{"id":924,"date":"2024-07-10T13:54:48","date_gmt":"2024-07-10T13:54:48","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/avastov-alat-za-dekripciju-donex-ransomwarea\/"},"modified":"2026-11-04T08:49:54","modified_gmt":"2026-11-04T08:49:54","slug":"avastov-alat-za-dekripciju-donex-ransomwarea","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/avastov-alat-za-dekripciju-donex-ransomwarea\/","title":{"rendered":"Avastov alat za dekripciju DoNex ransomwarea"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Tvrtka Avast otkrila je slabost u kriptografskoj shemi DoNex <a href=\"https:\/\/cert.hr\/en\/19795-2\/ransomware\/\" target=\"_blank\" rel=\"noreferrer noopener\">ransomwarea <\/a>i izdala alat za dekripciju kako bi \u017ertve mogle besplatno vratiti svoje datoteke.<\/strong><\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a0a64684d&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a0a64684d\" class=\"wp-block-image wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/www.bleepstatic.com\/images\/news\/u\/1220909\/2024\/Software\/10\/ransom-note.jpg\" alt=\"A DoNex ransom note sample\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>Primjer poruke DoNex ransomwrea. Izvor: Avast<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Avast od o\u017eujka 2024. godine sura\u0111uje s policijom kako bi potajno osigurali pomo\u0107 \u017ertvama DoNex ransomwarea. Tvrtke na ovaj na\u010din distribuiraju klju\u010deve za dekripciju kako bi sprije\u010dili napada\u010de da saznaju za gre\u0161ku i isprave ju.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Budu\u0107i da je ova vijest javno objavljena na pro\u0161lomjese\u010dnoj konferenciji o kiberneti\u010dkoj sigurnosti - Recon 2024, Avast je odlu\u010dio objaviti dekripciju.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DoNex je preinaka DarkRace ransomwarea iz 2023., koji je pak, preinaka Muse ransomwarea iz 2022. godine.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Avastovo rje\u0161enje mo\u017ee se primijeniti na sve prethodne varijante DoNex ransomwarea obitelji.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DoNex za enkripciju datoteka koristi <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/ransomware-gangs-switching-to-new-intermittent-encryption-tactic\/\" target=\"_blank\" rel=\"noreferrer noopener\">metodu<\/a> koja omogu\u0107ava br\u017ee kriptiranje, ali ima <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/online-ransomware-decryptor-helps-recover-partially-encrypted-files\/\" target=\"_blank\" rel=\"noreferrer noopener\">ranjivost<\/a> koja se mo\u017ee iskoristiti za vra\u0107anje podataka bez pla\u0107anja otkupnine.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Avastov dekriptor i upute za njegovo kori\u0161tenje dostupne su <a href=\"https:\/\/decoded.avast.io\/threatresearch\/decrypted-donex-ransomware-and-its-predecessors\/\" target=\"_blank\" rel=\"noreferrer noopener\">OVDJE<\/a>.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Obavezno napravite sigurnosnu kopiju \u0161ifriranih datoteka<\/strong> prije poku\u0161aja de\u0161ifriranja pomo\u0107u alata jer uvijek postoji mogu\u0107nost da ne\u0161to po\u0111e po zlu i nepovratno o\u0161teti te datoteke.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Izvor: <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/avast-releases-free-decryptor-for-donex-ransomware-and-past-variants\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.bleepingcomputer.com\/news\/security\/avast-releases-free-decryptor-for-donex-ransomware-and-past-variants\/<\/a><\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Tvrtka Avast otkrila je slabost u kriptografskoj shemi DoNex ransomwarea i izdala alat za dekripciju kako bi \u017ertve mogle besplatno vratiti svoje datoteke. Avast od o\u017eujka 2024. godine sura\u0111uje s policijom kako bi potajno osigurali pomo\u0107 \u017ertvama DoNex ransomwarea. Tvrtke na ovaj na\u010din distribuiraju klju\u010deve za dekripciju kako bi sprije\u010dili napada\u010de da saznaju za gre\u0161ku [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1294,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-924","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=924"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/924\/revisions"}],"predecessor-version":[{"id":1298,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/924\/revisions\/1298"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1294"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=924"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=924"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}