Chapter 215: Specific Attacks
As soon as Hu Yifei said this, even Cobra put down the things in his hand and walked over, "The code of the Z language? ”
"Yes!" Hu Yifei pointed to the prompt on the screen, his tool had intercepted part of the code, "The code is encrypted, but it won't be wrong, I'm sure of the z language!" ”
"No wonder!" Captain Li slapped the table, "I said why can't we check anything abnormal!" All the detection tools of the network supervision have not yet been able to detect the malicious code written in the Z language, the sentences of the Z language are very concise, and the malicious code written is completely different.
"Someone is going to use Z so soon?" Cobra was also surprised, and said: "Hackers always use technology to attack technology faster, this sentence is really true!" ”
The mayor didn't know what the Z language was, and he watched the three of them discuss and discuss, and none of them could understand a word, and said, "Is the problem really on the website of the Organization Department?" ”
"Basically!" Hu Yifei nodded, "But we have to analyze the role of these codes in detail to see if they can be linked to the previous theft, if the two match, then it can be proved that the source of the theft comes from the website." ”
"How long will it take to analyze the results?" The mayor asked.
"It could take a few hours!" Hu Yifei said, and looked at Captain Li when he was done.
Captain Li gritted his teeth, "I'll send a few data analysis experts to cooperate with you, and within two hours, come up with specific results, how about it?" ”
"Leave the data analysis to me!" Cobra smiled, "I'm an expert at this!" ”
Captain Li slapped his head, "You see that I forgot about you in such a hurry, then it will be troublesome to Mr. Hui, just say what cooperation you need, let's try to reach a conclusion as soon as possible!" ”
The mayor was not in a hurry to get off work, and instructed his secretary: "You go and cancel my dinner for the evening, and I will wait here for the results!" As soon as the secretary took two steps, the mayor instructed: "You go to the canteen, let you prepare some delicious meals, and send them here when they are ready, you can't let the experts go hungry to do things!" ”
The secretary answered, and hurried out to get busy.
The network monitor's computer has a virtual environment deployed to analyze the behavior of viruses and Trojans after entering the system, but unfortunately their monitoring software is all blind and deaf this time, and they are unaware of the new intrusion methods, so Hu Yifei has no choice but to redeploy the virtual environment and install his own monitoring tools.
After turning on the monitoring, Hu Yifei reopened the website of the Organization Department of the Provincial Party Committee in the virtual environment, and then stared at the monitoring records, and saw that the displayed data began to refresh rapidly, and after a while, the data renovation speed was significantly accelerated, but this rate began to become stable.
"That's it!" Cobra reminded that he is very experienced in data analysis, "You can stop!" ”
"Okay!" Hu Yifei nodded, but he didn't turn off the monitoring in a hurry, but first turned off the website of the organization department in the virtual environment, and then saw that the speed of monitoring data renovation slowed down instantly, and after waiting for more than ten seconds, Hu Yifei closed the monitoring software and began to extract data.
"Let's go our separate ways!" Captain Li divided the labor for everyone, "Xiaohu is responsible for studying how these codes come in, and Mr. Hui will see what these codes have done when they come in!" ”
Cobra is indeed an expert in analyzing data, and he is responsible for analyzing most of the data, but Hu Yifei came to a conclusion one step ahead of Hu Yifei, "There are three pieces of code in total, the first piece of code is very small, it sneaks into the computer through the browser, and then downloads the second piece of code back after running." After the second piece of code is on the computer, the first piece of code is cleared, and then the third code is downloaded back. The third piece of code enters the computer, immediately establishes a disguised SSL connection with an IP, and then starts to upload and transfer things on the computer, it does not scan keywords, randomly grabs files for upload, and it looks like a normal connection at all, so it is difficult for us to find it. ”
"So why didn't we find these two pieces of code on the computer?" Captain Lee asked.
"The code is written in Z language, and it is encrypted, it is difficult for us to detect, and the attacker is very confident, he is sure that he can come in repeatedly, so he did not open the backdoor on the computer, and did not let the code reside in the computer, when we closed the website of the organization department, the SSL connection was also disconnected, at this time the second code started to run again, it deleted the third code, and then cleaned up the Zhizhi, and finally deleted itself, and there was no trace left on the computer!"
"This is no ordinary hacker!" Captain Li immediately made a judgment, "To be able to make such a complex operation process smooth, every link is disguised, and the anti-detection ability is so strong, it is simply to the point of meticulous crafting, this is definitely done by a very professional hacker!" ”
The mayor stood up and said, "Captain Li, can you confirm it?" ”
Captain Li nodded, "It can be confirmed that the data analysis exactly matches the loss of files on our city computer, and it can be determined that the hacker launched the attack through the website of the Organization Department of the Provincial Party Committee!" ”
"Immediately put together detailed written materials!" After the mayor finished speaking, he came to the desk in three steps and two steps, picked up the phone and dialed a number, "Secretary Guoqiang?" I'm Sancai, and I have a very important matter to report to you, it's very serious! "Okay, I know, I'll come here!" ”。
Throwing down the phone, the mayor said to Captain Li: "100,000 is urgent, I can't wait for you to prepare the materials, you can go with me now and make an oral report to Secretary Guoqiang!" ”
Captain Li "snapped" a standing, "Yes!" After that, he said to Hu Yifei and Cobra: "I'll trouble you two here!" ”
"It's hard work, now the matter is urgent, I have to report this matter to my superiors! When I get back, I'll be sure to thank you both! The mayor did not delay, hurried out of the house, and ordered his secretary to stay and take care of it.
"Xiaohu, how is your analysis over there?" Cobra came to Hu Yifei at this time.
Hu Yifei was sweating from the analysis, and smiled embarrassedly, "This data analysis is really not my strong point, it will be fine soon, it has been determined that it is a vulnerability on IE, and I am now analyzing the specific information of the vulnerability!" ”
Cobra patted Hu Yifei on the shoulder and smiled, "You don't have to panic, calm down, the analysis will be faster, I'll go and extract the feature code of those three malicious programs!" After that, he went back to his computer and began to extract the malicious code, and when Captain Li came back, he would definitely use this.
Dongyang is the provincial capital, and the mayor will not delay much time when he reports it. After Hu Yifei analyzed the vulnerability information, he came up with a temporary surname to make up for it, and the matter was over, and the mayor's secretary hurriedly beckoned him to eat with Cobra and the people of the network supervisor.
As soon as everyone picked up the chopsticks, Captain Li came back, followed by the people of Guoan.
"Everyone's worked hard!" Captain Li walked with sweat on his forehead, and took off his hat to wipe it when he entered the door, "The province attaches great importance to this incident, thinking that this may be a well-planned act of stealing secrets, and has ordered our network supervision to cooperate with the national security operation. The second is to track down the hackers who steal secrets, and be sure to catch this black hand! ”
Hu Yifei swallowed the food in his mouth, and said in his heart that there should be nothing wrong with him, so he said: "I have figured out the method of code entry, and I have also come up with a temporary surname to deal with it, and put it on your computer!" ”
"Thank you!" Captain Li didn't care about being polite, and commanded several other network monitoring technicians in the room, "You stay, and hand over the directory of the lost documents of the city government to the comrades of Guoan!" After speaking, he was about to go out, "I still have to go to the bureau to arrange it, and I must find out the situation in several districts and counties tonight!" ”
"There you go!" Cobra nodded, "I'm here!" ”
"Can I go back?" Hu Yifei asked Cobra, with so many big caps walking around the house, he couldn't eat, "Now that the matter is clear, I can't help with the next thing!" ”
"Well, I'll let you know what's going on!" Cobra didn't hold back, threw down the chopsticks, and instructed the technician of the network supervisor to use the feature code he had just extracted to conduct a comprehensive scan of the political axe websites in the province and the whole city to see what other websites were recruited.
Out of the municipal axe website, the boss turned back unhappily, "We have made such a big effort, we have fished a meal, and we haven't eaten it yet, it's true!" ”
"Come on, just do Captain Li a favor, we usually take jobs from the network supervisor!" Hu Yifei looked left and right, "Let's go, find a place to eat first!" ”
The two found a restaurant, ate and drank to their heart's content, and then returned to the company. Hu Yifei remembered what happened tonight, and he couldn't sleep, so he posted another announcement on the website, titled: "The specific habits of specific occupational groups may be exploited by hackers!" ”
In this incident, the hacker is simply waiting for the rabbit, he just got a website, with the minimum cost, the maximum effect, but the blow is both for the surname, and the coverage is large, in the final analysis, the hacker uses the specific habits of this specific group, if the information is a little better, hackers can even determine their own targets according to different time periods, such as half past eight, that must be the mayor, it can be described as extremely accurate!
And so on, there are many professions that have some specific habits, and hackers can easily get enough information about their surnames from a commanding height.
slept until midnight, the company's doorbell rang loudly, Hu Yifei got up to open the door, and Captain Li stood outside the door.
"It's serious!" Captain Li looked serious and tired, and didn't come in, but just whispered: "Nationwide, many websites have been found that have been done the same thing, involving political axes, science and technology, military and other fields......"
Hu Yifei was immediately frightened to sober, damn it, isn't this a copy of the secret theft incident that the United States said before, and the scope is larger.
"We really need the kind of tool you have that can detect malicious code in unknown Z language!" Captain Li swallowed his saliva, it is estimated that he has not drunk water all night, "You act now, perfect that tool, we will ask for it tomorrow, it is considered that the ministry ordered from your Figo software!" ”
(To be continued)