{"id":1018030,"date":"2023-11-15T16:15:53","date_gmt":"2023-11-15T18:15:53","guid":{"rendered":"https:\/\/teknomers.com\/fr\/les-etats-unis-demantelent-le-botnet-ipstorm-et-le-cerveau-russo-moldave-plaide-coupable\/"},"modified":"2023-11-15T16:15:57","modified_gmt":"2023-11-15T18:15:57","slug":"les-etats-unis-demantelent-le-botnet-ipstorm-et-le-cerveau-russo-moldave-plaide-coupable","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/les-etats-unis-demantelent-le-botnet-ipstorm-et-le-cerveau-russo-moldave-plaide-coupable\/","title":{"rendered":"Les \u00c9tats-Unis d\u00e9mant\u00e8lent le botnet IPStorm et le cerveau russo-moldave plaide coupable"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">15 novembre 2023<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">R\u00e9daction<\/span><\/span><span class=\"p-tags\">Cybercriminalit\u00e9\/S\u00e9curit\u00e9 des r\u00e9seaux<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2023\/11\/Les-Etats-Unis-demantelent-le-botnet-IPStorm-et-le-cerveau-russo-moldave.jpg\" style=\"clear: left; display: block; float: left; text-align: center;\"><\/a><\/div>\n<p>Le gouvernement am\u00e9ricain a annonc\u00e9 mardi le d\u00e9mant\u00e8lement du r\u00e9seau proxy de botnet IPStorm et de son infrastructure, les ressortissants russe et moldave \u00e0 l&#8217;origine de l&#8217;op\u00e9ration ayant plaid\u00e9 coupable.<\/p>\n<p>&#8220;L&#8217;infrastructure du botnet a infect\u00e9 les syst\u00e8mes Windows, puis s&#8217;est \u00e9tendue pour infecter les appareils Linux, Mac et Android, victimisant les ordinateurs et autres appareils \u00e9lectroniques dans le monde entier, notamment en Asie, en Europe, en Am\u00e9rique du Nord et en Am\u00e9rique du Sud&#8221;, a d\u00e9clar\u00e9 le minist\u00e8re de la Justice (DoJ). ) <a rel=\"nofollow noopener\" href=\"https:\/\/www.justice.gov\/usao-pr\/pr\/russian-and-moldovan-national-pleads-guilty-operating-illegal-botnet-proxy-service\" target=\"_blank\">dit<\/a> dans un communiqu\u00e9 de presse.<\/p>\n<p>Sergei Makinin, qui a d\u00e9velopp\u00e9 et d\u00e9ploy\u00e9 le logiciel malveillant pour infiltrer des milliers d&#8217;appareils connect\u00e9s \u00e0 Internet de juin 2019 \u00e0 d\u00e9cembre 2022, risque une peine maximale de 30 ans de prison.<\/p>\n<p>Le malware botnet bas\u00e9 sur Golang, avant son d\u00e9mant\u00e8lement, transformait les appareils infect\u00e9s en proxys dans le cadre d&#8217;un programme \u00e0 but lucratif, qui \u00e9tait ensuite propos\u00e9 \u00e0 d&#8217;autres clients via proxx.[.]io et proxx[.]filet.<\/p>\n<div class=\"check_two clear babsi\"><center class=\"cf\"><a rel=\"nofollow noopener\" href=\"https:\/\/thn.news\/4WnFxcNN\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"La cyber-s\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2023\/11\/Les-experts-mettent-en-garde-contre-les-pirates-de-ransomware.png\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>&#8220;IPStorm est un botnet qui exploite un r\u00e9seau peer-to-peer (p2p) l\u00e9gitime appel\u00e9 InterPlanetary File System (IPFS) pour masquer le trafic malveillant&#8221;, a not\u00e9 la soci\u00e9t\u00e9 de cybers\u00e9curit\u00e9 Intezer dans <a rel=\"nofollow noopener\" href=\"https:\/\/intezer.com\/blog\/research\/a-storm-is-brewing-ipstorm-now-has-linux-malware\/\" target=\"_blank\">octobre 2020<\/a>.<\/p>\n<p>Le botnet \u00e9tait <a rel=\"nofollow noopener\" href=\"https:\/\/www.anomali.com\/blog\/the-interplanetary-storm-new-malware-in-wild-using-interplanetary-file-systems-ipfs-p2p-network\" target=\"_blank\">document\u00e9 pour la premi\u00e8re fois<\/a> par Anomali en mai 2019 et, au fil des ann\u00e9es, a \u00e9largi son champ d&#8217;action pour <a rel=\"nofollow noopener\" href=\"https:\/\/blog.barracuda.com\/2020\/10\/01\/threat-spotlight-new-interplanetary-storm-variant-iot\" target=\"_blank\">cible<\/a> d&#8217;autres syst\u00e8mes d&#8217;exploitation tels que Linux, macOS et Android.<\/p>\n<p>Les acteurs malveillants qui souhaitent cacher leurs activit\u00e9s malveillantes pourraient acheter un acc\u00e8s ill\u00e9gitime \u00e0 plus de 23 000 robots pour \u00ab des centaines de dollars par mois \u00bb pour acheminer leur trafic.  On estime que Makinin a gagn\u00e9 au moins 550 000 dollars gr\u00e2ce \u00e0 ce projet.<\/p>\n<p>Conform\u00e9ment \u00e0 l&#8217;accord de plaidoyer, Makinin devrait perdre les portefeuilles de crypto-monnaie li\u00e9s \u00e0 l&#8217;infraction.<\/p>\n<div class=\"check_two clear babsi\"><center class=\"cf\"><a rel=\"nofollow noopener\" href=\"https:\/\/thn.news\/pjHvTZON\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"La cyber-s\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2023\/11\/Turla-met-a-jour-la-porte-derobee-Kazuar-avec-une.gif\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>&#8220;Le botnet Interplanetary Storm \u00e9tait complexe et utilis\u00e9 pour alimenter diverses activit\u00e9s cybercriminelles en le louant comme proxy en tant que syst\u00e8me de service sur des appareils IoT infect\u00e9s&#8221;, a d\u00e9clar\u00e9 Alexandru Catalin Cosoi, directeur principal de l&#8217;unit\u00e9 d&#8217;enqu\u00eate et d&#8217;investigation chez Bitdefender, dans un communiqu\u00e9 partag\u00e9 avec L&#8217;actualit\u00e9 des hackers.<\/p>\n<p>&#8220;Notre <a rel=\"nofollow noopener\" href=\"https:\/\/www.bitdefender.com\/blog\/labs\/ssh-targeting-golang-bots-becoming-the-new-norm\/\" target=\"_blank\">initial<\/a> <a rel=\"nofollow noopener\" href=\"https:\/\/www.bitdefender.com\/blog\/labs\/interplanetary-storm-botnet-shows-signs-of-anonymization-purpose-proxy-for-hire-infrastructure\/\" target=\"_blank\">recherche<\/a> en 2020, nous avons d\u00e9couvert de pr\u00e9cieux indices sur le coupable de son op\u00e9ration, et nous sommes extr\u00eamement heureux que cela ait contribu\u00e9 \u00e0 conduire \u00e0 des arrestations.  Cette enqu\u00eate est un autre exemple frappant de la collaboration entre les forces de l&#8217;ordre et le secteur priv\u00e9 de la cybers\u00e9curit\u00e9 pour mettre fin aux activit\u00e9s ill\u00e9gales en ligne et traduire les responsables en justice. \u00bb<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant ?  Suivez-nous sur <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"nofollow noopener\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">LinkedIn<\/a> pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2023\/11\/us-takes-down-ipstorm-botnet-russian.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80215 novembre 2023\ue804R\u00e9dactionCybercriminalit\u00e9\/S\u00e9curit\u00e9 des r\u00e9seaux Le gouvernement am\u00e9ricain a annonc\u00e9 mardi le d\u00e9mant\u00e8lement du r\u00e9seau proxy de botnet IPStorm et de son infrastructure, les ressortissants russe et moldave \u00e0 l&#8217;origine de l&#8217;op\u00e9ration ayant plaid\u00e9 coupable. &#8220;L&#8217;infrastructure du botnet a infect\u00e9 les syst\u00e8mes Windows, puis s&#8217;est \u00e9tendue pour infecter les appareils Linux, Mac et Android, victimisant [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1018031,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[200292,5464,14783,4168,14780,4165,4161,200267,54346,3118,215018,4159,4171,65,200271,200268,200269,200270,1050,215019,128318,4172,4169,4166,4164],"class_list":["post-1018030","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-actualites-sur-la-cybersecurite","tag-botnet","tag-cerveau","tag-comment-pirater","tag-coupable","tag-cyber-attaques","tag-cyber-mises-a-jour","tag-cyberactualites","tag-demantelent","tag-etatsunis","tag-ipstorm","tag-lactualite-de-la-cybersecurite-aujourdhui","tag-lactualite-des-hackers","tag-les","tag-logiciel-malveillant-rancongiciel","tag-mises-a-jour-sur-la-cybersecurite","tag-nouvelles-des-pirates","tag-nouvelles-sur-le-piratage","tag-plaide","tag-russomoldave","tag-securite-des-informations","tag-securite-informatique","tag-securite-internet","tag-violation-de-donnees","tag-vulnerabilite-logicielle"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1018030","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=1018030"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1018030\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/1018031"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=1018030"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=1018030"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=1018030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}