{"id":13676,"date":"2026-09-15T23:29:27","date_gmt":"2026-09-15T19:29:27","guid":{"rendered":"https:\/\/me.kaspersky.com\/blog\/?p=13676"},"modified":"2026-09-15T23:29:27","modified_gmt":"2026-09-15T19:29:27","slug":"polyglot-file-formats-attack-examples-detection-prevention-advice","status":"publish","type":"post","link":"https:\/\/me.kaspersky.com\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/13676\/","title":{"rendered":"\u0645\u0627\u062a\u0631\u064a\u0648\u0634\u0643\u0627 \u062e\u0637\u064a\u0631\u0629: \u0643\u0644 \u0645\u0627 \u062a\u062d\u062a\u0627\u062c \u0644\u0645\u0639\u0631\u0641\u062a\u0647 \u0639\u0646 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a"},"content":{"rendered":"<p>\u062a\u0632\u0627\u064a\u062f \u0638\u0647\u0648\u0631 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0645\u0635\u0645\u0645\u0629 \u0628\u062a\u0642\u0646\u064a\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0627\u0644\u0645\u062a\u0639\u062f\u062f\u0629 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u062e\u0644\u0627\u0644 \u0627\u0644\u0633\u0646\u0648\u0627\u062a \u0627\u0644\u0623\u062e\u064a\u0631\u0629. \u0648\u062a\u062a\u064a\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u062a\u0645\u0631\u064a\u0631 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u062e\u0644\u0633\u0629 \u0639\u0628\u0631 \u0645\u0631\u0634\u062d\u0627\u062a \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0648\u0623\u062f\u0648\u0627\u062a \u0641\u062d\u0635 \u0627\u0644\u0645\u0644\u0641\u0627\u062a\u060c \u0648\u062a\u0636\u0644\u064a\u0644 \u0627\u0644\u0636\u062d\u0627\u064a\u0627 \u0641\u064a \u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062a\u0635\u064a\u062f \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0644\u064a\u060c \u0641\u0636\u0644\u0627\u064b \u0639\u0646 \u062a\u0639\u0642\u064a\u062f \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u062a\u062d\u0642\u064a\u0642 \u0641\u064a \u0627\u0644\u062d\u0648\u0627\u062f\u062b \u0627\u0644\u0623\u0645\u0646\u064a\u0629. \u0648\u0644\u062a\u062d\u0642\u064a\u0642 \u0630\u0644\u0643\u060c \u064a\u062a\u0639\u0645\u062f \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0628\u0646\u0627\u0621 \u0645\u0644\u0641 \u064a\u0645\u0643\u0646 \u0644\u0644\u0646\u0638\u0627\u0645 \u062a\u0641\u0633\u064a\u0631\u0647 \u0628\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0645\u062e\u062a\u0644\u0641\u0629 \u0648\u0641\u0642\u064b\u0627 \u0644\u0644\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0630\u064a \u064a\u0641\u062a\u062d\u0647.\u00a0 \u0648\u0645\u0646 \u0627\u0644\u0623\u0645\u062b\u0644\u0629 \u0627\u0644\u0643\u0644\u0627\u0633\u064a\u0643\u064a\u0629 \u0639\u0644\u0649 \u0630\u0644\u0643 \u0645\u0644\u0641 \u064a\u0645\u0643\u0646 \u0627\u0644\u062a\u0639\u0627\u0645\u0644 \u0645\u0639\u0647 \u0643\u0635\u0648\u0631\u0629 \u0628\u062a\u0646\u0633\u064a\u0642 PNG \u0623\u0648 \u0643\u0623\u0631\u0634\u064a\u0641 ZIP. \u0648\u0643\u0644 \u0645\u0627 \u064a\u062a\u0637\u0644\u0628\u0647 \u0627\u0644\u0623\u0645\u0631 \u0647\u0648 \u062a\u063a\u064a\u064a\u0631 \u0627\u0645\u062a\u062f\u0627\u062f \u0627\u0644\u0645\u0644\u0641\u060c \u0623\u0648 \u0628\u0628\u0633\u0627\u0637\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062d\u062f \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u064a\u0646 \u0644\u0641\u062a\u062d\u0647.<\/p>\n<p>\u062f\u0639\u0648\u0646\u0627 \u0646\u0644\u0642\u064a \u0646\u0638\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u0623\u0633\u0628\u0627\u0628 \u0627\u0644\u062a\u064a \u062a\u062c\u0639\u0644 \u0625\u0646\u0634\u0627\u0621 \u0645\u062b\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u0645\u0643\u0646\u064b\u0627 \u0645\u0646 \u0627\u0644\u0623\u0633\u0627\u0633\u060c \u0648\u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0627\u0644\u062a\u064a \u0638\u0647\u0631\u062a \u0628\u0627\u0644\u0641\u0639\u0644 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0648\u0627\u0642\u0639\u064a\u0629\u060c \u0648\u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u062d\u0645\u0627\u064a\u0629 \u0646\u0641\u0633\u0647\u0627 \u0645\u0646 \u0647\u0630\u0627 \u0627\u0644\u062a\u0647\u062f\u064a\u062f.<\/p>\n<h2>\u0644\u0645\u0627\u0630\u0627 \u064a\u064f\u0639\u062f \u0625\u0646\u0634\u0627\u0621 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0645\u0645\u0643\u0646\u064b\u0627\u061f<\/h2>\n<p>\u0646\u0627\u062f\u0631\u064b\u0627 \u0645\u0627 \u062a\u0643\u0648\u0646 \u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u063a\u0631\u064a\u0628\u0629 \u0623\u0648 \u063a\u064a\u0631 \u0645\u0623\u0644\u0648\u0641\u0629. \u0648\u064a\u0639\u0648\u062f \u0627\u0644\u0623\u0645\u0631 \u0628\u0631\u0645\u062a\u0647 \u0625\u0644\u0649 \u062f\u0645\u062c \u0630\u0643\u064a \u0628\u064a\u0646 \u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0634\u0627\u0626\u0639\u0629 \u062a\u0635\u0627\u062f\u0641 \u062a\u0648\u0627\u0641\u0642\u0647\u0627 \u0645\u0646 \u0627\u0644\u0646\u0627\u062d\u064a\u0629 \u0627\u0644\u0647\u064a\u0643\u0644\u064a\u0629. \u0648\u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0648\u0627\u062d\u062f\u0629 \u0639\u0644\u0649 \u0627\u0644\u0623\u0642\u0644 \u0645\u0646 \u0627\u0644\u0633\u0645\u0627\u062a \u0627\u0644\u0627\u0633\u062a\u062b\u0646\u0627\u0626\u064a\u0629 \u0627\u0644\u062a\u0627\u0644\u064a\u0629 \u0641\u064a \u0628\u0639\u0636 \u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0627\u0644\u0645\u0644\u0641\u0627\u062a:<\/p>\n<ul>\n<li>\u062a\u062a\u0637\u0644\u0628 \u0645\u0639\u0638\u0645 \u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0641\u0643 \u062a\u0634\u0641\u064a\u0631\u0647\u0627 \u0648\u0642\u0631\u0627\u0621\u062a\u0647\u0627 \u0628\u062f\u0621\u064b\u0627 \u0645\u0646 \u0627\u0644\u0628\u0627\u064a\u062a \u0627\u0644\u0623\u0648\u0644 \u062a\u0645\u0627\u0645\u064b\u0627\u060c \u063a\u064a\u0631 \u0623\u0646 \u0628\u0639\u0636\u0647\u0627 \u064a\u062a\u0637\u0644\u0628 \u0642\u0631\u0627\u0621\u062a\u0647\u0627 \u0645\u0646 \u0627\u0644\u0646\u0647\u0627\u064a\u0629. \u0648\u062e\u064a\u0631 \u0645\u062b\u0627\u0644 \u0639\u0644\u0649 \u0630\u0644\u0643 \u0647\u0648 \u0623\u0631\u0634\u064a\u0641 ZIP: \u0644\u0627 \u064a\u0645\u0646\u0639 \u0648\u062c\u0648\u062f \u0628\u062f\u0627\u064a\u0629 \u062a\u0627\u0644\u0641\u0629 \u0623\u0648 \u0645\u0641\u0642\u0648\u062f\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0645\u0646 \u0642\u0631\u0627\u0621\u0629 \u0627\u0644\u0645\u0644\u0641\u060c \u0646\u0638\u0631\u064b\u0627 \u0644\u0623\u0646 \u062c\u0645\u064a\u0639 \u0627\u0644\u0631\u0624\u0648\u0633 \u0627\u0644\u0645\u0637\u0644\u0648\u0628\u0629 \u062a\u0648\u062c\u062f \u0628\u0627\u0644\u0641\u0639\u0644 \u0641\u064a \u0627\u0644\u0646\u0647\u0627\u064a\u0629. \u0648\u064a\u062a\u064a\u062d \u0630\u0644\u0643 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0628\u0633\u0627\u0637\u0629 \u062f\u0645\u062c \u0645\u0644\u0641\u064a\u0646 \u0645\u0639\u064b\u0627 \u2013 \u0643\u0645\u0627 \u0641\u064a \u0627\u0644\u0645\u062b\u0627\u0644 \u0627\u0644\u0633\u0627\u0628\u0642\u060c \u0635\u0648\u0631\u0629 PNG \u0648\u0623\u0631\u0634\u064a\u0641 ZIP. \u0648\u062a\u064f\u0642\u0631\u0623 \u0627\u0644\u0628\u062f\u0627\u064a\u0629 \u0643\u0635\u0648\u0631\u0629 PNG \u0635\u0627\u0644\u062d\u0629\u060c \u0628\u064a\u0646\u0645\u0627 \u062a\u064f\u0642\u0631\u0623 \u0627\u0644\u0646\u0647\u0627\u064a\u0629 \u0643\u0623\u0631\u0634\u064a\u0641 ZIP \u0633\u0644\u064a\u0645.<\/li>\n<li>\u062a\u0639\u0645\u0644 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0639\u0644\u0649 \u063a\u0631\u0627\u0631 \u062f\u0645\u0649 \u0627\u0644\u0645\u0627\u062a\u0631\u064a\u0648\u0634\u0643\u0627 \u0627\u0644\u0631\u0648\u0633\u064a\u0629 \u0627\u0644\u0645\u062a\u062f\u0627\u062e\u0644\u0629: \u0631\u063a\u0645 \u0623\u0646\u0647\u0627 \u062a\u062d\u0645\u0644 \u0638\u0627\u0647\u0631\u064a\u064b\u0627 \u0627\u0645\u062a\u062f\u0627\u062f\u064b\u0627 \u0645\u062d\u062f\u062f\u064b\u0627 \u064a\u062a\u0637\u0627\u0628\u0642 \u0645\u0639 \u0627\u0644\u063a\u0631\u0636 \u0627\u0644\u0645\u062e\u0635\u0635 \u0644\u0647\u0627\u060c \u0625\u0644\u0627 \u0623\u0646 \u0627\u0644\u0645\u0644\u0641 \u0641\u064a \u062c\u0648\u0647\u0631\u0647 \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0623\u0631\u0634\u064a\u0641 ZIP \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0636\u0631\u0648\u0631\u064a\u0629 \u0641\u064a \u0627\u0644\u062f\u0627\u062e\u0644. \u0648\u062a\u062a\u0636\u0645\u0646 \u0647\u0630\u0647 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0629 \u0645\u0633\u062a\u0646\u062f\u0627\u062a Office \u0627\u0644\u062d\u062f\u064a\u062b\u0629 (DOCX\/XLSX\/PPTX) \u0648\u062d\u0632\u0645 \u062a\u062b\u0628\u064a\u062a Android (APK) \u0648\u0645\u0644\u0641\u0627\u062a \u0645\u0643\u062a\u0628\u0629 Java (\u062a\u0646\u0633\u064a\u0642 JAR)\u060c \u0648\u063a\u064a\u0631\u0647\u0627 \u0627\u0644\u0643\u062b\u064a\u0631.<\/li>\n<li>\u0644\u0627 \u062a\u0641\u0631\u0636 \u0628\u0639\u0636 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0645\u062a\u0637\u0644\u0628\u0627\u062a \u0647\u064a\u0643\u0644\u064a\u0629 \u0635\u0627\u0631\u0645\u0629 \u2013 \u0623\u0648 \u062a\u0643\u0648\u0646 \u0645\u062a\u0637\u0644\u0628\u0627\u062a\u0647\u0627 \u0645\u0631\u0646\u0629 \u0628\u0645\u0627 \u064a\u0643\u0641\u064a \u0644\u062a\u0645\u0643\u064a\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0630\u064a \u064a\u0639\u0627\u0644\u062c \u0627\u0644\u0645\u0644\u0641 \u0645\u0646 \u062a\u062d\u062f\u064a\u062f \u0645\u0648\u0642\u0639 \u0627\u0644\u0645\u0642\u0637\u0639 \u0627\u0644\u0630\u064a \u064a\u062d\u062a\u0627\u062c\u0647 \u062d\u062a\u0649 \u0648\u0625\u0646 \u0644\u0645 \u064a\u0643\u0646 \u0630\u0644\u0643 \u0627\u0644\u0645\u0642\u0637\u0639 \u0641\u064a \u0627\u0644\u0628\u062f\u0627\u064a\u0629.<\/li>\n<\/ul>\n<p>\u064a\u0648\u062b\u0642 \u0645\u0633\u062a\u0648\u062f\u0639 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/github.com\/Polydet\/polyglot-database\">Polydet<\/a> \u0639\u0644\u0649 \u0645\u0646\u0635\u0629 GitHub \u0623\u0645\u062b\u0644\u0629 \u0639\u062f\u064a\u062f\u0629 \u0644\u062a\u0631\u0643\u064a\u0628\u0627\u062a \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0645\u0645\u0643\u0646\u0629 \u0644\u0628\u0646\u0627\u0621 \u0645\u0644\u0641 \u0645\u062a\u0639\u062f\u062f \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a. \u0648\u0648\u0641\u0642\u064b\u0627 \u0644\u062a\u0635\u0646\u064a\u0641 \u0625\u0637\u0627\u0631 MITRE\u060c \u062a\u0646\u062f\u0631\u062c \u0647\u0630\u0647 \u0627\u0644\u062a\u0642\u0646\u064a\u0629 \u062a\u062d\u062a \u0641\u0626\u0629 \u0627\u0644\u062a\u0645\u0648\u064a\u0647 \u0648\u0627\u0644\u062a\u0646\u0643\u0631 (<a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/attack.mitre.org\/techniques\/T1036\/008\/\">T1036.008<\/a>\u060c \u0627\u0644\u062a\u0645\u0648\u064a\u0647 \u0628\u0646\u0648\u0639 \u0627\u0644\u0645\u0644\u0641).<\/p>\n<h2>\u0623\u0645\u062b\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0641\u064a \u0647\u062c\u0645\u0627\u062a \u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0634\u0647\u064a\u0631\u0629<\/h2>\n<p>\u062a\u0643\u0634\u0641 \u062a\u062d\u0644\u064a\u0644\u0627\u062a \u062d\u0645\u0644\u0627\u062a \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0627\u0644\u0645\u062a\u0627\u062d\u0629 \u0644\u0644\u062c\u0645\u0647\u0648\u0631 \u0639\u0646 \u0634\u062a\u0649 \u0623\u0646\u0648\u0627\u0639 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a. \u0648\u064a\u0643\u064a\u0651\u0641 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0633\u064a\u0646\u0627\u0631\u064a\u0648 \u0627\u0644\u0647\u062c\u0648\u0645 \u0628\u0623\u0643\u0645\u0644\u0647 \u0644\u064a\u062a\u0648\u0627\u0641\u0642 \u0645\u0639 \u062a\u0631\u0643\u064a\u0628\u0629 \u0645\u062d\u062f\u062f\u0629 \u0645\u0646 \u0623\u0646\u0648\u0627\u0639 \u0627\u0644\u0645\u0644\u0641\u0627\u062a.<\/p>\n<p>\u0623\u0631\u0633\u0644\u062a \u0645\u062c\u0645\u0648\u0639\u0629 Head Mare \u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631 <a target=\"_blank\" href=\"https:\/\/securelist.ru\/head-mare-attacks-with-phantompyramid\/112164\/\" rel=\"noopener\">PhantomPyramid<\/a> \u0641\u064a \u0647\u064a\u0626\u0629 \u0645\u0631\u0641\u0642 ZIP. \u0648\u0643\u0627\u0646 \u0627\u0644\u0645\u0644\u0641 \u064a\u062a\u0623\u0644\u0641 \u0645\u0646 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0642\u0627\u0628\u0644\u0629 \u0644\u0644\u062a\u0646\u0641\u064a\u0630 \u0644\u0646\u0638\u0627\u0645 Windows (\u062a\u0646\u0633\u064a\u0642 EXE) \u0645\u0639 \u0623\u0631\u0634\u064a\u0641 ZIP \u0635\u063a\u064a\u0631 \u0645\u062f\u0645\u062c \u0641\u064a \u0646\u0647\u0627\u064a\u062a\u0647. \u0648\u0639\u0646\u062f\u0645\u0627 \u064a\u0641\u062a\u062d \u0627\u0644\u0636\u062d\u064a\u0629 \u0627\u0644\u0623\u0631\u0634\u064a\u0641\u060c \u064a\u062c\u062f \u0628\u062f\u0627\u062e\u0644\u0647 \u0645\u0644\u0641\u064b\u0627 \u064a\u062d\u0645\u0644 \u0627\u0644\u0627\u0645\u062a\u062f\u0627\u062f PDF.LNK\u060c \u0648\u0627\u0644\u0630\u064a \u064a\u0642\u0648\u0645 \u0628\u062f\u0648\u0631\u0647 \u0628\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u0631\u0641\u0642 \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0646\u0641\u0633\u0647 \u2013 \u0644\u0643\u0646 \u0647\u0630\u0647 \u0627\u0644\u0645\u0631\u0629 \u0643\u0645\u0644\u0641 \u0642\u0627\u0628\u0644 \u0644\u0644\u062a\u0646\u0641\u064a\u0630.<\/p>\n<p>\u0641\u064a \u0627\u0644\u0647\u062c\u0648\u0645 \u0627\u0644\u0630\u064a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/blogs.jpcert.or.jp\/en\/2023\/08\/maldocinpdf.html\">\u0648\u062b\u0642\u0647 \u0641\u0631\u064a\u0642 JPCERT<\/a>\u060c \u0623\u0646\u0634\u0623 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0645\u0644\u0641\u064b\u0627 \u064a\u0628\u062f\u0623 \u0628\u0647\u064a\u0643\u0644 PDF \u0648\u0627\u0643\u062a\u0634\u0641\u062a\u0647 \u0645\u0639\u0638\u0645 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0641\u062d\u0635 \u0643\u0645\u0644\u0641 PDF\u060c \u063a\u064a\u0631 \u0623\u0646\u0647 \u0643\u0627\u0646 \u064a\u062d\u0645\u0644 \u0627\u0644\u0627\u0645\u062a\u062f\u0627\u062f DOC \u0648\u064a\u064f\u0641\u062a\u062d \u0641\u064a \u062a\u0637\u0628\u064a\u0642\u0627\u062a Office \u0643\u0645\u0633\u062a\u0646\u062f DOC \u0633\u0644\u064a\u0645 \u0648\u0635\u0627\u0644\u062d \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0648\u062d\u062f\u0627\u062a \u0645\u0627\u0643\u0631\u0648 \u0636\u0627\u0631\u0629.<\/p>\n<p>\u0627\u0633\u062a\u062e\u062f\u0645\u062a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0646\u0634\u0631 \u0641\u064a\u0631\u0648\u0633\u0627 \u062d\u0635\u0627\u0646 \u0637\u0631\u0648\u0627\u062f\u0629 <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.deepinstinct.com\/blog\/malicious-jars-and-polyglot-files-who-do-you-think-you-jar\">StrRAT \u0648Ratty<\/a> \u0645\u0644\u0641\u064b\u0627 \u0645\u062a\u0639\u062f\u062f \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0645\u0628\u0646\u064a\u064b\u0627 \u0645\u0646 \u062d\u0632\u0645\u0629 \u0645\u062b\u0628\u062a Windows \u062a\u062d\u0645\u0644 \u062a\u0648\u0642\u064a\u0639\u064b\u0627 (MSI) \u0645\u0639 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0628\u0644\u063a\u0629 Java \u0636\u0627\u0631\u0629 (JAR) \u0645\u062b\u0628\u062a\u0629 \u0641\u064a \u0627\u0644\u0646\u0647\u0627\u064a\u0629.<\/p>\n<p>\u0627\u0633\u062a\u062e\u062f\u0645\u062a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/medium.com\/%40DCSO_CyTec\/shortandmalicious-strelastealer-aims-for-mail-credentials-a4c3e78c8abc\">\u0647\u062c\u0645\u0627\u062a StrelaStealer<\/a> \u0645\u0644\u0641\u064b\u0627 \u0645\u062a\u0639\u062f\u062f \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0628\u0627\u0645\u062a\u062f\u0627\u062f HTML: \u0645\u0643\u062a\u0628\u0629 Windows (DLL) \u062a\u0645 \u0625\u0644\u062d\u0627\u0642 \u0645\u0633\u062a\u0646\u062f HTML \u062e\u0627\u062f\u0639 \u0641\u064a \u0646\u0647\u0627\u064a\u062a\u0647\u0627. \u0648\u062a\u0648\u0644\u0649 \u0645\u0644\u0641 \u0627\u062e\u062a\u0635\u0627\u0631 (LNK) \u062f\u0627\u062e\u0644 \u0627\u0644\u0623\u0631\u0634\u064a\u0641 \u0627\u0633\u062a\u062f\u0639\u0627\u0621 \u0627\u0644\u0645\u0644\u0641 \u0645\u0631\u062a\u064a\u0646: \u0627\u0644\u0623\u0648\u0644\u0649 \u0639\u0628\u0631 \u0623\u0645\u0631 start (\u0648\u0647\u0648 \u0627\u0644\u0646\u0638\u064a\u0631 \u0627\u0644\u0628\u0631\u0645\u062c\u064a \u0644\u0644\u0646\u0642\u0631 \u0627\u0644\u0645\u0632\u062f\u0648\u062c\u060c \u0644\u0641\u062a\u062d \u0627\u0644\u0645\u0633\u062a\u0646\u062f \u0641\u064a \u0627\u0644\u0645\u062a\u0635\u0641\u062d)\u060c \u0648\u0627\u0644\u062b\u0627\u0646\u064a\u0629 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0627\u0629 rundll32 \u0644\u062a\u0646\u0641\u064a\u0630 \u0645\u0643\u062a\u0628\u0629 DLL \u0627\u0644\u0636\u0627\u0631\u0629.<\/p>\n<p>\u0641\u064a \u0647\u062c\u0648\u0645 \u0645\u062d\u0627\u0643\u064b\u0649 \u064a\u062a\u0633\u0645 \u0628\u0627\u0644\u0628\u0631\u0627\u0639\u0629\u060c <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-now-use-zip-file-concatenation-to-evade-detection\/\">\u062f\u0645\u062c \u0628\u0627\u062d\u062b\u0648\u0646 \u0645\u0644\u0641\u064a ZIP \u0639\u0627\u062f\u064a\u064a\u0646 \u0645\u0639\u064b\u0627<\/a>\u060c \u0648\u0648\u062c\u062f\u0648\u0627 \u0623\u0646 \u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0623\u0631\u0634\u0641\u0629 \u0627\u0644\u0634\u0627\u0626\u0639\u0629 \u0639\u0631\u0636\u062a \u0627\u0644\u0645\u0644\u0641 \u0627\u0644\u0645\u062f\u0645\u062c \u0628\u0637\u0631\u0642 \u0645\u062a\u0628\u0627\u064a\u0646\u0629: \u0623\u0638\u0647\u0631 \u0628\u0639\u0636\u0647\u0627 \u0627\u0644\u0623\u0631\u0634\u064a\u0641 \u0627\u0644\u0623\u0648\u0644 \u0641\u0642\u0637\u060c \u0648\u0639\u0631\u0636 \u0628\u0639\u0636\u0647\u0627 \u0627\u0644\u062b\u0627\u0646\u064a \u0641\u0642\u0637\u060c \u0628\u064a\u0646\u0645\u0627 \u0623\u0638\u0647\u0631\u062a \u0628\u0631\u0627\u0645\u062c \u0623\u062e\u0631\u0649 \u0643\u0644\u0627 \u0627\u0644\u0623\u0631\u0634\u064a\u0641\u064a\u0646 \u0645\u0639\u064b\u0627 \u0643\u0623\u0646\u0647\u0645\u0627 \u0645\u0644\u0641 \u0623\u0631\u0634\u064a\u0641 \u0648\u0627\u062d\u062f \u0628\u0645\u062d\u062a\u0648\u064a\u0627\u062a \u0645\u0634\u062a\u0631\u0643\u0629. \u0648\u0625\u0630\u0627 \u0643\u0627\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0644\u0649 \u062f\u0631\u0627\u064a\u0629 \u0628\u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 \u0644\u0644\u0636\u062d\u064a\u0629 \u0648\u064a\u0639\u0644\u0645 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0645\u062b\u0628\u062a\u0629 \u0644\u062f\u064a\u0647\u060c \u0641\u064a\u0645\u0643\u0646\u0647 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u062f\u0645\u062c \u0644\u0639\u0631\u0636 \u0645\u0644\u0641 \u0645\u0639\u064a\u0646 \u0623\u0645\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646\u060c \u0648\u0639\u0631\u0636 \u0645\u0644\u0641 \u0622\u062e\u0631 \u0645\u062e\u062a\u0644\u0641 \u062a\u0645\u0627\u0645\u064b\u0627 \u0623\u0645\u0627\u0645 \u0627\u0644\u0636\u062d\u064a\u0629.<\/p>\n<p>\u0648\u0638\u0651\u0641 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0645\u0627\u062a\u0631\u064a\u0648\u0634\u0643\u0627 \u0628\u0631\u0645\u062c\u064a\u0629 \u0636\u0627\u0631\u0629 \u0648\u0645\u0639\u0642\u062f\u0629 \u0641\u064a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/unit42.paloaltonetworks.com\/polyglot-file-icedid-payload\/\">\u062d\u0645\u0644\u0629 \u0627\u0633\u062a\u0647\u062f\u0641\u062a \u0646\u0634\u0631 \u0628\u0631\u0646\u0627\u0645\u062c \u0633\u0631\u0642\u0629 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a IcedID<\/a>. \u062d\u064a\u062b \u0623\u0631\u0641\u0642\u0648\u0627 \u0623\u0631\u0634\u064a\u0641 ZIP \u0628\u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0644\u064a\u0629\u060c \u0648\u0639\u0646\u062f \u0641\u0643 \u0636\u063a\u0637\u0647 \u064a\u064f\u0646\u062a\u062c \u0645\u0644\u0641 \u0635\u0648\u0631\u0629 \u0642\u0631\u0635 ISO. \u0648\u0643\u0627\u0646 \u0647\u0630\u0627 \u0627\u0644\u0645\u0644\u0641 \u0627\u0644\u0623\u062e\u064a\u0631 \u0628\u062f\u0648\u0631\u0647 \u064a\u0633\u062a\u062e\u0631\u062c \u0645\u0644\u0641 \u062a\u0639\u0644\u064a\u0645\u0627\u062a CHM (\u062a\u0639\u0644\u064a\u0645\u0627\u062a Windows) \u0645\u0635\u0645\u0645\u064b\u0627 \u0628\u062a\u0642\u0646\u064a\u0629 \u0627\u0644\u0645\u0644\u0641 \u0645\u062a\u0639\u062f\u062f \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a. \u0648\u0639\u0646\u062f\u0645\u0627 \u064a\u0641\u062a\u062d\u0647 \u0627\u0644\u0636\u062d\u064a\u0629 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0627\u0629 \u0645\u0633\u0627\u0639\u062f\u0629 \u062a\u0639\u0644\u064a\u0645\u0627\u062a Windows \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629\u060c \u064a\u064f\u0646\u0641\u0630 \u0627\u0644\u0645\u0644\u0641 \u0628\u0631\u0646\u0627\u0645\u062c\u064b\u0627 \u0646\u0635\u064a\u064b\u0627 \u0628\u0644\u063a\u0629 JavaScript \u0645\u062f\u0645\u062c\u064b\u0627 \u062f\u0627\u062e\u0644 \u0645\u062d\u062a\u0648\u0649 \u0627\u0644\u0645\u0633\u0627\u0639\u062f\u0629\u060c \u0644\u064a\u062a\u0648\u0644\u0649 \u0628\u062f\u0648\u0631\u0647 \u062a\u0634\u063a\u064a\u0644 \u062a\u0637\u0628\u064a\u0642 <em>mshta<\/em> \u0627\u0644\u0642\u064a\u0627\u0633\u064a (\u0645\u0633\u062a\u0636\u064a\u0641 \u062a\u0637\u0628\u064a\u0642 Microsoft HTML) \u0648\u062a\u0648\u062c\u064a\u0647\u0647 \u0646\u062d\u0648 \u0645\u0644\u0641 CHM \u0630\u0627\u062a\u0647. \u0648\u0642\u062f \u0639\u0645\u062f \u0645\u0646\u0641\u0630\u0648 \u0627\u0644\u062d\u0645\u0644\u0629 \u0625\u0644\u0649 \u062a\u0636\u0645\u064a\u0646 \u062a\u0637\u0628\u064a\u0642 HTA \u062f\u0627\u062e\u0644 \u0645\u0644\u0641 CHM \u0628\u0637\u0631\u064a\u0642\u0629 \u062a\u0636\u0645\u0646 \u0623\u0644\u0627 \u064a\u0624\u062b\u0631 \u0648\u062c\u0648\u062f\u0647 \u0625\u0637\u0644\u0627\u0642\u064b\u0627 \u0639\u0644\u0649 \u0642\u0631\u0627\u0621\u0629 \u0627\u0644\u0645\u0644\u0641 \u0643\u0645\u0633\u062a\u0646\u062f \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u064a\u0621. \u0628\u064a\u0646\u0645\u0627 \u064a\u062a\u062c\u0627\u0647\u0644 \u0645\u0639\u0627\u0644\u062c HTA \u0645\u0646 \u062c\u0627\u0646\u0628\u0647 \u0643\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0632\u0627\u0626\u062f\u0629 \u0641\u064a \u0645\u0637\u0644\u0639 \u0627\u0644\u0645\u0644\u0641 \u0628\u0633\u0644\u0627\u0633\u0629 \u062d\u062a\u0649 \u064a\u0639\u062b\u0631 \u0639\u0644\u0649 \u0628\u0631\u0646\u0627\u0645\u062c HTA \u0627\u0644\u0646\u0635\u064a \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641.<\/p>\n<h2>\u0643\u064a\u0641 \u062a\u062a\u0639\u0627\u0645\u0644 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0645\u0639 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a<\/h2>\n<p>\u062a\u0648\u0636\u062d \u0627\u0644\u0623\u0645\u062b\u0644\u0629 \u0627\u0644\u0633\u0627\u0628\u0642\u0629 \u0628\u0648\u0636\u0648\u062d \u0643\u064a\u0641 \u062a\u062a\u064a\u062d \u062d\u064a\u0644\u0629 \u0627\u0644\u0642\u0631\u0627\u0621\u0629 \u0627\u0644\u0645\u0632\u062f\u0648\u062c\u0629 \u0647\u0630\u0647 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0646\u0634\u0631 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0639\u0644\u0649 \u0643\u0645\u0628\u064a\u0648\u062a\u0631 \u0627\u0644\u0636\u062d\u064a\u0629. \u0644\u0643\u0646 \u0643\u064a\u0641 \u062a\u062a\u0639\u0627\u0645\u0644 \u0645\u0631\u0634\u062d\u0627\u062a \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0648\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0648\u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0639\u0646\u062f \u0646\u0642\u0627\u0637 \u0627\u0644\u0646\u0647\u0627\u064a\u0629 (EDR) \u0641\u0639\u0644\u064a\u064b\u0627 \u0645\u0639 \u0645\u062b\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0644\u0641\u0627\u062a\u061f \u062a\u0639\u062a\u0645\u062f \u0627\u0644\u0625\u062c\u0627\u0628\u0629 \u0643\u0644\u064a\u064b\u0627 \u0639\u0644\u0649 \u0627\u0644\u062d\u0644 \u0627\u0644\u0623\u0645\u0646\u064a \u0627\u0644\u0645\u0639\u0646\u064a\u060c \u0644\u0630\u0627 \u064a\u062a\u0639\u064a\u0646 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0630\u0644\u0643 \u2013 \u0625\u0645\u0627 \u0628\u0645\u0631\u0627\u062c\u0639\u0629 \u0627\u0644\u0648\u062b\u0627\u0626\u0642 \u0627\u0644\u062a\u0642\u0646\u064a\u0629 \u0644\u0644\u062c\u0647\u0629 \u0627\u0644\u0645\u0637\u0648\u0631\u0629\u060c \u0623\u0648 \u0628\u0625\u062c\u0631\u0627\u0621 \u0627\u062e\u062a\u0628\u0627\u0631\u0627\u062a \u062e\u0627\u0636\u0639\u0629 \u0644\u0644\u0633\u064a\u0637\u0631\u0629 \u062f\u0627\u062e\u0644 \u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 \u0644\u0644\u0645\u0624\u0633\u0633\u0629 \u0645\u0639 \u0627\u062a\u062e\u0627\u0630 \u0643\u0627\u0641\u0629 \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u0627\u062a \u0627\u0644\u0644\u0627\u0632\u0645\u0629.\u00a0 \u0648\u0628\u0648\u062c\u0647 \u0639\u0627\u0645\u060c \u0644\u0627 \u064a\u0635\u062d \u0641\u064a \u062c\u0645\u064a\u0639 \u0627\u0644\u0623\u062d\u0648\u0627\u0644 \u0648\u0628\u0635\u0648\u0631\u0629 \u0645\u0637\u0644\u0642\u0629 \u0633\u0648\u0649 \u0646\u0642\u0637\u062a\u064a\u0646 \u0623\u0633\u0627\u0633\u064a\u062a\u064a\u0646:<\/p>\n<ul>\n<li>\u0644\u0627 \u062a\u062b\u0642 \u0645\u0639\u0638\u0645 \u062d\u0644\u0648\u0644 \u0627\u0644\u0623\u0645\u0627\u0646 \u0628\u0627\u0644\u0627\u0645\u062a\u062f\u0627\u062f \u0627\u0644\u0645\u0635\u0631\u0651\u062d \u0628\u0647 \u0644\u0644\u0645\u0644\u0641\u061b \u0628\u0644 \u062a\u0641\u062d\u0635 \u0628\u062f\u0627\u064a\u062a\u0647 \u0644\u062a\u062d\u062f\u064a\u062f \u0628\u0646\u064a\u062a\u0647 \u0627\u0644\u0641\u0639\u0644\u064a\u0629. \u0648\u0644\u0647\u0630\u0627 \u0627\u0644\u0633\u0628\u0628\u060c \u0641\u064a \u0627\u0644\u0647\u062c\u0648\u0645 \u0627\u0644\u0645\u0648\u0636\u062d \u0623\u0639\u0644\u0627\u0647\u060c \u062c\u0631\u0649 \u062a\u062d\u0644\u064a\u0644 \u0645\u0644\u0641 PDF \u0627\u0644\u0630\u064a \u064a\u062d\u0645\u0644 \u0627\u0644\u0627\u0645\u062a\u062f\u0627\u062f DOC \u0639\u0644\u0649 \u0623\u0646\u0647 \u0645\u0633\u062a\u0646\u062f PDF \u063a\u064a\u0631 \u0636\u0627\u0631\u060c \u0628\u064a\u0646\u0645\u0627 \u0627\u0633\u062a\u0642\u0631\u062a \u0648\u062d\u062f\u0629 \u0627\u0644\u0645\u0627\u0643\u0631\u0648 \u0627\u0644\u0636\u0627\u0631\u0629 \u0641\u064a \u0627\u0644\u062c\u0632\u0621 \u0627\u0644\u0645\u062f\u0645\u062c \u0627\u0644\u062e\u0627\u0635 \u0628\u0645\u0633\u062a\u0646\u062f DOC.<\/li>\n<li>\u0625\u0630\u0627 \u0628\u062f\u0623 \u0627\u0644\u0645\u0644\u0641 \u0628\u0647\u064a\u0643\u0644 \u063a\u064a\u0631 \u0636\u0627\u0631 (\u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644 \u0643\u0635\u0648\u0631\u0629) \u0648\u062a\u0637\u0627\u0628\u0642 \u0627\u0645\u062a\u062f\u0627\u062f\u0647 \u0645\u0639 \u0630\u0644\u0643\u060c \u0641\u0645\u0646 \u0627\u0644\u0645\u0631\u062c\u062d \u0623\u0644\u0627 \u064a\u062e\u0636\u0639 \u0644\u062a\u062d\u0644\u064a\u0644 \u0623\u0643\u062b\u0631 \u062a\u0642\u062f\u0645\u064b\u0627. \u0648\u064a\u0633\u062a\u0637\u064a\u0639 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629: \u0642\u062f \u062a\u0637\u0644\u0628 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0645\u0631\u0641\u0642\u0629 \u0628\u0627\u0644\u0645\u0644\u0641 \u0645\u0646 \u0627\u0644\u0636\u062d\u064a\u0629 \u0625\u0639\u0627\u062f\u0629 \u062a\u0633\u0645\u064a\u062a\u0647 \u0628\u062d\u064a\u062b \u064a\u0631\u062a\u0628\u0637 \u0633\u0644\u0648\u0643 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0644\u0627\u062d\u0642 \u0628\u0627\u0644\u062d\u0645\u0648\u0644\u0629 \u0627\u0644\u0636\u0627\u0631\u0629 \u0627\u0644\u062b\u0627\u0646\u064a\u0629 \u0628\u062f\u0644\u0627\u064b \u0645\u0646 \u0627\u0644\u0635\u0648\u0631\u0629.<\/li>\n<\/ul>\n<h2>\u0643\u064a\u0641\u064a\u0629 \u062d\u0645\u0627\u064a\u0629 \u0645\u0624\u0633\u0633\u0629 \u0645\u0646 \u0647\u062c\u0645\u0627\u062a \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a<\/h2>\n<p>\u0644\u0627 \u064a\u062a\u0637\u0644\u0628 \u0627\u0644\u062a\u0635\u062f\u064a \u0644\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u062d\u0644\u0648\u0644\u0627\u064b \u062a\u0642\u0646\u064a\u0629 \u0623\u0648 \u062a\u0646\u0638\u064a\u0645\u064a\u0629 \u0645\u0639\u0642\u062f\u0629 \u2013 \u0628\u0644 \u064a\u062a\u0637\u0644\u0628 \u0628\u062f\u0644\u0627\u064b \u0645\u0646 \u0630\u0644\u0643 \u062a\u0637\u0628\u064a\u0642\u064b\u0627 \u0635\u0627\u0631\u0645\u064b\u0627 \u0648\u0645\u0633\u062a\u0645\u0631\u064b\u0627 \u0644\u0642\u0648\u0627\u0639\u062f \u0627\u0644\u0646\u0638\u0627\u0641\u0629 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u0645\u0624\u0633\u0633\u0629 \u0628\u0623\u0643\u0645\u0644\u0647\u0627:<\/p>\n<ul>\n<li>\u0627\u0633\u062a\u062e\u062f\u0645 \u0642\u0648\u0627\u0626\u0645 \u0633\u0645\u0627\u062d \u0645\u063a\u0644\u0642\u0629 \u0644\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0645\u0635\u0631\u062d \u0628\u062a\u0634\u063a\u064a\u0644\u0647\u0627 \u0639\u0644\u0649 \u0645\u062d\u0637\u0627\u062a \u0639\u0645\u0644 \u0627\u0644\u0645\u0648\u0638\u0641\u064a\u0646. \u0648\u0627\u0633\u062a\u0628\u0639\u062f \u062a\u0637\u0628\u064a\u0642\u0627\u062a Windows \u0627\u0644\u0642\u062f\u064a\u0645\u0629\u060c \u0648\u0623\u062f\u0648\u0627\u062a Microsoft \u0627\u0644\u0625\u062f\u0627\u0631\u064a\u0629 \u063a\u064a\u0631 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629\u060c \u0648\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0648\u0635\u0648\u0644 \u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u0646\u0642\u0644 \u0627\u0644\u0645\u0644\u0641\u0627\u062a\u060c \u0648\u0623\u064a \u0628\u0631\u0627\u0645\u062c \u0623\u062e\u0631\u0649 \u062a\u064f\u0639\u062f \u0642\u062f\u064a\u0645\u0629 \u0623\u0648 \u064a\u062d\u062a\u0645\u0644 \u0623\u0646 \u062a\u0634\u0643\u0644 \u062e\u0637\u0631\u064b\u0627.<\/li>\n<li>\u0627\u0633\u062a\u062e\u062f\u0645 <a href=\"https:\/\/me.kaspersky.com\/small-to-medium-business-security\/mail-server?icid=me-ar_kdailyplacehold_acq_ona_smm__onl_b2b_kasperskydaily_wpplaceholder_______\" target=\"_blank\" rel=\"noopener\">\u062d\u0644\u0648\u0644 \u0623\u0645\u0627\u0646 \u0645\u062a\u0642\u062f\u0645\u0629 \u0644\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a<\/a> \u0645\u0632\u0648\u062f\u0629 \u0628\u062a\u0642\u0646\u064a\u0629 CDR (\u062a\u0643\u0646\u0648\u0644\u0648\u0686\u064a\u0627 \u0646\u0632\u0639 \u0633\u0644\u0627\u062d \u0627\u0644\u0645\u062d\u062a\u0648\u0649 \u0648\u0625\u0639\u0627\u062f\u0629 \u0628\u0646\u0627\u0626\u0647\u060c \u0627\u0644\u062a\u064a \u062a\u062c\u0631\u062f \u0627\u0644\u0645\u0631\u0641\u0642\u0627\u062a \u0627\u0644\u0645\u0634\u0628\u0648\u0647\u0629 \u0648\u062a\u0639\u064a\u062f \u0628\u0646\u0627\u0621\u0647\u0627 \u0641\u064a \u0646\u0633\u062e \u0623\u0643\u062b\u0631 \u0623\u0645\u0627\u0646\u064b\u0627) \u0648\u062a\u0643\u0646\u0648\u0644\u0648\u0686\u064a\u0627 \u0627\u0644\u062a\u0641\u062c\u064a\u0631 \u0627\u0644\u0622\u0645\u0646 (\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u0631\u0641\u0642\u0627\u062a \u0627\u0644\u0645\u0634\u0628\u0648\u0647\u0629 \u0641\u064a \u0628\u064a\u0626\u0629 \u0645\u0639\u0632\u0648\u0644\u0629 \u0644\u062a\u062d\u0644\u064a\u0644\u0647\u0627). \u0648\u0642\u0645 \u0628\u062a\u0643\u0648\u064a\u0646 \u0625\u0639\u062f\u0627\u062f\u0627\u062a \u0627\u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0639\u0645\u064a\u0642 \u0644\u0644\u0645\u0631\u0641\u0642\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u064f\u0638\u0647\u0631 \u0639\u0644\u0627\u0645\u0627\u062a \u062e\u0627\u0631\u062c\u064a\u0629 \u062a\u062f\u0644 \u0639\u0644\u0649 \u0623\u0646\u0647\u0627 \u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a: \u0643\u0644 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0623\u0631\u0634\u064a\u0641 \u0648\u0645\u0633\u062a\u0646\u062f\u0627\u062a Office\u060c \u0648\u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0630\u0627\u062a \u0627\u0644\u0627\u0645\u062a\u062f\u0627\u062f\u0627\u062a \u063a\u064a\u0631 \u0627\u0644\u0642\u064a\u0627\u0633\u064a\u0629\u060c \u0648\u0645\u0627 \u0634\u0627\u0628\u0647 \u0630\u0644\u0643.<\/li>\n<li>\u0628\u0627\u0644\u0645\u062b\u0644\u060c \u0642\u0645 \u0628\u062a\u0643\u0648\u064a\u0646 \u062d\u0644 EDR \u0644\u0625\u062c\u0631\u0627\u0621 \u062a\u062d\u0644\u064a\u0644 \u0639\u0645\u064a\u0642 \u0644\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629 \u0623\u064a\u0636\u064b\u0627.<\/li>\n<li>\u0623\u0646\u0634\u0626 \u0642\u0648\u0627\u0639\u062f \u0645\u0631\u0627\u0642\u0628\u0629 \u062a\u0631\u0633\u0644 \u062a\u0646\u0628\u064a\u0647\u0627\u062a \u0639\u0646\u062f \u0631\u0635\u062f \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u063a\u064a\u0631 \u0627\u0639\u062a\u064a\u0627\u062f\u064a\u0629 \u0628\u064a\u0646 \u0639\u0645\u0644\u064a\u0629 \u0648\u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0645\u0645\u0631\u0631\u0629 \u0625\u0644\u064a\u0647\u0627 \u0644\u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u2013 \u0645\u062b\u0644 \u062a\u0634\u063a\u064a\u0644 \u0645\u0644\u0641 CHM \u0639\u0628\u0631 \u0623\u062f\u0627\u0629 <em>mshta<\/em>\u060c \u0623\u0648 \u062a\u0634\u063a\u064a\u0644 \u0645\u0644\u0641 HTML \u0639\u0628\u0631 \u0623\u062f\u0627\u0629 <em>rundll32<\/em>\u060c \u0643\u0645\u0627 \u0647\u0648 \u0645\u0648\u0636\u062d \u0641\u064a \u0627\u0644\u0623\u0645\u062b\u0644\u0629 \u0627\u0644\u0633\u0627\u0628\u0642\u0629.<\/li>\n<li>\u0623\u0636\u0641 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0623\u0633\u0627\u0633\u064a\u0629 \u0639\u0646 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u062a\u0639\u062f\u062f\u0629 \u0627\u0644\u062a\u0646\u0633\u064a\u0642\u0627\u062a \u0625\u0644\u0649 \u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u062a\u0648\u0639\u064a\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0644\u0644\u0645\u0648\u0638\u0641\u064a\u0646 \u062d\u062a\u0649 \u064a\u0638\u0644 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0641\u064a \u062d\u0627\u0644\u0629 \u062a\u0623\u0647\u0628 \u0639\u0646\u062f \u062a\u0644\u0642\u064a \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u062a\u063a\u064a\u064a\u0631 \u0627\u0645\u062a\u062f\u0627\u062f \u0645\u0644\u0641 \u0645\u0627 \u0623\u0648 \u0627\u0644\u062a\u0639\u0627\u0645\u0644 \u0645\u0639\u0647 \u0628\u0637\u0631\u064a\u0642\u0629 \u063a\u064a\u0631 \u0627\u0639\u062a\u064a\u0627\u062f\u064a\u0629 \u2013 \u0643\u0641\u062a\u062d\u0647 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062a\u0637\u0628\u064a\u0642 \u0645\u062d\u062f\u062f\u060c \u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644.<\/li>\n<\/ul>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kesb\"><input type=\"hidden\" class=\"placeholder_for_banner\" data-cat_id=\"kesb\" value=\"9045\">\n","protected":false},"excerpt":{"rendered":"<p>\u064a\u0639\u0645\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0639\u0644\u0649 \u0625\u0646\u0634\u0627\u0621 \u0645\u0644\u0641\u0627\u062a \u064a\u0645\u0643\u0646 \u0644\u0644\u0623\u062c\u0647\u0632\u0629 \u0642\u0631\u0627\u0621\u062a\u0647\u0627 \u0643\u0646\u0648\u0639\u064a\u0646 \u0645\u062e\u062a\u0644\u0641\u064a\u0646 \u0645\u0646 \u0627\u0644\u0645\u0633\u062a\u0646\u062f\u0627\u062a \u0641\u064a \u0622\u0646 \u0648\u0627\u062d\u062f\u060c \u0645\u0633\u062a\u063a\u0644\u064a\u0646 \u0647\u0630\u0647 &#8220;\u0627\u0644\u062f\u0645\u0649 \u0627\u0644\u0645\u062a\u062f\u0627\u062e\u0644\u0629&#8221; \u0644\u062a\u0647\u0631\u064a\u0628 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062e\u0628\u064a\u062b\u0629. \u0641\u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 \u0647\u0630\u0647 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0645\u0632\u062f\u0648\u062c\u0629 \u0627\u0644\u0648\u062c\u0647 \u0648\u062a\u062d\u064a\u064a\u062f \u062e\u0637\u0631\u0647\u0627\u061f<\/p>\n","protected":false},"author":2722,"featured_media":13677,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2370],"tags":[2380,1311,932,484,991,970,2381],"class_list":["post-13676","post","type-post","status-publish","format-standard","has-post-thumbnail","category-2370","tag-2380","tag-1311","tag-932","tag-484","tag-991","tag-970","tag-2381"],"hreflang":[{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/13676\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/30971\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/25999\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/30801\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/29462\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/32430\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/30978\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/42481\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/14845\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/56253\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/24339\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/25291\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/33844\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/polyglot-file-formats-attack-examples-detection-prevention-advice\/30936\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/36465\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/polyglot-file-formats-attack-examples-detection-prevention-advice\/36380\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/me.kaspersky.com\/blog\/tag\/%d8%a7%d9%84%d8%a8%d8%b1%d8%a7%d9%85%d8%ac-%d8%a7%d9%84%d8%b6%d8%a7%d8%b1%d8%a9\/","name":"\u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629"},"_links":{"self":[{"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2722"}],"replies":[{"embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=13676"}],"version-history":[{"count":2,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13676\/revisions"}],"predecessor-version":[{"id":13698,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13676\/revisions\/13698"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/13677"}],"wp:attachment":[{"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=13676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=13676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/me.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=13676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}