Kwayar Cutar Kwamfuta (Computer Virus) #5

Matashiya

A makon da ya gabata masu karatu sun shakata ne da bayanai kan hanyoyi biyu shahararru da ‘Yan Dandatsa (Hackers) ke bi wajen yada miyagun manhajojin kwamfuta masu haddasa tashin hankali ga ita kanta kwamfutar da masu ita, wajen aiwatar da wasu ayyuka da ka iya kawo salwantar bayanai da dukiya masu dimbin yawa. Har wa yau idan ba a mance ba, mun ajiye alkalamin mu ne a kan shahararren manhajan satan bayanai da leken asiri mai suna AgoBot; manhaja guda mai bangare uku masu gabatar da miyagun ayyukan da uban gidan su ya turo su yi. Abinda ya rage bamu ambata ba cikin munanan dabi’un AgoBot, shine, hanya mafi sauki da yake bi wajen isa ga kwamfutocin mutane masu mu’amala da gidajen yanar sadarwa ita ce ta amfani da sassaukar hanyar da kwamfutoci ke bi wajen mika sako a tsakanin su wanda ake kira Peer-to-Peer (P2P). Duk masu diro da jakunkunan bayanai masu girman gaske na wakoki ko finafinan bidiyo ko kuma littafai, sun san wannan hanya. Ire-iren manhajojin da ake amfani dasu wajen sawwake samun wadannan bayanai ko wakoki ko finafinai ta hanyar P2P sun hada da: BitTorrent, da UseNext, da Kazaa, da GrokStar, da kuma manhajan BearShare. Wadannan manhajoji ne ko masarrafai da ake amfani dasu wajen diro (Downloading) da jakunkunan bayanai masu nauyi na wakoki ko finafinai, kuma suna amfani ne da hanyar sadarwa mafi sauri na Peer-to-Peer (P2P). Idan kana da ire-iren wadannan manhajoji a kwamfutar ka da kake amfani dasu wajen wannan aiki, kana iya kamuwa da AgoBot cikin sauki baka sani ba. A karshe, AgoBot, kamar sauran miyagun manhajojin leken asiri da satan bayanai, na iya boye kan sa cikin kwamfutarka. Yaki, a cewar AgoBot, dan zamba ne!

A yau zamu ci gaba don karasa bayani kan sauran shahararrun manhajojin da suka ci duniya (kuma suke kan ci a yanzu) a duniyar Intanet, wajen aiwatar da wadannan aikace-aikace na cutarwa. Sai dai kuma, sabanin yadda nace a makon da ya gabata, ba za mu iya karkare bayanai cikin wannan mako ba, sai zuwa makonni uku nan gaba in Allah Ya yarda.

Tarihi da Yaduwan BOTNET

Manhajan BOTNET na gaba shine SpyBot, wanda ya bayyana ne cikin shekarar 2003. Babban aikin sa a kan tsoffin manyan manhajojin kwamfuta ne na Windows, irin su: Windows 93, Windows 95, Windows NT, Windows 98, Windows 2000, da kuma na baya-bayan nan, watau Windows 2003. Shi a nan yafi shahara. Idan ya shige su, yakan yi yadda ya ga dama wajen aiwatar da tsiyatakun sa; ya sace kalmomin izinin shiga (Passwords), yayi hidimar leken asiri, ya kashe manhajojin magance kwayar cutar kwamfuta (Antivirus Programs). Sannan duk inda wani jaka (File) mai dauke da bidiyo ko wani manhajan daukan hoto na Intanet (Webcam) yake a kwamfutar, sai ya harbe su gaba daya, don tattaro bayanan da ke dauke dasu. Yana cikin cin duniyarsa da tsinken tsire, sai kuma ga RBot, shi ma cikin shekarar 2003, yazo da nashi yayi. Dankari! Wani aikin sai ‘Yan Dandatsa. Shi manhajan satan bayanai da leken asiri na RBot bai damu kan sa da wasu ayyuka masu dimbin yawa ba. Da zaran ya shigo cikin kwamfuta, manyan aikace-aikacen sa guda biyu ne. Da su ya shahara. Na farko shine, yana iya rikidewa ya yi shigan sojan gona ta hanyar mallakar dukkan babban manhajan da kake amfani dashi a kwamfutar ka. Abinda wannan zance ke nufi kuwa shine, a cikin kwamfuta akwai darajoji guda biyu da ake baiwa masu amfani da kwamfutar (Users) wajen aiwatar da aikace-aikace. Daraja ta farko ita ce ake kira Administrative Privileges, watau matsayi na kololuwa kenan. Idan ka sayi kwamfuta, a matsayin ka na mai shi, kana da wannan matsayin. Ba wanda zai iya shigar da wani bakon manhaja cikin kwamfutar sai da yardan ka, ko kuma ka shiga kwamfutar ta amfani da kalmomin izinin shiganka, don bude masa. A takaice dai, kana iya yin komai cikin kwamfutar idan kana da wannan matsayi. Matsayi na biyu kuma shine matsayin baki (Guest), watau Limited Privileges, wanda baka iya yin wasu ayyukan da suka shafi sauya ma kwamfutar wasu sassanta ta wajen manhaja da tsare-tsare (System Settings). Idan ka zo yin amfani da kwamfuta sai ka same ta a kunne amma kuma tana kulle, galibin lokuta, zaka ga gurabun shiga nau’i biyu ne: Administrator (ko sunan mai kwamfutar ko ma’aikatar), da kuma Guest. Wannan ke nuna maka cewa akwai banbancin matsayi a tsakanin sunayen biyu. Shi gurbin Guest a galibin lokuta ma baya bukatar kalmomin izinin shiga don yin amfani da kwamfutar, don ba a san su wa da wa zasu yi amfani da ita ba kai tsaye. To shi wannan manhaja na RBot, da zaran ya shigo kwamfutarka, sai yayi maza ya dauki matsayin mai kwamfutar, ya dare. Don haka duk wani abinda zaka iya yi a kwamfutar ka, shima yana iya yi. Muddin ka kunna kwamfutar, ka shiga ko baka shiga ba, shi ba ruwanshi. Aiki na biyu kuma shine ya sace maka dukkan wasu bayanai na sirri da ka mallaka a cikin kwamfutar. Watakil mai karatu ya tambaya cewa “ta yaya zai iya sanin cewa bayanan da ke ciki na sirri ne?” Af, ai maginin sa ya tarbiyyantar dashi tuni. Duk bayanai na sirri (irin su kalmomin izinin shiga – Passwords – da lambobin katin adashin banki – Credit Card Number – da ire-iren su), idan ka shigar dasu, baka ganin asalin lambobin, sai dai alamar tauraro (asterisk) ko dunkulallun dige-dige bakake. An tsara kwamfutar ne ta rinka boye su, don ba don kowa da kowa aka yi su ba. Wannan tsari na rikidar da haruffa zuwa wani yanayi don sheida mai su, shi ake kira Encryption a ilimin kwamfuta. Don haka duk lokacin da yaci karo da ire-irensu (Encrypted Files), ya san ba da banza mai kwamfutar ya rikidar da su ba, sai kawai ya sure su. A karshe, yana da karfin kudura na cutar da kwamfuta kai tsaye ba tsoron Allah. Kafin ya gama yayin sa, RBot yayi ajalin kwamfutoci sama da miliyan daya da dubu dari tara (1.9 million).

Shekara daya da tafiyan RBot, sai ga wani shahararre mai suna PolyBot, a shekarar 2004. Duniya mai yayi! Shi wannan manhajan satan bayanai da leken asiri na PolyBot, an kirkiro shi ne daga burbushin ruhin da aka gina kakan sa, watau AgoBot, wanda bayanansa suka gabata a makon da ya jiya. Shi PolyBot bai da sanya ; idan ya shigo cikin kwamfuta ko zangon kwamfutoci, yana iya rikida zuwa siffofi daban-daban. Wannan ke nuna cewa taco shi ta amfani da masarrafan tace kwayoyin cutar kwamfuta, ba abu bane mai sauki. Me yasa haka ? Hakan ya faru ne saboda su manhajojin tace kwayoyin cutan kwamfuta na da rumbu ne na sunayen shahararrun kwayoyin cutar kwamfuta da suka bayyana a baya ko a lokacin da ake ciki. Wadannan su ake kira Virus Definitions. Watakila a wasu kwamfutocin da suna daya aka san shi. Da zaran ya shigo wata kwamfutar, sai ya sauya kama da suna. Gane shi sai yayi wahala. Na biyu, da zaran ya zo kan bayanan sirrin da yake son sace su, sai ya rikidar dasu zuwa kuramen bakake ta amfani da hikimar da muka fada a sama, watau Encryption. Kaji mugunta. Idan kazoo kan su, a matsayin ka na mai su, baza ka iya budo su ba. Ya jawo maka salalan tsiya kenan. Idan yana cikin aikinsa sai ka budo shi cikin jakunkunan bayanan ka (Folders), sai ya cure wuri daya, a surar ambulan irin wanda ake sanya wasiku ciki. Wannan PolyBot kenan, gida biyu maganin gobara. A haka yaci zamanin sa ya tafi. Yana juya baya sai kuma ga MyTob (asalin sunan shine MyBot, amma aka juya sunan don shakiyanci irin na Dan Dandatsa), cikin shekarar 2005, cikin watan Fabrairu. Kamar sauran manhajojin da suka gabata, shima yana da nasa ayyuka, ba kallon ruwa yake zuwa yi cikin kwamfutoci ba balle kwadin da ke bakin gaba su rinka masa kafa. Da kayan aikin sa yake zuwa, kuma babban sana’arsa ita ce sace adireshin Imel din mutane, tare da aika musu sakonnin Imel na bogi, watau Spam Mails. Idan mai karatu bai mance ba, cikin kasidarmu mai taken Manhaja da Ka’idojin Sadarwa ta Imel, mun nuna cewa kowace kwamfuta na tattare ne da ka’idojin aikawa da sakonnin Imel, irin su POP, SMTP, da kuma IMAP. Muka ce ka’idar SMTP mai sawwake aikawa da sakonni daga wata kwamfutar zuwa wata. To MyTob a tafe yake da nashi ka’idar da yake aikawa da sakonnin Imel daga gareta, watau SMTP. Idan ya shigo, yana iya mayar da kwamfutar ka madakata, inda zai yi zaune kawai yana ta cilla ma wasu sakonnin bogi, baka sani ba balle ka dauki mataki. Idan ya shiga cikin kwamfutar da ke dauke da gidajen yanar sadarwa, watau Web Server, duk adireshin Imel da ya samu ciki, zai sace su, ya ci gaba da aika musu sakonnin bogi. Zai yi ta haka ne ba tare da sanin mai kwamfutar ba, mutum ne ko kamfani. Wannan ba karamin ta’addanci bane, domin zai cike kwamfutar da bola irin na bayanai marasa kan-gado, ya kuma sanya kwamfutar ta kamu da ciwo mai tsanani sanadiyyar wannan aiki mara fa’ida da yake gabatarwa a kan ta. MyTob kenan, mai mayar da gidan wani nashi.

Kammalawa

Ya zuwa yanzu, mai karatu yaji bayanai kan ma’ana da nau’ukan kwayoyin cutan kwamfuta (Computer Virus), da bayanai kan masu kirkira da aiko su (Hackers), da kuma hanyoyin da suke bi wajen aikata wannan aika-aika. Cikin makon da ya gaba da kuma yau, ka samu bayani kan shahararrun manhajojin sata da leken asiri da wadannan ‘Yan Dandatsa suka kirkira kuma suka addabi al’umma a duniyar kwamfuta. Hakan ya haddasa salwantan lokaci da bayanai da kuma miliyoyin daloli a kasashen duniya. Zuwa mako mai zuwa insha’Allah, zamu kawo bayanai kan wasu daga cikin samamen da aka kai kan ‘Yan Dandatsa, da hukuncin da aka yanke musu. A mako na sama kuma, labarai ne kan duniyar su : yadda suke mu’amala a tsakaninsu; irin harshen su; finafinan su; gidajen yanan sadarwan su, littafan da aka rubuta kan su, da kuma labarin sana’arsu, a aikace. Wannan zai bamu daman fahimtar su daga farko zuwa karshe. A mako na can sama kuma, sai mu kawo bayani kan hanyoyin da za a bi wajen magance wadannan matsaloli. Don kada mai karatu ya shagala, taken kasidar mako mai zuwa ita ce : Shahararrun Samame kan Wasu ‘Yan Dandatsa.

Kada a gaji, a ci gaba da aiko sakonnin neman karin bayani ta 08034592444, ko ta hanyar Imel da ke : fasaha2007@yahoo.com. Idan da hali a iya kai mana ziyara zuwa mudawwanar da muka tanada don taskance dukkan kasidun da ke bayyana a wannan shafi mai albarka, a http://fasahar-intanet.blogspot.com. Na samu sakonnin neman karin bayani kan yadda za a magance ire-iren wadannan matsaloli na kwayar cutar kwamfuta, amma ban bayar da amsa cikakkiya ba. Sai a kasida ta karshe in Allah Ya yarda. Ina mika godiyata ga dukkan masu bugo waya ko aiko da sakonnin text ko na Imel. Allah hada fuskokin mu da alheri, amin.