Er. Chhungpuia Renthlei
Senior Technical Officer, NIELIT Aizawl
-- Advertisement --
Internet i browse khan Banner ads, sidebars, and pop-ups nalh tak taka design leh pawimawh hmel hle tak tak i hmu thin em? Social media kaltlangin products tha tak man tlawm taka sale i dawng thin em? email inbox i han hawnga Advertisement leh thil pawimawh hmel tak a lo awm thin em?
Hun i neih vang ngawtin hengte hi click-in download nghal ngawt suh aw. Hengte hi Biak ina kan hla sak lar tak Thil tha kan hmuh ang hi tuman an hmu thei lo tih hla a, thil tha zinga telh vek chi an ni mawlh lo! A chhan chu Cyberattacker te hian online advertisement himlo leh itawm tak si an siam teuh a ni a. Hengte hi Malvertising an vuah. Mi tam tak thlem nan social media leh website hrang hrangah an dah teuh thin. Hetiang hi i lo click vaih chuan anmahni server ah an hruai lut ang che a, an duh ang angin i mobile leh computer software an suasam tawh mai dawn a ni.
Malvertising hi enge a nih chiah le?
Malvertising chu malicious advertising tihna a ni. A awmzia chu online advertisement hmanga mobile leh computer software khawihbuai thei Malicious Sofware (Malware) chi hrang hrang:- viruses, trojans, ransomware, spyware, or adware virus thehdarhna a ni. Cybercriminals te chuan heng advertisement-ah hian mobile leh computer software khawihbuai thei Malicious Sofware (Malware) chi hrang hrang an thun a, website hrang hrangah online advertisement hmangin an thehdarh thin. Malvertising server-ah hian software chi khat exploit kits an tih mai, kan Mobile leh computer system audit theihna leh security chak lohna lai (weak spot) chhui chhuah theihna awm a. Malvertising hmanga heng an server-a min hruai luh a, kan mobile leh computer-a heng Malware install a, kan file pawimawh tak tak ruk leh tihchhiat bakah software hnathawk thei lova siam hi an tum ber a ni.
Malvertising hmangin engtinnge mobile/ computer software an suasam?
A hmasa berin techniques hrang hrang hmangin Cybercriminals ten online advertisements-ah malicious code/malware an thun lut a. Hei hi Malicious Code Injection an vuah. Software khawih buai thei awmna advertisements te chu network hrang hrang atangin websites, social media, email leh SMS hmangin an thawn darh ta chiam a. Hei hi Distribution through Ad Networks an vuah. Tichuan, Websites, social media platforms leh mobile apps ah te kan lo hmu ta teuh mai a nih hi.
Hengte hi computer leh mobile hmanga kan visit emaw, kan download veleh heng virus program te hi an rawn activate ta a. Hei hi Drive-By Downloads an vuah. Malvertising server-ah min hruai lut a, Windows leh Android operating system-ah emaw, browser ah security panna (vulnerabilities) an hmuh veleh malware an thun lut nghal thin. Tichuan, heng malware te hian web browsers (Chrome, Firefox, Internet explorer e.t.c), plugins leh operating systems (Windows, Android) an luhkhung ta a.Windows leh Android operating system ah leh browser ah te security panna (vulnerabilities) an zawng nghal char char a, an hmuh veleh kan hriat loh hlanin malware an thehdarh vak thin. Hei hi Exploitation of Vulnerabilities an vuah.
Tichuan, duhthusama an luhchilh hnuah Sensitive information Id & password, Bank a/c, phone no e.t.c an copy a, computer leh mobile an thunun a, an duh ang angin software an suasam tawh mai thin. Hei hi Payload Delivery an ti. File hawn theih loh turin an siam danglam (encrypt) a. Heng file te hi sum a tlanchhuah leh turin an vau thin bawk. An target beih dan hi chi hrang hrang awm mah se, online advertising hi an hmang vek a ni.
Malvertising chi engzatnge awm?
Malware an thehdarh dan azirin hlawm hnihin pre-click ah leh post- click ah an then.
Pre-click Malvertising:
Malvertising hi click loh chuan hlauhawm loh turah kan ngai a ni maithei. Mahse, pre-click ho hi chu Malvertising naran an nilo a, click miah loh pawhin mobile/ computerah automatic in an in download thei. Hetiang hi Drive-By Downloads an vuah. Online advertisement blockna (ad-blockers) an paltlang theih bawk avangin inven pawh harsa tak a ni.
Post-click Malvertising:
Hetiang Malvertising hi click phawt hnua pawikhawih chi an ni. Auto-redirect function an nei a, hemi hmang hian click veleh an duhna website ah min hruai lut nghal thin. Tichuan, an duh tawk a kan mobile computer an suasam theih nan anmahni server nen min connect thin. Pre-click aia a hlauhawmna a nep chuang lo.
Eng tin nge kan inven him ang?
Website address https a nih vang ringawta website him tura rin bur loh a him ber. Khawvela website lar leh him nia ngaih The New York Times leh The Atlantic-ah te hial pawh malvertising hi a awm leh zauh thin. Inven sen ni lo mah se, Ads blocker leh Antivirus software update tha tak install tur a ni. Tin, autoplay ang chi hi off vek a tha. Windows leh Android original version hman hi a him ber bawk. Hei bakah mobile leh computer-ah application software dah teuh lova, kan mamawh chauh dah a tha. Kan system a software te hi khat tawka update zel a tha.
A pawimawh ber chu keimahni fimkhurna hi a ni. Whatsapp, Facebook leh Instagram-ah advertisement te hi a him a ni tih hriat loh chuan click loh a tha hle. Thil man tlawm uchuak te, group danga share kual tura an rawn dah te leh email leh SMS hmanga advertisement kan dawn te hi hriatchian loh chuan delete zel hi him ber.
Malvertising avang hian ni tin internet hmangtute leh organizations ten harsatna an tawk a, a tuartu i nih ve lohna turin lo inveng him zel phawt mai teh le.