恶意软件矩阵帮派和代码混混使用恶意软件的原因与他们砸车或偷东西的原因是一样的——制造麻烦,混乱和破坏。当然,病毒不能像老式的一拳击倒那样让人血脉喷张,但当你的代码去摧毁了某个混蛋的通讯链时,你的肾上腺素也会有一点飙升。
另一方面,专业人士则更挑剔。29年崩溃和崩溃2.0都是由恶意软件造成的,今天的黑客更看重病毒的破坏能力和它的声誉。从事计算机犯罪的犯罪集团和矩阵帮派广泛使用恶意软件作为敲诈勒索和保护费诈骗的一部分。
> 更别提保险诈骗和证据销毁了。新东京的谷内组
(译注:Wanibuchi-gumi,山口组在新东京的矩阵帮派之一),每年都要通过几个线上保释官洗干净数不尽的新元,但他们并不记得缴税。当收税人员开始蜂拥而入时,他们发布了隐藏的病毒包,摧毁了节点,破坏证据并使其无法被修复——并让保释官收取保险费用。
> Mihoshi Oni
病毒是一种自我传播的软件,它“感染”特定类型的软件。如果操作得当,这是一种削弱网络或自动化工厂的简单而阴险的方式。谨慎的战斗黑客有时喜欢通过先给节点注入病毒的方式来弱化节点;不管你从企业那里听到什么宣传,只有最粗心的黑客才会在狂奔过程中被自己的病毒感染。就我个人而言,我喜欢在晚上关掉我的通讯链之前,在它上面安装一个与赛博殖装驱动程序相关联的自动发讯病毒; 大多数人开机后都不会立即杀毒,这样任何想偷我东西的人都会让病毒通过他们的PAN传播到他们的植入体上。
蠕虫是特化的恶意软件代理,强调隐匿而不是暴力。只要您不让代理一次运行整个有效负载,一个优秀的蠕虫可以在节点上持续运行数天或数周而不被发现。企业黑客和执法部门倾向于使用蠕虫,特别是数据蠕虫,以追踪黑客或限制他们的能力。真正令人讨厌的组合是给蠕虫装入一种和平注意病毒,这种病毒会感染黑客的战斗程序,并阻止他们彻底炸掉蠕虫。另一方面,蠕虫本身对病毒几乎没有防御能力。我通常用惯性感染的自动软件来干扰它们的复制能力。
> 不过对机师来说有点糟糕,是吧?
> Sticks
> 对于无人机来说,最好的防御方法就是一开始就不被黑客攻击,但对于机师来说,强大的加密技术是一个可以阻止大多数蠕虫的很好的备用手段。一个无法立即处理蠕虫或病毒的机师最好在病毒传播之前将其从网络中移除。
> Rigger X
> 或者关掉被感染的无人机并让它成为一个有效的陷阱。我曾经因为这而被烧伤过。
> Turbo Bunny
病毒和蠕虫都是直接和主动的程序,旨在以某种方式削弱节点或设备。相比之下,木马更像侦察兵,进入节点并为之后的骇入攻击铺平道路。
> 当然,没有什么能阻止你组合不同类型的恶意软件。你可以使用一个在其有效载荷中带有病毒和木马的蠕虫,它潜入节点,并使你顺利进入,随后在你离开时释放出病毒来掩盖你的踪迹。这就像是在优雅地创造基因嵌合体。
> The Smiling Bandit
劇透 - :
A virus is a self-propagating piece of software that "infects" software of a specific type. Done right, this can be a simple and insidious way to cripple a network or automated factory. Serious combat hackers sometimes like to soften up nodes by feeding them viruses first; despite the propaganda you hear from the corps, only the most careless hackers end up infected by their own viruses during a run. Personally, I like to install a ticker virus tied to cyberware drivers on my commlink before I turn it off for the night; most people don’t think to disinfect immediately when they boot up, and anybody trying to jack my shit lets the virus spread through their PAN to their implants.
Worms are specialized malware agents with an emphasis on stealth instead of brute force. As long as you keep the agent from running the entire payload at once, a good worm can last for days or weeks on a node without being discovered. Corporate hackers and law enforcement tend to favor worms, especially dataworms, to keep track of hackers or limit their capabilities. One really nasty combination is to load a worm with a pacifist virus that infects the hacker’s combat proggies and prevents them from frying the worm outright. On the other hand, worms themselves have few defenses against viruses. I usually stick with an inertiainfected autosoft to jam their replicate ability.
> Kinda sucks for riggers though, huh?
> Sticks
> The best defense for a drone is simply not to get hacked to begin with, but a good back-up for riggers is strong encryption—stymies most worms. In a pinch, a rigger that can’t deal with a worm or a virus immediately is best off cutting it out of their network before the infection spreads.
> Rigger X
> Or shut the infected drone down and leave it as an effective boobytrap for somebody. I got burned like that once.
> Turbo Bunny
Viruses and worms are both straight forward and proactive programs designed to weaken a node or device in some way. By contrast, trojans are more like scouts that go in and pave the way for a later hack.
> Of course, there’s nothing to stop you from combining different types of malware. You can have a worm with a virus and a trojan in its payload that moves in, smoothes your entry, and unleashes the virus to cover your tracks when you leave. It’s almost like creating genetic chimerae in its elegance.
> The Smiling Bandit
来自: Clockwork
主题: 回复: 工效恶意软件
是否用工效程序选项加载你的恶意软件取决于恶意软件代理的目的。如果你想让系统变慢或崩溃,用常规程序加载恶意软件是一个好办法。另一方面,如果你想让你的恶意软件不被发现,我会选择使用工效程序选项:更少的程序负载意味着它不太可能被注意到。有时你会想把这两种想法结合起来。例如,你可能希望蠕虫病毒在整个系统中传播(使用工效隐匿程序保持其不被检测到),然后当信号发出时(或定时器计时结束,诸如此类的),代理停用其工效程序,并运行常规程序来降低系统速度。当然,唯一的问题是,在停用和运行程序之间有一段时间,这段时间内蠕虫会特别容易受到攻击。