{"id":519,"date":"2024-08-04T13:01:30","date_gmt":"2024-08-04T06:01:30","guid":{"rendered":"https:\/\/labellablog.com\/index.php\/peretas-memanfaatkan-notebook-jupyter-yang-dikonfigurasi-salah-dengan-alat-ddos-minecraft-yang-diubah-tujuannya\/"},"modified":"2024-08-04T13:01:30","modified_gmt":"2024-08-04T06:01:30","slug":"peretas-memanfaatkan-notebook-jupyter-yang-dikonfigurasi-salah-dengan-alat-ddos-minecraft-yang-diubah-tujuannya","status":"publish","type":"post","link":"https:\/\/labellablog.com\/index.php\/peretas-memanfaatkan-notebook-jupyter-yang-dikonfigurasi-salah-dengan-alat-ddos-minecraft-yang-diubah-tujuannya\/","title":{"rendered":"Peretas Memanfaatkan Notebook Jupyter yang Dikonfigurasi Salah dengan Alat DDoS Minecraft yang Diubah Tujuannya"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">Bahasa Indonesia:<\/i><span class=\"author\">03 Agustus 2024<\/span><i class=\"icon-font icon-user\">Bahasa Indonesia:<\/i><span class=\"author\">Ravie Laxmanan<\/span><\/span><span class=\"p-tags\">Serangan DDoS \/ Keamanan Server<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgJUm8NcZ7i8h5mjZPKMgQPu-cWw1iw4k9AX20doSGcKPDg5s5oXE3rmbwV1rLBR260olLDBdvW1j1JDyYTymw0_eoHm5ma0eeTH2bmoDEcTA7C48ObMZ2D-95Ye74XmSegueRJOlFIft8jagGNskDczp-ZiB2aK3StjjZnLUbovnGpiBx8Pdrz1VuS7J5j\/s728-rw-e365\/ddos.png\" style=\"clear: left; display: block; float: left; text-align: center;\"><\/a><\/div>\n<p>Peneliti keamanan siber telah mengungkapkan rincian kampanye serangan penolakan layanan terdistribusi (DDoS) baru yang menargetkan Jupyter Notebook yang salah konfigurasi.<\/p>\n<p>Aktivitas tersebut diberi nama kode <strong>Panamorfik<\/strong> oleh perusahaan keamanan cloud Aqua, menggunakan alat berbasis Java yang disebut <a href=\"https:\/\/github.com\/foxkera\/mineping\" rel=\"noopener\" target=\"_blank\">penambangan<\/a> untuk meluncurkan serangan TCP flood DDoS. Mineping adalah paket DDoS yang dirancang untuk server game Minecraft.<\/p>\n<p>Rangkaian serangan melibatkan eksploitasi instans Jupyter Notebook yang terekspos internet untuk menjalankan perintah wget guna mengambil arsip ZIP yang dihosting pada situs berbagi file bernama Filebin.<\/p>\n<section class=\"dog_two clear\"><center class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/cis-image-hn\" target=\"_blank\" title=\"Cybersecurity\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Keamanan cyber\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgOgdSfrS_yHoZPFJoZ5_OerKJ2U-kw-e9RRvvw0jcPMFxPVoehVj0lql2GCIFXI-7mX8QG7vt-UizONWkKz1rof-0jZ8Z5UN9dhfKskmwoWtviYH6UX7lVBfebTQzrkXinbeV3xWzdUCHDGm1ngBUck3ljYO8bHbLRWXGxMEVu4q2AZDZsdE4l0yrnjtdG\/s728-e100\/cis-d.png\" width=\"727\" height=\"90\"\/><\/a><\/center><\/section>\n<p>File ZIP berisi dua file arsip Java (JAR), conn.jar dan mineping.jar, dengan yang pertama digunakan untuk membuat koneksi ke saluran Discord dan memicu eksekusi paket mineping.jar.<\/p>\n<p>\u201cSerangan ini bertujuan untuk menghabiskan sumber daya server target dengan mengirimkan sejumlah besar permintaan koneksi TCP,\u201d kata peneliti Aqua Assaf Morag <a href=\"https:\/\/www.aquasec.com\/blog\/panamorfi-a-new-discord-ddos-campaign\/\" rel=\"noopener\" target=\"_blank\">dikatakan<\/a>&#8220;Hasilnya ditulis ke saluran Discord.&#8221;<\/p>\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEixnNRL3G9DVLo80kxhSSa5Iy7JG7T1gPWynDNvWdwjEzKo0RXMIXbE41clt3Hgea6nGh5BOqEHx_b5WUD3GqwIZ-SOaGflupq4m_fg_iJ-aKwURGl23GUoYyARWegcGsT_jnWhZPT_r7trtFfENtJHT55M4G6gAPTT8CHKT0Ab9Z2it4PXi3cYsducr7Qj\/s728-rw-e365\/code.png\" style=\"clear: left; display: block; float: left; text-align: center;\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEixnNRL3G9DVLo80kxhSSa5Iy7JG7T1gPWynDNvWdwjEzKo0RXMIXbE41clt3Hgea6nGh5BOqEHx_b5WUD3GqwIZ-SOaGflupq4m_fg_iJ-aKwURGl23GUoYyARWegcGsT_jnWhZPT_r7trtFfENtJHT55M4G6gAPTT8CHKT0Ab9Z2it4PXi3cYsducr7Qj\/s728-rw-e365\/code.png\" alt=\"Alat DDoS Minecraft\" border=\"0\" data-original-height=\"880\" data-original-width=\"1400\" title=\"Alat DDoS Minecraft\"\/><\/a><\/div>\n<p>Kampanye serangan ini dikaitkan dengan aktor ancaman yang dikenal dengan nama <a href=\"https:\/\/github.com\/yawixooo\" rel=\"noopener\" target=\"_blank\">sesuatu<\/a>yang akun GitHub-nya mempunyai repositori publik yang berisi berkas properti server Minecraft.<\/p>\n<p>Ini bukan pertama kalinya Jupyter Notebook yang dapat diakses melalui internet menjadi sasaran para penyerang. Pada bulan Oktober 2023, ancaman asal Tunisia yang dijuluki Qubitstrike terlihat membobol Jupyter Notebook dalam upaya menambang mata uang kripto secara ilegal dan membobol lingkungan cloud.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Apakah artikel ini menarik? Ikuti kami di <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>    Dan <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener\" target=\"_blank\">LinkedIn<\/a> untuk membaca lebih banyak konten eksklusif yang kami posting.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bahasa Indonesia:03 Agustus 2024Bahasa Indonesia:Ravie LaxmananSerangan DDoS \/ Keamanan Server Peneliti keamanan siber telah mengungkapkan rincian kampanye serangan penolakan layanan terdistribusi (DDoS) baru yang menargetkan Jupyter Notebook yang salah konfigurasi. Aktivitas tersebut diberi nama kode Panamorfik oleh perusahaan keamanan cloud Aqua, menggunakan alat berbasis Java yang disebut penambangan untuk meluncurkan serangan TCP flood DDoS. Mineping&#8230;<\/p>\n","protected":false},"author":1,"featured_media":520,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[166,168,171,172,167,177,179,178,180,173,176,175,169,170,174],"class_list":["post-519","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-berita-keamanan-siber","tag-berita-keamanan-siber-hari-ini","tag-berita-peretas","tag-berita-peretasan","tag-berita-siber","tag-cara-meretas","tag-keamanan-informasi","tag-keamanan-jaringan","tag-keamanan-komputer","tag-kerentanan-perangkat-lunak","tag-malware-ransomware","tag-pelanggaran-data","tag-pembaruan-keamanan-siber","tag-pembaruan-siber","tag-serangan-siber"],"_links":{"self":[{"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/posts\/519","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/comments?post=519"}],"version-history":[{"count":0,"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/posts\/519\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/media\/520"}],"wp:attachment":[{"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/media?parent=519"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/categories?post=519"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/labellablog.com\/index.php\/wp-json\/wp\/v2\/tags?post=519"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}