ࡱ> 57234"bjbj7yy)8$3lkkkkkkk$Mnpk!kk / / /Rk /k / /j c$zh=aN$.gBkl03lpg q-qdzhzhqh /kk.X3lq? M:">40B>: ! 3 4> B5=45@=>W 4>:C<5=B0FVW "%'      '/ 73V4=> 7 ?@54<5B>< 70:C?V2;V:  021:2015 :>4 72260000-5  >A;C38, ?>2 O70=V 7 ?@>3@0<=8< 70157?5G5==O< (>A;C38 C AD5@V V=D>@<0B870FVW 7 ?>AB0G0==O ?@>3@0<=>3> 70157?5G5==O  ESET PROTECT 7 ;>:0;L=8< C?@02;V==O< 7V AB@>:>< 4VW =0 1 @V: 4;O >=>2;5==O B0 70E8ABC 2000 >1 T:BV2 =0 28:>=0==O ?. 4.5. 70240=L @53V>=0;L=>W ?@>3@0<8 V=D>@<0B870FVW  =V?@>?5B@>2I8=0: F8D@>20 B@0=AD>@<0FVO =0 2023 2025 @>:8) "%' !&$&/ 09<5=C20==O ?@>3@0<=>3> 70157?5G5==OV;L:VABL, >4.>A;C30 C AD5@V V=D>@<0B870FVW 7 ?>AB0G0==O ?@>3@0<=>3> 70157?5G5==O  ESET PROTECT Enterprise 7 ;>:0;L=8< C?@02;V==O< 7V AB@>:>< 4VW =0 1 @V: 4;O >=>2;5==O B0 70E8ABC 500 >1 T:BV21>A;C30 C AD5@V V=D>@<0B870FVW 7 ?>AB0G0==O ?@>3@0<=>3> 70157?5G5==O  ESET PROTECT Entry 7 ;>:0;L=8< C?@02;V==O< 7V AB@>:>< 4VW =0 1 @V: 4;O >=>2;5==O B0 70E8ABC 1 500 >1 T:BV21 ESET PROTECT Enterprise 7 ;>:0;L=8< C?@02;V==O< ?>28==> 2V4?>2V40B8 =0ABC?=8< >1>2 O7:>28< DC=:FV>=0;L=8< 28<>30<: 040==O 70E8ABC 2V4: 2V@CAV2, B@>O=AL:>3> ?@>3@0<=>3> 70157?5G5==O (40;V  ), @5:;0<=>3> , DVH8=3C, 0 B0:>6 H?83C=AL:>3> . 040==O 70E8ABC 2V4 H:V4;82>3>   ?52=>3> H:V4;82>3> :>4C, O:89 >40TBLAO =0 ?>G0B>: 01> :V=5FL :>4C =0O2=8E D09;V2 =0 :><? NB5@V. 8O2;5==O H:V4;82>3>  ?>28==> 74V9A=N20B8AO O4@>< 28O2;5==O 2 ?>T4=0==V 7 :><?>=5=B>< <0H8==>3> =02G0==O. 040==O 70E8ABC 2V4 ?>B5=FV9=> =51060=8E ?@>3@0<, O:8E =5 <>6=0 >4=>7=0G=> 2V4=5AB8 4> H:V4;82>3>  70 0=0;>3VTN 7 B0:8<8 157C<>2=> H:V4;828<8 ?@>3@0<0<8, O: 2V@CA8 01> B@>O=8, 0;5 FV ?@>3@0<8 <>6CBL V=AB0;N20B8 4>40B:>25 =51060=5 , 7<V=N20B8 =0;0HBC20==O A8AB5<8, 0 B0:>6 28:>=C20B8 =5>GV:C20=V 4VW 01> 4VW, =5 ?V4B25@465=V :>@8ABC20G5<. 040==O 70E8ABC 2V4 ?>B5=FV9=> =5157?5G=8E ?@>3@0<  @V7=><0=VB=>3> , I> <>65 28:>@8AB>2C20B8AO 4;O 7;>2<8A=8E FV;59, B0:8E O: =5A0=:FV>=>20=89 2V440;5=89 4>ABC?, 28:@045==O 01> 7;0< ?0@>;V2, :;02V0BC@=V H?83C=8 B>I>. 040==O 70E8ABC 2V4 ?V4>7@V;8E ?@>3@0<  ?@>3@0<, O:V AB8A=CBV B8<8 ?0:C20;L=8:0<8 01> ?@>B5:B>@0<8, I> G0AB> 28:>@8AB>2CNBL 7;>2<8A=8:8 70 4;O B>3>, I>1 70?>1V3B8 28O2;5==N H:V4;82>3> . 040==O 70E8ABC 2V4 =5157?5G=8E ?@>3@0< @CB:VBV2, O:V =040NBL 7;>2<8A=8:0< 7 =B5@=5BC =5>1<565=89 4>ABC? 4> A8AB5<8, 2>4=>G0A ?@8E>2CNG8 A2>N ?@8ACB=VABL 2 >?5@0FV9=V9 A8AB5<V. >6;82VABL 4;O @V7=8E :0B53>@V9 703@>7 =0;0HB>2C20B8 >:@5<V @V2=V @503C20==O O: 4;O 70E8ABC, B0: V 4;O 72VBC20==O. >6;82VABL @>18B8 28:;NG5==O 7V A:0=C20==O ?52=8E D09;V2, O:V =5 T H:V4;828<8, 0;5 A:0=C20==O O:8E <>65 A?@8G8=8B8 2V4E8;5==O 2 @>1>BV 01> 2?;820B8 =0 ?@>4C:B82=VABL A8AB5<8. >6;82VABL AB2>@N20B8 28:;NG5==O 4;O 7030;L=>A8AB5<=8E ?@>F5AV2 7 <5B>N ?>:@0I8B8 H284:VABL @>1>B8 A8AB5<=8E A;C61 B0 <V=V<V7C20B8 2B@CG0==O 2 ?@>F5A @>1>B8 !. >6;82VABL 74V9A=N20B8 ?5@52V@:C 7020=B06C20;L=8E A5:B>@V2 =0 =0O2=VABL 2V@CAV2 C 3>;>2=><C 7020=B06C20;L=><C 70?8AV, 2 B><C G8A;V C V=B5@D59AV UEFI. 0157?5G5==O 0=B82V@CA=>3> 70E8ABC 2 @568<V @50;L=>3> G0AC. 8:>@8AB0==O 52@8AB8G=8E B5E=>;>3V9 2;0A=>W @>7@>1:8 ?V4 G0A A:0=C20==O. =B82V@CA=5 A:0=C20==O 70 28<>3>N :>@8ABC20G0 01> 04<V=VAB@0B>@0 B0 73V4=> 3@0DV:C. >4C;L 70E8ABC 4>:C<5=BV2, I> 40T <>6;82VABL ?5@52V@OB8 <0:@>A8 MS Office =0 =0O2=VABL 7;>2<8A=>3> :>4C. >6;82VABL A:0=C20==O D09;V2 ?V4 G0A 70?CA:C !. 0O2=VABL 21C4>20=>3> V=AB@C<5=B0, I> >1'T4=CT 2 A>1V 45:V;L:0 CB8;VB 4;O >G8I5==O 70;8H:V2 A:;04=8E ABV9:8E 703@>7, B0:8E O: Conficker, Sirefef, Necurs B0 V=. !:0=C20==O :><?'NB5@0 C =50:B82=><C AB0=V. >6;82VABL 287=0G5==O 45B0;L=8E ?0@0<5B@V2 @>1>B8 0=B82V@CA=>3> A:0=5@0, B0:8E O:: 287=0G5==O >1 T:BV2 B0 <5B>4V2 A:0=C20==O, <>6;82VABL 2AB0=>2;5==O <0:A8<0;L=>3> @>7<V@C B0 G0AC A:0=C20==O D09;C, <0:A8<0;L=C 3;818=C 2:;045==O 0@EV2C B0 AB2>@5==O 28:;NG5=L. 8:>@8AB0==O 64-1VB>2>3> O4@0 4;O A:0=C20==O, I> 7<5=HCT =020=B065==O =0 A8AB5<C B0 4>72>;OT 7@>18B8 =09H284HV B0 =095D5:B82=VHV A:0=C20==O >6;82VABL 28:>@8AB0==O B5E=>;>3V9 <0H8==>3> =02G0==O 4;O 1V;LH ?>3;81;5=>3> 0=0;V7C :>4C 7 <5B>N 28O2;5==O 7;>2<8A=>W ?>254V=:8 B0 E0@0:B5@8AB8: 7;>2<8A=>3> . >4C;L 70E8ABC 2V4 5:A?;>9BV2 O:89 70157?5GCT 70E8AB 2V4 703@>7 740B=8E 28:>@8AB>2C20B8 C@07;82>ABV @V7=><0=VB=8E 4>40B:V2, B0:8E O: Java, Flash B>I>. >4C;L, O:89 3;81>:> 0=0;V7CT 70?CI5=V ?@>F5A8 B0 WE 4VO;L=VABL 2 D09;>2V9 A8AB5<V, I> 70157?5GCT 4>40B:>289 @V25=L 70E8ABC 2V4 ?@>3@0<-28<030GV2 (Ransomware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indows 01> 4><5=C. >6;82VABL 704020B8 G0A>2V V=B5@20;8, I> 4>72>;OT 1V;LH 3=CG:> =0;0HB>2C20B8 ?@028;0 :>=B@>;N ?@8AB@>W2. 0157?5G5==O 4>40B:>2>3> @V2=O 70E8ABC ?>HB>2>3> B@0DV:C =0 @>1>GV9 AB0=FVW H;OE>< V=B53@0FVW 4> ?>HB>2>3> :;VT=BC, 7 <>6;82VABN ?5@52V@:8 POP3, POP3S, SMTP, IMAP B0 IMAPS B0 ?5@52V@:8 ?>HB>28E 2:;045=L, >A>1;82> =0 B8E , I> B8<G0A>2> 01> ?>ABV9=> 7=0E>4OBLAO 70 <560<8 :>@?>@0B82=>W <5@56V. >6;82VABL 02B><0B8G=> 2840;OB8 01> ?5@5<VIC20B8 70@065=C ?>HBC 4> 2:070=>3> :0B0;>3C C ?>HB>2><C :;VT=BV. >6;82VABL 28:>@8AB>2C20B8 1V;V B0 G>@=V A?8A:8 A?0<-04@5A0BV2 O: :>@8ABC20;L=8FL:V (3=CG:0 ?5@A>=0;V70FVO V=B5;5:BC0;L=>3> A?0<-<>4C;N), B0: V 3;>10;L=V, V=D>@<0FVO 4> O:8E =04E>48BL 7 A5@25@V2 >=>2;5==O. 0157?5G5==O 4>40B:>2>3> @V2=O 70E8ABC V=B5@=5B-B@0DV:C H;OE>< ?5@52V@:8 HTTP, HTTPS B@0DV:C, I> 40T <>6;82VABL =5 BV;L:8 1;>:C20B8 D09;8, I> ?5@540NBLAO F8<8 ?@>B>:>;0<8, 0 9 1;>:C20B8 04@5A8 B0:8E =5157?5G=8E @5AC@AV2, O: DVH8=3>2V A09B8, A5@25@8 1>B=5BV2, :><0=4=V (C&C) A5@25@8 APT, 0 B0:>6 A5@25@8, I> @>7?>2AN46CNBL 703@>78 :;0AC ransomware. >6;82VABL AB2>@5==O A?8A:V2 701;>:>20=8E, 4>72>;5=8E 01> 28:;NG5=8E 7 ?5@52V@:8 URL-04@5A. >6;82VABL 1;>:C20B8 7020=B065==O 7 =B5@=5BC D09;V2 70 2:070=8< @>7H8@5==O<, >A>1;82> =0 B8E , I> B8<G0A>2> 01> ?>ABV9=> 7=0E>4OBLAO 70 <560<8 :>@?>@0B82=>W <5@56V. >6;82VABL ?5@52V@:8 ?@>B>:>;C SSL O: 2 02B><0B8G=><C, B0: V 2 V=B5@0:B82=><C @568<0E. 5@52V@:0 4V9A=>ABV B0 FV;VA=>ABV A5@B8DV:0BV2 SSL-B@0DV:C. >6;82VABL :5@C20B8 A?8A:0<8 4>2V@5=8E A5@B8DV:0BV2 B0 A5@B8DV:0BV2 28:;NG5=8E 7 ?5@52V@:8, 0 B0:>6 <>6;82VABL 281>@C 4VW ?@8 287=0G5==V A5@B8DV:0B0 =54VNG8<, =5287=0G5=8< 01> ?>H:>465=8<. >6;82VABL AB2>@5==O 28:;NG5=L 7 ?5@52V@:8 B@0DV:C 4;O >:@5<8E ?@>3@0< B0 >:@5<8E IP->1'T:BV2 (IP-04@5AV2, 4V0?07>=V2 IP-04@5AV2, ?V4<5@56). 0O2=VABL ?5@A>=0;L=>3> 1@0=4<0C5@0 4;O 74V9A=5==O <5@5652>W DV;LB@0FVW B0 70E8ABC O: 2V4 7>2=VH=VE, B0: V ;>:0;L=8E <5@56528E 0B0:. 0O2=VABL C ?5@A>=0;L=><C 1@0=4<0C5@C V=B5@0:B82=>3> @568<C, I> =040T 45B0;L=C V=D>@<0FVN ?@> =>25 =52V4><5 <5@56525 7'T4=0==O B0 40T <>6;82VABL =5 BV;L:8 AB2>@N20B8 =0  =>25 ?@028;> <5@5652>W DV;LB@0FVW 4;O 28O2;5=>3> 7'T4=0==O, 0 9 2:07C20B8 45B0;L=V =0;0HBC20==O 4;O =L>3>. 0O2=VABL C ?5@A>=0;L=><C 1@0=4<0C5@C @568<C =02G0==O, I> 40T <>6;82VABL 04<V=VAB@0B>@C 2V440;5=> =0;0HB>2C20B8 4>72V;L=V ?@028;0 4;O <5@56528E 4>40B:V2 B0 >1;04=0==O. 0O2=VABL @540:B>@0 ?@028;, I> 40T <>6;82VABL =5 BV;L:8 @5403C20B8 AB2>@5=V ?@028;0, 0 9 :5@C20B8 21C4>20=8<8 ?@028;0<8, O:8E 4>AB0B=L> 4;O ?5@28==>3> @5B5;L=>3> 70E8ABC 2V4 =5A0=:FV>=>20=8E <5@56528E 7'T4=0=L B0 ;>:0;L=8E <5@56528E 0B0:. >6;82VABL AB2>@N20B8 ?@028;0 <5@5652>W DV;LB@0FVW 4;O :>=:@5B=8E ?@>3@0< V A5@2VAV2. >6;82VABL AB2>@N20B8 4;O ?5@A>=0;L=>3> 1@0=4<0C5@C @V7=V ?@>DV;V, O:V <>6CBL 02B><0B8G=> ?5@5:;NG0B8AO, 2 70;56=>ABV 2V4 B>3>, 4> O:>W <5@56V ?V4:;NG5=> :><?'NB5@. >6;82VABL 28:>@8AB>2C20B8 C ?5@A>=0;L=><C 1@0=4<0C5@V 4>40B:>2C 02B5=B8DV:0FVN <5@56V 7 <5B>N 70?>1V30==O =5A0=:FV>=>20=>3> ?V4:;NG5==O  4> =52V4><8E =5157?5G=8E <5@56. 0O2=VABL 4>40B:>2>3> DC=:FV>=0;C ?5@A>=0;L=>3> 1@0=4<0C5@C, I> 4>72>;OT ?5@53;O40B8 2AN 45B0;L=C V=D>@<0FVN ?> 2AVE =0O2=8E <5@56528E 7'T4=0==OE, 0 B0:>6 ?>?5@5460B8 :>@8ABC20G0 ?@> ?V4:;NG5==O 4> =570E8I5=>W <5@56V Wi-Fi. >6;82VABL =0;0HBC20==O 4>40B:>28E ?0@0<5B@V2 <>4C;O A8AB5<8 28O2;5==O 2B>@3=5=L (IDS) 7 <5B>N 28O2;5==O @V7=8E B8?V2 <>6;828E <5@56528E 0B0: =0 :><? NB5@. >6;82VABL 28:>@8AB0==O B5E=>;>3VW, O:0 70157?5GCT 70E8AB 2V4 703@>7 B8?C "1>B=5B". 0E8AB C@07;82>AB59 <5@5652>3> ?@>B>:>;C, I> ?>:@0ICT 28O2;5==O 703@>7, O:V 28:>@8AB>2CNBL =54>;V:8 <5@56528E ?@>B>:>;V2, B0:8E O: SMB, RPC, RDP V B.4. 0O2=VABL C?@>20465=8E <5B>4V2 28O2;5==O @V7=><0=VB=8E 0B0:, I> =0<030NBLAO 28:>@8AB>2C20B8 2@07;82>ABV ?@>3@0<=>3> 70157?5G5==O B0 =040==O 4>:;04=VH>W V=D>@<0FVW ?@> V45=B8DV:0B>@8 CVE. >6;82VABL ?5@53;O40B8 =0  02B><0B8G=> 701;>:>20=V <5@5652V 7'T4=0==O B0, 70 =5>1EV4=VABN, B8<G0A>2> 4>72>;OB8 :>=:@5B=V 157?5G=V <5@5652V 7'T4=0==O. 0O2=VABL 4>40B:>2>3> DC=:FV>=0;C ?5@A>=0;L=>3> 1@0=4<0C5@C, I> 40T <>6;82VABL ?5@53;O40B8 =0  ?5@5;V: 701;>:>20=8E IP-04@5A, =040T V=D>@<0FVN ?@> ?@8G8=8 ?>B@0?;O==O 4> G>@=>3> A?8A:C, B0 4>72>;OT 7@>18B8 28:;NG5==O 4;O :>=:@5B=8E 157?5G=8E 04@5A. 0O2=VABL 4>40B:>2>3> DC=:FV>=0;C ?5@A>=0;L=>3> 1@0=4<0C5@C, O:89 740B5= 28O2;OB8 BV 7<V=8 2 <5@56528E ?@>3@0<0E, I> A?@8G8=8;8 =>2V =5A0=:FV>=>20=V <5@5652V 7'T4=0==O. $V;LB@0FVO V=B5@=5B-B@0DV:C. 0O2=VABL <>4C;O 251-:>=B@>;N, I> 40T <>6;82VABL >1<56C20B8 4>ABC? 4> ?52=8E :0B53>@V9 A09BV2. >6;82VABL AB2>@N20B8 ?@028;0 DV;LB@0FVW V=B5@=5B-B@0DV:C 4;O @V7=8E :>@8ABC20GV2 B0 3@C? ! Windows 01> 4><5=C. >6;82VABL 704020B8 G0A>2V V=B5@20;8, I> 4>72>;OT 1V;LH 3=CG:> =0;0HB>2C20B8 ?@028;0 251-DV;LB@0FVW. 53;0<5=B=5 >=>2;5==O 2V@CA=8E 107 =5 <5=H5 24 @07V2 70 4>1C. B@8<0==O >=>2;5==O :;VT=BV2 7 ;>:0;L=>3> AE>28I0 =0 A5@25@V, I> 4>72>;OT ?V4B@8<C20B8 0:BC0;L=VABL 0=B82V@CA=>3> 70E8ABC 2 70:@8B8E V7>;L>20=8E <5@560E, I> =5 <0NBL 4>ABC?C 4> <5@56V =B5@=5B. >6;82VABL AB2>@5==O 475@:0;0 >=>2;5=L =0 107V @VH5=L 4;O 70E8ABC :V=F528E B>G>:. >6;82VABL >B@8<C20B8 >=>2;5==O 2V@CA=8E 107 7 @575@2=8E 465@5;, O:I> >A=>2=5 465@5;> >=>2;5==O 1C45 =54>AO6=5. >6;82VABL 4;O ?>@B0B82=8E :><?'NB5@V2 >B@8<C20B8 >=>2;5==O 7 A5@25@V2 28@>1=8:0 >=-;09=, C @07V ?5@51C20==O ?>70 :>@?>@0B82=>N <5@565N. V4:0B >=>2;5=L 7 <>6;82VABN ?>25@=CB8AO 4> ?>?5@54=VE 25@AV9 107 2V@CA=8E A83=0BC@ V <>4C;V2 >=>2;5==O, B0 <>6;82VABN B8<G0A>2> ?@87C?8=8B8 >=>2;5==O 01> 2AB0=>2;N20B8 =>2V 2@CG=C. >6;82VABL >=>2;5==O C @568<V >B@8<0==O @53C;O@=8E, B5AB>28E B0 2V4:;045=8E >=>2;5=L. 0O2=VABL <5E0=V7<C :>=B@>;N 70 AB0=>< 157?5:8 B0 0:BC0;L=VABN >=>2;5=L !. 0O2=VABL V=AB@C<5=BC 4;O 4V03=>AB8:8 A8AB5<8, O:89 <0T <>6;82VABL AB2>@N20B8 7=V<:8 AB0=C >?5@0FV9=>W A8AB5<8 4;O ?>40;LH>3> 3;81>:> 0=0;V7C @V7=><0=VB=8E 0A?5:BV2 @>1>B8 >?5@0FV9=>W A8AB5<8, 2:;NG0NG8 70?CI5=V ?@>F5A8, :>=B5=B @5TAB@C, V=AB0;L>20=5 , <5@5652V 7'T4=0==O. >6;82VABL 287=0G5==O @V2=O :@8B8G=>ABV 7=0G5=L @V7=><0=VB=8E ?0@0<5B@V2 !, 7 <5B>N 28O2;5==O =5A0=:FV>=>20=8E B0 =5157?5G=8E 7<V= C !. >6;82VABL ?>@V2=N20B8 @V7=V 7=V<:8 AB0=C A8AB5<8 7 <5B>N 28O2;5==O 7<V=, O:V 2V41C;8AL 2 A8AB5<V 70 287=0G5=89 G0A. >6;82VABL AB2>@N20B8 B0 2V440;5=> 28:>=C20B8 A:@8?B8, I> 40ABL 7<>3C =0 2V440;5=><C  7C?8=OB8 70?CI5=V ?@>F5A8 B0 A;C618, 2840;OB8 3V;:8 @5TAB@C, 1;>:C20B8 <5@5652V 7'T4=0==O. >:0;L=5 715@V30==O 6C@=0;V2 =0 @>1>G8E AB0=FVOE. 0O2=VABL ?;0=C20;L=8:0 70240=L, O:89 40ABL <>6;82VABL AB2>@N20B8 70?;0=>20=V 70240==O, A5@54 O:8E: 70?CA: 7>2=VH=L>W ?@>3@0<8, ?5@52V@:0 D09;V2 ?V4 G0A 70?CA:C A8AB5<8, AB2>@5==O 7=V<:0 AB0=C A8AB5<8, ?5@52V@:0 :><? NB5@0, >=>2;5==O 2V@CA=8E 107 B0 <>4C;V2 ?@>3@0<8. >6;82VABL ?;0=C20==O 70240=L, O:V 70?CA:0B8<CBLAO >4=>@07>2>, ?5@V>48G=>, 0 B0:>6 70 C<>28 28=8:=5==O :>=:@5B=8E ?>4V9. >6;82VABL AB2>@5==O C ?;0=C20;L=8:C 45:V;L:>E >4=>B8?=8E 70240=L 7 @V7=>N ?5@V>48G=VABN 01> @V7=8<8 C<>20<8 70?CA:C. >6;82VABL AB2>@5==O 7020=B06C20;L=>3> 48A:C O: =0 CD-, B0: V =0 USB-=>AVOE 7 2AB0=>2;5=8< 0=B82V@CA=8< ?@>4C:B><. >6;82VABL 70E8ABC ?0@>;5< ?0@0<5B@V2 @VH5==O 4;O 70E8ABC :V=F52>W B>G:8. 0O2=VABL @568<C ?5@5287=0G5==O ?>;VB8:8, I> 40T A8AB5<=><C 04<V=VAB@0B>@C B8<G0A>2C <>6;82VABL 7<V=N20B8 =0  BV =0;0HBC20==O 0=B82V@CA=>3> , I> ?@87=0G0NBLAO ?>;VB8:>N, B0 =54>AO6=V 4;O @5403C20==O, 7 <5B>N 3=CG:>3> =0;0HBC20==O 0=B82V@CA=>3>  C A?5F8DVG=><C A5@54>28IV. @0DVG=89 V=B5@D59A, AC<VA=89 V7 A5=A>@=8< 5:@0=>< 28A>:>W @>74V;L=>W 740B=>ABV. >6;82VABL 3=CG:>3> =0;0HB>2C20==O A?>2VI5=L B0 ?>2V4><;5=L ?@> ?>4VW =0 @>1>G><C AB>;V :>@8ABC20G0. >6;82VABL 2V440;5=>3> 2AB0=>2;5==O =0 :;VT=BAL:C @>1>GC AB0=FVN. >6;82VABL 28:>@8AB0==O 0=B82V@CA=8E ?@>4C:BV2 70 C<>28, I> C?@02;V==O =8<8 1C45 74V9A=N20B8AO VA=CNG8<8 =0O2=8<8 A5@25@0<8 04<V=VAB@C20==O, O:V =0;0HB>20=> =0 F5=B@0;V7>20=89 <>=VB>@8=3 B0 C?@02;V==O 2AV<0 @>730;C65=8<8 A8AB5<0<8 0=B82V@CA=>3> 70E8ABC V=D@0AB@C:BC@8 @53V>=0;L=8E B0 F5=B@0;L=>3> ?V4@>74V;V2. >6;82VABL :@V< >A=>2=>3> 2:070B8 @575@2=V A5@25@8 04<V=VAB@C20==O. 0O2=VABL 1030B><>2=>3> V=AB0;OB>@0, O:89 <VAB8BL 2 A>1V 2 B><C G8A;V C:@0W=AL:C <>2C. =25=B0@870FVO >1;04=0==O, I> 2AB0=>2;5=> =0 @>1>G8E AB0=FVOE B0 A5@25@0E ?V4 C?@02;V==O< Windows, macOS B0 Linux. =25=B0@870FVO , I> 2AB0=>2;5=> =0 @>1>G8E AB0=FVOE B0 A5@25@0E ?V4 C?@02;V==O< Windows, macOS B0 Linux. V440;5=0 V=AB0;OFVO 0=B82V@CA=>3>  4;O ! Windows, Linux B0 Mac =0 :V;L:0 :V=F528E B>G>: >4=>G0A=>. V440;5=0 V=AB0;OFVO :>@8ABC20;L=8FL:>3> . >6;82VABL 2V440;5=>3> 2840;5==O 2AB0=>2;5=>3> :>@8ABC20;L=8FL:>3> . V440;5=5 2840;5==O 0=B82V@CA=>3>  4;O ! Windows, Linux B0 Mac. >6;82VABL 28:>=C20B8 70 4>?><>3>N V=AB@C<5=BC 2V440;5=>3> C?@02;V==O 4>40B:>2V <5@5652V 4VW, B0:V O:: 7025@H5==O @>1>B8 B0 ?5@57020=B065==O, 2V4?@02:0 A83=0;C ?@>1C465==O :><?'NB5@0, 2V4?@02:0 ?>2V4><;5=L, 28:>=0==O :>=:@5B=8E V=AB@C:FV9 :><0=4=>3> @O4:0 =0 :;VT=BAL:><C :><?'NB5@V, AB0@B >=>2;5==O >?5@0FV9=>W A8AB5<8 :;VT=BAL:>3> :><?'NB5@0. >6;82VABL 28:>@8AB>2C20B8 42>D0:B>@=C 0CB5=B8DV:0FVN 4;O >1;V:>28E 70?8AV2 04<V=VAB@0B>@V2, I> 40T <>6;82VABL 70?>1V3B8 =5A0=:FV>=>20==><C ?V4:;NG5==N 4> A5@25@C F5=B@0;V7>20=>3> C?@02;V==O. >6;82VABL =0;0HBC20==O 02B><0B8G=>3> @>7?>4V;C :;VT=BV2 ?> 48=0<VG=8E 3@C?0E 70 1030BL<0 :@8B5@VO<8, 7 =0ABC?=8< ?@87=0G5==O< 2V4?>2V4=8E ?>;VB8: 157?5:8, 0 B0:>6 70?CA:>< =5>1EV4=8E 70240=L. >6;82VABL AB2>@5==O 475@:0;0 >=>2;5=L =0 107V AB>@>==VE HTTP-A5@25@V2. >6;82VABL 2V4A;V4:>2C20B8 2A5 2AB0=>2;5=5 =0 @>1>GV9 AB0=FVW , 0 B0:>6 2840;OB8 2AB0=>2;5=5  70 281>@><. >6;82VABL 450:B82C20B8 ;VF5=7VN 0=B82V@CA=8E ?@>4C:BV2 =02VBL =0 @>1>G8E AB0=FVO 4> O:8E =5<0T DV78G=>3> 01> 2V440;5=>3> 4>ABC?C. 0O2=VABL 02B><0B8G=>3> >=>2;5==O 035=BC C?@02;V==O, I> 40T <>6;82VABL 157 2B@CG0==O 04<V=VAB@0B>@V2 28:>@8AB>2C20B8 0:BC0;L=V 25@AVW. 0O2=VABL <5E0=V7<C @>7?>4V;C 02B><0B8G=>3> ?@>F5AC >=>2;5==O, I> 4>72>;OT 7=878B8 =020=B065==O =0 <5@56C B0 :><?'NB5@8 2 FV;><C. >6;82VABL 2AB0=>2;5==O 035=BC C?@02;V==O =0 ARM64 ?@>F5A>@0E. 0O2=VABL DC=:FV>=0;C AB2>@5==O ?;>I04>: 2V4?>2V4=> 4> DV;V9 :><?0=VW, I> 4>72>;OT =07=0G8B8 ?52=C G0AB8=C ;VF5=7VW >:@5<8< DV;VO<. 0O2=VABL DC=:FV>=0;C 287=0G5==O 04<V=VAB@0B>@0 ?;>I04:8 01> DV;VW 7 2V4?>2V4=>N G0AB8=>N ;VF5=7VW. !C<VA=VABL 7 VA=CNG8< A5@25@>< F5=B@0;V7>20=>3> :5@C20==O B0 0:B820FVO 0=B82V@CA=>3>  H;OE>< 4>4020==O :;NG0 4> VA=CNG>3> A5@25@0 :5@C20==O. ;O ?V4B25@465==O 2V4?>2V4=>ABV ?@>?>78FVW #G0A=8:0 FV9 E0@0:B5@8AB8FV B0 <>6;82>ABV ?5@52V@:8 2V4?>2V4=>ABV 70?@>?>=>20=>3> @VH5==O 70O2;5=8< B5E=VG=8< 28<>30<, =0 28<>3C 0<>2=8:0, #G0A=8: =040T B5AB>289 :;NG B@820;VABN =5 <5=H5 5 4=V2 4;O 9>3> 4>4020==O 4> VA=CNG>3> A5@25@0 :5@C20==O. >6;82VABL 28:>@8AB0==O @VH5==O 70 C<>28, I> C?@02;V==O =8<8 1C45 74V9A=N20B8AO A5@25@0<8 04<V=VAB@C20==O VA=CNG>3> 0=B82V@CA=>3> @VH5==O, I> =0;0HB>20=> =0 F5=B@0;V7>20=89 <>=VB>@8=3 B0 C?@02;V==O 2AV<0 @>730;C65=8<8 A8AB5<0<8 0=B82V@CA=>3> 70E8ABC. 0O2=VABL ?0=5;V <>=VB>@8=3C 4;O 2V4A;V4:>2C20==O 0:BC0;L=>W V=D>@<0FVW ?@> 0=><0;L=V ?>4VW I> 28=8:;8 2 :>@?>@0B82=V9 <5@56V. ( ?C=:BC 106 ?> ?C=:B 139 ?5@5;VG5=V 28<>38 4;O 70157?5G5==O DC=:FV9 @>7H8@5=>3> 28O2;5==O B0 @503C20==O =0 V=F845=B8 (XDR)). B@8<0==O ?>?5@5465=L ?@> 0=><0;L=V ?>4VW I> 28=8:;8 2 @>1>BV  =0 >A=>2V ?@028; !?8A>: ?@028; 70 70<>2GC20==O< B0 <>6;82VABL AB2>@5==O 2;0A=8E ?@028; I> E0@0:B5@87CNBL ?>254V=:C  O: 0=><0;L=5 2B><0B8G=0 :;0A8DV:0FVO ?>?5@5465=L 70 :@8B8G=VABN, I> 4>72>;OT H284:> 287=0G0B8 B0 @503C20B8 =0 :@8B8G=V ?>4VW. >6;82VABL 2AB0=>2;N20B8 ?@V>@8B5B 4;O ?>?5@5465=L 4;O 1V;LH 3=CG:>3> A>@BC20==O B0 DV;LB@0FVW ?>4V9. >6;82VABL 3@C?C20==O ?>?5@5465=L 70 @V7=8<8 :@8B5@VO<8, B0:8<8 O:: B8?, :><? NB5@, ?@028;>, ?@>F5A, D09;. >6;82VABL DV:AC20B8 V=F845=B8 V=D>@<0FV9=>W 157?5:8 H;OE>< AB2>@5==O B@82>6=8E 28O2;5=L, O:V 1C4CBL <VAB8B8 O: 72545=C V=D>@<0FVN ?@> ?>4VN (:>;8 V 45 F5 AB0;>AO (:><?'NB5@), 2V4 O:>3> :>@8ABC20G0, O:89 28:>=C20=89 D09; 70?CA:02AO, =02VBL O:89 :>=:@5B=89 ?@>F5A 28:;8:02 70?CA:), B0: V 45B0;L=C V=D>@<0FVN ?> :>6=><C V7 ?5@5@0E>20=8E ?0@0<5B@V2. 0O2=VABL 2 :>6=><C B@82>6=><C 28O2;5==V A?5FV0;L=>3> V=D>@<0FV9=>3> @>74V;C, 2 O:><C 1C45 =040=> 45B0;L=89 >?8A ?>4VW, I> 28:;8:0;0 A?@0FN20==O ?@028;0, ?5@5;V: <>6;828E ?@8G8=, <>6;82V @878:8 B0 =0A;V4:8 B0 @5:><5=40FVW AB>A>2=> =5>1EV4=8E 4V9 4;O ?>40;LH>3> 0=0;V7C V=F845=BC. >6;82VABL =040B8, C @07V 28O2;5==O :@8B8G=8E V=F845=BV2, V=D>@<0FVN ?@> ?5@5;V: 2V4><8E B5E=V: B0 70A>1V2, O:V @0=VH5 28:>@8AB>2C20;8 7;>2<8A=8:8 2 ?>4V1=8E A8BC0FVOE 7 ?>A8;0==O<8 =0 2V4?>2V4=V @>74V;8 @5AC@AC MITRE ATT&CK, 45 <>6=0 >7=09><8B8AL 7 1V;LH 45B0;L=>N V=D>@<0FVTN ?@> 4VW 7;>2<8A=8:V2. 0O2=VABL V=B5@0:B82=>3> V=B5@D59AC B@82>6=8E 28O2;5=L, I> 4>72>;OT ?>3;81;N20B8AL C 1V;LH 45B0;L=89 @>73;O4 V=F845=BC V=D>@<0FV9=>W 157?5:8 4;O >A=>2=8E ?0@0<5B@V2 V7 =0O2=8E C 72545=><C B@82>6=><C 28O2;5==V. 040==O 45B0;L=>W V=D>@<0FVW ?@> ?@>F5A, I> 28:;8:02 A?@0FN20==O, B0:>W O: 45@52> ?@>F5AV2, 7<V=8 2 D09;>2V9 A8AB5<V B0 2 @5TAB@V !, <5@56520 0:B82=VABL, 7'T4=0==O 7 URL-04@5A0<8, 4>40B:>2> 7020=B065=V 28:>=C20=V D09;8, 0 B0:>6 =0945B0;L=VH89 6C@=0; ?>4V9 2 !. >6;82VABL AB2>@5==O 45B0;V7>20=8E 28:;NG5=L 4;O >:@5<8E ?>4V9 I> ?>28==V 2:;NG0B8 V=D>@<0FVN ?@> :>=B@>;L=V AC<8 28:>=C20=8E D09;V2, WE <VAF57=0E>465==O, F8D@>289 ?V4?8A B0 V=HC V=D>@<0FVN. >6;82VABL 4>4020==O ?V4>7@V;8E D09;V2 EXE/DLL ?> :>=B@>;L=V9 AC<V 4> ?5@5;V:C 701;>:>20=8E, I> ?@872545 4> 1;>:C20==O WE =0 @>1>G8E AB0=FVOE V A5@25@0E. >6;82VABL 4>4020==O ;N18E :>=B@>;L=8E AC< D09;V2 EXE/DLL 4> ?5@5;V:C 701;>:>20=8E, I> ?@872545 4> 1;>:C20==O WE =0 @>1>G8E AB0=FVOE V A5@25@0E. >6;82VABL 2V440;5=> 74V9A=N20B8 2840;5==O B0 ?5@5<VI5==O 4> :0@0=B8=C ;N18E ?V4>7@V;8E D09;V2 EXE/DLL. >6;82VABL 7020=B065==O ?V4>7@V;8E D09;V2 7 :V=F528E B>G>: 4;O ?>40;LH>3> 0=0;V7C. >6;82VABL 7020=B065==O ?V4>7@V;8E D09;V2-AF5=0@VW2 (A:@8?BV2) 7 :V=F528E B>G>: 4;O ?>40;LH>3> 0=0;V7C. !B2>@5==O ?5@5;V:C 2AVE EXE/DLL D09;V2 =0 @>1>G8E AB0=FVOE V A5@25@0E 7 <5B>N ?>40;LH>3> 0=0;V7C. >6;82VABL AB2>@5==O 1V;8E/G>@=8E A?8A:V2 EXE/DLL D09;V2. >6;82VABL ?5@53;O4C 45B0;L=>W V=D>@<0FVW ?@> EXE/DLL D09;8, ?>?5@5465==O 7 =8< ?>2 O70=V, AB0B8AB8:C 28:>@8AB0==O, 7<V=8 D09;V2, @5TAB@C, AB2>@5=V <5@5652V ?V4:;NG5==O. !?8A>: 701;>:>20=8E EXE/DLL D09;V2 7 <>6;82VABN WE 2V4=>2;5==O, 2840;5==O B0 7020=B065==O 4;O 1V;LH 45B0;L=>3> 0=0;V7C. 2B><0B8G=0 :;0A8DV:0FVO EXE/DLL D09;V2 70 :@8B8G=VABN, I> 4>72>;OT H284:> 287=0G0B8 B0 @503C20B8 =0 0=><0;L=C ?>254V=:C D09;V2. >6;82VABL ?>7=0G0B8 EXE/DLL D09;8 O: 4>2V@5==V 01> 157?5G=V. >6;82VABL ?>7=0G0B8 EXE/DLL D09;8 O: ?5@52V@5=V 01> ?@>0=0;V7>20=V. >6;82VABL 74V9A=5==O ?@O<> 7 :>=A>;V <8BBT2>3> ?>HC:C 4>40B:>2>W V=D>@<0FVW ?@> D09;8 =0 AB>@>==VE @5AC@A0E, B0:8E O: Virus Total B>I>. !B2>@5==O A?8A:C 2AVE AF5=0@VW2, A:@8?BV2, I> 28:>=C20;8AO =0 @>1>G8E AB0=FVOE V A5@25@0E >6;82VABL 3@C?C20==O A:@8?BV2 70 @V7=8<8 :@8B5@VO<8, B0:8<8 O:: 10BL:V2AL:89 ?@>F5A, ?5@H89 4>GV@=V9 ?@>F5A, :><0=4=89 @O4>:. >6;82VABL ?>7=0G0B8 ?5@52V@5=V A:@8?B8 O: 4>2V@5==V 01> 157?5G=V. >6;82VABL >B@8<0==O 45B0;L=>W V=D>@<0FVW ?@> BV;> A:@8?B0, 704VO=V EXE/DLL D09;8 V ?@>F5A8, A?8A>: AB2>@5=8E 4>GV@=VE ?@>F5AV2, 7<V=8 D09;V2, @5TAB@C, AB2>@5=V <5@5652V ?V4:;NG5==O 2B><0B8G=0 :;0A8DV:0FVO A:@8?BV2 70 :@8B8G=VABN, I> 4>72>;OT H284:> 287=0G0B8 B0 @503C20B8 =0 0=><0;L=C ?>254V=:C. $>@<C20==O A?8A:C :><? NB5@V2 7 45B0;L=>N V=D>@<0FVTN ?@> 4VW, EXE/DLL D09;8, A:@8?B8. >6;82VABL 2V440;5=>3> ?5@57020=B065==O @>1>G>W AB0=FVW 01> WW ?>2=>3> 2V4:;NG5==O >6;82VABL <8BBT2>3> 70?CA:C 3;81>:>3> 0=B82V@CA=>3> A:0=C20==O =0 2V440;5=V9 @>1>GV9 AB0=FVW. >6;82VABL <8BBT2>3> AB2>@5==O =0 2V440;5=V9 @>1>GV9 AB0=FVW 7=V<:C AB0=C >?5@0FV9=>W A8AB5<8, I> 70DV:ACT V=D>@<0FVN ?@> 2AV ?>B>G=V 70?CI5=V ?@>F5A8, <5@5652V 7'T4=0==O, 0 B0:>6 =040ABL V=D>@<0FVN ?@> :@8B8G=89 :>=B5=B @5TAB@C !, 70240==O 2 ?;0=C20;L=8:C !, :>@8ABC20GV2 ! B0 WE ?@82V;5W, 2<VAB :@8B8G=8E D09;V2 !, B0:8E O: "hosts", "win.ini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icrosoft Win 10, 8.1, 8; Microsoft Win. Server 2012R2, 2012, 2008R2, 2008, Microsoft Win. Server Core 2012R2, 2012, 2008R2, 2008 Core; Linux Kernel 25@AVW 2.6.x B0 28I5; FreeBSD 25@AVW 9.x (x86). #G0A=8: ?>28=5= =040B8 0<>2=8:C :>?VW 4VNG8E :A?5@B=8E 28A=>2:V2 (=0 @VH5==O 01> =0 9>3> A:;04>2V, O:V 1C4CBL 28:>@8AB>2C20B8AO 0<>2=8:><, 73V4=> B5E=VG=8E 28<>3, 28:;045=8E 28I5), 70@5TAB@>20=8E 2 4<V=VAB@0FVW 5@602=>W A;C618 A?5FV0;L=>3> 72 O7:C B0 70E8ABC V=D>@<0FVW #:@0W=8 I>4> 2V4?>2V4=>ABV 28<>30< =>@<0B82=8E 4>:C<5=BV2 A8AB5<8 B5E=VG=>3> 70E8ABC V=D>@<0FVW 2 #:@0W=V. ESET PROTECT Entry 7 ;>:0;L=8< C?@02;V==O< ?>28==> 2V4?>2V40B8 =0ABC?=8< >1>2 O7:>28< DC=:FV>=0;L=8< 28<>30<: 040==O 70E8ABC 2V4: 2V@CAV2, B@>O=AL:>3> , @5:;0<=>3> , DVH8=3C, 0 B0:>6 H?83C=AL:>3> . 040==O 70E8ABC 2V4 H:V4;82>3>  - ?52=>3> H:V4;82>3> :>4C, O:89 4>40TBLAO =0 ?>G0B>: 01> :V=5FL :>4C =0O2=8E D09;V2 =0 :><? NB5@V. 8O2;5==O H:V4;82>3>  ?>28==> 74V9A=N20B8AO O4@>< 28O2;5==O 2 ?>T4=0==V 7 :><?>=5=B>< <0H8==>3> =02G0==O. 040==O 70E8ABC 2V4 ?>B5=FV9=> =51060=8E ?@>3@0<, O:8E =5 <>6=0 >4=>7=0G=> 2V4=5AB8 4> H:V4;82>3>  70 0=0;>3VTN 7 B0:8<8 157C<>2=> H:V4;828<8 ?@>3@0<0<8, O: 2V@CA8 01> B@>O=8, 0;5 FV ?@>3@0<8 <>6CBL V=AB0;N20B8 4>40B:>25 =51060=5 , 7<V=N20B8 ?>254V=:C 01> =0;0HBC20==O F8D@>2>3> ?@8AB@>N, 0 B0:>6 28:>=C20B8 =5>GV:C20=V 4;O :>@8ABC20G0 4VW 01> =5 ?V4B25@465=V =8<. 040==O 70E8ABC 2V4 ?>B5=FV9=> =5157?5G=8E ?@>3@0<8 - :><5@FV9=>3> ;530;L=>3> , I> <>65 28:>@8AB>2C20B8AO 4;O 7;>2<8A=8E FV;59, B0:8E O: =5A0=:FV>=>20=89 2V440;5=89 4>ABC?, 28:@045==O 01> 7;0< ?0@>;V2, :;02V0BC@=V H?83C=8 B>I>. 040==O 70E8ABC 2V4 ?V4>7@V;8E ?@>3@0<  ?@>3@0<, O:V AB8A=CBV ?0:C20;L=8:0<8 01> ?@>B5:B>@0<8, I> G0AB> 28:>@8AB>2CNBL 7;>2<8A=8:8 70 4;O B>3>, I>1 70?>1V3B8 28O2;5==N H:V4;82>3> ?@>3@0<=>3> 70157?5G5==O. 040==O 70E8ABC 2V4 =5157?5G=8E ?@>3@0< @CB:VBV2, O:V =040NBL 7;>2<8A=8:0< 7 =B5@=5BC =5>1<565=89 4>ABC? 4> A8AB5<8, 2>4=>G0A ?@8E>2CNG8 A2>N ?@8ACB=VABL 2 >?5@0FV9=V9 A8AB5<V. >6;82VABL 4;O @V7=8E :0B53>@V9 703@>7 =0;0HB>2C20B8 >:@5<V @V2=V @503C20==O O: 4;O 70E8ABC, B0: V 4;O 72VBC20==O. >6;82VABL @>18B8 28:;NG5==O 7V A:0=C20==O ?52=8E D09;V2, O:V =5 T H:V4;828<8, 0;5 A:0=C20==O O:8E <>65 A?@8G8=8B8 2V4E8;5==O 2 @>1>BV 01> 2?;820B8 =0 ?@>4C:B82=VABL A8AB5<8. >6;82VABL AB2>@N20B8 28:;NG5==O 4;O 7030;L=>A8AB5<=8E ?@>F5AV2 7 <5B>N ?>:@0I8B8 H284:VABL @>1>B8 A8AB5<=8E A;C61 B0 <V=V<V7C20B8 2B@CG0==O 2 ?@>F5A @>1>B8 !. >6;82VABL 74V9A=N20B8 ?5@52V@:C 7020=B06C20;L=8E A5:B>@V2 =0 =0O2=VABL 2V@CAV2 C 3>;>2=><C 7020=B06C20;L=><C 70?8AV, 2 B><C G8A;V C V=B5@D59AV UEFI. 0157?5G5==O 0=B82V@CA=>3> 70E8ABC 2 @568<V @50;L=>3> G0AC. 8:>@8AB0==O 52@8AB8G=8E B5E=>;>3V9 2;0A=>W @>7@>1:8 ?V4 G0A A:0=C20==O. =B82V@CA=5 A:0=C20==O 70 28<>3>N :>@8ABC20G0 01> 04<V=VAB@0B>@0 B0 73V4=> 3@0DV:C. >4C;L 70E8ABC 4>:C<5=BV2, I> 40T <>6;82VABL ?5@52V@OB8 <0:@>A8 Microsoft Office =0 =0O2=VABL 7;>2<8A=>3> :>4C. >6;82VABL A:0=C20==O D09;V2 ?V4 G0A 70?CA:C !. LNt ŮhV?(,h[h[5B*CJPJaJmH"phsH",h[h[5B*CJPJaJmH"phsH"#h>h &M5CJPJaJmH"sH",hhh5B*CJPJaJmH"phsH",h[h[5B*CJPJaJmH"phsH"/hdVhh5B*CJPJ\aJmH"phsH",hdVhh5B*CJPJaJmH"phsH"h2!J5CJaJmH"sH",hnh|a@B*CJ\aJmH"phsH",hnh8J@B*CJ\aJmH"phsH" LNn J h $$*$1$7$Ifa$gd[$a$gd[$a$gd &M$$$d-D9D@&M a$gd[m$ $da$gdh$a$gd_ $xa$gd_m$ J f h j @DFH涟qV͈Ͷ8;h[h[5>*B* CJKHPJaJmH"nH"ph sH"tH"5h[h[@B*CJPJaJmH nHphsH tH,h[h[5B*CJPJaJmH phsH ,h[h[5B*CJPJaJmH"phsH",h/Bh/B5B*CJPJaJmH"phsH",h[h[CJOJQJaJmH nH sH tH 1h[h[B*CJPJaJmH"nHphsH"tH1h[h[B*CJPJaJmH"nHphsH"tHh j ug $$*$Ifa$gd[ $$*$Ifa$gd/B{kd$$If(40u%0B%44 (af4ytEd @D{m $$*$Ifa$gd[ $*$Ifgd[xkd$$If(0u%0B%44 (aytEdDFH.0t~kLLLLL$ & F d*$^`a$gd[m$$ *$`a$gd[$a$gd[xkd $$If(0u%0B%44 (aytEdH.P<T=w"x(BT«īƫʫ̫Ыҫ֫ثëÔؒ||iSKGKGKGKh]Vjh]VU+h h.5B*CJ]aJmH"phsH"%h 5B*CJ]aJmH"phsH"+h[h[5CJPJaJmH"nH sH"tH U,h[h[5B*CJPJaJmH"phsH".h[h[6CJPJ]aJmH"nH"sH"tH"(h[h[CJPJaJmH"nH"sH"tH"$h[h[CJaJmH"nH sH"tH 'h[h[5CJaJmH"nH sH"tH R8| !!*##%&')P*+.- ../01t23$ & F d*$^`a$gd[m$3`4679;<=>?@ABD$FHHIPKMHNN PQRTV$ & F d*$^`a$gd[m$VHVWWX.YZV[6\H]^`__b2cdeeghijVkm$nnro$ & F d*$^`a$gd[m$roqfrsstuuvwyB{|T}0~6DHƁ΂rV$ & F d*$^`a$gd[m$V"ޓ6ܗh4Ƞ<NLҨ>&$ & F d*$^`a$gd[m$&ԫz8hVTֹvX$$ h$ & F7d^`7a$gd[m$$ *$`a$gd[ $*$a$gd[m$$ & F d*$^`a$gd[m$Nh@Jj`<`V$ & F7d^`7a$gd[m$0O2=VABL 21C4>20=>3> V=AB@C<5=B0, I> >1'T4=CT 2 A>1V 45:V;L:0 CB8;VB 4;O >G8I5==O 70;8H:V2 A:;04=8E ABV9:8E 703@>7, B0:8E O: Conficker, Sirefef, Necurs B0 V=. !:0=C20==O :><?'NB5@0 C =50:B82=><C AB0=V. >6;82VABL 287=0G5==O 45B0;L=8E ?0@0<5B@V2 @>1>B8 0=B82V@CA=>3> A:0=5@0, B0:8E O:: 287=0G5==O >1 T:BV2 B0 <5B>4V2 A:0=C20==O, <>6;82VABL 2AB0=>2;5==O <0:A8<0;L=>3> @>7<V@C B0 G0AC A:0=C20==O D09;C, <0:A8<0;L=C 3;818=C 2:;045==O 0@EV2C B0 AB2>@5==O 28:;NG5=L. 0E8AB 2V4 5:A?;>9BV2 O:89 70157?5GCT 70E8AB 2V4 703@>7 740B=8E 28:>@8AB>2C20B8 C@07;82>ABV Java, Flash B0 V=H8E 4>40B:V2. >4C;L, O:89 3;81>:> 0=0;V7CT 70?CI5=V ?@>F5A8 B0 WE 4VO;L=VABL 2 D09;>2V9 A8AB5<V, I> 70157?5GCT 4>40B:>289 @V25=L 70E8ABC 2V4 ?@>3@0<-28<030GV2 (Ransomeware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indows 01> 4><5=C. >6;82VABL 704020B8 G0A>2V V=B5@20;8, I> 4>72>;OT 1V;LH 3=CG:> =0;0HB>2C20B8 ?@028;0 :>=B@>;N ?@8AB@>W2. 0157?5G5==O 4>40B:>2>3> @V2=O 70E8ABC ?>HB>2>3> B@0DV:C =0 @>1>GV9 AB0=FVW H;OE>< V=B53@0FVW 4> ?>HB>2>3> :;VT=BC, 7 <>6;82VABN ?5@52V@:8 POP3, POP3S, SMTP, IMAP B0 IMAPS B0 ?5@52V@:8 ?>HB>28E 2:;045=L, >A>1;82> =0 B8E , I> B8<G0A>2> 01> ?>ABV9=> 7=0E>4OBLAO 70 <560<8 :>@?>@0B82=>W <5@56V. >6;82VABL 02B><0B8G=> 2840;OB8 01> ?5@5<VIC20B8 70@065=C ?>HBC 4> 2:070=>3> :0B0;>3C C ?>HB>2><C :;VT=BV. 0O2=VABL <>4C;O 70E8ABC 2V4 A?0<C 2;0A=>W @>7@>1:8 7 <>6;82VABN V=B53@0FVW 4> ?>HB>2>3> :;VT=BC, I> 70157?5GCT 4>40B:>289 @V25=L 70E8ABC 2V4 A?0<C, >A>1;82> =0 B8E , I> B8<G0A>2> 01> ?>ABV9=> 7=0E>4OBLAO 70 <560<8 :>@?>@0B82=>W <5@56V. >6;82VABL 28:>@8AB>2C20B8 1V;V B0 G>@=V A?8A:8 A?0<-04@5A0BV2 O: :>@8ABC20;L=8FL:V (3=CG:0 ?5@A>=0;V70FVO V=B5;5:BC0;L=>3> A?0<-<>4C;N), B0: V 3;>10;L=V, V=D>@<0FVO 4> O:8E =04E>48BL 7 A5@25@V2 >=>2;5==O. 0157?5G5==O 4>40B:>2>3> @V2=O 70E8ABC V=B5@=5B-B@0DV:C H;OE>< ?5@52V@:8 HTTP, HTTPS B@0DV:C, I> 40T <>6;82VABL 1;>:C20B8 04@5A8 B0:8E =5157?5G=8E @5AC@AV2, O: DVH8=3>2V A09B8, A5@25@8 1>B=5BV2, :><0=4=V (C&C) A5@25@8 APT, 0 B0:>6 A5@25@8, I> @>7?>2AN46CNBL 703@>78 :;0AC ransomware, >6;82VABL AB2>@5==O A?8A:V2 701;>:>20=8E, 4>72>;5=8E 01> 28:;NG5=8E 7 ?5@52V@:8 URL-04@5A. >6;82VABL 1;>:C20B8 7020=B065==O 7 =B5@=5BC D09;V2 70 2:070=8< @>7H8@5==O<, >A>1;82> =0 B8E , I> B8<G0A>2> 01> ?>ABV9=> 7=0E>4OBLAO 70 <560<8 :>@?>@0B82=>W <5@56V. >6;82VABL ?5@52V@:8 ?@>B>:>;C SSL O: 2 02B><0B8G=><C, B0: V 2 V=B5@0:B82=><C @568<0E. 5@52V@:0 4V9A=>ABV B0 FV;VA=>ABV A5@B8DV:0BV2 SSL-B@0DV:C, B0 <>6;82VABL :5@C20B8 A?8A:0<8 4>2V@5=8E A5@B8DV:0BV2 B0 A5@B8DV:0BV2 28:;NG5=8E 7 ?5@52V@:8, 0 B0:>6 <>6;82VABL 281>@C 4VW ?@8 287=0G5==V A5@B8DV:0B0 =54VNG8<, =5287=0G5=8< 01> ?>H:>465=8< . >6;82VABL AB2>@5==O 28:;NG5=L 7 ?5@52V@:8 B@0DV:C 4;O >:@5<8E ?@>3@0< B0 >:@5<8E IP->1'T:BV2 (IP-04@5AV2, 4V0?07>=V2 IP-04@5AV2, ?V4<5@56). 0O2=VABL ?5@A>=0;L=>3> 1@0=4<0C5@0 4;O 74V9A=5==O <5@5652>W DV;LB@0FVW B0 70E8ABC O: 2V4 7>2=VH=VE, B0: V ;>:0;L=8E <5@56528E 0B0:. 0O2=VABL C ?5@A>=0;L=><C 1@0=4<0C5@C V=B5@0:B82=>3> @568<C, I> =040T 45B0;L=C V=D>@<0FVN ?@> =>25 =52V4><5 <5@56525 7'T4=0==O B0 40T <>6;82VABL =5 BV;L:8 AB2>@N20B8 =0  =>25 ?@028;> <5@5652>W DV;LB@0FVW 4;O 28O2;5=>3> 7'T4=0==O, 0 9 2:07C20B8 45B0;L=V =0;0HBC20==O 4;O =L>3>. 0O2=VABL C ?5@A>=0;L=><C 1@0=4<0C5@C @568<C =02G0==O, I> 40T <>6;82VABL 04<V=VAB@0B>@C 2V440;5=> =0;0HB>2C20B8 4>72V;L=V ?@028;0 4;O <5@56528E 4>40B:V2 B0 >1;04=0==O. 0O2=VABL @540:B>@0 ?@028;, I> 40T <>6;82VABL =5 BV;L:8 @5403C20B8 AB2>@5=V ?@028;0, 0 9 :5@C20B8 21C4>20=8<8 ?@028;0<8, O:8E 4>AB0B=L> 4;O ?5@28==>3> @5B5;L=>3> 70E8ABC 2V4 =5A0=:FV>=>20=8E <5@56528E 7'T4=0=L B0 <5@56528E 0B0:. >6;82VABL AB2>@N20B8 ?@028;0 <5@5652>W DV;LB@0FVW 4;O :>=:@5B=8E ?@>3@0< V A5@2VAV2. >6;82VABL AB2>@N20B8 4;O ?5@A>=0;L=>3> 1@0=4<0C5@C @V7=V ?@>DV;V , O:V <>6CBL 02B><0B8G=> ?5@5:;NG0B8AO, 2 70;56=>ABV 2V4 B>3>, 4> O:>W <5@56V ?V4:;NG5=> :><?'NB5@. >6;82VABL 28:>@8AB>2C20B8 C ?5@A>=0;L=><C 1@0=4<0C5@V 4>40B:>2C 02B5=B8DV:0FVN <5@56V 7 <5B>N 70?>1V30==O =5A0=:FV>=>20=>3> ?V4:;NG5==O  4> =52V4><8E =5157?5G=8E <5@56. 0O2=VABL 4>40B:>2>3> DC=:FV>=0;C ?5@A>=0;L=>3> 1@0=4<0C5@C, I> 4>72>;OT ?5@53;O40B8 2AN 45B0;L=C V=D>@<0FVN ?> 2AVE =0O2=8E <5@56528E 7'T4=0==OE, 0 B0:>6 ?>?5@5460B8 :>@8ABC20G0 ?@> ?V4:;NG5==O 4> =570E8I5=>W <5@56V Wi-Fi. >6;82VABL =0;0HBC20==O 4>40B:>28E ?0@0<5B@V2 <>4C;O A8AB5<8 28O2;5==O 2B>@3=5=L (IDS) 7 <5B>N 28O2;5==O @V7=8E B8?V2 <>6;828E <5@56528E 0B0: =0 :><? NB5@. >6;82VABL 28:>@8AB0==O B5E=>;>3VW, O:0 70157?5GCT 70E8AB 2V4 703@>7 B8?C "1>B=5B" 0E8AB C@07;82>AB59 <5@5652>3> ?@>B>:>;C, I> ?>:@0ICT 28O2;5==O 703@>7, O:V 28:>@8AB>2CNBL =54>;V:8 <5@56528E ?@>B>:>;V2, B0:8E O: SMB, RPC, RDP V B.4. 0O2=VABL C?@>20465=8E <5B>4V2 28O2;5==O @V7=><0=VB=8E 0B0:, I> =0<030NBLAO 28:>@8AB>2C20B8 2@07;82>ABV ?@>3@0<=>3> 70157?5G5==O B0 =040==O 4>:;04=VH>W V=D>@<0FVW ?@> V45=B8DV:0B>@8 CVE. >6;82VABL ?5@53;O40B8 =0  02B><0B8G=> 701;>:>20=V <5@5652V 7'T4=0==O B0, 70 =5>1EV4=VABN, B8<G0A>2> 4>72>;OB8 :>=:@5B=V 157?5G=V <5@5652V 7'T4=0==O. 0O2=VABL 4>40B:>2>3> DC=:FV>=0;C ?5@A>=0;L=>3> 1@0=4<0C5@C, I> 40T <>6;82VABL ?5@53;O40B8 =0  ?5@5;V: 701;>:>20=8E IP-04@5A, =040T V=D>@<0FVN ?@> ?@8G8=8 ?>B@0?;O==O 4> G>@=>3> A?8A:C, B0 4>72>;OT 7@>18B8 28:;NG5==O 4;O :>=:@5B=8E 157?5G=8E 04@5A. 0O2=VABL 4>40B:>2>3> DC=:FV>=0;C ?5@A>=0;L=>3> 1@0=4<0C5@C, O:89 740B5= 28O2;OB8 BV 7<V=8 2 <5@56528E ?@>3@0<0E, I> A?@8G8=8;8 =>2V =5A0=:FV>=>20=V <5@5652V 7'T4=0==O. $V;LB@0FVO V=B5@=5B-B@0DV:C: 0O2=VABL <>4C;O 251-:>=B@>;N, I> 40T <>6;82VABL >1<56C20B8 4>ABC? 4> ?52=8E :0B53>@V9 A09BV2. >6;82VABL AB2>@N20B8 ?@028;0 DV;LB@0FVW V=B5@=5B-B@0DV:C 4;O @V7=8E :>@8ABC20GV2 B0 3@C? ! Windows 01> 4><5=C. >6;82VABL 704020B8 G0A>2V V=B5@20;8, I> 4>72>;OT 1V;LH 3=CG:> =0;0HB>2C20B8 ?@028;0 251-DV;LB@0FVW. 53;0<5=B=5 >=>2;5==O 2V@CA=8E 107 =5 <5=H5 24 @07V2 70 4>1C. B@8<0==O >=>2;5==O :;VT=BV2 7 ;>:0;L=>3> AE>28I0 =0 A5@25@V, I> 4>72>;OT ?V4B@8<C20B8 0:BC0;L=VABL 0=B82V@CA=>3> 70E8ABC 2 70:@8B8E V7>;L>20=8E <5@560E, I> =5 <0NBL 4>ABC?C 4> <5@56V =B5@=5B. >6;82VABL AB2>@5==O 475@:0;0 >=>2;5=L 70A>10<8 0=B82V@CA=>W . >6;82VABL >B@8<C20B8 >=>2;5==O 2V@CA=8E 107 7 @575@2=8E 465@5;, O:I> >A=>2=5 465@5;> >=>2;5==O 1C45 =54>AO6=5. >6;82VABL 4;O ?>@B0B82=8E :><?'NB5@V2 >B@8<C20B8 >=>2;5==O 7 A5@25@V2 28@>1=8:0 >=-;09=, C @07V ?5@51C20==O ?>70 :>@?>@0B82=>N <5@565N. V4:0B >=>2;5=L7 <>6;82VABL ?>25@=CB8AO 4> ?>?5@54=VE 25@AV9 107 2V@CA=8E A83=0BC@ V <>4C;V2 >=>2;5==O, B0 <>6;82VABN B8<G0A>2> ?@87C?8=8B8 >=>2;5==O 01> 2AB0=>2;N20B8 =>2V 2@CG=C. >6;82VABL >=>2;5==O C @568<V >B@8<0==O @53C;O@=8E, B5AB>28E B0 2V4:;045=8E >=>2;5=L. =AB@C<5=B8 <>=VB>@8=3C, >FV=:8 AB0=C 157?5:8 B0 @503C20==O: 0O2=VABL <5E0=V7<C :>=B@>;N 70 AB0=>< 157?5:8 B0 0:BC0;L=VABN >=>2;5=L !. 0O2=VABL V=AB@C<5=BC 4;O 4V03=>AB8:8 A8AB5<8, O:89 <0T <>6;82VABL AB2>@N20B8 7=V<:8 AB0=C >?5@0FV9=>W A8AB5<8 4;O ?>40;LH>3> 3;81>:> 0=0;V7C @V7=><0=VB=8E 0A?5:BV2 @>1>B8 >?5@0FV9=>W A8AB5<8, 2:;NG0NG8 70?CI5=V ?@>F5A8, :>=B5=B @5TAB@C, V=AB0;L>20=5 , <5@5652V 7'T4=0==O. >6;82VABL 287=0G5==O @V2=O :@8B8G=>ABV (=5157?5G=89, =52V4><89, <0;>2V4><89, 157?5G=89) 7=0G5=L @V7=><0=VB=8E ?0@0<5B@V2 >?5@0FV9=>W A8AB5<8, 7 <5B>N 28O2;5==O =5A0=:FV>=>20=8E B0 =5157?5G=8E 7<V= C >?5@0FV9=V9 A8AB5<V. >6;82VABL ?>@V2=N20B8 @V7=V 7=V<:8 AB0=C A8AB5<8 7 <5B>N 28O2;5==O 7<V=, O:V 2V41C;8AL 2 A8AB5<V 70 287=0G5=89 G0A. >6;82VABL AB2>@N20B8 B0 2V440;5=> 28:>=C20B8 A:@8?B8, I> 40ABL 7<>3C =0 2V440;5=><C  7C?8=OB8 70?CI5=V ?@>F5A8 B0 A;C618, 2840;OB8 3V;:8 @5TAB@C, 1;>:C20B8 <5@5652V 7'T4=0==O. >:0;L=5 715@V30==O 6C@=0;V2 =0 @>1>G8E AB0=FVOE. 0O2=VABL ?;0=C20;L=8:0 70240=L, O:89 40ABL <>6;82VABL AB2>@N20B8 70?;0=>20=V 70240==O, A5@54 O:8E: 70?CA: 7>2=VH=L>W ?@>3@0<8, ?5@52V@:0 D09;V2 ?V4 G0A 70?CA:C A8AB5<8, AB2>@5==O 7=V<:0 AB0=C A8AB5<8, ?5@52V@:0 :><? NB5@0, >=>2;5==O 2V@CA=8E 107 B0 <>4C;V2 ?@>3@0<8. >6;82VABL ?;0=C20==O 70240=L, O:V 70?CA:0B8<CBLAO >4=>@07>2>, ?5@V>48G=>, 0 B0:>6 70 C<>28 28=8:=5==O :>=:@5B=8E ?>4V9. >6;82VABL AB2>@5==O C ?;0=C20;L=8:C 45:V;L:>E >4=>B8?=8E 70240=L 7 @V7=>N ?5@V>48G=VABN 01> @V7=8<8 C<>20<8 70?CA:C. >6;82VABL AB2>@5==O 7020=B06C20;L=>3> 48A:C O: =0 CD-, B0: V =0 USB-=>AVOE 7 2AB0=>2;5=8< 0=B82V@CA=8< ?@>4C:B><. >6;82VABL 70E8ABC 2V4 7<V=8 ?0@0<5B@V2 0=B82V@CA=>3>  ?0@>;5<. 0O2=VABL @568<C ?5@5287=0G5==O ?>;VB8:8, I> 40T A8AB5<=><C 04<V=VAB@0B>@C B8<G0A>2C <>6;82VABL 7<V=N20B8 =0  BV =0;0HBC20==O 0=B82V@CA=>3> , I> ?@87=0G0NBLAO ?>;VB8:>N, B0 =54>AO6=V 4;O @5403C20==O, 7 <5B>N 3=CG:>3> =0;0HBC20==O 0=B82V@CA=>3>  C A?5F8DVG=><C A5@54>28IV. 8:>@8AB0==O 64-1VB>2>3> O4@0 4;O A:0=C20==O, I> 7<5=HCT =020=B065==O =0 A8AB5<C B0 4>72>;OT 7@>18B8 =09H284HV B0 =095D5:B82=VHV A:0=C20==O. CC<VA=VABL 7 VA=CNG8< A5@25@>< F5=B@0;V7>20=>3> :5@C20==O B0 0:B820FVO 0=B82V@CA=>3>  H;OE>< 4>4020==O :;NG0 4> VA=CNG>3> A5@25@0 :5@C20==O. 0 ?V4B25@465==O 2V4?>2V4=>ABV ?@>?>78FVW CG0A=8:0 FV9 E0@0:B5@8AB8FV =0 28<>3C 70<>2=8:0 CG0A=8: =040T B5AB>289 :;NG B@820;VABN =5 <5=H5 5 4=V2 4;O 9>3> 4>4020==O 4> VA=CNG>3> A5@25@0 :5@C20==O. >6;82VABL 28:>@8AB0==O B5E=>;>3V9 <0H8==>3> =02G0==O 4;O 1V;LH ?>3;81;5=>3> 0=0;V7C :>4C 7 <5B>N 28O2;5==O 7;>2<8A=>W ?>254V=:8 B0 E0@0:B5@8AB8: 7;>2<8A=>3> ?@>3@0<=>3> 70157?5G5==O. @0DVG=89 V=B5@D59A, AC<VA=89 V7 A5=A>@=8< 5:@0=>< 28A>:>W @>74V;L=>W 740B=>ABV. >6;82VABL 3=CG:> =0;0HB>2C20B8 A?>2VI5==O B0 ?>2V4><;5==O ?@> ?>4VW =0 @>1>G><C AB>;V :>@8ABC20G0. 87L:5 A?>6820==O @5AC@AV2  0:BC0;L=8<8 0=B82V@CA=8<8 ?@>4C:B0<8 (AC:C?=> CAV<0 ?@>F5A0<8: 3@0DVG=89 V=B5@D59A, ?@>F5A :><?;5:A=>3> 70E8ABC, A;C610 2V440;5=>3> 04<V=VAB@C20==O): 50-100  >?5@0B82=>W ?0<'OBV, 2-35 % F5=B@0;L=>3> ?@>F5A>@C. 0O2=VABL 1030B><>2=>3> V=AB0;OB>@0, O:89 <VAB8BL 2 A>1V 2 B><C G8A;V C:@0W=AL:C <>2C. 0O2=VABL V=AB@C<5=BC 2V440;5=>3> C?@02;V==O. 8<>38 4> @VH5==O 4;O 70E8ABC @>1>G8E AB0=FV9 ?V4 C?@02;V==O A5@25@=8E !: 2B><0B8G=5 287=0G5==O @>;59 A5@25@0 4;O AB2>@N20==O 02B><0B8G=8E 28:;NG5=L 4;O A?5F8DVG=8E D09;V2, ?0?>:, ?@>3@0<, I> 4>72>;OT <V=V<V7C20B8 2?;82 =0 @>1>BC A5@25@=>W >?5@0FV9=>W A8AB5<8. 040==O 70E8ABC 2V4: 2V@CAV2, B@>O=AL:>3> , @5:;0<=>3> , DVH8=3C, 0 B0:>6 H?83C=AL:>3> . 040==O 70E8ABC 2V4 H:V4;82>3>  - ?52=>3> H:V4;82>3> :>4C, O:89 4>40TBLAO =0 ?>G0B>: 01> :V=5FL :>4C =0O2=8E D09;V2 =0 :><? NB5@V. 8O2;5==O H:V4;82>3>  ?>28==> 74V9A=N20B8AO O4@>< 28O2;5==O 2 ?>T4=0==V 7 :><?>=5=B>< <0H8==>3> =02G0==O. 040==O 70E8ABC 2V4 ?>B5=FV9=> =51060=8E ?@>3@0<, O:8E =5 <>6=0 >4=>7=0G=> 2V4=5AB8 4> H:V4;82>3>  70 0=0;>3VTN 7 B0:8<8 157C<>2=> H:V4;828<8 ?@>3@0<0<8, O: 2V@CA8 01> B@>O=8, 0;5 FV ?@>3@0<8 <>6CBL V=AB0;N20B8 4>40B:>25 =51060=5 , 7<V=N20B8 ?>254V=:C 01> =0;0HBC20==O F8D@>2>3> ?@8AB@>N, 0 B0:>6 28:>=C20B8 =5>GV:C20=V 4;O :>@8ABC20G0 4VW 01> =5 ?V4B25@465=V =8<. 040==O 70E8ABC 2V4 ?>B5=FV9=> =5157?5G=8E ?@>3@0<8 - :><5@FV9=>3> ;530;L=>3> , I> <>65 28:>@8AB>2C20B8AO 4;O 7;>2<8A=8E FV;59, B0:8E O: =5A0=:FV>=>20=89 2V440;5=89 4>ABC?, 28:@045==O 01> 7;0< ?0@>;V2, :;02V0BC@=V H?83C=8 B>I>. 040==O 70E8ABC 2V4 ?V4>7@V;8E ?@>3@0<  ?@>3@0<, O:V AB8A=CBV ?0:C20;L=8:0<8 01> ?@>B5:B>@0<8, I> G0AB> 28:>@8AB>2CNBL 7;>2<8A=8:8 70 4;O B>3>, I>1 70?>1V3B8 28O2;5==N H:V4;82>3> ?@>3@0<=>3> 70157?5G5==O. 040==O 70E8ABC 2V4 =5157?5G=8E ?@>3@0< @CB:VBV2, O:V =040NBL 7;>2<8A=8:0< 7 =B5@=5BC =5>1<565=89 4>ABC? 4> A8AB5<8, 2>4=>G0A ?@8E>2CNG8 A2>N ?@8ACB=VABL 2 >?5@0FV9=V9 A8AB5<V. 0157?5G5==O 70E8ABC 2 @568<V @50;L=>3> G0AC. 8:>@8AB0==O 52@8AB8G=8E B5E=>;>3V9 ?V4 G0A A:0=C20==O. =B82V@CA=5 A:0=C20==O 70 28<>3>N :>@8ABC20G0 01> 04<V=VAB@0B>@0 B0 73V4=> 3@0DV:C. !:0=C20==O Hyper-V =0 =0O2=VABL 2V@CAV2, I> 4>72>;OT A:0=C20B8 48A:8 A5@25@0 Microsoft Hyper-V Server, B>1B> 2V@BC0;L=8E <0H8= (), 157 =5>1EV4=>ABV CAB0=>2:8 1C4L-O:8E 035=BV2 =0 2V4?>2V4=8E 2V@BC0;L=8E <0H8=0E. >4C;L 70E8ABC 4>:C<5=BV2 Microsoft Office, I> 40T <>6;82VABL ?5@52V@OB8 <0:@>A8 =0 =0O2=VABL 7;>2<8A=>3> :>4C. 0E8AB 2V4 5:A?;>9BV2 O:89 70157?5GCT 70E8AB 2V4 703@>7 740B=8E 28:>@8AB>2C20B8 C@07;82>ABV Java, Flash B0 V=H8E 4>40B:V2. >40B:>289 @V25=L 70E8ABC :>@8ABC20GV2 2V4 ?@>3@0<-28<030GV2 :>=B@>;NT B0 >FV=NT 2AV ?@>3@0<8 =0 >A=>2V WE=L>W ?>254V=:8 B0 @5?CB0FVW. >6;82VABL A:0=C20==O D09;V2 ?V4 G0A 70?CA:C !. >7H8@5=89 A:0=5@ ?0<'OBV O:89 2V4AB56CT ?V4>7@V;V ?@>F5A8 B0 A:0=CT WE, O: BV;L:8 2>=8 28=8:0NBL, I> 4>72>;OT 70?>1V3B8 70@065==N =02VBL @5B5;L=> 70H8D@>20=8<8 B0 ?@8E>20=8<8 703@>70<8. !:0=C20==O :><?'NB5@0 C =50:B82=><C AB0=V. >6;82VABL 287=0G5==O 45B0;L=8E ?0@0<5B@V2 @>1>B8 0=B82V@CA=>3> A:0=5@0, B0:8E O:: 287=0G5==O >1 T:BV2 B0 <5B>4V2 A:0=C20==O, <>6;82VABL 2AB0=>2;5==O <0:A8<0;L=>3> @>7<V@C B0 G0AC A:0=C20==O D09;C, <0:A8<0;L=C 3;818=C 2:;045==O 0@EV2C B0 AB2>@5==O 28:;NG5=L. 2B><0B8G=0 0=B82V@CA=0 ?5@52V@:0 7<V==8E =>AVW2. >=B@>;L 7<V==8E =>AVW2 7 <>6;82VABN AB2>@5==O ?@028; 70 B8?>< ?@8AB@>N, 4VO<8, 28@>1=8:><, <>45;;N B0 A5@V9=8< =><5@>< ?@8AB@>N. 0O2=VABL V=AB@C<5=BC, O:89 7<>65 74V9A=N20B8 :>=B@>;L ?V4:;NG5==O 4> @>1>G>W AB0=FVW ?5@8D5@V9=8E ?@8AB@>W2 H;OE>< AB2>@5==O ?@028; 4>ABC?C 70 B8?>< ?@8AB@>N, 70 @V2=5< 4>ABC?C, 70 28@>1=8:><, <>45;;N 01> A5@V9=8< =><5@>< ?@8AB@>N. @028;0 <>6CBL AB2>@N20B8AL O: 4;O 2AVE, B0: V 4;O >:@5<8E :>@8ABC20GV2 01> 3@C? Windows. 0O2=VABL A8AB5<8 28O2;5==O 2B>@3=5=L (HIPS), O:0 70E8I0T :><? NB5@ 2V4 H:V4;828E ?@>3@0< V =51060=>W 0:B82=>ABV. "0:>6 F59 <>4C;L <VAB8BL 2 A>1V <09AB5@ 4;O AB2>@5==O ?@028; B0 @540:B>@ ?@028; 4;O :>=B@>;N 70?CI5=8E ?@>F5AV2, 28:>@8AB>2C20=8E D09;V2 B0 @>74V;V2 @5TAB@C. >40B:>20 ?5@52V@:0 70?CI5=8E ?@>F5AV2 C E<0@=><C @5?CB0FV9=><C A5@2VAV. 0157?5G5==O 70E8ABC ?>HB>2>3> :;VT=BC =0 @>1>GV9 AB0=FVW 7 <>6;82VABN V=B53@0FVW 4> ?>HB>2>3> :;VT=BC, ?5@52V@:>N POP3, POP3S, SMTP, IMAP B0 IMAPS B0 70157?5G5==O ?5@52V@:8 ?>HB>28E 2:;045=L. >6;82VABL 02B><0B8G=> 2840;OB8 01> ?5@5<VIC20B8 70@065=C ?>HBC 4> 2:070=>3> :0B0;>3C C ?>HB>2><C :;VT=BV. 5@52V@:0 HTTP, HTTPS B@0DV:C 7 <>6;82VABN AB2>@5==O ;8ABV2 28:;NG5=8E 7 ?5@52V@:8, 701;>:>20=8E B0 4>72>;5=8E URL-04@5A. >6;82VABL 1;>:C20B8 7020=B065==O 7 =B5@=5BC D09;V2 70 2:070=8< @>7H8@5==O<. >6;82VABL ?5@52V@:8 ?@>B>:>;C SSL B0 ?5@52V@:8 4V9A=>ABV B0 FV;VA=>ABV A5@B8DV:0BV2. >6;82VABL :5@C20B8 A?8A:0<8 4>2V@5=8E A5@B8DV:0BV2 B0 A5@B8DV:0BV2 28:;NG5=8E 7 ?5@52V@:8, 0 B0:>6 <>6;82VABL 281>@C 4VW ?@8 287=0G5==V A5@B8DV:0B0 =54VNG8<, =5287=0G5=8< 01> ?>H:>465=8<. >6;82VABL AB2>@5==O 28:;NG5=L 7 ?5@52V@:8 B@0DV:C 4;O >:@5<8E ?@>3@0< B0 >:@5<8E IP->1'T:BV2 (IP-04@5AV2, 4V0?07>=V2 IP-04@5AV2, ?V4<5@56). >6;82VABL =0;0HBC20==O 4>40B:>28E ?0@0<5B@V2 <>4C;O A8AB5<8 28O2;5==O 2B>@3=5=L (IDS) 7 <5B>N 28O2;5==O @V7=8E B8?V2 <>6;828E <5@56528E 0B0: =0 :><? NB5@. >6;82VABL 28:>@8AB0==O B5E=>;>3VW, O:0 70157?5GCT 70E8AB 2V4 703@>7 B8?C "1>B=5B". 0E8AB C@07;82>AB59 <5@5652>3> ?@>B>:>;C, I> ?>:@0ICT 28O2;5==O 703@>7, O:V 28:>@8AB>2CNBL =54>;V:8 <5@56528E ?@>B>:>;V2, B0:8E O: SMB, RPC, RDP V B.4. 53;0<5=B=5 >=>2;5==O 2V@CA=8E 107 =5 <5=H5 24 @07V2 70 4>1C. B@8<0==O >=>2;5==O :;VT=BV2 7 ;>:0;L=>3> 475@:0;0 =0 A5@25@V. >6;82VABL AB2>@5==O 475@:0;0 >=>2;5=L 70A>10<8 0=B82V@CA=>W . >6;82VABL >B@8<C20B8 >=>2;5==O 2V@CA=8E 107 7 @575@2=8E 465@5;, O:I> >A=>2=5 465@5;> >=>2;5==O 1C45 =54>AO6=5. V4:0B >=>2;5=L7 <>6;82VABL ?>25@=CB8AO 4> ?>?5@54=VE 25@AV9 107 2V@CA=8E A83=0BC@ V <>4C;V2 >=>2;5==O, B0 <>6;82VABN B8<G0A>2> ?@87C?8=8B8 >=>2;5==O 01> 2AB0=>2;N20B8 =>2V 2@CG=C. >6;82VABL >=>2;5==O C @568<V >B@8<0==O @53C;O@=8E, B5AB>28E B0 2V4:;045=8E >=>2;5=L. >6;82VABL :@V< >A=>2=>3> 2:070B8 @575@2=V A5@25@8 04<V=VAB@C20==O. 0O2=VABL <5E0=V7<C :>=B@>;N 70 0:BC0;L=VABN >=>2;5=L !. 0O2=VABL V=AB@C<5=BC 4;O 4V03=>AB8:8 A8AB5<8, O:89 <0T <>6;82VABL AB2>@N20B8 7=V<:8 AB0=C >?5@0FV9=>W A8AB5<8 4;O ?>40;LH>3> 3;81>:> 0=0;V7C @V7=><0=VB=8E 0A?5:BV2 @>1>B8 >?5@0FV9=>W A8AB5<8, 2:;NG0NG8 70?CI5=V ?@>F5A8, :>=B5=B @5TAB@C, V=AB0;L>20=5 , <5@5652V 7'T4=0==O. 024O:8 2<V==N ?>@V2=N20B8 @V7=V 7=V<:8 AB0=C A8AB5<8 F59 V=AB@C<5=B <>65 28O28B8 7<V=8, O:V 2V41C;8AL 2 A8AB5<V. "0:>6 2V= <>65 AB2>@N20B8 B0 28:>=C20B8 A:@8?B8, I> 40ABL <>6;82VABL 7C?8=OB8 70?CI5=V ?@>F5A8, 2840;OB8 3V;:8 @5TAB@C, 1;>:C20B8 <5@5652V 7'T4=0==O. 0O2=VABL ?;0=C20;L=8:0 70240=L, O:89 40ABL <>6;82VABL AB2>@N20B8 70?;0=>20=V 70240==O, A5@54 O:8E: 70?CA: 7>2=VH=L>W ?@>3@0<8, ?5@52V@:0 D09;V2 ?V4 G0A 70?CA:C A8AB5<8, AB2>@5==O 7=V<:0 AB0=C A8AB5<8, ?5@52V@:0 :><? NB5@0, >=>2;5==O 2V@CA=8E 107 B0 <>4C;V2 ?@>3@0<8. >6;82VABL ?;0=C20==O 70240=L, O:V 70?CA:0B8<CBLAO >4=>@07>2>, ?5@V>48G=> B0 70 C<>28 28=8:=5==O :>=:@5B=8E ?>4V9. >6;82VABL AB2>@5==O C ?;0=C20;L=8:C 45:V;L:>E >4=>B8?=8E 70240=L 7 @V7=>N ?5@V>48G=VABN 01> @V7=8<8 C<>20<8 70?CA:C. >6;82VABL @>1>B8 2 :;0AB5@0E O: 4><5=0 B0: V @>1>G>W 3@C?8. >6;82VABL =0;0HB>2C20B8 H284:>4VN, 2:07CNG8 :V;L:VABL ?>B>:V2 A:0=C20==O. >6;82VABL =0;0HB>2C20B8 @568< 70?CA:C H;OE>< 2V4:;NG5==O 3@0DVG=>3> V=B5@D59AC 4;O B5@<V=0;L=8E :>@8ABC20GV2, I> 40T <>6;82VABL 7<5=H8B8 =020=B065==O =0 A5@25@, O:89 ?@0FNT C @568<V A5@25@C B5@<V=0;V2. >6;82VABL AB2>@5==O 7020=B06C20;L=>3> 48A:C O: =0 CD-, B0: V =0 USB-=>AVOE 7 2AB0=>2;5=8< 0=B82V@CA=8< ?@>4C:B><. V4B@8<:0 @>1>B8 ?@>3@0<, I> ?@0FNNBL 2 ?>2=>5:@0==><C @568<V, 7 <>6;82VABN ?@8E>20B8 2AV ?>2V4><;5==O 2V4 0=B82V@CA=>3> . >6;82VABL 70E8ABC 2V4 7<V=8 ?0@0<5B@V2 0=B82V@CA=>3>  ?0@>;5<. 0O2=VABL A?5FV0;L=>W B5E=>;>3VW, O:0 7=0G=> 7=86CT =020=B065==O =0 2V@BC0;L=V @>1>GV AB0=FVW, 0 B0:>6 =0 3V?5@2V7>@ C FV;><C. 8<>38 4> V=AB@C<5=BC 2V440;5=>3> C?@02;V==O: >6;82VABL F5=B@0;V7>20=>3> C?@02;V==O 0=B82V@CA=8< 70E8AB>< 2AVTW <5@5652>W V=D@0AB@C:BC@8. >6;82VABL 1C4C20==O VT@0@EVG=>W AB@C:BC@8 04<V=VAB@C20==O, I> A:;040TBLAO 7 3>;>2=>3> A5@25@C B0 ?V4?>@O4:>20=8E A5@25@V2, I> 40T <>6;82VABL 74V9A=N20B8 F5=B@0;V7>20=5 C?@02;V==O 0=B82V@CA=8< 70E8AB>< @>1>G8E AB0=FV9, A5@25@V2, B0 <>1V;L=8E ?@8AB@>W2, I> =0;560BL O: 3>;>2=><C, B0: V @53V>=0;L=8< ?V4@>74V;0<. =25=B0@870FVO >1;04=0==O, I> 2AB0=>2;5=> =0 @>1>G8E AB0=FVOE B0 A5@25@0E ?V4 C?@02;V==O< Windows, macOS B0 Linux. =25=B0@870FVO , I> 2AB0=>2;5=> =0 @>1>G8E AB0=FVOE B0 A5@25@0E ?V4 C?@02;V==O< Windows, macOS B0 Linux. V440;5=0 V=AB0;OFVO 0=B82V@CA=>3>  4;O ! Windows, Linux B0 Mac =0 :V;L:0 :V=F528E B>G>: >4=>G0A=> 70A>10<8 A5@25@0 04<V=VAB@C20==O. V440;5=0 V=AB0;OFVO :>@8ABC20;L=8FL:>3>  >4=>G0A=> 70A>10<8 A5@25@0 04<V=VAB@C20==O. V440;5=0 2840;5==O 2AB0=>2;5=>3> :>@8ABC20;L=8FL:>3>  70A>10<8 A5@25@0 04<V=VAB@C20==O. V440;5=5 2840;5==O 0=B82V@CA=>3>  4;O ! Windows, Linux B0 Mac 70A>10<8 A5@25@0 04<V=VAB@C20==O. >6;82VABL 28:>=C20B8 70 4>?><>3>N V=AB@C<5=BC 2V440;5=>3> C?@02;V==O 4>40B:>2V <5@5652V 4VW, B0:V O:: 7025@H5==O @>1>B8 B0 ?5@57020=B065==O, 2V4?@02:0 A83=0;C ?@>1C465==O :><?'NB5@0, 2V4?@02:0 ?>2V4><;5=L, 28:>=0==O :>=:@5B=8E V=AB@C:FV9 :><0=4=>3> @O4:0 =0 :;VT=BAL:><C :><?'NB5@V, AB0@B >=>2;5==O ! :;VT=BAL:>3> :><?'NB5@0. 0O2=VABL V=AB@C<5=BC 4;O AB2>@5==O B0 @5403C20==O V=AB0;OFV9=8E ?0:5BV2 ! Windows, Linux B0 Mac 7 ?>?5@54=L> 2AB0=>2;5=8<8 =0AB@>9:0<8 :>=DV3C@0FVW, I> 40T <>6;82VABL 5:A?>@BC20B8 V=AB0;OFV9=V ?0:5B8 4;O @>73>@B0==O ?>2=>FV==>3> 0=B82V@CA=>3> 70E8ABC =0 :V=F528E B>G:0E 2 V7>;L>20=V9 <5@56V, 0 B0:>6 =0 :V=F528E B>G:0E, I> ?>B@51CNBL 70E8ABC, 0;5 B8<G0A>2> =5 <0NBL 7'T4=0==O 7 A5@25@>< 04<V=VAB@C20==O. 0O2=VABL 48A?5BG5@0 :>@8ABC20GV2, O:89 4>72>;OT AB2>@N20B8 @V7=8E :>@8ABC20GV2 A5@25@0 04<V=VAB@C20==O, B0 ?@87=0G0B8 W< @V7=V ?@020 4>ABC?C 4> >:@5<8E @>74V;V2, 3@C? :><?'NB5@V2 =0 A5@25@V 04<V=VAB@C20==O, I> 40T <>6;82VABL =040B8 @V7=V ?@020 4>ABC?C 4;O @53V>=0;L=8E A8AB5<=8E 04<V=VAB@0B>@V2 @>730;C65=>W A8AB5<8 0=B82V@CA=>3> 70E8ABC. >6;82VABL 0CB5=B8DV:C20B8 04<V=VAB@0B>@V2 A5@25@0 04<V=VAB@C20==O 70 4>?><>3>N 3@C? 157?5:8 AD. >6;82VABL 28:>@8AB>2C20B8 42>D0:B>@=C 0CB5=B8DV:0FVN 4;O >1;V:>28E 70?8AV2 04<V=VAB@0B>@V2, I> 40T <>6;82VABL 70?>1V3B8 =5A0=:FV>=>20=><C ?V4:;NG5==N 4> A5@25@C F5=B@0;V7>20=>3> C?@02;V==O. 0O2=VABL 6C@=0;C 0C48BC, C O:><C @5TAB@CNBLAO V 2V4AB56CNBLAO 2AV 7<V=8 2 :>=DV3C@0FVW B0 2AV 4VW, O:V 28:>=CNBL :>@8ABC20GV A5@25@0 04<V=VAB@C20==O. >6;82VABL 2V440;5=> 0:B82C20B8 B0 450:B82C20B8 <>4C;V 70E8ABC, B0:V O: ?5@A>=0;L=89 1@0=4<0C5@, 70E8AB 2 @568<V @50;L=>3> G0AC, 70E8AB ?>HB>2>3> :;VT=B0, 70E8AB 4>ABC?C 4> =B5@=5BC, :>=B@>;L ?@8AB@>W2, 251-:>=B@>;L, 0=B8A?0< =0 >:@5<> 27OB><C :;VT=BV. >6;82VABL AB2>@N20B8 B0 @5403C20B8 AB0B8G=V 3@C?8 B0 <>6;82VABL V<?>@BC 7 AD 45@520 :><?'NB5@V2. >6;82VABL =0;0HBC20==O 02B><0B8G=>3> @>7?>4V;C :;VT=BV2 ?> 48=0<VG=8E 3@C?0E 70 1030BL<0 :@8B5@VO<8, 7 =0ABC?=8< ?@87=0G5==O< 2V4?>2V4=8E ?>;VB8: 157?5:8, 0 B0:>6 70?CA:>< =5>1EV4=8E 70240=L. >6;82VABL V<?>@BC :>@8ABC20GV2 B0 3@C? 7 AD, 4;O ?>40;LH>3> 28:>@8AB0==O WE 4;O ?5@A>=0;V70FVW ?@028; :>=B@>;N ?@8AB@>W2 B0 251-:>=B@>;N. >6;82VABL 28:>@8AB>2C20B8 O: 21C4>20=V B0: V :>@8ABC20;L=8FL:V ?>;VB8:8, ?@87=0G5=V 4;O ?>ABV9=>3> >1A;C3>2C20==O :>=DV3C@0FV9=8E =0;0HBC20=L 0=B82V@CA=8E ?@>4C:BV2. >6;82VABL 74V9A=N20B8 5:A?>@B/V<?>@B ?>;VB8:. 0O2=VABL ?0=5;V <>=VB>@8=3C, O:0 =040T 2AN =5>1EV4=C 45B0;L=C V=D>@<0FVN AB>A>2=> @V2=O 70E8ABC 157?5:8 V=D@0AB@C:BC@8, AB0=C 70E8I5=8E :V=F528E B>G>:, 0 B0:>6 AB0=C A0<>3> A5@25@0 04<V=VAB@C20==O. 0O2=VABL =0?5@54 2AB0=>2;5=8E H01;>=V2 72VBV2, I> <>6CBL 28:>@8AB>2C20B8AO O: 4;O ?0=5;V <>=VB>@8=3C, B0: V 4;O D>@<C20==O @V7=><0=VB=8E 72VBV2. >6;82VABL AB2>@N20B8 B0 @5403C20B8 H01;>=8 72VBV2, O:V 28:>@8AB>2CNBLAO O: 4;O ?0=5;V <>=VB>@8=3C, B0: V 4;O D>@<C20==O 72VBV2 C D>@<0B0E PDF, PS, CSV B0 ?>40;LH>3> 715@V30==O 70 2:070=8< H;OE>< 01> 2V4?@02;5==O =0 2:070=C 5;5:B@>==C ?>HBC. V4B@8<:0 V=AB@C<5=B>< 2V440;5=>3> 04<V=VAB@C20==O =0ABC?=8E 107 40=8E: MS SQL Server, MySQL. >6;82VABL 5:A?>@BC20B8 6C@=0;8 2 syslog 4;O ?>40;LH>W V=B53@0FVW 7 SIEM. >6;82VABL AB2>@N20B8 475@:0;> >=>2;5=L 70 4>?><>3>N 0=B82V@CA=>3> ?@>4C:BC, A?5FV0;L=>W CB8;VB8 01> ?@>:AV A5@25@C. >6;82VABL AB2>@5==O 475@:0;0 >=>2;5=L =0 107V AB>@>==VE HTTP-A5@25@V2. 51->@VT=B>20=89 V=B5@D59A, O:89 40T <>6;82VABL :5@C20B8 A5@25@>< G5@57 1C4L-O:89 1@0C75@ H;OE>< 7'T4=0==O, 70E8I5=>3> A5@B8DV:0B><. 8:>@8AB0==O =570;56=>3> 035=BC, O:89 40T <>6;82VABL 74V9A=N20B8 O: 2V440;5=5, B0: V 02B>=><=5 C?@02;V==O 0=B82V@CA=8< ?@>4C:B>< =0 :V=F528E B>G:0E, 0 B0:>6 :>=B@>;N20B8 @V25=L 70E8ABC 0=B82V@CA=>3> 70E8ABC =0 @>1>G8E AB0=FVOE, B0 AB0= >?5@0FV9=>W A8AB5<8. >40B:>289 :><?>=5=B, I> 4>72>;OT :5@C20B8 0=B82V@CA=8< 70E8AB>< =0 <>1V;L=8E ?@8AB@>OE. !?5FV0;L=89 :><?>=5=B, O:89 74V9A=NT 28O2;5==O 2 <5@56V =570E8I5=8E @>1>G8E AB0=FV9 4;O ?>40;LH>3> @>73>@B0==O 0=B82V@CA=>3> 70E8ABC. 0E8AB 7'T4=0=L <V6 :><?>=5=B0<8 A5@25@0 70 4>?><>3>N O: A0<>ABV9=> 28?CI5=8E A5@B8DV:0BV2, B0: 9 VA=CNG8E =0O2=8E A5@B8DV:0BV2. =AB@C<5=B 4;O :5@C20==O AB0=>< ;VF5=7V9 (=02VBL 157 28:>@8AB0==O A5@25@0 04<V=VAB@C20==O). >6;82VABL 450:B82C20B8 ;VF5=7VN 0=B82V@CA=8E ?@>4C:BV2 =02VBL =0 @>1>G8E AB0=FVO 4> O:8E =5<0T DV78G=>3> 01> 2V440;5=>3> 4>ABC?C. >6;82VABL 2AB0=>2;5==O A5@25@C 04<V=VAB@C20==O =0 ! Windows B0 Linux. >AB0G0==O A5@25@0 04<V=VAB@C20==O C @>73>@=CB><C 283;O4V, 3>B>2><C 4;O 28:>@8AB0==O C B0:8E 2V@BC0;L=8E A5@54>28I0E, O: Microsoft Hyper-V, Oracle VirtualBox, VMware (ESXi/vSphere/Player/Workstation). !5@B8DV:0B8: 0O2=VABL 0:BC0;L=>3> 5:A?5@B=>3> 28A=>2:C 5@602=>W A;C618 A?5FV0;L=>3> 72 O7:C B0 70E8ABC V=D>@<0FVW #:@0W=8 4> ?@54<5BC 70:C?V2;V. 8<>38 4> B5E=VG=>W ?V4B@8<:8: 0?@>?>=>20=5 0=B82V@CA=5  ?>28==5 <0B8 02B>@87>20=89 28@>1=8:>< F5=B@ B5E=VG=>W ?V4B@8<:8 =0 B5@8B>@VW #:@0W=8, O:89 <0T 70157?5GC20B8 =040==O B5E=VG=>W ?V4B@8<:8 :>@8ABC20G0< 2V4?>2V4=> 4> =0ABC?=8E 28<>3: >1A;C3>2C20==O 24E7E365 - 24 3>48=8 =0 4>1C, 7 4=V2 =0 B8645=L, 365 4=V2 =0 @V:, 2:;NG0NG8 A2OB:>2V, 28EV4=V B0 =5@>1>GV 4=V; @>7H8@5=V B5E=VG=V :>=AC;LB0FVW 7 ?8B0=L :>=DV3C@0FVW B0 DC=:FV>=C20==O 0=B82V@CA=>3>  ?> B5;5D>=C (7 <>6;82VABN 72 O7:C 7 B5E=VG=8<8 A?5FV0;VAB0<8 ?> <VAF52><C B5;5D>=C 157 28:>@8AB0==O ?>A;C3 <V6=0@>4=>3> B5;5D>==>3> 72 O7:C) B0 5;5:B@>==V9 ?>HBV; 28W74 V=65=5@0 =0 <VAF5 @>7B0HC20==O 0<>2=8:0-V=VFV0B>@0 C 28?04:0E 71>W2 @>1>B8 0=B82V@CA=>3>  . #?>2=>2065=0 >A>10 02;> )5@10:>2     PAGE \* MERGEFORMAT2 VTNhr   f  N~t$ 7d`7a$gd[m$$ & F7d^`7a$gd[m$$ & F7d^`7a$gd[m$ll !L##r$ %2'()@++-./0$ & F7d^`7a$gd[m$$ 7d`7a$gd[m$$ & F7d^`7a$gd[m$0123L46b899;`<<<T=>?lANDFGI$ & F7d^`7a$gd[m$$7d`7a$gd[$7d`7a$gd[m$$ & F7d^`7a$gd[m$IvIIJ:LMNOOPLQRSST@W`YYv[L\@]]`aTbb,dd$ & F7d^`7a$gd[m$d&eefgh(iimpq8rrdtJuDvvw"xxJ{0|$ & F7d^`7a$gd[m$$7d`7a$gd[$ & F7d^`7a$gd[m$0|}~~|DԂl؎ZpΕn|$ & F7d^`7a$gd[m$:FH(*FRT84,ī$a$gd[ $*$a$gd[m$$7d`7a$gd[m$$hd^ha$gd[m$$da$gd[m$$ & F7d^`7a$gd[m$īȫʫΫЫԫ֫ګܫ$a$gd[$a$gd7 ثܫޫ  +h h.5B*CJ]aJmH"phsH"hXh/BmHnHuh7jh7Uh]V 5 01h:p7. A!"R#S$n% $$If!vh#v#v:V (40B%,554 (f4ytEd$$If!vh#v#v:V (0B%,554 (ytEd$$If!vh#v#v:V (0B%55/ 4 (ytEd^ 0002 0@P`p2( 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p8XV~_HmH"nH"sH"tH">`> 9q1KG=K9PJ_HmHsHtHZ@Z d 03>;>2>: 1dd@&[$\$5CJ0KH$PJ\aJ0d@d ;>2>: 2$<@&$56CJOJPJQJ\]^JaJBA B A=>2=>9 H@8DB 0170F0Xi@X 1KG=0O B01;8F04 l4a .k . 5B A?8A:0 J@J Yd "5:AB 2K=>A:8CJOJQJ^JaJ`o` Yd"5:AB 2K=>A:8 =0:$CJOJPJQJ^JaJmHsHtHJoJ d03>;>2>: 1 =0:5CJ0KH$\aJ0ho!h ;>2>: 2 =0:056CJOJPJQJ\]^JaJmHsHtHL@2L 705@E=89 :>;>=B8BC;  %VoAV 705@E=89 :>;>=B8BC; =0:PJmHsHtHJ RJ 786=89 :>;>=B8BC;  %ToaT 786=89 :>;>=B8BC; =0:PJmHsHtHP^@rP TpM0 1KG=K9 (251)dd[$\$ CJPJaJJZ@J 1>,0"5:AB$CJOJPJQJ^JaJmH"sH"tH LoL 1>,0 "5:AB =0: CJOJPJQJaJmH"sH"tH o  170F A?8A:0 =0:,=0720=85 B01;/@8A =0:,AC List 01 =0:,703>;>2>: 1.1 =0:,EBRD List =0:,!?8A>: C@>2=O 2 =0:,List Paragraph =0:,CA bullets =0:,Bullet Number =0:,Bullet 1 =0:,Use Case List Paragraph =0:,lp1 =0:,List Paragraph1 =0:,lp11 =0:tH"@"  170F A?8A:0,=0720=85 B01;/@8A,AC List 01,703>;>2>: 1.1,EBRD List,!?8A>: C@>2=O 2,List Paragraph,CA bullets,Bullet Number,Bullet 1,Use Case List Paragraph,lp1,List Paragraph1,lp11,List Paragraph11,Elenco Normale,Chapter10,8B5@0BC@0,Number Bullets ^m$ PJmH"sH"PK![Content_Types].xmlN0EH-J@%ǎǢ|ș$زULTB l,3;rØJB+$G]7O٭VCWNIA!ޝ}7/݉%BR7Hw9!p<Ǥፉ.EB\ /T*Y>,cy'$gC."Vso+C1OǓt}8>V3mBb%DWs'O''Gw ~lh;UM!DzŬ;C K^ysJJ1KRμ)~.ک/ Y\n9?[]67)qnpJOF$ w;fCLL&׸m%]V%z-{ v8Ҩm-.xo(-ms~ۜ|s>Ͼ%O04h=یщ!eƌ\f :C*OiIA 64HpUa7 UO3 d:(fA@٣>N"Hhp&hA38 )SUUR'V5&HM.6xpyn,ބ!h^^Z4~0#w,,& g"Ic힍Q)˕C6%^+Hk!$A*#.D)irdq8Y^}q~C>Np%uJx?+al|zf[Ux5b>c!:M (MkIVEpYPҍN2$ÿ -.h۴"P6T{T 6]u̒VhVnR+n;)ȔbL X6Y`+qB]( 0H1$6_[s)k8Tm Aa?R d ڒɾ0{eRF& Ī't\{BHuM6`pGϽO+!XoN'^[crh2*tW<{1U+l_QSncX<)Q(wJH ٯ#zCm>nhf6t}M&ʺ6ײ'\gkNS:;\qN-S;kǺ"{DailL`̗/޿ ^o#I&%0]SPV!] PK! ѐ'theme/theme/_rels/themeManager.xml.relsM 0wooӺ&݈Э5 6?$Q ,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JЊT8V"AȻHu}|$b{P8g/]QAsم(#L[PK-![Content_Types].xmlPK-!֧6 0_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!^}-theme/theme/theme1.xmlPK-! ѐ' theme/theme/_rels/themeManager.xml.relsPK]  (((((+ Hثfhlh D3VroV&V0Id0|īgijkmnopqrs "$+!8@0(  B S  ? %'67RS$%35vw( ) J K   Z [ NO'(MNQR9:/0UVHIGH@ARSij  V W !!""##$#w#x#$$$$b%c%]&^&''#'$'''''X(Y(((X)Y)))****Y+Z+++++---- ......//w0x000`1a1112233v3w3334425355555g6h66666B7C7778899a:b:::;;;;!<"<<<<<f=g===z?{?v@w@tAuAAA8B9BBBCC{C|CDDEEGGGGHHIIMJNJJJFKGKKKLLcLdLLLGMHMMM@NAN~NNNNLOMOOO%P&PhPiPQQQQQQuuuvvewfwwwPxQx y yyyzzH{I{e{f{{{5|6|||||}}}}K~L~~~ij}~Z[ЂтÄĄ<=%&gh}~ ]^fgʊˊBDJK qrגؒ+,qrst_`ABݚޚ ҜӜrsbc89wx()ޡߡ45xyΤϤMNæĦKLHIǩȩRSghGHNO9:YZPQCDrs9:˸̸efںۺ"# de/0_a&5'$'66I{f{Da&a*%$YI|-:ʈ>D3o& f2 \Lv!Q \L& Y"`0RxXa(b0\LA(}=V;DF0GdGB,S{̀Pt-iQ:-1R;} St lTel6Uso-V-nuforXomavjMΖjӤ$&%%xWW8Num15f&Vx\""""""""""""""""Q""""""""\" Wk &d)8 Z,x-m.K/ 12&U2P3 506tF6B<7-8 <>w@^)A 9u@Ydh-|II"96D06(5S[?s- 7nzB}=XG0AJ_p@@{aUnknown G.[x Times New Roman5Symbol3. .[x Arial7..{$ Calibri7$BCambria5. .[`)Tahoma?= .Cx Courier New;WingdingsA$BCambria Math"hF'ҹGT|Gd|Gd!Sr0cc 3qHX ?9q2!xx "%' /User)5@10:>2 02;> !5<5=>28Gd                 Oh+'0  < H T `lt|Ͳ UserNormal 20Microsoft Office Word@NZ@m@Te@TN|G՜.+,0 hp  Krokozdc Ͳ    !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !#$%&'()+,-./016Root Entry Fp?aN8Data 1TableqWordDocument7SummaryInformation("DocumentSummaryInformation8*CompObjr  F Microsoft Word 97-2003 MSWordDocWord.Document.89q