{"id":476053,"date":"2023-08-09T07:25:33","date_gmt":"2023-08-09T07:25:33","guid":{"rendered":""},"modified":"2023-09-05T11:11:56","modified_gmt":"2023-09-05T11:11:56","slug":"bladabindi","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/bladabindi\/","title":{"rendered":"\u5e03\u62c9\u8fbe\u5bbe\u8fea"},"content":{"rendered":"

Bladabindi\uff0c\u4e5f\u79f0\u4e3a NJRat \u6216 Njw0rm\uff0c\u662f\u4e00\u79cd\u590d\u6742\u4e14\u81ed\u540d\u662d\u8457\u7684\u7279\u6d1b\u4f0a\u6728\u9a6c\u6076\u610f\u8f6f\u4ef6\u3002\u5b83\u5c5e\u4e8e\u8fdc\u7a0b\u8bbf\u95ee\u6728\u9a6c (RAT) \u5bb6\u65cf\uff0c\u53ef\u4ee5\u5bf9\u53d7\u5bb3\u8005\u7684\u8ba1\u7b97\u673a\u8fdb\u884c\u672a\u7ecf\u6388\u6743\u7684\u8fdc\u7a0b\u8bbf\u95ee\uff0c\u4ece\u800c\u4f7f\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u80fd\u591f\u5b8c\u5168\u63a7\u5236\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u3002 Bladabindi \u65e8\u5728\u6267\u884c\u5404\u79cd\u6076\u610f\u6d3b\u52a8\uff0c\u5305\u62ec\u6570\u636e\u76d7\u7a83\u3001\u7cfb\u7edf\u76d1\u63a7\u4ee5\u53ca\u5728\u53d7\u611f\u67d3\u7684\u8ba1\u7b97\u673a\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\u3002<\/p>\n

Bladabindi \u7684\u8d77\u6e90\u5386\u53f2\u53ca\u5176\u9996\u6b21\u63d0\u53ca<\/h2>\n

Bladabindi \u9996\u6b21\u51fa\u73b0\u4e8e 2010 \u5e74\u4ee3\u521d\u671f\uff0c\u5176\u6839\u6e90\u53ef\u4ee5\u8ffd\u6eaf\u5230\u4e2d\u4e1c\u3002\u5b83\u7684\u540d\u5b57\u6e90\u81ea\u963f\u62c9\u4f2f\u8bed\uff0c\u610f\u601d\u662f\u201c\u95ea\u4eae\u7684\u5251\u201d\u3002\u8be5\u6076\u610f\u8f6f\u4ef6\u6700\u521d\u662f\u4f5c\u4e3a\u5408\u6cd5\u7684\u8fdc\u7a0b\u7ba1\u7406\u5de5\u5177 (RAT) \u521b\u5efa\u7684\uff0c\u7528\u4e8e\u6388\u6743\u8fdc\u7a0b\u652f\u6301\u76ee\u7684\u3002\u7136\u800c\uff0c\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u5f88\u5feb\u610f\u8bc6\u5230\u5176\u6076\u610f\u4f7f\u7528\u7684\u6f5c\u529b\uff0cBladabindi \u7684\u4fee\u6539\u7248\u672c\u5f00\u59cb\u5728\u4e92\u8054\u7f51\u4e0a\u4f20\u64ad\uff0c\u9488\u5bf9\u5168\u7403\u6beb\u65e0\u6212\u5fc3\u7684\u7528\u6237\u3002<\/p>\n

\u7f51\u7edc\u5b89\u5168\u793e\u533a\u9996\u6b21\u63d0\u53ca Bladabindi \u53ef\u4ee5\u8ffd\u6eaf\u5230 2013 \u5e74\u3002\u5b89\u5168\u7814\u7a76\u4eba\u5458\u89c2\u5bdf\u5230\u5b83\u5728\u5404\u79cd\u7f51\u7edc\u95f4\u8c0d\u6d3b\u52a8\u4e2d\u7684\u51fa\u73b0\uff0c\u5e76\u6ce8\u610f\u5230\u5b83\u6709\u6548\u5229\u7528\u6613\u53d7\u653b\u51fb\u7cfb\u7edf\u7684\u80fd\u529b\u3002<\/p>\n

\u6709\u5173\u5e03\u62c9\u8fbe\u5bbe\u8fea\u7684\u8be6\u7ec6\u4fe1\u606f\u3002\u6269\u5c55 Bladabindi \u4e3b\u9898\u3002<\/h2>\n

Bladabindi \u4e3b\u8981\u901a\u8fc7\u5783\u573e\u90ae\u4ef6\u3001\u6076\u610f\u9644\u4ef6\u548c\u53d7\u611f\u67d3\u7684\u8f6f\u4ef6\u4e0b\u8f7d\u8fdb\u884c\u5206\u53d1\u3002\u4e00\u65e6\u53d7\u5bb3\u8005\u5728\u4e0d\u77e5\u4e0d\u89c9\u4e2d\u5b89\u88c5\u4e86\u6076\u610f\u8f6f\u4ef6\uff0c\u5b83\u5c31\u4f1a\u521b\u5efa\u4e00\u4e2a\u540e\u95e8\uff0c\u5728\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u548c\u653b\u51fb\u8005\u63a7\u5236\u7684\u547d\u4ee4\u4e0e\u63a7\u5236 (C2) \u670d\u52a1\u5668\u4e4b\u95f4\u5efa\u7acb\u8fde\u63a5\u3002<\/p>\n

Bladabindi \u7684\u4e3b\u8981\u7279\u70b9\u5305\u62ec\uff1a<\/p>\n

    \n
  1. \n

    \u8fdc\u7a0b\u8bbf\u95ee<\/strong>\uff1aBladabindi \u5141\u8bb8\u653b\u51fb\u8005\u8fdc\u7a0b\u63a7\u5236\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\uff0c\u4ece\u800c\u4f7f\u4ed6\u4eec\u80fd\u591f\u6267\u884c\u5404\u79cd\u6076\u610f\u6d3b\u52a8\u3002<\/p>\n<\/li>\n

  2. \n

    \u6570\u636e\u76d7\u7a83<\/strong>\uff1a\u8be5\u6728\u9a6c\u53ef\u4ee5\u7a83\u53d6\u654f\u611f\u6570\u636e\uff0c\u4f8b\u5982\u767b\u5f55\u51ed\u636e\u3001\u8d22\u52a1\u4fe1\u606f\u548c\u4e2a\u4eba\u6587\u4ef6\uff0c\u5bf9\u53d7\u5bb3\u8005\u7684\u9690\u79c1\u6784\u6210\u91cd\u5927\u5a01\u80c1\u3002<\/p>\n<\/li>\n

  3. \n

    \u952e\u76d8\u8bb0\u5f55<\/strong>\uff1aBladabindi \u5305\u542b\u4e00\u4e2a\u952e\u76d8\u8bb0\u5f55\u5668\uff0c\u53ef\u8bb0\u5f55\u53d7\u5bb3\u8005\u7684\u51fb\u952e\uff0c\u4f7f\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u80fd\u591f\u6355\u83b7\u5bc6\u7801\u548c\u5176\u4ed6\u673a\u5bc6\u4fe1\u606f\u3002<\/p>\n<\/li>\n

  4. \n

    \u5c4f\u5e55\u622a\u56fe<\/strong>\uff1a\u6076\u610f\u8f6f\u4ef6\u53ef\u4ee5\u622a\u53d6\u53d7\u5bb3\u8005\u684c\u9762\u7684\u5c4f\u5e55\u622a\u56fe\uff0c\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u76f4\u89c2\u5730\u4e86\u89e3\u7528\u6237\u7684\u6d3b\u52a8\u3002<\/p>\n<\/li>\n

  5. \n

    \u50f5\u5c38\u7f51\u7edc\u80fd\u529b<\/strong>\uff1aBladabindi \u53ef\u7528\u4e8e\u521b\u5efa\u50f5\u5c38\u7f51\u7edc\uff0c\u5373\u7531\u5355\u4e2a\u5b9e\u4f53\u63a7\u5236\u7684\u53d7\u611f\u67d3\u673a\u5668\u7f51\u7edc\u3002<\/p>\n<\/li>\n

  6. \n

    DDoS \u653b\u51fb<\/strong>\uff1a\u51ed\u501f\u5176\u50f5\u5c38\u7f51\u7edc\u529f\u80fd\uff0c\u8be5\u6076\u610f\u8f6f\u4ef6\u53ef\u4ee5\u53c2\u4e0e\u5206\u5e03\u5f0f\u62d2\u7edd\u670d\u52a1\uff08DDoS\uff09\u653b\u51fb\uff0c\u6df9\u6ca1\u7f51\u7ad9\u548c\u5728\u7ebf\u670d\u52a1\u3002<\/p>\n<\/li>\n

  7. \n

    \u4f20\u64ad<\/strong>\uff1aBladabindi \u53ef\u4ee5\u901a\u8fc7\u53ef\u79fb\u52a8\u9a71\u52a8\u5668\u8fdb\u884c\u4f20\u64ad\uff0c\u5229\u7528\u81ea\u52a8\u8fd0\u884c\u548c\u81ea\u52a8\u64ad\u653e\u529f\u80fd\u3002<\/p>\n<\/li>\n<\/ol>\n

    Bladabindi \u7684\u5185\u90e8\u7ed3\u6784\u3002\u5e03\u62c9\u8fbe\u5bbe\u8fea\u5982\u4f55\u8fd0\u4f5c\u3002<\/h2>\n

    Bladabindi \u4f7f\u7528 .NET \u7f16\u5199\uff0c\u901a\u5e38\u6253\u5305\u4e3a .NET \u7a0b\u5e8f\u96c6\uff0c\u8fd9\u4f7f\u5f97\u653b\u51fb\u8005\u76f8\u5bf9\u5bb9\u6613\u6df7\u6dc6\u548c\u9690\u85cf\u5176\u6076\u610f\u4ee3\u7801\u3002\u8be5\u6076\u610f\u8f6f\u4ef6\u4f7f\u7528\u5ba2\u6237\u7aef-\u670d\u52a1\u5668\u67b6\u6784\u8fd0\u884c\uff0c\u5176\u4e2d\u5ba2\u6237\u7aef\u5b89\u88c5\u5728\u53d7\u5bb3\u8005\u7684\u8ba1\u7b97\u673a\u4e0a\uff0c\u670d\u52a1\u5668\u7531\u653b\u51fb\u8005\u7ef4\u62a4\u3002<\/p>\n

    \u4ee5\u4e0b\u662f Bladabindi \u5de5\u4f5c\u539f\u7406\u7684\u7b80\u5316\u8868\u793a\uff1a<\/p>\n

      \n
    1. \n

      \u9001\u8d27<\/strong>\uff1aBladabindi \u901a\u8fc7\u5404\u79cd\u65b9\u6cd5\u4f20\u9012\u5230\u53d7\u5bb3\u8005\u7684\u7cfb\u7edf\uff0c\u4f8b\u5982\u7535\u5b50\u90ae\u4ef6\u9644\u4ef6\u3001\u6076\u610f\u94fe\u63a5\u6216\u53d7\u635f\u8f6f\u4ef6\u3002<\/p>\n<\/li>\n

    2. \n

      \u611f\u67d3<\/strong>\uff1a\u6267\u884c\u540e\uff0cBladabindi \u901a\u8fc7\u521b\u5efa\u6ce8\u518c\u8868\u9879\u6216\u91c7\u7528\u5176\u4ed6\u9690\u79d8\u6280\u672f\u6765\u5efa\u7acb\u6301\u4e45\u6027\u3002<\/p>\n<\/li>\n

    3. \n

      \u6c9f\u901a<\/strong>\uff1a\u6076\u610f\u8f6f\u4ef6\u53d1\u8d77\u4e0e C2 \u670d\u52a1\u5668\u7684\u901a\u4fe1\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u63a7\u5236\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u3002<\/p>\n<\/li>\n

    4. \n

      \u547d\u4ee4\u6267\u884c<\/strong>\uff1a\u653b\u51fb\u8005\u5411\u53d7\u611f\u67d3\u7684\u8ba1\u7b97\u673a\u53d1\u9001\u547d\u4ee4\uff0c\u6307\u793a\u5176\u6267\u884c\u5404\u79cd\u4efb\u52a1\uff0c\u4f8b\u5982\u6570\u636e\u7a83\u53d6\u3001\u952e\u76d8\u8bb0\u5f55\u6216\u53d1\u8d77 DDoS \u653b\u51fb\u3002<\/p>\n<\/li>\n

    5. \n

      \u6570\u636e\u6cc4\u9732<\/strong>\uff1aBladabindi \u6536\u96c6\u654f\u611f\u4fe1\u606f\u5e76\u5c06\u5176\u53d1\u9001\u56de C2 \u670d\u52a1\u5668\uff0c\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u8bbf\u95ee\u88ab\u76d7\u6570\u636e\u3002<\/p>\n<\/li>\n

    6. \n

      \u66f4\u65b0\u4e0e\u89c4\u907f<\/strong>\uff1a\u6076\u610f\u8f6f\u4ef6\u53ef\u80fd\u4f1a\u4ece C2 \u670d\u52a1\u5668\u63a5\u6536\u66f4\u65b0\uff0c\u4ee5\u63d0\u9ad8\u5176\u529f\u80fd\u5e76\u6539\u53d8\u5176\u89c4\u907f\u7b56\u7565\u4ee5\u7ed5\u8fc7\u5b89\u5168\u63aa\u65bd\u3002<\/p>\n<\/li>\n<\/ol>\n

      Bladabindi \u7684\u4e3b\u8981\u7279\u5f81\u5206\u6790\u3002<\/h2>\n

      Bladabindi \u56e0\u5176\u591a\u6837\u5316\u7684\u529f\u80fd\u800c\u8131\u9896\u800c\u51fa\uff0c\u8fd9\u4e9b\u529f\u80fd\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u5b8c\u5168\u63a7\u5236\u53d7\u5bb3\u8005\u7684\u8ba1\u7b97\u673a\u3002\u8fd9\u4e9b\u529f\u80fd\u6709\u52a9\u4e8e\u5176\u6210\u529f\u5f00\u5c55\u5404\u79cd\u7f51\u7edc\u653b\u51fb\u548c\u6570\u636e\u76d7\u7a83\u6d3b\u52a8\u3002\u8ba9\u6211\u4eec\u66f4\u6df1\u5165\u5730\u7814\u7a76\u4e00\u4e0b\u4e3b\u8981\u529f\u80fd\uff1a<\/p>\n

        \n
      1. \n

        \u8fdc\u7a0b\u8bbf\u95ee\u548c\u63a7\u5236<\/strong>\uff1aBladabindi \u7684\u6838\u5fc3\u529f\u80fd\u662f\u8fdc\u7a0b\u63a7\u5236\u53d7\u611f\u67d3\u7cfb\u7edf\u7684\u80fd\u529b\u3002\u653b\u51fb\u8005\u5b8c\u5168\u63a7\u5236\u53d7\u5bb3\u8005\u7684\u673a\u5668\uff0c\u5141\u8bb8\u4ed6\u4eec\u6267\u884c\u4efb\u610f\u547d\u4ee4\u5e76\u8bbf\u95ee\u6587\u4ef6\u3001\u8f6f\u4ef6\u548c\u5176\u4ed6\u8d44\u6e90\u3002<\/p>\n<\/li>\n

      2. \n

        \u6570\u636e\u76d7\u7a83\u548c\u952e\u76d8\u8bb0\u5f55<\/strong>\uff1aBladabindi \u7684\u6570\u636e\u76d7\u7a83\u529f\u80fd\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u7a83\u53d6\u654f\u611f\u4fe1\u606f\uff0c\u800c\u5176\u952e\u76d8\u8bb0\u5f55\u5668\u4f1a\u8bb0\u5f55\u51fb\u952e\u4ee5\u6355\u83b7\u6709\u4ef7\u503c\u7684\u767b\u5f55\u51ed\u636e\u548c\u5176\u4ed6\u673a\u5bc6\u6570\u636e\u3002<\/p>\n<\/li>\n

      3. \n

        \u50f5\u5c38\u7f51\u7edc\u7684\u521b\u5efa<\/strong>\uff1aBladabindi \u521b\u5efa\u50f5\u5c38\u7f51\u7edc\u7684\u80fd\u529b\u5bf9\u7f51\u7edc\u5b89\u5168\u6784\u6210\u4e25\u91cd\u5a01\u80c1\uff0c\u56e0\u4e3a\u5b83\u53ef\u4ee5\u5229\u7528\u591a\u53f0\u53d7\u611f\u67d3\u673a\u5668\u7684\u529b\u91cf\u8fdb\u884c\u5927\u89c4\u6a21\u653b\u51fb\uff0c\u4f8b\u5982 DDoS \u653b\u51fb\u3002<\/p>\n<\/li>\n

      4. \n

        \u9690\u79d8\u6027\u548c\u6301\u4e45\u6027<\/strong>\uff1a\u6076\u610f\u8f6f\u4ef6\u91c7\u7528\u5404\u79cd\u6280\u672f\u6765\u7ef4\u6301\u53d7\u611f\u67d3\u7cfb\u7edf\u7684\u6301\u4e45\u6027\uff0c\u786e\u4fdd\u5176\u4e0d\u88ab\u5b89\u5168\u8f6f\u4ef6\u68c0\u6d4b\u5230\u5e76\u968f\u7740\u65f6\u95f4\u7684\u63a8\u79fb\u7ee7\u7eed\u8fd0\u884c\u3002<\/p>\n<\/li>\n

      5. \n

        \u5c4f\u5e55\u622a\u56fe<\/strong>\uff1a\u5c4f\u5e55\u6355\u83b7\u529f\u80fd\u4e3a\u653b\u51fb\u8005\u63d0\u4f9b\u4e86\u53d7\u5bb3\u8005\u6d3b\u52a8\u7684\u53ef\u89c6\u5316\u8868\u793a\uff0c\u6709\u52a9\u4e8e\u4ed6\u4eec\u4e86\u89e3\u7528\u6237\u7684\u884c\u4e3a\u548c\u6f5c\u5728\u7684\u53ef\u5229\u7528\u9886\u57df\u3002<\/p>\n<\/li>\n<\/ol>\n

        \u5b58\u5728\u54ea\u4e9b\u7c7b\u578b\u7684 Bladabindi\u3002\u4f7f\u7528\u8868\u683c\u548c\u5217\u8868\u6765\u5199\u4f5c\u3002<\/p>\n

        Bladabindi \u6709\u51e0\u4e2a\u968f\u7740\u65f6\u95f4\u7684\u63a8\u79fb\u800c\u6f14\u53d8\u7684\u53d8\u4f53\uff0c\u6bcf\u4e2a\u53d8\u4f53\u90fd\u6709\u72ec\u7279\u7684\u7279\u5f81\u548c\u529f\u80fd\u3002\u4ee5\u4e0b\u662f Bladabindi \u7684\u4e00\u4e9b\u503c\u5f97\u6ce8\u610f\u7684\u53d8\u4f53\uff1a<\/p>\n\n\n\n\n\n\n\n\n\n
        \u53d8\u4f53\u540d\u79f0<\/th>\n\u522b\u540d<\/th>\n\u663e\u7740\u7279\u70b9<\/th>\n<\/tr>\n<\/thead>\n
        \u5e03\u62c9\u8fbe\u5bbe\u8fea<\/td>\nNJRat\uff0cNjw0rm<\/td>\n\u6838\u5fc3 RAT \u529f\u80fd\u3001\u952e\u76d8\u8bb0\u5f55\u3001\u6570\u636e\u76d7\u7a83<\/td>\n<\/tr>\n
        \u5e03\u62c9\u8fbe\u5bbe\u8fea v2<\/td>\n\u6781\u9650RAT<\/td>\n\u589e\u5f3a\u8eb2\u907f\u3001\u5c4f\u5e55\u6355\u83b7\u3001\u7f51\u7edc\u6444\u50cf\u5934\u8bbf\u95ee<\/td>\n<\/tr>\n
        \u5e03\u62c9\u8fbe\u5bbe\u8fea v3<\/td>\n\u5357\u4eacq8<\/td>\n\u5148\u8fdb\u7684\u50f5\u5c38\u7f51\u7edc\u529f\u80fd<\/td>\n<\/tr>\n
        \u5e03\u62c9\u8fbe\u5bbe\u8fea v4<\/td>\n\u5357\u4eacw0rm<\/td>\n\u8fdb\u5316\u7684\u89c4\u907f\u6280\u672f<\/td>\n<\/tr>\n
        \u5e03\u62c9\u8fbe\u5bbe\u8fea v5<\/td>\n<\/td>\n\u6539\u8fdb\u7684\u6301\u4e45\u6027\u548c\u52a0\u5bc6<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        Bladabindi\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u4f7f\u7528\u76f8\u5173\u7684\u95ee\u9898\u53ca\u5176\u89e3\u51b3\u65b9\u6848\u3002<\/p>\n

        Bladabindi \u4e3b\u8981\u88ab\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u7528\u4e8e\u6076\u610f\u76ee\u7684\uff0c\u5176\u90e8\u7f72\u53ef\u80fd\u4f1a\u7ed9\u53d7\u5f71\u54cd\u7684\u7528\u6237\u5e26\u6765\u5404\u79cd\u95ee\u9898\uff1a<\/p>\n

          \n
        1. \n

          \u6570\u636e\u6cc4\u9732<\/strong>\uff1aBladabindi \u4e3b\u8981\u62c5\u5fc3\u7684\u662f\u5b83\u6709\u53ef\u80fd\u7a83\u53d6\u654f\u611f\u6570\u636e\uff0c\u5305\u62ec\u4e2a\u4eba\u4fe1\u606f\u3001\u8d22\u52a1\u51ed\u8bc1\u548c\u77e5\u8bc6\u4ea7\u6743\u3002\u6b64\u7c7b\u6570\u636e\u6cc4\u9732\u53ef\u80fd\u5bfc\u81f4\u8eab\u4efd\u76d7\u7a83\u3001\u8d22\u52a1\u635f\u5931\u548c\u4f01\u4e1a\u95f4\u8c0d\u6d3b\u52a8\u3002<\/p>\n<\/li>\n

        2. \n

          \u91d1\u878d\u6b3a\u8bc8<\/strong>\uff1a\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528 Bladabindi \u7684\u952e\u76d8\u8bb0\u5f55\u529f\u80fd\u6765\u83b7\u53d6\u7f51\u4e0a\u94f6\u884c\u3001\u7535\u5b50\u5546\u52a1\u548c\u652f\u4ed8\u5e73\u53f0\u7684\u767b\u5f55\u51ed\u636e\u3002\u8fd9\u53ef\u80fd\u4f1a\u5bfc\u81f4\u672a\u7ecf\u6388\u6743\u7684\u91d1\u878d\u4ea4\u6613\u548c\u6b3a\u8bc8\u6d3b\u52a8\u3002<\/p>\n<\/li>\n

        3. \n

          \u52d2\u7d22\u8f6f\u4ef6\u4ea4\u4ed8<\/strong>\uff1aBladabindi \u53ef\u7528\u4f5c\u52d2\u7d22\u8f6f\u4ef6\u7684\u690d\u5165\u7a0b\u5e8f\uff0c\u5f53\u4e2a\u4eba\u548c\u4f01\u4e1a\u7684\u5173\u952e\u6570\u636e\u88ab\u52a0\u5bc6\u5e76\u52d2\u7d22\u65f6\uff0c\u4f1a\u7ed9\u4e2a\u4eba\u548c\u4f01\u4e1a\u5e26\u6765\u6bc1\u706d\u6027\u540e\u679c\u3002<\/p>\n<\/li>\n

        4. \n

          \u50f5\u5c38\u7f51\u7edc\u53d1\u8d77\u7684\u653b\u51fb<\/strong>\uff1aBladabindi \u7684\u50f5\u5c38\u7f51\u7edc\u80fd\u529b\u5141\u8bb8\u653b\u51fb\u8005\u53d1\u8d77\u5927\u89c4\u6a21 DDoS \u653b\u51fb\uff0c\u6270\u4e71\u5728\u7ebf\u670d\u52a1\u5e76\u5bfc\u81f4\u670d\u52a1\u4e2d\u65ad\u3002<\/p>\n<\/li>\n

        5. \n

          \u9690\u79c1\u4fb5\u72af<\/strong>\uff1aBladabindi \u7684\u5c4f\u5e55\u6355\u83b7\u548c\u7f51\u7edc\u6444\u50cf\u5934\u8bbf\u95ee\u529f\u80fd\u53ef\u80fd\u4f1a\u5728\u7528\u6237\u4e0d\u77e5\u60c5\u7684\u60c5\u51b5\u4e0b\u6355\u83b7\u654f\u611f\u6216\u6cc4\u9732\u5185\u5bb9\uff0c\u4ece\u800c\u4e25\u91cd\u4fb5\u72af\u4e2a\u4eba\u9690\u79c1\u3002<\/p>\n<\/li>\n<\/ol>\n

          \u89e3\u51b3\u65b9\u6848<\/strong>:<\/p>\n

            \n
          1. \n

            \u5b89\u5168\u8f6f\u4ef6<\/strong>\uff1a\u91c7\u7528\u5f3a\u5927\u7684\u9632\u75c5\u6bd2\u548c\u7aef\u70b9\u5b89\u5168\u89e3\u51b3\u65b9\u6848\u53ef\u4ee5\u5e2e\u52a9\u68c0\u6d4b\u5e76\u4ece\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u4e2d\u5220\u9664 Bladabindi\u3002<\/p>\n<\/li>\n

          2. \n

            \u8f6f\u4ef6\u66f4\u65b0<\/strong>\uff1a\u4fdd\u6301\u64cd\u4f5c\u7cfb\u7edf\u548c\u8f6f\u4ef6\u6700\u65b0\u53ef\u4ee5\u964d\u4f4e Bladabindi \u5229\u7528\u5df2\u77e5\u6f0f\u6d1e\u7684\u53ef\u80fd\u6027\u3002<\/p>\n<\/li>\n

          3. \n

            \u7535\u5b50\u90ae\u4ef6\u548c\u7f51\u9875\u8fc7\u6ee4<\/strong>\uff1a\u5b9e\u65bd\u7535\u5b50\u90ae\u4ef6\u548c\u7f51\u9875\u8fc7\u6ee4\u89e3\u51b3\u65b9\u6848\u53ef\u4ee5\u9632\u6b62\u7528\u6237\u70b9\u51fb\u6076\u610f\u94fe\u63a5\u6216\u4e0b\u8f7d\u53d7\u611f\u67d3\u7684\u9644\u4ef6\u3002<\/p>\n<\/li>\n

          4. \n

            \u7528\u6237\u6559\u80b2<\/strong>\uff1a\u5bf9\u7528\u6237\u8fdb\u884c\u6709\u5173\u7f51\u7edc\u9493\u9c7c\u3001\u793e\u4f1a\u5de5\u7a0b\u548c\u5b89\u5168\u4e92\u8054\u7f51\u5b9e\u8df5\u7684\u6559\u80b2\u53ef\u4ee5\u901a\u8fc7\u7528\u6237\u610f\u8bc6\u6765\u9632\u6b62\u6700\u521d\u7684\u611f\u67d3\u3002<\/p>\n<\/li>\n

          5. \n

            \u7f51\u7edc\u76d1\u63a7<\/strong>\uff1a\u6301\u7eed\u7684\u7f51\u7edc\u76d1\u63a7\u53ef\u4ee5\u68c0\u6d4b\u8868\u660e\u50f5\u5c38\u7f51\u7edc\u6d3b\u52a8\u7684\u53ef\u7591\u6d41\u91cf\uff0c\u6709\u52a9\u4e8e\u53ca\u65e9\u68c0\u6d4b\u548c\u54cd\u5e94\u3002<\/p>\n<\/li>\n<\/ol>\n

            \u4ee5\u8868\u683c\u548c\u5217\u8868\u7684\u5f62\u5f0f\u5217\u51fa\u4e3b\u8981\u7279\u5f81\u4ee5\u53ca\u4e0e\u7c7b\u4f3c\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83\u3002<\/p>\n\n\n\n\n\n\n\n\n\n\n\n
            \u7279\u5f81<\/th>\n\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n
            \u7c7b\u578b<\/td>\n\u6728\u9a6c\uff0c\u7279\u522b\u662f\u8fdc\u7a0b\u8bbf\u95ee\u6728\u9a6c (RAT)<\/td>\n<\/tr>\n
            \u521d\u6b21\u5206\u914d<\/td>\n\u5783\u573e\u90ae\u4ef6\u3001\u6076\u610f\u9644\u4ef6\u3001\u53d7\u635f\u8f6f\u4ef6\u4e0b\u8f7d<\/td>\n<\/tr>\n
            \u64cd\u4f5c\u7cfb\u7edf<\/td>\nWindows\uff08\u4e3b\u8981\uff09<\/td>\n<\/tr>\n
            \u901a\u8baf\u534f\u8bae<\/td>\nHTTP\u3001DNS\u3001SMTP\u3001IRC<\/td>\n<\/tr>\n
            \u4e3b\u8981\u7279\u5f81<\/td>\n\u8fdc\u7a0b\u8bbf\u95ee\u3001\u6570\u636e\u76d7\u7a83\u3001\u952e\u76d8\u8bb0\u5f55\u3001\u5c4f\u5e55\u6355\u83b7\u3001\u50f5\u5c38\u7f51\u7edc\u80fd\u529b<\/td>\n<\/tr>\n
            \u68c0\u6d4b\u548c\u89c4\u907f<\/td>\n\u6df7\u6dc6\u3001\u591a\u6001\u3001\u52a0\u5bc6\u901a\u4fe1<\/td>\n<\/tr>\n
            \u7c7b\u4f3c\u6728\u9a6c<\/td>\nDarkComet\u3001NanoCore\u3001XtremeRAT\u3001Gh0st RAT\u3001njRAT<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

            \u4e0e Bladabindi \u6709\u5173\u7684\u672a\u6765\u524d\u666f\u548c\u6280\u672f\u3002<\/p>\n

            Bladabindi \u548c\u5176\u4ed6\u7c7b\u4f3c\u6076\u610f\u8f6f\u4ef6\u7684\u672a\u6765\u5bf9\u7f51\u7edc\u5b89\u5168\u793e\u533a\u6765\u8bf4\u4ecd\u7136\u5145\u6ee1\u6311\u6218\u3002\u968f\u7740\u6280\u672f\u7684\u53d1\u5c55\uff0c\u7f51\u7edc\u5a01\u80c1\u4e5f\u5728\u4e0d\u65ad\u53d1\u5c55\uff0c\u56e0\u6b64\u4fdd\u6301\u9886\u5148\u5730\u4f4d\u4ee5\u9632\u5fa1\u590d\u6742\u7684\u653b\u51fb\u81f3\u5173\u91cd\u8981\u3002\u672a\u6765\u7684\u4e00\u4e9b\u89c2\u70b9\u548c\u6280\u672f\u5305\u62ec\uff1a<\/p>\n

              \n
            1. \n

              \u4eba\u5de5\u667a\u80fd\u9a71\u52a8\u7684\u5b89\u5168\u89e3\u51b3\u65b9\u6848<\/strong>\uff1a\u5728\u5b89\u5168\u89e3\u51b3\u65b9\u6848\u4e2d\u5b9e\u65bd\u4eba\u5de5\u667a\u80fd\u548c\u673a\u5668\u5b66\u4e60\u7b97\u6cd5\u53ef\u4ee5\u589e\u5f3a\u5a01\u80c1\u68c0\u6d4b\u80fd\u529b\u5e76\u8bc6\u522b\u4ee5\u524d\u672a\u89c1\u8fc7\u7684 Bladabindi \u53d8\u4f53\u3002<\/p>\n<\/li>\n

            2. \n

              \u884c\u4e3a\u5206\u6790<\/strong>\uff1a\u91c7\u7528\u9ad8\u7ea7\u884c\u4e3a\u5206\u6790\u53ef\u4ee5\u5e2e\u52a9\u68c0\u6d4b\u548c\u9632\u6b62 Bladabindi \u57fa\u4e8e\u4e0e\u5178\u578b\u7528\u6237\u884c\u4e3a\u7684\u504f\u5dee\u7684\u6076\u610f\u6d3b\u52a8\u3002<\/p>\n<\/li>\n

            3. \n

              \u534f\u4f5c\u5a01\u80c1\u60c5\u62a5<\/strong>\uff1a\u5728\u7ec4\u7ec7\u548c\u5b89\u5168\u7814\u7a76\u4eba\u5458\u4e4b\u95f4\u5171\u4eab\u5a01\u80c1\u60c5\u62a5\u53ef\u4ee5\u66f4\u4e3b\u52a8\u5730\u54cd\u5e94 Bladabindi \u7b49\u65b0\u5174\u5a01\u80c1\u3002<\/p>\n<\/li>\n

            4. \n

              \u96f6\u4fe1\u4efb\u6a21\u578b<\/strong>\uff1a\u91c7\u7528\u96f6\u4fe1\u4efb\u5b89\u5168\u6a21\u578b\u53ef\u786e\u4fdd\u6bcf\u4e2a\u7528\u6237\u548c\u8bbe\u5907\u5728\u6388\u4e88\u8bbf\u95ee\u6743\u9650\u4e4b\u524d\u5f97\u5230\u6301\u7eed\u9a8c\u8bc1\uff0c\u4ece\u800c\u6700\u5927\u9650\u5ea6\u5730\u51cf\u5c11 Bladabindi \u7c7b\u5a01\u80c1\u7684\u5f71\u54cd\u3002<\/p>\n<\/li>\n

            5. \n

              \u7269\u8054\u7f51\u5b89\u5168<\/strong>\uff1a\u968f\u7740\u7269\u8054\u7f51 (IoT) \u8bbe\u5907\u53d8\u5f97\u8d8a\u6765\u8d8a\u666e\u904d\uff0c\u4fdd\u62a4\u5b83\u4eec\u514d\u53d7 Bladabindi \u7b49\u6076\u610f\u8f6f\u4ef6\u7684\u4fb5\u5bb3\u5bf9\u4e8e\u9632\u6b62\u5bf9\u667a\u80fd\u5bb6\u5c45\u548c\u5de5\u4e1a\u7cfb\u7edf\u7684\u6f5c\u5728\u653b\u51fb\u81f3\u5173\u91cd\u8981\u3002<\/p>\n<\/li>\n<\/ol>\n

              \u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5982\u4f55\u5c06\u4ee3\u7406\u670d\u52a1\u5668\u4e0e Bladabindi \u5173\u8054\u3002<\/p>\n

              Bladabindi \u8fd0\u8425\u5546\u53ef\u4ee5\u5229\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6765\u589e\u5f3a\u6076\u610f\u8f6f\u4ef6\u7684\u9690\u79d8\u548c\u89c4\u907f\u80fd\u529b\u3002\u4ee5\u4e0b\u662f\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e Bladabindi \u5173\u8054\uff1a<\/p>\n

                \n
              1. \n

                IP\u5730\u5740\u6b3a\u9a97<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u5141\u8bb8 Bladabindi \u9690\u85cf\u5176\u771f\u5b9e\u6e90 IP \u5730\u5740\uff0c\u5e76\u663e\u793a\u6d41\u91cf\u597d\u50cf\u6765\u81ea\u5176\u4ed6\u4f4d\u7f6e\uff0c\u4ece\u800c\u96be\u4ee5\u8ffd\u8e2a\u653b\u51fb\u7684\u6765\u6e90\u3002<\/p>\n<\/li>\n

              2. \n

                C2\u670d\u52a1\u5668\u901a\u4fe1<\/strong>\uff1aBladabindi \u53ef\u4ee5\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6765\u4e2d\u7ee7\u4e0e C2 \u670d\u52a1\u5668\u7684\u901a\u4fe1\uff0c\u8fdb\u4e00\u6b65\u6df7\u6dc6\u653b\u51fb\u8005\u7684\u8eab\u4efd\u5e76\u9003\u907f\u68c0\u6d4b\u3002<\/p>\n<\/li>\n

              3. \n

                \u7ed5\u8fc7\u7f51\u7edc\u8fc7\u6ee4\u5668<\/strong>\uff1a\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5e2e\u52a9 Bladabindi \u7ed5\u8fc7\u7f51\u7edc\u8fc7\u6ee4\u5668\u548c\u9632\u706b\u5899\uff0c\u4f7f\u5176\u5373\u4f7f\u5728\u53d7\u9650\u7684\u7f51\u7edc\u73af\u5883\u4e2d\u4e5f\u80fd\u4e0e C2 \u670d\u52a1\u5668\u5efa\u7acb\u8fde\u63a5\u3002<\/p>\n<\/li>\n

              4. \n

                \u5730\u7406\u5206\u5e03<\/strong>\uff1a\u901a\u8fc7\u4f7f\u7528\u5168\u7403\u5404\u5730\u7684\u4ee3\u7406\u670d\u52a1\u5668\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5206\u53d1\u5176 C2 \u57fa\u7840\u8bbe\u65bd\uff0c\u4ece\u800c\u4f7f\u5b89\u5168\u7814\u7a76\u4eba\u5458\u66f4\u96be\u8bc6\u522b\u548c\u6467\u6bc1\u6076\u610f\u7f51\u7edc\u3002<\/p>\n<\/li>\n

              5. \n

                \u4ee3\u7406\u94fe<\/strong>\uff1a\u653b\u51fb\u8005\u53ef\u4ee5\u94fe\u63a5\u591a\u4e2a\u4ee3\u7406\u670d\u52a1\u5668\u6765\u521b\u5efa\u590d\u6742\u7684\u8def\u7531\u8def\u5f84\uff0c\u4ece\u800c\u589e\u52a0\u8ddf\u8e2a\u6d41\u91cf\u56de\u6e90\u7684\u590d\u6742\u6027\u3002<\/p>\n<\/li>\n<\/ol>\n

                \u7136\u800c\uff0c\u5fc5\u987b\u6ce8\u610f\u7684\u662f\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u672c\u8eab\u5e76\u4e0d\u662f\u6076\u610f\u7684\u3002\u5b83\u4eec\u5728\u589e\u5f3a\u9690\u79c1\u3001\u7ed5\u8fc7\u5ba1\u67e5\u548c\u4f18\u5316\u7f51\u7edc\u6027\u80fd\u65b9\u9762\u5177\u6709\u5408\u6cd5\u76ee\u7684\u3002\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\uff08\u5305\u62ec Bladabindi \u7684\u8fd0\u8425\u8005\uff09\u6ee5\u7528\u4ee3\u7406\u670d\u52a1\u5668\u5bf9\u7f51\u7edc\u5b89\u5168\u6784\u6210\u4e86\u5a01\u80c1\u3002<\/p>\n

                \u76f8\u5173\u94fe\u63a5<\/h2>\n

                \u6709\u5173 Bladabindi \u548c\u7f51\u7edc\u5b89\u5168\u5a01\u80c1\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u8003\u8651\u8bbf\u95ee\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n

                  \n
                1. \u8d5b\u95e8\u94c1\u514b \u2013 \u5a01\u80c1\u767e\u79d1\u5168\u4e66\uff1aBladabindi<\/a><\/li>\n
                2. MITRE ATT&CK \u2013 Bladabindi<\/a><\/li>\n
                3. US-CERT \u2013 \u5173\u4e8e Bladabindi \u7684\u8b66\u62a5<\/a><\/li>\n
                4. \u5361\u5df4\u65af\u57fa\u5b9e\u9a8c\u5ba4 \u2013 Bladabindi \u7684\u6280\u672f\u5206\u6790<\/a><\/li>\n
                5. \u56fd\u5bb6\u7f51\u7edc\u5b89\u5168\u4e2d\u5fc3 \u2013 \u5173\u4e8e\u8fdc\u7a0b\u8bbf\u95ee\u6728\u9a6c\u7684\u5efa\u8bae<\/a><\/li>\n<\/ol>","protected":false},"featured_media":476054,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476053","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Bladabindi: Understanding the Elusive Trojan<\/mark>","faq_items":[{"question":"What is Bladabindi?","answer":"

                  Bladabindi, also known as NJRat or Njw0rm, is a sophisticated Remote Access Trojan (RAT) malware that allows cybercriminals to gain unauthorized remote access and full control over a victim's computer. It enables various malicious activities such as data theft, keylogging, and executing arbitrary commands on the compromised system.<\/p>"},{"question":"How did Bladabindi originate?","answer":"

                  Bladabindi first emerged in the early 2010s and is believed to have originated in the Middle East. It was initially developed as a legitimate Remote Administration Tool (RAT) for authorized remote support purposes. However, cybercriminals quickly repurposed and modified it for malicious use, leading to its widespread distribution across the internet.<\/p>"},{"question":"How does Bladabindi infect computers?","answer":"

                  Bladabindi is primarily distributed through spam emails, malicious attachments, and infected software downloads. Once executed on a victim's system, it establishes a backdoor connection with a command-and-control (C2) server, allowing attackers to control the compromised machine.<\/p>"},{"question":"What are the key features of Bladabindi?","answer":"

                  Bladabindi boasts several key features, including remote access and control, data theft capabilities, keylogging, screen capture, and the ability to create botnets for large-scale attacks like DDoS. It also employs various techniques to evade detection and maintain persistence on infected systems.<\/p>"},{"question":"Are there different variants of Bladabindi?","answer":"

                  Yes, Bladabindi has several variants that have evolved over time, each with unique characteristics. Some well-known variants include Bladabindi v2 (XtremeRAT), Bladabindi v3 (njq8), and Bladabindi v4 (njw0rm). Each variant may offer additional capabilities or improved evasion techniques.<\/p>"},{"question":"What problems can Bladabindi cause?","answer":"

                  Bladabindi poses serious risks to individuals and organizations alike. It can lead to data breaches, financial fraud, ransomware delivery, and participation in large-scale DDoS attacks. The malware's invasive nature can also result in privacy violations and compromise sensitive information.<\/p>"},{"question":"How can Bladabindi infections be prevented?","answer":"

                  To protect against Bladabindi and similar threats, users and organizations should:<\/p>

                  • Use robust antivirus and security software.<\/li>
                  • Keep operating systems and software up-to-date.<\/li>
                  • Exercise caution when opening email attachments or clicking on links.<\/li>
                  • Educate users about phishing and safe internet practices.<\/li>
                  • Implement network monitoring and behavioral analysis tools.<\/li><\/ul>"},{"question":"How does the future of Bladabindi look?","answer":"

                    The future of Bladabindi remains challenging, as cyber threats continue to evolve. To combat its spread and mitigate its impact, the cybersecurity community is likely to employ AI-driven security solutions, collaborative threat intelligence sharing, and a zero-trust security model.<\/p>"},{"question":"How are proxy servers associated with Bladabindi?","answer":"

                    Proxy servers can be utilized by Bladabindi operators to enhance its stealth and evasion capabilities. These servers help hide the malware's true source IP address, bypass network filters, and create complex routing paths, making it harder to track the origin of attacks.<\/p>"},{"question":"Where can I find more information about Bladabindi and cybersecurity threats?","answer":"

                    For further details about Bladabindi and cybersecurity threats, refer to the following resources:<\/p>

                    1. Symantec - Threat EncyclopediBladabindi<\/li>
                    2. MITRE ATT&CK - Bladabindi<\/li>
                    3. US-CERT - Alert on Bladabindi<\/li>
                    4. Kaspersky Lab - Technical Analysis of Bladabindi<\/li>
                    5. National Cyber Security Centre - Advice on Remote Access Trojans<\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476053\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/476054"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=476053"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}