{"id":478973,"date":"2023-08-09T09:41:04","date_gmt":"2023-08-09T09:41:04","guid":{"rendered":""},"modified":"2023-09-05T11:17:55","modified_gmt":"2023-09-05T11:17:55","slug":"shamoon","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/shamoon\/","title":{"rendered":"\u6c99\u8499"},"content":{"rendered":"<p>Shamoon\uff0c\u4e5f\u79f0\u4e3a Disttrack\uff0c\u662f\u4e00\u79cd\u81ed\u540d\u662d\u8457\u4e14\u6781\u5177\u7834\u574f\u6027\u7684\u6076\u610f\u8f6f\u4ef6\uff0c\u5c5e\u4e8e\u7f51\u7edc\u6b66\u5668\u7c7b\u522b\u3002\u5b83\u56e0\u5176\u7834\u574f\u6027\u80fd\u529b\u800c\u81ed\u540d\u662d\u8457\uff0c\u80fd\u591f\u5bf9\u76ee\u6807\u7cfb\u7edf\u9020\u6210\u4e25\u91cd\u635f\u5bb3\u3002 Shamoon \u4e8e 2012 \u5e74\u9996\u6b21\u88ab\u53d1\u73b0\uff0c\u4e0e\u6570\u8d77\u5907\u53d7\u77a9\u76ee\u7684\u7f51\u7edc\u653b\u51fb\u6709\u5173\uff0c\u901a\u5e38\u9488\u5bf9\u5173\u952e\u57fa\u7840\u8bbe\u65bd\u548c\u7ec4\u7ec7\u3002<\/p>\n<h2>Shamoon \u7684\u8d77\u6e90\u5386\u53f2\u53ca\u5176\u9996\u6b21\u63d0\u53ca<\/h2>\n<p>Shamoon \u4e8e 2012 \u5e74 8 \u6708\u9996\u6b21\u88ab\u53d1\u73b0\uff0c\u5f53\u65f6\u5b83\u88ab\u7528\u6765\u653b\u51fb\u4e16\u754c\u4e0a\u6700\u5927\u7684\u77f3\u6cb9\u516c\u53f8\u4e4b\u4e00\u6c99\u7279\u963f\u7f8e\u516c\u53f8\u3002\u6b64\u6b21\u653b\u51fb\u8986\u76d6\u4e86\u4e3b\u5f15\u5bfc\u8bb0\u5f55 (MBR)\uff0c\u5bfc\u81f4\u7ea6 30,000 \u53f0\u8ba1\u7b97\u673a\u762b\u75ea\uff0c\u5bfc\u81f4\u7cfb\u7edf\u65e0\u6cd5\u8fd0\u884c\u3002\u8fd9\u5bfc\u81f4\u4e86\u91cd\u5927\u7684\u8d22\u52a1\u635f\u5931\uff0c\u5e76\u5bf9\u516c\u53f8\u7684\u8fd0\u8425\u9020\u6210\u4e86\u91cd\u5927\u5e72\u6270\u3002\u8be5\u6076\u610f\u8f6f\u4ef6\u65e8\u5728\u64e6\u9664\u53d7\u611f\u67d3\u673a\u5668\u4e2d\u7684\u6570\u636e\uff0c\u4f7f\u5176\u65e0\u6cd5\u4f7f\u7528\u5e76\u5728\u76ee\u6807\u7ec4\u7ec7\u5185\u9020\u6210\u6df7\u4e71\u3002<\/p>\n<h2>\u5173\u4e8e\u6c99\u8499\u7684\u8be6\u7ec6\u4fe1\u606f\u3002\u6269\u5c55 Shamoon \u4e3b\u9898<\/h2>\n<p>Shamoon \u662f\u4e00\u79cd\u590d\u6742\u4e14\u5177\u6709\u7834\u574f\u6027\u7684\u6076\u610f\u8f6f\u4ef6\uff0c\u4e3b\u8981\u9488\u5bf9\u57fa\u4e8e Windows \u7684\u7cfb\u7edf\u3002\u968f\u7740\u65f6\u95f4\u7684\u63a8\u79fb\uff0c\u5b83\u4e0d\u65ad\u53d1\u5c55\uff0c\u65b0\u7248\u672c\u878d\u5165\u4e86\u66f4\u5148\u8fdb\u7684\u6280\u672f\u6765\u9003\u907f\u68c0\u6d4b\u5e76\u5b9e\u73b0\u5176\u7834\u574f\u6027\u76ee\u6807\u3002\u5176\u4e00\u4e9b\u4e3b\u8981\u7279\u5f81\u5305\u62ec\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u96e8\u522e\u5668\u6076\u610f\u8f6f\u4ef6<\/strong>\uff1aShamoon \u88ab\u5f52\u7c7b\u4e3a\u64e6\u9664\u6076\u610f\u8f6f\u4ef6\uff0c\u56e0\u4e3a\u5b83\u4e0d\u4f1a\u7a83\u53d6\u4fe1\u606f\u6216\u5c1d\u8bd5\u5728\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u4e2d\u4fdd\u6301\u9690\u79d8\u6027\u3002\u76f8\u53cd\uff0c\u5b83\u7684\u4e3b\u8981\u76ee\u6807\u662f\u64e6\u9664\u6570\u636e\u5e76\u7981\u7528\u76ee\u6807\u673a\u5668\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6a21\u5757\u5316\u8bbe\u8ba1<\/strong>\uff1aShamoon \u4ee5\u6a21\u5757\u5316\u65b9\u5f0f\u6784\u5efa\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u81ea\u5b9a\u4e49\u5176\u529f\u80fd\u4ee5\u6ee1\u8db3\u5176\u7279\u5b9a\u76ee\u6807\u3002\u8fd9\u79cd\u6a21\u5757\u5316\u7ed3\u6784\u4f7f\u5176\u9ad8\u5ea6\u7075\u6d3b\uff0c\u53ef\u9002\u5e94\u4e0d\u540c\u7c7b\u578b\u7684\u653b\u51fb\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4f20\u64ad<\/strong>\uff1aShamoon \u901a\u5e38\u901a\u8fc7\u5305\u542b\u6076\u610f\u9644\u4ef6\u6216\u94fe\u63a5\u7684\u9c7c\u53c9\u5f0f\u7f51\u7edc\u9493\u9c7c\u7535\u5b50\u90ae\u4ef6\u8fdb\u884c\u4f20\u64ad\u3002\u4e00\u65e6\u7528\u6237\u6253\u5f00\u53d7\u611f\u67d3\u7684\u9644\u4ef6\u6216\u5355\u51fb\u6076\u610f\u94fe\u63a5\uff0c\u6076\u610f\u8f6f\u4ef6\u5c31\u4f1a\u83b7\u5f97\u5bf9\u7cfb\u7edf\u7684\u8bbf\u95ee\u6743\u9650\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u7f51\u7edc\u4f20\u64ad<\/strong>\uff1a\u5728\u4e00\u53f0\u673a\u5668\u4e2d\u7ad9\u7a33\u811a\u8ddf\u540e\uff0cShamoon \u4f1a\u5728\u7f51\u7edc\u4e2d\u6a2a\u5411\u4f20\u64ad\uff0c\u611f\u67d3\u4e0e\u5176\u8fde\u63a5\u7684\u5176\u4ed6\u6613\u53d7\u653b\u51fb\u7684\u7cfb\u7edf\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6570\u636e\u9500\u6bc1<\/strong>\uff1a\u4e00\u65e6\u6fc0\u6d3b\uff0cShamoon \u5c31\u4f1a\u8986\u76d6\u53d7\u611f\u67d3\u8ba1\u7b97\u673a\u4e0a\u7684\u6587\u4ef6\uff0c\u5305\u62ec\u6587\u6863\u3001\u56fe\u50cf\u548c\u5176\u4ed6\u5173\u952e\u6570\u636e\u3002\u7136\u540e\u5b83\u4f1a\u66ff\u6362 MBR\uff0c\u4ece\u800c\u963b\u6b62\u7cfb\u7edf\u542f\u52a8\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>Shamoon\u7684\u5185\u90e8\u7ed3\u6784\u3002\u6c99\u8499\u5982\u4f55\u8fd0\u4f5c<\/h2>\n<p>\u4e3a\u4e86\u66f4\u597d\u5730\u7406\u89e3 Shamoon \u7684\u5185\u90e8\u7ed3\u6784\u53ca\u5176\u8fd0\u4f5c\u65b9\u5f0f\uff0c\u6709\u5fc5\u8981\u5206\u89e3\u5176\u7ec4\u4ef6\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u6ef4\u7ba1<\/strong>\uff1a\u8d1f\u8d23\u5c06\u6076\u610f\u8f6f\u4ef6\u4f20\u9001\u5230\u76ee\u6807\u7cfb\u7edf\u7684\u521d\u59cb\u7ec4\u4ef6\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u96e8\u5237\u6a21\u5757<\/strong>\uff1a\u8986\u76d6\u6587\u4ef6\u548c\u64e6\u9664\u6570\u636e\u7684\u4e3b\u8981\u7834\u574f\u6027\u7ec4\u4ef6\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4f20\u64ad\u6a21\u5757<\/strong>\uff1a\u4fc3\u8fdb\u7f51\u7edc\u5185\u7684\u6a2a\u5411\u79fb\u52a8\uff0c\u4f7f\u6076\u610f\u8f6f\u4ef6\u80fd\u591f\u611f\u67d3\u5176\u4ed6\u8fde\u63a5\u7684\u7cfb\u7edf\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u901a\u8baf\u6a21\u5757<\/strong>\uff1a\u4e0e\u547d\u4ee4\u4e0e\u63a7\u5236 (C&amp;C) \u670d\u52a1\u5668\u5efa\u7acb\u901a\u4fe1\uff0c\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u8fdc\u7a0b\u63a7\u5236\u6076\u610f\u8f6f\u4ef6\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6709\u6548\u8d1f\u8f7d\u914d\u7f6e<\/strong>\uff1a\u5305\u542b\u6076\u610f\u8f6f\u4ef6\u884c\u4e3a\u548c\u81ea\u5b9a\u4e49\u9009\u9879\u7684\u5177\u4f53\u8bf4\u660e\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>Shamoon\u4e3b\u8981\u7279\u70b9\u5206\u6790<\/h2>\n<p>Shamoon \u56e0\u5176\u4ee5\u4e0b\u51e0\u4e2a\u5173\u952e\u7279\u6027\u800c\u6210\u4e3a\u5f3a\u5927\u7684\u7f51\u7edc\u6b66\u5668\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u6bc1\u706d\u6027\u5f71\u54cd<\/strong>\uff1aShamoon \u64e6\u9664\u53d7\u611f\u67d3\u7cfb\u7edf\u4e2d\u6570\u636e\u7684\u80fd\u529b\u53ef\u80fd\u4f1a\u9020\u6210\u91cd\u5927\u8d22\u52a1\u635f\u5931\u5e76\u6270\u4e71\u76ee\u6807\u7ec4\u7ec7\u5185\u7684\u5173\u952e\u8fd0\u8425\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6f5c\u884c\u56de\u907f<\/strong>\uff1a\u5c3d\u7ba1\u5177\u6709\u7834\u574f\u6027\uff0cShamoon \u7684\u8bbe\u8ba1\u76ee\u7684\u662f\u907f\u514d\u88ab\u4f20\u7edf\u5b89\u5168\u63aa\u65bd\u68c0\u6d4b\u5230\uff0c\u8fd9\u4f7f\u5f97\u7ec4\u7ec7\u5f88\u96be\u6709\u6548\u9632\u5fa1\u5b83\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u53ef\u5b9a\u5236\u6027<\/strong>\uff1a\u5176\u6a21\u5757\u5316\u8bbe\u8ba1\u5141\u8bb8\u653b\u51fb\u8005\u5b9a\u5236\u6076\u610f\u8f6f\u4ef6\u7684\u884c\u4e3a\u4ee5\u6ee1\u8db3\u5176\u76ee\u6807\uff0c\u4ece\u800c\u4f7f\u6bcf\u6b21 Shamoon \u653b\u51fb\u90fd\u53ef\u80fd\u72ec\u4e00\u65e0\u4e8c\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u9488\u5bf9\u5173\u952e\u57fa\u7840\u8bbe\u65bd<\/strong>\uff1aShamoon \u653b\u51fb\u901a\u5e38\u96c6\u4e2d\u4e8e\u5173\u952e\u57fa\u7840\u8bbe\u65bd\u5b9e\u4f53\uff0c\u4f8b\u5982\u80fd\u6e90\u516c\u53f8\u548c\u653f\u5e9c\u7ec4\u7ec7\uff0c\u4ece\u800c\u653e\u5927\u4e86\u5176\u6f5c\u5728\u5f71\u54cd\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u6c99\u8499\u7684\u79cd\u7c7b<\/h2>\n<p>\u591a\u5e74\u6765\uff0cShamoon \u51fa\u73b0\u4e86\u4e0d\u540c\u7684\u53d8\u4f53\u548c\u7248\u672c\uff0c\u6bcf\u4e2a\u53d8\u4f53\u548c\u7248\u672c\u90fd\u6709\u81ea\u5df1\u7684\u7279\u70b9\u548c\u529f\u80fd\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u503c\u5f97\u6ce8\u610f\u7684 Shamoon \u53d8\u4f53\uff1a<\/p>\n<table>\n<thead>\n<tr>\n<th>\u59d3\u540d<\/th>\n<th>\u5e74<\/th>\n<th>\u7279\u5f81<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u6c99\u8499 1<\/td>\n<td>2012<\/td>\n<td>\u7b2c\u4e00\u4e2a\u7248\u672c\u9488\u5bf9\u7684\u662f\u6c99\u7279\u963f\u7f8e\u516c\u53f8\uff0c\u5176\u4e3b\u8981\u76ee\u7684\u662f\u64e6\u9664\u6570\u636e\u5e76\u5bfc\u81f4\u7cfb\u7edf\u6545\u969c\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6c99\u84992<\/td>\n<td>2016<\/td>\n<td>\u4e0e\u7b2c\u4e00\u4e2a\u7248\u672c\u7c7b\u4f3c\uff0c\u4f46\u5177\u6709\u66f4\u65b0\u7684\u89c4\u907f\u6280\u672f\u548c\u4f20\u64ad\u673a\u5236\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6c99\u84993<\/td>\n<td>2017<\/td>\n<td>\u5c55\u793a\u4e86\u65b0\u7684\u89c4\u907f\u7b56\u7565\uff0c\u4f7f\u5176\u66f4\u96be\u4ee5\u68c0\u6d4b\u548c\u5206\u6790\u3002<\/td>\n<\/tr>\n<tr>\n<td>Shamoon 4\uff08\u77f3\u94bb\uff09<\/td>\n<td>2017<\/td>\n<td>\u6dfb\u52a0\u4e86\u66f4\u5148\u8fdb\u7684\u53cd\u5206\u6790\u529f\u80fd\uff0c\u5e76\u5728\u5176\u901a\u4fe1\u534f\u8bae\u4e2d\u4f7f\u7528\u4e86\u201cStonedrill\u201d\u3002<\/td>\n<\/tr>\n<tr>\n<td>Shamoon 3+\uff08\u7eff\u866b\uff09<\/td>\n<td>2018<\/td>\n<td>\u4e0e\u4ee5\u524d\u7684\u7248\u672c\u6709\u76f8\u4f3c\u4e4b\u5904\uff0c\u4f46\u4f7f\u7528\u4e86\u4e0d\u540c\u7684\u901a\u4fe1\u65b9\u6cd5\u5e76\u5305\u542b\u95f4\u8c0d\u529f\u80fd\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Shamoon\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u4f7f\u7528\u8fc7\u7a0b\u4e2d\u9047\u5230\u7684\u95ee\u9898\u4ee5\u53ca\u89e3\u51b3\u65b9\u6cd5<\/h2>\n<p>\u867d\u7136 Shamoon \u4e3b\u8981\u7528\u4e8e\u9488\u5bf9\u5173\u952e\u57fa\u7840\u8bbe\u65bd\u7684\u9ad8\u5ea6\u9488\u5bf9\u6027\u7684\u7f51\u7edc\u653b\u51fb\uff0c\u4f46\u5176\u7834\u574f\u6027\u5e26\u6765\u4e86\u51e0\u4e2a\u91cd\u5927\u95ee\u9898\uff1a<\/p>\n<ol>\n<li>\n<p><strong>\u7ecf\u6d4e\u635f\u5931<\/strong>\uff1a\u906d\u53d7 Shamoon \u653b\u51fb\u7684\u7ec4\u7ec7\u53ef\u80fd\u4f1a\u56e0\u6570\u636e\u4e22\u5931\u3001\u505c\u673a\u548c\u6062\u590d\u8d39\u7528\u800c\u906d\u53d7\u91cd\u5927\u8d22\u52a1\u635f\u5931\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8fd0\u8425\u4e2d\u65ad<\/strong>\uff1aShamoon \u7834\u574f\u5173\u952e\u7cfb\u7edf\u548c\u8fd0\u8425\u7684\u80fd\u529b\u53ef\u80fd\u4f1a\u5bfc\u81f4\u4e25\u91cd\u7684\u670d\u52a1\u4e2d\u65ad\u548c\u58f0\u8a89\u635f\u5bb3\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6570\u636e\u6062\u590d<\/strong>\uff1aShamoon \u653b\u51fb\u540e\u7684\u6570\u636e\u6062\u590d\u53ef\u80fd\u5177\u6709\u6311\u6218\u6027\uff0c\u7279\u522b\u662f\u5728\u5907\u4efd\u4e0d\u53ef\u7528\u6216\u4e5f\u53d7\u5230\u5f71\u54cd\u7684\u60c5\u51b5\u4e0b\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u51cf\u8f7b<\/strong>\uff1a\u9632\u6b62 Shamoon \u653b\u51fb\u9700\u8981\u7ed3\u5408\u5f3a\u5927\u7684\u7f51\u7edc\u5b89\u5168\u63aa\u65bd\u3001\u68c0\u6d4b\u7f51\u7edc\u9493\u9c7c\u4f01\u56fe\u7684\u5458\u5de5\u57f9\u8bad\u4ee5\u53ca\u5b89\u5168\u5b58\u50a8\u7684\u5b9a\u671f\u5907\u4efd\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4e3b\u8981\u7279\u70b9\u53ca\u4e0e\u540c\u7c7b\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u5b66\u671f<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Shamoon \u4e0e\u52d2\u7d22\u8f6f\u4ef6<\/td>\n<td>\u867d\u7136 Shamoon \u548c\u52d2\u7d22\u8f6f\u4ef6\u90fd\u662f\u7f51\u7edc\u5a01\u80c1\uff0c\u4f46 Shamoon \u7684\u4e3b\u8981\u76ee\u6807\u662f\u7834\u574f\u6570\u636e\uff0c\u800c\u52d2\u7d22\u8f6f\u4ef6\u4f1a\u52a0\u5bc6\u6570\u636e\u5e76\u7d22\u8981\u8d4e\u91d1\u3002<\/td>\n<\/tr>\n<tr>\n<td>Shamoon \u4e0e\u9707\u7f51\u75c5\u6bd2<\/td>\n<td>Shamoon \u548c Stuxnet \u90fd\u662f\u590d\u6742\u7684\u7f51\u7edc\u6b66\u5668\uff0c\u4f46 Stuxnet \u4e13\u95e8\u9488\u5bf9\u5de5\u4e1a\u63a7\u5236\u7cfb\u7edf\uff0c\u800c Shamoon \u5219\u9488\u5bf9\u57fa\u4e8e Windows \u7684\u7cfb\u7edf\u3002<\/td>\n<\/tr>\n<tr>\n<td>Shamoon VS NotPetya<\/td>\n<td>\u4e0e\u52d2\u7d22\u8f6f\u4ef6\u7c7b\u4f3c\uff0cNotPetya \u5bf9\u6570\u636e\u8fdb\u884c\u52a0\u5bc6\uff0c\u4f46\u5b83\u4e5f\u5305\u542b\u7c7b\u4f3c\u4e8e Shamoon \u7684\u64e6\u9664\u5668\u529f\u80fd\uff0c\u5bfc\u81f4\u5e7f\u6cdb\u7684\u6570\u636e\u7834\u574f\u548c\u4e2d\u65ad\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e0e Shamoon \u76f8\u5173\u7684\u672a\u6765\u524d\u666f\u548c\u6280\u672f<\/h2>\n<p>\u968f\u7740\u6280\u672f\u7684\u8fdb\u6b65\uff0c\u7f51\u7edc\u653b\u51fb\u8005\u5f88\u53ef\u80fd\u4f1a\u7ee7\u7eed\u589e\u5f3a\u548c\u53d1\u5c55 Shamoon \u7b49\u6076\u610f\u8f6f\u4ef6\u3002 Shamoon \u7684\u672a\u6765\u7248\u672c\u53ef\u80fd\u4f1a\u91c7\u7528\u66f4\u590d\u6742\u7684\u89c4\u907f\u6280\u672f\uff0c\u4f7f\u68c0\u6d4b\u548c\u5f52\u56e0\u66f4\u5177\u6311\u6218\u6027\u3002\u4e3a\u4e86\u5e94\u5bf9\u6b64\u7c7b\u5a01\u80c1\uff0c\u7f51\u7edc\u5b89\u5168\u884c\u4e1a\u9700\u8981\u91c7\u7528\u5148\u8fdb\u7684\u4eba\u5de5\u667a\u80fd\u548c\u673a\u5668\u5b66\u4e60\u6280\u672f\u6765\u8bc6\u522b\u548c\u51cf\u8f7b\u65b0\u9896\u7684\u9488\u5bf9\u6027\u653b\u51fb\u3002<\/p>\n<h2>\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5c06\u5176\u4e0e Shamoon \u5173\u8054<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5728 Shamoon \u653b\u51fb\u7684\u4f20\u64ad\u548c\u68c0\u6d4b\u4e2d\u53d1\u6325\u4f5c\u7528\u3002\u653b\u51fb\u8005\u53ef\u80fd\u4f1a\u5229\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6765\u6df7\u6dc6\u5176\u6765\u6e90\uff0c\u5e76\u4f7f\u8ffd\u8e2a\u653b\u51fb\u6e90\u53d8\u5f97\u66f4\u52a0\u56f0\u96be\u3002\u53e6\u4e00\u65b9\u9762\uff0c\u7ec4\u7ec7\u4f7f\u7528\u7684\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5e2e\u52a9\u8fc7\u6ee4\u548c\u76d1\u63a7\u4f20\u5165\u6d41\u91cf\uff0c\u4ece\u800c\u6709\u53ef\u80fd\u8bc6\u522b\u548c\u963b\u6b62\u4e0e Shamoon \u548c\u7c7b\u4f3c\u7f51\u7edc\u5a01\u80c1\u76f8\u5173\u7684\u6076\u610f\u8fde\u63a5\u3002<\/p>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173 Shamoon \u53ca\u5176\u5f71\u54cd\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ol>\n<li><a href=\"https:\/\/www.symantec.com\/blogs\/threat-intelligence\/shamoon-attacks\" target=\"_new\" rel=\"noopener nofollow\">\u8d5b\u95e8\u94c1\u514b\u5bf9 Shamoon \u7684\u5206\u6790<\/a><\/li>\n<li><a href=\"https:\/\/securelist.com\/the-return-of-shamoon\/77112\/\" target=\"_new\" rel=\"noopener nofollow\">\u5361\u5df4\u65af\u57fa\u5bf9 Shamoon 3 \u7684\u62a5\u544a<\/a><\/li>\n<li><a href=\"https:\/\/www.fireeye.com\/blog\/threat-research\/2017\/03\/shamoon-2-0-destroying-the-wiper-traces-and-bold-targeting.html\" target=\"_new\" rel=\"noopener nofollow\">FireEye \u5bf9 Shamoon 4 (StoneDrill) \u7684\u5206\u6790<\/a><\/li>\n<\/ol>\n<h2>\u7ed3\u8bba<\/h2>\n<p>Shamoon \u662f\u4e00\u79cd\u5f3a\u5927\u4e14\u5177\u6709\u7834\u574f\u6027\u7684\u7f51\u7edc\u6b66\u5668\uff0c\u7ed9\u76ee\u6807\u7ec4\u7ec7\u9020\u6210\u4e86\u91cd\u5927\u7834\u574f\u548c\u7ecf\u6d4e\u635f\u5931\u3002\u51ed\u501f\u5176\u6a21\u5757\u5316\u8bbe\u8ba1\u548c\u4e0d\u65ad\u53d1\u5c55\uff0c\u5b83\u4ecd\u7136\u662f\u7f51\u7edc\u5b89\u5168\u9886\u57df\u7684\u5de8\u5927\u5a01\u80c1\u3002\u7ec4\u7ec7\u5fc5\u987b\u4fdd\u6301\u8b66\u60d5\uff0c\u91c7\u7528\u5f3a\u5927\u7684\u5b89\u5168\u63aa\u65bd\u548c\u4e3b\u52a8\u65b9\u6cd5\u6765\u9632\u5fa1\u6f5c\u5728\u7684 Shamoon \u653b\u51fb\u548c\u5176\u4ed6\u65b0\u5174\u7f51\u7edc\u5a01\u80c1\u3002\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u901a\u8fc7\u5e2e\u52a9\u68c0\u6d4b\u548c\u9884\u9632\u6b64\u7c7b\u6076\u610f\u6d3b\u52a8\u6765\u4e3a\u8fd9\u9879\u5de5\u4f5c\u505a\u51fa\u8d21\u732e\u3002\u968f\u7740\u6280\u672f\u7684\u53d1\u5c55\uff0c\u7f51\u7edc\u5b89\u5168\u884c\u4e1a\u65e0\u7591\u5c06\u7ee7\u7eed\u52aa\u529b\uff0c\u9886\u5148\u7f51\u7edc\u653b\u51fb\u8005\u4e00\u6b65\uff0c\u4fdd\u62a4\u5173\u952e\u57fa\u7840\u8bbe\u65bd\u514d\u53d7\u6f5c\u5728\u7684 Shamoon \u653b\u51fb\u3002<\/p>","protected":false},"featured_media":478974,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-478973","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Shamoon: The Destructive Cyber Weapon<\/mark>","faq_items":[{"question":"What is Shamoon?","answer":"<p>Shamoon, also known as Disttrack, is a highly destructive cyber weapon in the form of malware. It gained infamy for its ability to cause severe damage by wiping data from infected systems, making them inoperable.<\/p>"},{"question":"When was Shamoon first discovered and what was its initial target?","answer":"<p>Shamoon was first discovered in August 2012 when it was used in an attack against Saudi Aramco, one of the world's largest oil companies. The malware aimed to cripple the company's systems by overwriting the master boot record (MBR) and wiping data.<\/p>"},{"question":"How does Shamoon operate?","answer":"<p>Shamoon works as a wiper malware, designed to erase data and disable targeted machines. It spreads through spear-phishing emails and lateral movements within the network. Once active, it overwrites files and replaces the MBR, rendering the system unusable.<\/p>"},{"question":"What are the key features of Shamoon?","answer":"<p>Shamoon's key features include its devastating impact on targeted systems, stealth evasion techniques, modular design allowing customization, and its focus on critical infrastructures.<\/p>"},{"question":"Are there different versions of Shamoon?","answer":"<p>Yes, there are different versions of Shamoon that have emerged over time. Some notable ones include Shamoon 1, Shamoon 2, Shamoon 3, Shamoon 4 (StoneDrill), and Shamoon 3+ (Greenbug), each with unique characteristics and capabilities.<\/p>"},{"question":"How can organizations defend against Shamoon attacks?","answer":"<p>Organizations can defend against Shamoon attacks by implementing robust cybersecurity measures, providing employee training to detect phishing attempts, and regularly backing up critical data securely.<\/p>"},{"question":"How can proxy servers be associated with Shamoon?","answer":"<p>Proxy servers can be used by attackers to obfuscate their origins when propagating Shamoon attacks. On the other hand, organizations can leverage proxy servers to filter and monitor incoming traffic, aiding in the detection and prevention of such cyber threats.<\/p>"},{"question":"Where can I find more information about Shamoon?","answer":"<p>For more in-depth information about Shamoon and its impact, you can refer to resources such as Symantec's analysis, Kaspersky's report, and FireEye's analysis. Links to these resources can be found in the \"Related links\" section above.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/478973\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/478974"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=478973"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}