- Akira yayi ikirarin cewa ya fitar da 23 GB na takardun Apache OpenOffice; lissafin ya kasance ba tare da tabbatarwa mai zaman kansa ba.
- Gidauniyar Software ta Apache tana bincike kuma ta ce ba ta mallaki nau'in bayanan da aka kwatanta ba kuma ba ta karɓi bukatar fansa ba.
- Babu wata alamar cewa abubuwan zazzagewar jama'a ko shigarwa na OpenOffice sun lalace.
- Kungiyar tana aiki ne da karbar kudi sau biyu kuma ta kai hari a Turai; ana ba da shawarar matakan ƙarfafawa ga ƙungiyoyi a cikin EU da Spain.
El Akira ransomware group ha aka buga a kan leaks portal wanda ya shiga cikin tsarin Apache OpenOffice kuma ya sace 23 GB na bayanan kamfaniKodayake sanarwar ta haifar da damuwa a cikin al'umma. babu tabbaci mai zaman kansa wanda ke tabbatar da sahihancin bayanan ko kuma ainihin abin da ya faru.
Apache OpenOffice Yana da free kuma bude tushen ofishin suite tare da kayan aikin daidai da Writer, Calc, Impress, Draw, Base, da Math, akwai don Windows, Linux, da macOS. Tun daga yau, Babu wata alama da ke nuna abubuwan da zazzagewa ko wuraren masu amfani sun shafi, tunda sun bambanta da sabobin ci gaba.
Iyakar abin da ake zargin sata
A cewar ikirari da aka danganta ga Akira, abin da ya faru zai hada da bayanan sirri da fayilolin ciki Kungiyar ta yi ikirarin mallakar wasu muhimman takardu kuma tana shirin sakinta idan ba a biya mata bukatunta ba.
- Adireshin jiki, lambobin waya, da kwanakin haihuwa
- Lasisin tuƙi da lambobin tsaro na zamantakewa
- Bayanan katin kiredit da bayanan kuɗi
- Fayilolin ciki na sirri
- Rahotanni masu yawa akan matsalolin aikace-aikacen da al'amurran ci gaba
A cikin sakon nasu, maharan sun jaddada cewa "23 GB na takardun kamfanoni za a loda" da bayyana kutsen da zai shafi tsarin aiki na gidauniyar. Dabara ta dace da kwace biyu: satar bayanai da matsawa mutane bugu da kari kan boye-boye.
Halin bincike da matsayi na Apache Software Foundation
A halin yanzu, Apache Software Foundation (ASF) bai tabbatar da alƙawarin ba na tsarin Apache OpenOffice. Kungiyar ta nunar da cewa tana gudanar da bincike kan lamarin kuma har yanzu ba a tantance jerin sunayen Akira ba, yayin da wasu kafafen yada labarai na musamman suka bukaci a yi tsokaci a hukumance.
A cikin sadarwar kwanan nan, ASF ta nuna hakan bai sami wani buƙatun fansa ba Kuma wannan, idan aka yi la'akari da yanayin bude hanyar aikin, ba shi da bayanan bayanan ma'aikata da maharan suka bayyana. Gidauniyar ta jaddada cewa an haɓaka OpenOffice a ciki tashoshin jama'a kuma yana ƙarfafa masu amfani don zazzage sabuwar sigar kawai daga gidan yanar gizon hukuma.
Bugu da ƙari kuma, ASF ya nuna cewa kayan aikin saukewa ya bambanta da sabobin ci gaba, sabili da haka babu shaida na ɓarna software na jama'a ko haɗari kai tsaye ga wuraren masu amfani a wannan matakin.
Wanene Akira kuma yaya yake aiki?
Akira aikin ransomware-as-a-service (RaaS) ne mai aiki tun 2023, tare da daruruwan kutse rubuce a cikin Amurka, Turai da sauran yankuna, kuma tare da tarihin tattara miliyoyin kuɗi a matsayin fansa.
Ƙungiyar tana amfani da dabarun kwace biyu kuma yana haɓaka bambance-bambancen don Windows da Linux/VMware ESXi. Rahoton Bitdefender (Maris 2025) har ma ya lura da amfani da kyamaran yanar gizo na wadanda abin ya shafa don samun karfin gwiwa yayin tattaunawar.
A cikin dandalin tattaunawa na karkashin kasa suna sadarwa cikin Rashanci kuma malware ɗin su yawanci ne Guji kwamfutoci masu shimfidar madannai na madannai na Rasha, tsarin da aka gani a wasu ƙungiyoyin da ke neman gujewa kai hari wasu wurare.
Abubuwan da ke faruwa ga Spain da Tarayyar Turai
Idan an tabbatar da sahihancin bayanan da aka leka, ana iya kunna su wajibcin sanarwa A ƙarƙashin GDPR, bayanan sirri dole ne su kasance ƙarƙashin hukuma kamar Hukumar Kare Bayanan Mutanen Espanya (AEPD), kuma a wasu sassa, buƙatun NIS2 sun shafi masu samar da sabis masu mahimmanci ko dijital. Yiwuwar yin amfani da bayanan sirri ba daidai ba zai ƙara haɗarin phishing da injiniyan zamantakewa a kan masu haɗin gwiwa da masu samar da kayayyaki.
Ga ƙungiyoyin Mutanen Espanya da na Turai waɗanda ke amfani da OpenOffice (ko waɗanda ke tare da shi) Linux/ESXi mahallin), yana da kyau a karfafa da saka idanu na anomalous ayyukaWare wariyar ajiya, yi amfani da MFA, cibiyoyin sadarwa na yanki, da ci gaba da sabunta faci, rage taga don cin gajiyar rauni.
Matakan ragewa da kyawawan ayyuka
Idan babu tabbacin hukuma game da iyakokin, yana da kyau a yi taka tsantsan. lafiya tsafta da kuma iyakance wuraren da aka kai hari akan wuraren ƙarshe da sabobin, ba da fifikon rigakafi, ganowa, da sarrafa amsawa.
- Zazzage OpenOffice daga openoffice.org kawai da kuma guje wa haɗin kai na ɓangare na uku akan hanyoyin sadarwar zamantakewa ko dandalin tattaunawa.
- Tabbatar da amincin masu sakawa kuma ko da yaushe kiyaye latest version.
- Aiwatar da MFA zuwa damar gudanarwa da VPNBitar manufofin kalmar sirri.
- Segregate kuma encrypt madadin (offline/mai canzawa) da gwada dawowarsa lokaci-lokaci.
- Hardening ESXi hypervisors da Linux/Windows sabobin; kaya da ci gaba da faci.
- Aiwatar da EDR/antimalware tare da iya aiki exfiltration da kuma ganowar ransomware.
- Koyarwar yaƙi da phishing da atisaye martanin da ya faru.
Ana kuma bada shawarar kunnawa blocklists da kuma lura da irin wannan yanki (typosquatting), da kuma faɗakarwa game da yiwuwar wallafe-wallafen bayanai a kan shafukan yanar gizo don amsawa da sauri.
Halin ya ci gaba da faruwa: Akira yana kula da matsa lamba tare da sanarwarsa, yayin da ASF ke bincike da kuma ya yi tambaya game da yiwuwar daga bayanan da ake zargin an sace. Kamar yadda na yau, haɗarin ƙare masu amfani da alama iyakanceKoyaya, lamarin yana ƙarfafa buƙatar saukarwa kawai daga tushe na hukuma da kuma ɗaga shingen tsaro a ƙungiyoyi a Spain da EU.
Ni mai sha'awar fasaha ne wanda ya mayar da sha'awar "geek" zuwa sana'a. Na shafe fiye da shekaru 10 na rayuwata ta yin amfani da fasaha mai mahimmanci da kuma yin amfani da kowane nau'i na shirye-shirye saboda tsantsar son sani. Yanzu na kware a fasahar kwamfuta da wasannin bidiyo. Wannan shi ne saboda sama da shekaru 5 ina yin rubutu a gidajen yanar gizo daban-daban kan fasaha da wasannin bidiyo, ina ƙirƙirar kasidu da ke neman ba ku bayanan da kuke buƙata cikin yaren da kowa zai iya fahimta.
Idan kuna da wasu tambayoyi, ilimina ya bambanta daga duk wani abu da ya shafi tsarin aiki na Windows da kuma Android don wayoyin hannu. Kuma alƙawarina shine a gare ku, koyaushe a shirye nake in yi ƴan mintuna kaɗan in taimaka muku warware duk wata tambaya da kuke da ita a duniyar Intanet.