{"id":8115,"date":"2026-09-03T07:00:16","date_gmt":"2026-09-03T05:00:16","guid":{"rendered":"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/"},"modified":"2026-09-03T07:00:16","modified_gmt":"2026-09-03T05:00:16","slug":"kako-so-po-dveh-desetletjih-izklopili-botnet-sality","status":"publish","type":"post","link":"https:\/\/viva.racunalniske-novice.com\/fr\/comment-le-reseau-de-bots-sality-a-ete-demantele-apres-deux-decennies\/","title":{"rendered":"Comment le r\u00e9seau de bots Sality a-t-il \u00e9t\u00e9 d\u00e9mantel\u00e9 apr\u00e8s deux d\u00e9cennies ?"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Dans le cadre d&#039;une importante op\u00e9ration internationale de police, le r\u00e9seau de piratage Sality, l&#039;un des botnets peer-to-peer (P2P) les plus anciens et les plus persistants au monde, a finalement \u00e9t\u00e9 d\u00e9mantel\u00e9 apr\u00e8s pr\u00e8s de vingt-cinq ans d&#039;activit\u00e9. Rep\u00e9r\u00e9 pour la premi\u00e8re fois par des experts en 2003, ce syst\u00e8me malveillant a servi \u00e0 diffuser divers types de logiciels malveillants au fil des ans, notamment des outils de vol de donn\u00e9es, des services proxy et des logiciels permettant de mener des attaques par d\u00e9ni de service.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Au cours des huit derni\u00e8res ann\u00e9es, le r\u00e9seau a principalement servi \u00e0 diffuser l&#039;outil EggJagger, un code sp\u00e9cialis\u00e9 de remplacement du presse-papiers qui aurait rapport\u00e9 aux attaquants au moins 132\u00a0800 \u20ac en cryptomonnaies bitcoin et ethereum.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La cl\u00e9 de l&#039;incroyable long\u00e9vit\u00e9 de Sality r\u00e9sidait dans son architecture. Il se propageait comme un virus de fichiers classique, s&#039;attachant aux fichiers ex\u00e9cutables sur les disques durs et les supports amovibles. N&#039;\u00e9tant d\u00e9pendant d&#039;aucun serveur de commande central pour la mise \u00e0 jour de son code, il \u00e9tait extr\u00eamement difficile \u00e0 d\u00e9sactiver compl\u00e8tement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Paradoxalement, le protocole m\u00eame qui avait permis au r\u00e9seau de survivre pendant plus de 20 ans est aussi devenu sa plus grande faiblesse. Le r\u00e9seau faisait aveugl\u00e9ment confiance \u00e0 tous les ordinateurs connect\u00e9s, sans v\u00e9rifier leur identit\u00e9 ni exiger d&#039;authentification. Les appareils infect\u00e9s, ou bots, contr\u00f4laient r\u00e9guli\u00e8rement l&#039;accessibilit\u00e9 des autres appareils figurant sur leur liste de \u00ab superliens \u00bb, qui constituaient l&#039;\u00e9pine dorsale du r\u00e9seau P2P. Les ordinateurs accessibles gagnaient progressivement en fiabilit\u00e9, tandis que ceux qui \u00e9taient inaccessibles \u00e9taient finalement retir\u00e9s de la liste.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ce comportement sp\u00e9cifique a \u00e9t\u00e9 exploit\u00e9 par des experts de CrowdStrike. En manipulant le protocole, ils ont progressivement supprim\u00e9 les liens l\u00e9gitimes des listes, isolant ainsi les ordinateurs infect\u00e9s. Parall\u00e8lement, ils ont redirig\u00e9 le trafic du syst\u00e8me vers leurs propres serveurs factices, ou serveurs \u00ab\u00a0sinkhole\u00a0\u00bb.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">En collaboration avec les forces de l&#039;ordre des \u00c9tats-Unis, de Bulgarie, de Hongrie et de Roumanie, ils ont saisi et supprim\u00e9 les sites web h\u00e9bergeant les fichiers malveillants, emp\u00eachant ainsi les appareils infect\u00e9s de recevoir des mises \u00e0 jour. De ce fait, les criminels exploitant le r\u00e9seau Sality n&#039;ont plus pu communiquer avec les ordinateurs infect\u00e9s, ces derniers \u00e9tant d\u00e9sormais redirig\u00e9s vers l&#039;infrastructure s\u00e9curis\u00e9e de CrowdStrike.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dans le cadre de cette op\u00e9ration, la Fondation Shadowserver travaille avec les fournisseurs d&#039;acc\u00e8s Internet et les \u00e9quipes nationales de r\u00e9ponse aux cyberattaques (CSIRT) pour identifier toutes les victimes et les aider \u00e0 nettoyer compl\u00e8tement leurs ordinateurs.<\/p>","protected":false},"excerpt":{"rendered":"<p>V obse\u017eni mednarodni operaciji organov pregona je bila po skoraj \u010detrt stoletja delovanja kon\u010dno prekinjena hekerska mre\u017ea Sality, ena najstarej\u0161ih in najbolj trdovratnih vrstni\u0161kih (P2P) botmre\u017e na svetu. Ta zlonamerni sistem, ki so ga strokovnjaki prvi\u010d opazili \u017ee leta 2003, je skozi leta slu\u017eil za \u0161irjenje razli\u010dnih oblik zlonamerne programske opreme. Med njimi so bila [&hellip;]<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[],"tags":[478,482],"class_list":["post-8115","post","type-post","status-publish","format-standard","hentry","tag-informacijska-varnost","tag-kibernetska-varnost"],"acf":{"subtitle":"","heading":"","summary":"Po 23 letih je mednarodna policijska akcija onemogo\u010dila P2P botnet Sality. Z izkori\u0161\u010danjem pomanjkljivosti v protokolu zaupanja so varnostni strokovnjaki osamili oku\u017eene ra\u010dunalnike in prepre\u010dili nadaljnje \u0161irjenje zlonamerne kode.","thumbnail_small":"https:\/\/racunalniske-novice.com\/wp-content\/uploads\/2026\/08\/cliff1126-hacker-8018499_1920-560x315.png","thumbnail_large":"https:\/\/racunalniske-novice.com\/wp-content\/uploads\/2026\/08\/cliff1126-hacker-8018499_1920-1024x574.png","thumbnail_caption":"Foto: Pixabay","gallery":"","video_gallery":null,"author":"","links":null,"sources":[{"title":"securityweek","url":"https:\/\/www.securityweek.com\/23-year-old-sality-p2p-botnet-disrupted\/"}],"skip_language":[]},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Kako so po dveh desetletjih izklopili botnet Sality? - Ra\u010dunalni\u0161ke novice<\/title>\n<meta name=\"description\" content=\"Po 23 letih je mednarodna policijska akcija onemogo\u010dila P2P botnet Sality. Z izkori\u0161\u010danjem pomanjkljivosti v protokolu zaupanja so varnostni strokovnjaki osamili oku\u017eene ra\u010dunalnike in prepre\u010dili nada\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/posts\/8115\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kako so po dveh desetletjih izklopili botnet Sality? - Ra\u010dunalni\u0161ke novice\" \/>\n<meta property=\"og:description\" content=\"V obse\u017eni mednarodni operaciji organov pregona je bila po skoraj \u010detrt stoletja delovanja kon\u010dno prekinjena hekerska mre\u017ea Sality, ena najstarej\u0161ih in najbolj trdovratnih vrstni\u0161kih (P2P) botmre\u017e na svetu. Ta zlonamerni sistem, ki so ga strokovnjaki prvi\u010d opazili \u017ee leta 2003, je skozi leta slu\u017eil za \u0161irjenje razli\u010dnih oblik zlonamerne programske opreme. Med njimi so bila [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/viva.racunalniske-novice.com\/fr\/comment-le-reseau-de-bots-sality-a-ete-demantele-apres-deux-decennies\/\" \/>\n<meta property=\"og:site_name\" content=\"Ra\u010dunalni\u0161ke novice\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-03T05:00:16+00:00\" \/>\n<meta name=\"author\" content=\"sinusiks\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"sinusiks\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/\",\"url\":\"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/\",\"name\":\"Kako so po dveh desetletjih izklopili botnet Sality? - Ra\u010dunalni\u0161ke novice\",\"isPartOf\":{\"@id\":\"https:\/\/viva.racunalniske-novice.com\/en\/#website\"},\"datePublished\":\"2026-09-03T05:00:16+00:00\",\"dateModified\":\"2026-09-03T05:00:16+00:00\",\"author\":{\"@id\":\"https:\/\/viva.racunalniske-novice.com\/en\/#\/schema\/person\/afb62e36efa34516d50249517e4cdbb4\"},\"breadcrumb\":{\"@id\":\"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/viva.racunalniske-novice.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kako so po dveh desetletjih izklopili botnet Sality?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/viva.racunalniske-novice.com\/en\/#website\",\"url\":\"https:\/\/viva.racunalniske-novice.com\/en\/\",\"name\":\"Ra\u010dunalni\u0161ke novice\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/viva.racunalniske-novice.com\/en\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/viva.racunalniske-novice.com\/en\/#\/schema\/person\/afb62e36efa34516d50249517e4cdbb4\",\"name\":\"sinusiks\",\"sameAs\":[\"https:\/\/ml.racunalniske-novice.com\"],\"url\":\"https:\/\/viva.racunalniske-novice.com\/fr\/author\/sinusiks\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Kako so po dveh desetletjih izklopili botnet Sality? - Ra\u010dunalni\u0161ke novice","description":"Po 23 letih je mednarodna policijska akcija onemogo\u010dila P2P botnet Sality. Z izkori\u0161\u010danjem pomanjkljivosti v protokolu zaupanja so varnostni strokovnjaki osamili oku\u017eene ra\u010dunalnike in prepre\u010dili nada","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/posts\/8115","og_locale":"fr_FR","og_type":"article","og_title":"Kako so po dveh desetletjih izklopili botnet Sality? - Ra\u010dunalni\u0161ke novice","og_description":"V obse\u017eni mednarodni operaciji organov pregona je bila po skoraj \u010detrt stoletja delovanja kon\u010dno prekinjena hekerska mre\u017ea Sality, ena najstarej\u0161ih in najbolj trdovratnih vrstni\u0161kih (P2P) botmre\u017e na svetu. Ta zlonamerni sistem, ki so ga strokovnjaki prvi\u010d opazili \u017ee leta 2003, je skozi leta slu\u017eil za \u0161irjenje razli\u010dnih oblik zlonamerne programske opreme. Med njimi so bila [&hellip;]","og_url":"https:\/\/viva.racunalniske-novice.com\/fr\/comment-le-reseau-de-bots-sality-a-ete-demantele-apres-deux-decennies\/","og_site_name":"Ra\u010dunalni\u0161ke novice","article_published_time":"2026-09-03T05:00:16+00:00","author":"sinusiks","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"sinusiks","Dur\u00e9e de lecture estim\u00e9e":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/","url":"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/","name":"Kako so po dveh desetletjih izklopili botnet Sality? - Ra\u010dunalni\u0161ke novice","isPartOf":{"@id":"https:\/\/viva.racunalniske-novice.com\/en\/#website"},"datePublished":"2026-09-03T05:00:16+00:00","dateModified":"2026-09-03T05:00:16+00:00","author":{"@id":"https:\/\/viva.racunalniske-novice.com\/en\/#\/schema\/person\/afb62e36efa34516d50249517e4cdbb4"},"breadcrumb":{"@id":"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/viva.racunalniske-novice.com\/kako-so-po-dveh-desetletjih-izklopili-botnet-sality\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/viva.racunalniske-novice.com\/en\/"},{"@type":"ListItem","position":2,"name":"Kako so po dveh desetletjih izklopili botnet Sality?"}]},{"@type":"WebSite","@id":"https:\/\/viva.racunalniske-novice.com\/en\/#website","url":"https:\/\/viva.racunalniske-novice.com\/en\/","name":"Ra\u010dunalni\u0161ke novice","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/viva.racunalniske-novice.com\/en\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/viva.racunalniske-novice.com\/en\/#\/schema\/person\/afb62e36efa34516d50249517e4cdbb4","name":"sinusiks","sameAs":["https:\/\/ml.racunalniske-novice.com"],"url":"https:\/\/viva.racunalniske-novice.com\/fr\/author\/sinusiks\/"}]}},"_links":{"self":[{"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/posts\/8115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/comments?post=8115"}],"version-history":[{"count":0,"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/posts\/8115\/revisions"}],"wp:attachment":[{"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/media?parent=8115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/categories?post=8115"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/viva.racunalniske-novice.com\/fr\/wp-json\/wp\/v2\/tags?post=8115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}