怨좉컼吏썝



蹂대룄옄猷

옖꽟썾뼱 쑀엯 留됱쓣 닔 뾾떎! 踰좎씪由ы뀒겕쓽 섎옖꽟븘씠숇줈 궗쟾諛⑹뼱 2017.09.01
踰좎씪由ы뀒겕, 옖꽟썾뼱 궗쟾諛⑹뼱 쟾슜 넄猷⑥뀡怨 APT 쟾슜 넄猷⑥뀡 怨듦툒

[蹂댁븞돱뒪 젙쁺씗 湲곗옄] 踰좎씪由ы뀒겕(몴 젙寃쎌닔, www.ebailey.co.kr)뒗 옖꽟썾뼱 궗쟾諛⑹뼱 쟾슜 넄猷⑥뀡 쁒ansomEye숆낵 APT 쟾슜 넄猷⑥뀡 쁛-Block숈쓣 怨듦툒븯뒗 湲곗뾽씠떎.

쁽옱 옖꽟썾뼱뒗 鍮좊Ⅴ寃 吏꾪솕븯怨 엳쑝硫, 븯猷⑥뿉 떊쨌蹂醫낆씠 200媛 씠긽 굹삤怨 엳뒗 寃껋쑝濡 議곗궗릱떎. 옖꽟썾뼱 젣옉옄뒗 겕寃 몢 遺瑜섎줈 굹닃 닔 엳뒗뜲, 쟾臾 옖꽟썾뼱 젣옉옄 븙꽦肄붾뱶삎 옖꽟썾뼱 젣옉옄濡 蹂 닔 엳떎.

뼯 쟾臾 옖꽟썾뼱 젣옉옄 븙꽦肄붾뱶삎 옖꽟썾뼱 젣옉옄 鍮꾧탳[옄猷=踰좎씪由ы뀒겕]


쟾臾 옖꽟썾뼱 젣옉옄뒗 븫샇솕 諛⑸쾿뿉 듅솕맂 빐而ㅻ뱾씠怨 븙꽦肄붾뱶삎 옖꽟썾뼱 젣옉옄뒗 諛고룷諛⑸쾿뿉 듅솕맂 빐而ㅻ뱾씠떎. 쟾臾 옖꽟썾뼱 젣옉옄뱾씠 留뚮뱺 옖꽟썾뼱뒗 Cerber, Revenge, Sage, Matrix, Spora, SpaceRangers, jigsaw, CryptoXXX 벑씠 엳怨, 븙꽦肄붾뱶삎 옖꽟썾뼱 젣옉옄뒗 WannaCry, Erebus, Petya(蹂醫) 벑씠 엳떎.

2016뀈뿉뒗 븫샇솕 諛⑸쾿뿉 듅솕맂 옖꽟썾뼱뱾씠 諛쒓껄릱吏留(옄媛蹂듭젣, dropper 벑), 2017뀈 5썡 WannaCry 궗깭 씠썑濡쒕뒗 諛고룷諛⑸쾿뿉 듅솕맂 옖꽟썾뼱뱾씠 諛쒓껄릺怨 엳떎. WannaCry泥섎읆 OS 痍⑥빟젏쓣 씠슜븳 썫 삎깭쓽 옖꽟썾뼱媛 議댁옱븯怨, 쎒궗씠듃瑜 諛⑸Ц留 빐룄 媛먯뿼릺뒗 씡뒪뵆濡쒖엲(Exploit) 삎깭쓽 옖꽟썾뼱룄 諛쒓껄릱떎.

理쒓렐뿉뒗 뒪겕由쏀듃 삎깭쓽 옖꽟썾뼱 由щ늼뒪슜 옖꽟썾뼱룄 깮湲곕㈃꽌 뵾빐媛 而ㅼ怨 엳뒗 떎젙씠떎. 씠泥섎읆 옖꽟썾뼱뒗 떎뼇븯寃 吏꾪솕븯怨 엳쑝硫 蹂댁븞떞떦옄뒗 옖꽟썾뼱 젣옉옄뱾쓽 怨듦꺽쓣 鍮꾪븯湲 뼱졄怨, 윭떆븞猷곕젢泥섎읆 빐떦 湲곌쓣 뵾빐媛湲곕쭔 湲곕떎由 肉먯씠떎.

뼯 옖꽟븘씠 援ъ꽦룄[씠誘몄=踰좎씪由ы뀒겕]


洹몃윭硫 뼱뼸寃 빐빞 옖꽟썾뼱瑜 留됱쓣 닔 엳쓣源? 궗쟾 諛⑹뼱 媛쒖씤 諛깆뾽留뚯씠 떟씠떎. 궗쟾 諛⑹뼱뒗 옖꽟썾뼱瑜 궗쟾뿉 삁諛⑺븷 닔 엳떎뒗 옣젏씠 엳떎. 쇅遺 諛깆뾽쓣 沅뚯옣븳떎硫 NAS뿉 Snapshot 湲곕뒫씠 뱾뼱媛 엳뒗 젣뭹쓣 異붿쿇븳떎. 뤃뜑瑜 吏젙빐 二쇨린쟻쑝濡 蹂듦뎄떆젏쓣 옣븯뒗 諛⑸쾿씠떎. 옖꽟썾뼱 쑀엯쓣 셿쟾븯寃 留됱쓣 닔뒗 뾾쑝땲 삁諛⑹씠 理쒖슦꽑씠怨 媛쒖씤 諛깆뾽씠 蹂묓뻾릺뼱빞 븳떎.

E-Mail APT쓽 떒젏 泥⑤뙆씪뿉 鍮꾨踰덊샇瑜 꽕젙븯硫 遺꾩꽍씠 遺덇뒫븯硫, 궗쟾 諛⑹뼱媛 븞 맂떎뒗 젏씠떎. 삉븳, 쇅遺硫붿씪(떎쓬, 꽕씠踰 벑) 寃궗븷 닔 뾾떎. Network APT뒗 誘몃윭(mirror) 紐⑤뱶뿉꽌 룞옉븯誘濡 깘吏뒗 媛뒫븯굹 옖꽟썾뼱뿉 媛먯뿼맆 닔 諛뽰뿉 뾾떎. 옖꽟썾뼱 諛고룷吏 李⑤떒 떎떆媛꾩쑝濡 蹂寃쎈릺뒗 諛고룷吏瑜 썝泥쒖쟻쑝濡 李⑤떒븷 닔 뾾怨 썫 삎깭쓽 옖꽟썾뼱瑜 李⑤떒븷 닔 뾾떎. 삉븳, SSL 蹂듯샇솕 옣鍮꾨 궗슜빐 옖꽟썾뼱瑜 깘吏븳떎硫 궡遺뿉꽌 썫泥섎읆 룞옉븯뒗 옖꽟썾뼱 삉븳 留됱쓣 닔 뾾떎. 쟾泥 쓲由꾩쓣 蹂대㈃ 꽕듃썙겕 蹂댁븞옣鍮꾩뿉꽌뒗 옖꽟썾뼱瑜 썝泥쒖쟻쑝濡 留됱쓣 닔 뾾쑝誘濡 寃곌뎅 뿏뱶룷씤듃뿉꽌 궗쟾 李⑤떒븿쑝濡쒖뜥 옖꽟썾뼱瑜 留됱쓣 닔 엳떎.

뼢썑 옖꽟썾뼱쓽 怨듦꺽삎깭瑜 쟾留앺븳떎硫 APT(吏뒫삎吏냽怨듦꺽) + 由щ늼뒪꽌踰 怨듦꺽삎 옖꽟썾뼱媛 留롮쓣 寃껋쑝濡 蹂댁씠硫, 媛곸쥌 Windows 痍⑥빟꽦쓣 씠슜븳 怨듦꺽 삉븳 吏냽맆 寃껋쑝濡 蹂댁씤떎. 媛곸쥌 痍⑥빟꽦씠 OS 痍⑥빟꽦 諛 쓳슜봽濡쒓렇옩 痍⑥빟꽦쓣 留먰븳떎. 궗떎 蹂댁븞쟾臾멸 엯옣뿉꽌 蹂대㈃, 媛옣 몢젮슫 怨듦꺽 삎깭뒗 뙆씪씠 뾾뒗 뒪겕由쏀듃 삎깭쓽 옖꽟썾뼱(Malware-less ransomware)씠硫 긽떦븳 뵾빐媛 삁痢〓맂떎. 뙆씪 뾾뒗 옖꽟썾뼱뒗 뙆썙돇씠굹 옄諛붿뒪겕由쏀듃뿉꽌 떎뻾릺뒗 옖꽟썾뼱떎.

씠윭븳 媛슫뜲 踰좎씪由ы뀒겕뒗 삤뒗 9썡 5씪~6씪源뚯 肄붿뿊뒪 洹몃옖뱶蹂쇰8뿉꽌 젙遺쨌怨듦났湲곌 諛 湲곗뾽쓽 젙蹂대낫샇理쒓퀬梨낆엫옄(CISO), 젙蹂대낫샇떞떦옄, 媛쒖씤젙蹂대낫샇理쒓퀬梨낆엫옄(CPO), 媛쒖씤젙蹂댁쿂由ъ옄 벑쓣 긽쑝濡 媛쒖턀릺뒗 젣11쉶 援젣 궗씠踰 떆걧由ы떚 而⑦띁윴뒪 ISEC 2017(http://www.isecconference.org/2017/)뿉 愿젴 젣뭹쓣 냼媛쒗븷 삁젙씠떎.
[젙쁺씗 湲곗옄(boan6@boannews.com)]

<옉沅뚯옄: 蹂댁븞돱뒪(www.boannews.com) 臾대떒쟾옱-옱諛고룷湲덉>