{"id":8198,"date":"2017-11-16T12:39:18","date_gmt":"2017-11-16T12:39:18","guid":{"rendered":"https:\/\/apen.onlinevalles.club\/?p=8198"},"modified":"2025-03-04T10:20:11","modified_gmt":"2025-03-04T10:20:11","slug":"una-falsa-actualizacion-de-adobe-que-podria-convertirse-en-el-nuevo-ransomware","status":"publish","type":"post","link":"https:\/\/apen.onlinevalles.club\/ca\/blog\/una-falsa-actualizacion-de-adobe-que-podria-convertirse-en-el-nuevo-ransomware\/","title":{"rendered":"Una falsa actualizaci\u00f3n de Adobe que podr\u00eda convertirse en el nuevo ransomware"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Se llama BadRabbit y los expertos detectan muchas similitudes con NotPetya, la epidemia que atac\u00f3 a centenares de organizaciones el pasado mes de junio, que fue m\u00e1s peligroso y sofisticado que el ya popular WannaCry, aunque usa su misma vulnerabilidad.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A finales de octubre, el medio de comunicaci\u00f3n ruso Interfax dijo que sus servidores quedaron inoperativos por un ciberataque. Pasadas las primeras horas, despu\u00e9s de que los periodistas tuviesen que publicar las noticias en la red social Facebook, la firma de seguridad inform\u00e1tica rusa Group-IB comparti\u00f3 una captura de pantalla de un nuevo&nbsp;<a href=\"https:\/\/elpais.com\/tag\/virus_informaticos\/a\/\"><em>ransomware<\/em><\/a>&nbsp;en acci\u00f3n llamado BadRabbit y confirm\u00f3 que exist\u00edan, al menos otros tres medios de comunicaci\u00f3n que tambi\u00e9n eran v\u00edctimas de este ataque.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">BadRabbit tiene como objetivo pedir un rescate econ\u00f3mico a cambio de recuperar la informaci\u00f3n secuestrada por el c\u00f3digo inform\u00e1tico. Se basa en la misma estrategia de otros conocidos ciberataques a gran escala como WannaCry y NotPetya.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"510\" height=\"340\" src=\"https:\/\/apen.onlinevalles.club\/wp-content\/uploads\/2017\/11\/laptop-2450220__340.jpg\" alt=\"\" class=\"wp-image-8201\" srcset=\"https:\/\/apen.onlinevalles.club\/wp-content\/uploads\/2017\/11\/laptop-2450220__340.jpg 510w, https:\/\/apen.onlinevalles.club\/wp-content\/uploads\/2017\/11\/laptop-2450220__340-300x200.jpg 300w\" sizes=\"auto, (max-width: 510px) 100vw, 510px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">BadRabbit tambi\u00e9n cifra los ficheros y pide un rescate a efectuar en la cartera de Bitcoin, supuestamente controlada por los ciberdelincuentes, pero adem\u00e1s este nuevo ciberataque, a diferencia de NotPetya, este s\u00ed que permite rescatar los ficheros y a cada v\u00edctima se le ofrece una cartera de Bitcoin diferente, por lo que es m\u00e1s dif\u00edcil de rastrear.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">El n\u00famero de infecciones por BadRabbit es menor al causado por WannaCry o NotPetya pero, por otro lado, sus v\u00edctimas son objetivos de primer nivel: aeropuertos, instituciones estatales o estaciones de metro ucranianas y medios de comunicaci\u00f3n rusos\u00bb, etc.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">El ransomware se extendi\u00f3 mediante simples descargas web en lugar de un ataque propagado masivamente en busca de usuarios vulnerables y se col\u00f3 en los ordenadores, enmascarado como una actualizaci\u00f3n rutinaria de Adobe Flash Player, a trav\u00e9s de las webs de prensa rusas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Una vez instalado en el ordenador del usuario, el ransomware busca propagarse a trav\u00e9s del protocolo de red de Windows (SMB) utilizando, tambi\u00e9n, una herramienta capaz de cambiar los privilegios del ordenador de la v\u00edctima dentro de la red local y otra para sacar las contrase\u00f1as de los otros equipos en texto plano.<\/p>","protected":false},"excerpt":{"rendered":"<p>Se llama BadRabbit y los expertos detectan muchas similitudes con NotPetya, la epidemia que atac\u00f3 a centenares de organizaciones el&#8230;<\/p>","protected":false},"author":5,"featured_media":8199,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[47,147,66,256,194,88],"tags":[302,214,301,236],"class_list":["post-8198","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apen","category-ciberataques","category-mantenimiento-informatico","category-ransomware","category-seguridad","category-web","tag-badrabbit","tag-ciberataque","tag-ciberataque-masivo","tag-ransomware"],"acf":[],"taxonomy_info":{"category":[{"value":47,"label":"Apen"},{"value":147,"label":"Ciberataques"},{"value":66,"label":"Mantenimiento inform\u00e1tico"},{"value":256,"label":"Ransomware"},{"value":194,"label":"seguridad"},{"value":88,"label":"WEB"}],"post_tag":[{"value":302,"label":"badrabbit"},{"value":214,"label":"ciberataque"},{"value":301,"label":"ciberataque masivo"},{"value":236,"label":"Ransomware"}]},"featured_image_src_large":["https:\/\/apen.onlinevalles.club\/wp-content\/uploads\/2017\/11\/hare-1634313_640.jpg",850,401,false],"author_info":{"display_name":"Patricia","author_link":"https:\/\/apen.onlinevalles.club\/ca\/blog\/author\/patricia\/"},"comment_info":0,"category_info":[{"term_id":47,"name":"Apen","slug":"apen","term_group":0,"term_taxonomy_id":47,"taxonomy":"category","description":"","parent":0,"count":251,"filter":"raw","term_order":"0","cat_ID":47,"category_count":251,"category_description":"","cat_name":"Apen","category_nicename":"apen","category_parent":0},{"term_id":147,"name":"Ciberataques","slug":"ciberataques","term_group":0,"term_taxonomy_id":147,"taxonomy":"category","description":"","parent":0,"count":39,"filter":"raw","term_order":"0","cat_ID":147,"category_count":39,"category_description":"","cat_name":"Ciberataques","category_nicename":"ciberataques","category_parent":0},{"term_id":66,"name":"Mantenimiento inform\u00e1tico","slug":"mantenimiento-informatico","term_group":0,"term_taxonomy_id":66,"taxonomy":"category","description":"","parent":0,"count":79,"filter":"raw","term_order":"0","cat_ID":66,"category_count":79,"category_description":"","cat_name":"Mantenimiento inform\u00e1tico","category_nicename":"mantenimiento-informatico","category_parent":0},{"term_id":256,"name":"Ransomware","slug":"ransomware","term_group":0,"term_taxonomy_id":256,"taxonomy":"category","description":"","parent":0,"count":6,"filter":"raw","term_order":"0","cat_ID":256,"category_count":6,"category_description":"","cat_name":"Ransomware","category_nicename":"ransomware","category_parent":0},{"term_id":194,"name":"seguridad","slug":"seguridad","term_group":0,"term_taxonomy_id":194,"taxonomy":"category","description":"","parent":0,"count":50,"filter":"raw","term_order":"0","cat_ID":194,"category_count":50,"category_description":"","cat_name":"seguridad","category_nicename":"seguridad","category_parent":0},{"term_id":88,"name":"WEB","slug":"web","term_group":0,"term_taxonomy_id":88,"taxonomy":"category","description":"","parent":0,"count":128,"filter":"raw","term_order":"0","cat_ID":88,"category_count":128,"category_description":"","cat_name":"WEB","category_nicename":"web","category_parent":0}],"tag_info":[{"term_id":302,"name":"badrabbit","slug":"badrabbit","term_group":0,"term_taxonomy_id":302,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"0"},{"term_id":214,"name":"ciberataque","slug":"ciberataque","term_group":0,"term_taxonomy_id":214,"taxonomy":"post_tag","description":"","parent":0,"count":3,"filter":"raw","term_order":"0"},{"term_id":301,"name":"ciberataque masivo","slug":"ciberataque-masivo","term_group":0,"term_taxonomy_id":301,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"0"},{"term_id":236,"name":"Ransomware","slug":"ransomware","term_group":0,"term_taxonomy_id":236,"taxonomy":"post_tag","description":"","parent":0,"count":4,"filter":"raw","term_order":"0"}],"_links":{"self":[{"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/posts\/8198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/comments?post=8198"}],"version-history":[{"count":1,"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/posts\/8198\/revisions"}],"predecessor-version":[{"id":54070,"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/posts\/8198\/revisions\/54070"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/media\/8199"}],"wp:attachment":[{"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/media?parent=8198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/categories?post=8198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/apen.onlinevalles.club\/ca\/wp-json\/wp\/v2\/tags?post=8198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}