2t mai rapid\u0103 a virusului.<\/span>\r\n\r\n<span style=\"font-weight: 400;\">Dac\u0103 linkul nu a fost accesat, se recomand\u0103 \u0219tergerea SMS-ului.<\/span>\r\n\r\n&nbsp;\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2659be4 elementor-widget elementor-widget-heading\" data-id=\"2659be4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Pa\u0219ii pentru protejarea contului de internet banking \u00een cazul unui atac de tip malware<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0340191 elementor-widget elementor-widget-text-editor\" data-id=\"0340191\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<span style=\"font-weight: 400;\">Dac\u0103 am desc\u0103rcat o aplica\u021bie malware, exper\u021bii \u00een securitate cibernetic\u0103 ne sf\u0103tuiesc s\u0103:<\/span>\r\n<ul>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Nu acces\u0103m aplica\u021bia de online banking pe care o folosim de pe telefonul expus la virus;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Reset\u0103m parola aplica\u021biei de internet banking de pe un alt device dec\u00e2t cel infectat;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Reset\u0103m complet telefonul afectat la set\u0103rile din fabric;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Nu efectu\u0103m o copie de rezerv\u0103 \u00eenainte de revenirea la set\u0103rile din fabric\u0103 (aceasta va implica \u0219i o copie a malware-ului);<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Verific\u0103m ultimele tranzac\u021bii efectuate;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Contact\u0103m banca dac\u0103 observ\u0103m tranzac\u021bii pe care nu le-am procesat;<\/span><\/li>\r\n \t<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Bloc\u0103m cardurile c\u00e2t mai rapid dac\u0103 exist\u0103 suspiciunea unei afect\u0103ri a datelor acestora.<\/span><\/li>\r\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9fc294f elementor-widget__width-auto elementor-widget elementor-widget-image\" data-id=\"9fc294f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"508\" height=\"396\" src=\"https:\/\/avestim.com\/wp-content\/uploads\/2022\/05\/Capture4.png\" class=\"attachment-large size-large wp-image-1530\" alt=\"\" srcset=\"https:\/\/avestim.com\/wp-content\/uploads\/2022\/05\/Capture4.png 508w, https:\/\/avestim.com\/wp-content\/uploads\/2022\/05\/Capture4-300x234.png 300w\" sizes=\"(max-width: 508px) 100vw, 508px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-82d740f elementor-widget__width-auto elementor-widget elementor-widget-image\" data-id=\"82d740f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"300\" height=\"273\" src=\"https:\/\/avestim.com\/wp-content\/uploads\/2022\/05\/Capture5-300x273.png\" class=\"attachment-medium size-medium wp-image-1532\" alt=\"\" srcset=\"https:\/\/avestim.com\/wp-content\/uploads\/2022\/05\/Capture5-300x273.png 300w, https:\/\/avestim.com\/wp-content\/uploads\/2022\/05\/Capture5.png 399w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Atacurile de tip Flubot sunt reprezentate de o variant\u0103 de malware, \u00een special pentru Android care fur\u0103 informa\u021bii delicate prin intermediul unor SMS-uri trimise c\u0103tre utilizatorii din Rom\u00e2nia. \u00cen ultima perioad\u0103 utilizatorii primesc notific\u0103ri de tip SMS, nesolicitate, \u00een care erau informa\u021bi ca ar urma s\u0103 primeasc\u0103 un pachet prin curier rapid sau erau informa\u021bi [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1529,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[21],"tags":[],"class_list":["post-1697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-ro"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/posts\/1697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/comments?post=1697"}],"version-history":[{"count":3,"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/posts\/1697\/revisions"}],"predecessor-version":[{"id":1795,"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/posts\/1697\/revisions\/1795"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/media\/1529"}],"wp:attachment":[{"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/media?parent=1697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/categories?post=1697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/avestim.com\/ro\/wp-json\/wp\/v2\/tags?post=1697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}