{"id":9672,"date":"2025-08-13T11:01:56","date_gmt":"2025-08-13T02:01:56","guid":{"rendered":"https:\/\/apollo89.com\/wordpress\/?p=9672"},"modified":"2025-08-13T11:20:30","modified_gmt":"2025-08-13T02:20:30","slug":"%ed%83%90%ec%a7%80-%eb%b6%88%ea%b0%80%eb%8a%a5%ed%95%9c-plague-%ec%95%85%ec%84%b1%ec%bd%94%eb%93%9c%ea%b0%80-%eb%a6%ac%eb%88%85%ec%8a%a4-%ec%84%9c%eb%b2%84%eb%a5%bc-%eb%85%b8%eb%a6%b0%eb%8b%a4","status":"publish","type":"post","link":"https:\/\/apollo89.com\/wordpress\/?p=9672","title":{"rendered":"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c ‘Plague’ \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4"},"content":{"rendered":"

 <\/p>\n

“\uc774 \ud3ec\uc2a4\ud305\uc740 \ucfe0\ud321 \ud30c\ud2b8\ub108\uc2a4 \ud65c\ub3d9\uc758 \uc77c\ud658\uc73c\ub85c, \uc774\uc5d0 \ub530\ub978 \uc77c\uc815\uc561\uc758 \uc218\uc218\ub8cc\ub97c \uc81c\uacf5\ubc1b\uc2b5\ub2c8\ub2e4.”<\/p>\n

 <\/p>\n

\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c \uc0c8\ub85c\uc6b4 \uc545\uc131\ucf54\ub4dc\uc758 \uc704\ud611<\/h2>\n

2025\ub144 8\uc6d4, \ubcf4\uc548\uc5c5\uacc4\uc5d0 \ucda9\uaca9\uc801\uc778 \uc18c\uc2dd\uc774 \uc804\ud574\uc84c\uc2b5\ub2c8\ub2e4. \ubb34\ub824 66\uac1c\uc758 \uc8fc\uc694 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc774 \ubaa8\ub450 \ud0d0\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uc2e0\uc885 \uc545\uc131\ucf54\ub4dc\uac00 \ubc1c\uacac\ub41c \uac83\uc785\ub2c8\ub2e4. \uc774 \uc545\uc131\ucf54\ub4dc\uc758 \uc774\ub984\uc740 ‘Plague’\uc785\ub2c8\ub2e4.<\/p>\n

\ub125\uc2a4\ud2b8\ub860 \uc2dc\uc2a4\ud15c\uc988(Nextron Systems) \ubcf4\uc548 \uc5f0\uad6c\ud300\uc774 \ubc1c\uacac\ud55c \uc774 \uc704\ud611\uc740 \uc9c0\uae08\uae4c\uc9c0\uc640\ub294 \uc644\uc804\ud788 \ub2e4\ub978 \uc811\uadfc \ubc29\uc2dd\uc744 \ucde8\ud569\ub2c8\ub2e4. \uae30\uc874 \uc545\uc131\ucf54\ub4dc\ub4e4\uc774 \uc2dc\uc2a4\ud15c \ud45c\uba74\uc5d0\uc11c \ud65c\ub3d9\ud588\ub2e4\uba74, Plague\ub294 \ub9ac\ub205\uc2a4 \uc2dc\uc2a4\ud15c\uc758 \uc2ec\uc7a5\ubd80\uc778 \uc778\uc99d \uc2dc\uc2a4\ud15c\uc5d0 \uc9c1\uc811 \uce68\ud22c\ud569\ub2c8\ub2e4.<\/p>\n

\uac00\uc7a5 \ub180\ub77c\uc6b4 \uc810\uc740 \uc774 \uc545\uc131\ucf54\ub4dc\uac00 \uc774\ubbf8 1\ub144 \ub118\uac8c \ud65c\ub3d9\ud574\uc654\ub2e4\ub294 \uc0ac\uc2e4\uc785\ub2c8\ub2e4. 2024\ub144 7\uc6d4\ubd80\ud130 \uc9c0\uc18d\uc801\uc73c\ub85c \ubc14\uc774\ub7ec\uc2a4\ud1a0\ud0c8(VirusTotal)\uc5d0 \uc5c5\ub85c\ub4dc\ub418\uc5c8\uc9c0\ub9cc, \ub2e8 \ud55c \ubc88\ub3c4 \uc545\uc131\uc73c\ub85c \ud310\uc815\ubc1b\uc9c0 \uc54a\uc558\uc2b5\ub2c8\ub2e4.<\/p>\n

\"\"<\/p>\n

PAM \ubaa8\ub4c8 \uc704\uc7a5\uc774\ub77c\ub294 \uad50\ubb18\ud55c \uc218\ubc95<\/h2>\n

Plague\uc758 \ud575\uc2ec\uc740 PAM(Pluggable Authentication Module) \ubaa8\ub4c8\ub85c \uc704\uc7a5\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. PAM\uc740 \ub9ac\ub205\uc2a4 \uc2dc\uc2a4\ud15c\uc5d0\uc11c \uc0ac\uc6a9\uc790 \uc778\uc99d\uc744 \ub2f4\ub2f9\ud558\ub294 \ud575\uc2ec \uad6c\uc131 \uc694\uc18c\uc785\ub2c8\ub2e4. \ub9c8\uce58 \uac74\ubb3c\uc758 \ubcf4\uc548 \uc2dc\uc2a4\ud15c\uc5d0 \uc704\uc7a5 \uacbd\ube44\uc6d0\uc744 \ubc30\uce58\ud558\ub294 \uac83\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n

\uc774 \uc545\uc131\ucf54\ub4dc\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ubc29\uc2dd\uc73c\ub85c \uc791\ub3d9\ud569\ub2c8\ub2e4:<\/p>\n

\uc815\uc801 \uc790\uaca9\uc99d\uba85 \uc81c\uacf5: \uacf5\uaca9\uc790\uac00 \ubbf8\ub9ac \uc124\uc815\ud55c \ube44\ubc00\ubc88\ud638\ub85c \uc2dc\uc2a4\ud15c \uc811\uadfc\uc774 \uac00\ub2a5\ud569\ub2c8\ub2e4.
\n\uc548\ud2f0 \ub514\ubc84\uae45 \uae30\ub2a5: \ubd84\uc11d \ub3c4\uad6c\ub4e4\uc744 \ucc28\ub2e8\ud558\uc5ec \uc5ed\uacf5\ud559\uc744 \ubc29\ud574\ud569\ub2c8\ub2e4.
\n\ubb38\uc790\uc5f4 \ub09c\ub3c5\ud654: \uc545\uc131 \ucf54\ub4dc\ub97c \uc228\uae30\uae30 \uc704\ud574 \ubcf5\uc7a1\ud55c \uc554\ud638\ud654\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.
\n\uc811\uc18d \ud754\uc801 \uc0ad\uc81c: SSH \uc138\uc158 \uae30\ub85d\uc744 \uc790\ub3d9\uc73c\ub85c \uc81c\uac70\ud569\ub2c8\ub2e4.<\/p>\n

\ud2b9\ud788 \ud765\ubbf8\ub85c\uc6b4 \uac83\uc740 \uacf5\uaca9\uc790\ub4e4\uc774 \uc601\ud654 ‘\ud574\ucee4\uc2a4(Hackers)’\ub97c \ucc38\uc870\ud55c \uc810\uc785\ub2c8\ub2e4. \ucf54\ub4dc \ub0b4\ubd80\uc5d0\ub294 “Uh. Mr. The Plague, sir? I think we have a hacker”\ub77c\ub294 \uba54\uc2dc\uc9c0\uac00 \uc228\uaca8\uc838 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n

\uc9c4\ud654\ud558\ub294 \uc554\ud638\ud654 \uae30\uc220<\/h2>\n

Plague\ub294 \uc2dc\uac04\uc774 \uc9c0\ub098\uba74\uc11c \uc810\uc810 \ub354 \uc815\uad50\ud574\uc9c0\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ucd08\uae30 \ubc84\uc804\uc740 \uac04\ub2e8\ud55c XOR \uc554\ud638\ud654\ub97c \uc0ac\uc6a9\ud588\uc2b5\ub2c8\ub2e4. \ud558\uc9c0\ub9cc \ucd5c\uc2e0 \ubc84\uc804\uc740 KSA\/PRGA \uc54c\uace0\ub9ac\uc998\uacfc DRBG(\ub09c\uc218 \uc0dd\uc131\uae30)\ub97c \uc870\ud569\ud55c \ubcf5\uc7a1\ud55c \uc554\ud638\ud654\ub97c \uc801\uc6a9\ud569\ub2c8\ub2e4.<\/p>\n

\uc774\ub7ec\ud55c \ubc1c\uc804\uc740 \uacf5\uaca9\uc790\ub4e4\uc774 \uc9c0\uc18d\uc801\uc73c\ub85c \ud0d0\uc9c0 \ud68c\ud53c \uae30\uc220\uc744 \uac1c\uc120\ud558\uace0 \uc788\uc74c\uc744 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. \ub9c8\uce58 \ubc14\uc774\ub7ec\uc2a4\uac00 \ubc31\uc2e0\uc5d0 \ub300\uc751\ud558\uc5ec \ubcc0\uc774\ud558\ub294 \uac83\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n

\uc740\ubc00\ud568\uc758 \uadf9\uce58: \uc2a4\ud154\uc2a4 \uae30\ub2a5
\nPlague\uac00 \ud2b9\ud788 \uc704\ud5d8\ud55c \uc774\uc720\ub294 \uc644\ubcbd\ud55c \uc740\ubc00\uc131\uc785\ub2c8\ub2e4. \uc77c\ubc18\uc801\uc778 \uc545\uc131\ucf54\ub4dc\uc640 \ub2ec\ub9ac, \uc774 \uc704\ud611\uc740 \ub2e4\uc74c\uacfc \uac19\uc740 \ubc29\ubc95\uc73c\ub85c \ud754\uc801\uc744 \uc9c0\uc6c1\ub2c8\ub2e4:
\n– SSH \uc5f0\uacb0 \uc815\ubcf4\ub97c \ub2f4\uc740 \ud658\uacbd\ubcc0\uc218\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4
\n– \uc258 \uba85\ub839\uc5b4 \uae30\ub85d\uc744 \/dev\/null\ub85c \ub9ac\ub2e4\uc774\ub809\uc158\ud569\ub2c8\ub2e4
\n– \uc2e4\uc81c \ud30c\uc77c\uba85\uc774 ‘libselinux.so.8’\uc778\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4
\n– ‘ld.so.preload’ \ud658\uacbd\ubcc0\uc218 \uc874\uc7ac\ub97c \uac80\uc99d\ud569\ub2c8\ub2e4<\/p>\n

\uc774\ub7ec\ud55c \uae30\ub2a5\ub4e4\uc740 \uc2dc\uc2a4\ud15c \uad00\ub9ac\uc790\uac00 \uce68\uc785\uc744 \uc804\ud600 \ub208\uce58\ucc44\uc9c0 \ubabb\ud558\uac8c \ub9cc\ub4ed\ub2c8\ub2e4.<\/p>\n

\ud558\ub4dc\ucf54\ub529\ub41c \ubc31\ub3c4\uc5b4 \ube44\ubc00\ubc88\ud638
\n\ubcf4\uc548 \uc5f0\uad6c\uc9c4\ub4e4\uc774 \ubc1c\uacac\ud55c \ud558\ub4dc\ucf54\ub529\ub41c \ube44\ubc00\ubc88\ud638\ub4e4\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:
\n– Mvi4Odm6tld7
\n– IpV57KNK32Ih
\n– changeme<\/p>\n

\uc774 \ube44\ubc00\ubc88\ud638\ub4e4\uc744 \uc0ac\uc6a9\ud558\uba74 \uc815\uc0c1\uc801\uc778 \uc778\uc99d \uc808\ucc28 \uc5c6\uc774 \uc2dc\uc2a4\ud15c\uc5d0 \uc811\uadfc\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud2b9\ud788 ‘changeme’\uc640 \uac19\uc740 \ub2e8\uc21c\ud55c \ube44\ubc00\ubc88\ud638\ub294 \uacf5\uaca9\uc790\uc758 \uc758\ub3c4\uc801\uc778 \ub3c4\ubc1c\ub85c \ubcf4\uc785\ub2c8\ub2e4.<\/p>\n

\"\uc545\uc131\ucf54\ub4dc<\/a>
\n\"\uc545\uc131\ucf54\ub4dc\uc640<\/a>
\n\"\ub9ac\ubc84\uc2f1<\/a><\/div>\n

\uad6d\ub0b4 \ubcf4\uc99d\ubcf4\ud5d8\uc0ac \uc0ac\uac74\uacfc\uc758 \uc5f0\uad00\uc131<\/h2>\n

\ubcf4\uace0\uc11c\uc5d0 \ub530\ub974\uba74, Plague\uc758 \uacf5\uaca9 \ud328\ud134\uc740 \ucd5c\uadfc \uad6d\ub0b4 \ubcf4\uc99d\ubcf4\ud5d8\uc0ac\uc5d0\uc11c \ubc1c\uc0dd\ud55c \ub79c\uc12c\uc6e8\uc5b4 \uacf5\uaca9\uacfc \uc720\uc0ac\uc810\uc774 \uc788\uc2b5\ub2c8\ub2e4. SSH \uc811\uadfc \uc774\ub825 \uc0ad\uc81c \uae30\ub2a5\uc744 \uace0\ub824\ud560 \ub54c, \ucd08\uae30 \uce68\ud22c \uacbd\ub85c\uc640 \uc740\ub2c9 \ubc29\uc2dd\uc5d0\uc11c \uacf5\ud1b5\uc810\uc744 \ubcf4\uc785\ub2c8\ub2e4.<\/p>\n

\uc774\ub294 Plague\uac00 \ub2e8\uc21c\ud55c \uc2e4\ud5d8\uc801 \uc545\uc131\ucf54\ub4dc\uac00 \uc544\ub2c8\ub77c \uc2e4\uc81c \uacf5\uaca9\uc5d0 \ud65c\uc6a9\ub420 \uc218 \uc788\ub294 \uc704\ud5d8\ud55c \ub3c4\uad6c\uc784\uc744 \uc2dc\uc0ac\ud569\ub2c8\ub2e4.<\/p>\n

\ud6a8\uacfc\uc801\uc778 \ub300\uc751 \uc804\ub7b5<\/h2>\n

1. \uc989\uc2dc \uc2e4\ud589\ud574\uc57c \ud560 \uc870\uce58
\n– PAM \ubaa8\ub4c8 \ubb34\uacb0\uc131 \uac80\uc0ac: \ubaa8\ub4e0 PAM \ubaa8\ub4c8\uc758 \ud574\uc2dc\uac12\uc744 \ud655\uc778\ud558\uace0 \ubcc0\uc870 \uc5ec\ubd80\ub97c \uc810\uac80\ud574\uc57c \ud569\ub2c8\ub2e4.
\n– \uc778\uc99d \ud328\ud134 \ubaa8\ub2c8\ud130\ub9c1: \ud3c9\uc18c\uc640 \ub2e4\ub978 \ub85c\uadf8\uc778 \uc2dc\ub3c4\ub098 \uc758\uc2ec\uc2a4\ub7ec\uc6b4 \uacc4\uc815 \ud65c\ub3d9\uc744 \uac10\uc2dc\ud574\uc57c \ud569\ub2c8\ub2e4.
\n– \ud589\uc704 \uae30\ubc18 \ubd84\uc11d: \uc2dc\uc2a4\ud15c \ub0b4 \ube44\uc815\uc0c1\uc801\uc778 \ud65c\ub3d9\uc744 \uc2e4\uc2dc\uac04\uc73c\ub85c \ud0d0\uc9c0\ud560 \uc218 \uc788\ub294 \uc2dc\uc2a4\ud15c\uc744 \uad6c\ucd95\ud574\uc57c \ud569\ub2c8\ub2e4.
\n– YARA \ub8f0 \uc801\uc6a9
\n\uc5f0\uad6c\uc9c4\ub4e4\uc774 \uc81c\uacf5\ud55c YARA \ub8f0\uc744 \ud65c\uc6a9\ud558\uc5ec Plague\ub97c \ud0d0\uc9c0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:<\/p>\n

rule MAL_LNX_PLAGUE_BACKDOOR_Jul25 {\r\nmeta:\r\ndescription = \"Detects Plague backdoor ELF binaries\"\r\nscore = 80\r\nstrings:\r\n$s1 = \"decrypt_phrase\"\r\n$s2 = \"init_phrases\"\r\ncondition:\r\nuint32be(0) == 0x7f454c46\r\nand filesize < 1MB\r\nand all of them\r\n}\r\n<\/pre>\n
2. \uc7a5\uae30\uc801 \ubcf4\uc548 \uac15\ud654
\n– \uc815\uae30\uc801\uc778 PAM \uac10\uc0ac: PAM \uc124\uc815\uacfc \ubaa8\ub4c8\uc744 \uc8fc\uae30\uc801\uc73c\ub85c \uac80\ud1a0\ud574\uc57c \ud569\ub2c8\ub2e4.
\n– \ub2e4\uc911 \uc778\uc99d \ub3c4\uc785: SSH \uc811\uadfc\uc5d0 \ub2e4\ub2e8\uacc4 \uc778\uc99d\uc744 \uc801\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4.
\n– \ub124\ud2b8\uc6cc\ud06c \ubd84\ub9ac: \uc911\uc694\ud55c \uc2dc\uc2a4\ud15c\uc740 \ubcc4\ub3c4 \ub124\ud2b8\uc6cc\ud06c\uc5d0 \uaca9\ub9ac\ud574\uc57c \ud569\ub2c8\ub2e4.
\n– \uc811\uadfc \uae30\ub85d \uac15\ud654: \uc6b0\ud68c\ud558\uae30 \uc5b4\ub824\uc6b4 \uc911\uc559\uc9d1\uc911\uc2dd \ub85c\uae45 \uc2dc\uc2a4\ud15c\uc744 \uad6c\ucd95\ud574\uc57c \ud569\ub2c8\ub2e4.<\/p>\n
\uc0c8\ub85c\uc6b4 \ubcf4\uc548 \ud328\ub7ec\ub2e4\uc784\uc758 \ud544\uc694\uc131<\/h2>\n
Plague\uc758 \ub4f1\uc7a5\uc740 \uae30\uc874 \ubcf4\uc548 \uc811\uadfc \ubc29\uc2dd\uc758 \ud55c\uacc4\ub97c \uba85\ud655\ud788 \ubcf4\uc5ec\uc90d\ub2c8\ub2e4. \uc2dc\uadf8\ub2c8\ucc98 \uae30\ubc18 \ud0d0\uc9c0\uc5d0\ub9cc \uc758\uc874\ud558\ub294 \uc804\ud1b5\uc801\uc778 \ubc31\uc2e0\uc73c\ub85c\ub294 \uc774\ub7f0 \uc815\uad50\ud55c \uc704\ud611\uc744 \ub9c9\uc744 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.<\/p>\n
\uc55e\uc73c\ub85c\ub294 \ud589\uc704 \uae30\ubc18 \ubd84\uc11d\uacfc \uc81c\ub85c \ud2b8\ub7ec\uc2a4\ud2b8 \uc544\ud0a4\ud14d\ucc98\uac00 \ub354\uc6b1 \uc911\uc694\ud574\uc9c8 \uac83\uc785\ub2c8\ub2e4. \ud2b9\ud788 PAM\uacfc \uac19\uc740 \ud575\uc2ec \uc2dc\uc2a4\ud15c \uad6c\uc131 \uc694\uc18c\uc5d0 \ub300\ud55c \uc9c0\uc18d\uc801\uc778 \ubaa8\ub2c8\ud130\ub9c1\uc774 \ud544\uc218\uc801\uc785\ub2c8\ub2e4.<\/p>\n
Plague\ub294 \ub2e8\uc21c\ud55c \uc545\uc131\ucf54\ub4dc\ub97c \ub118\uc5b4\uc11c \ubbf8\ub798 \uc0ac\uc774\ubc84 \uc704\ud611\uc758 \uc9c4\ud654 \ubc29\ud5a5\uc744 \ubcf4\uc5ec\uc8fc\ub294 \uc0ac\ub840\uc785\ub2c8\ub2e4. \ubcf4\uc548 \uc5c5\uacc4\ub294 \uc774\uc81c \ub354\uc6b1 \uc815\uad50\ud558\uace0 \uc9c0\ub2a5\uc801\uc778 \uc704\ud611\uc5d0 \ub300\ube44\ud574\uc57c \ud560 \uc2dc\uc810\uc785\ub2c8\ub2e4.<\/p>\n
\ucc38\uace0 \uc790\ub8cc
\n– https:\/\/www.nextron-systems.com\/2025\/08\/01\/plague-a-newly-discoveredpam-based-backdoor-for-linux\/<\/a>
\n– https:\/\/securityaffairs.com\/180701\/malware\/new-linux-backdoor-plaguebypasses-auth-via-malicious-pam-module.html<\/a>
\n– https:\/\/www.bleepingcomputer.com\/news\/security\/new-plague-malwarebackdoors-linux-devices-removes-ssh-session-traces\/<\/a>
\n– https:\/\/thehackernews.com\/2025\/08\/new-plague-pam-backdoor-exposes.html<\/a><\/p>\n
\uc5ed\uacf5\ud559 : X86, X64, ARM, \uc708\ub3c4\uc6b0 \ucee4\ub110, \uc5ed\uacf5\ud559 \ub3c4\uad6c, \uadf8\ub9ac\uace0 \ub09c\ub3c5\ud654<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
  “\uc774 \ud3ec\uc2a4\ud305\uc740 \ucfe0\ud321 \ud30c\ud2b8\ub108\uc2a4 \ud65c\ub3d9\uc758 \uc77c\ud658\uc73c\ub85c, \uc774\uc5d0 \ub530\ub978 \uc77c\uc815\uc561\uc758 \uc218\uc218\ub8cc\ub97c \uc81c\uacf5\ubc1b\uc2b5\ub2c8\ub2e4.”   \ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c \uc0c8\ub85c\uc6b4 \uc545\uc131\ucf54\ub4dc\uc758 \uc704\ud611 2025\ub144 8\uc6d4, \ubcf4\uc548\uc5c5\uacc4\uc5d0 \ucda9\uaca9\uc801\uc778 \uc18c\uc2dd\uc774 \uc804\ud574\uc84c\uc2b5\ub2c8\ub2e4. \ubb34\ub824 66\uac1c\uc758 \uc8fc\uc694 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc774 \ubaa8\ub450 \ud0d0\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uc2e0\uc885 \uc545\uc131\ucf54\ub4dc\uac00 \ubc1c\uacac\ub41c \uac83\uc785\ub2c8\ub2e4. \uc774 \uc545\uc131\ucf54\ub4dc\uc758 \uc774\ub984\uc740 ‘Plague’\uc785\ub2c8\ub2e4. … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1266,703],"tags":[],"class_list":["post-9672","post","type-post","status-publish","format-standard","hentry","category-reversing","category-securityhacking"],"yoast_head":"\n\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c 'Plague' \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4 - Apollo89.com<\/title>\n<meta name=\"description\" content=\"2025\ub144 8\uc6d4, \ubcf4\uc548\uc5c5\uacc4\uc5d0 \ucda9\uaca9\uc801\uc778 \uc18c\uc2dd\uc774 \uc804\ud574\uc84c\uc2b5\ub2c8\ub2e4. \ubb34\ub824 66\uac1c\uc758 \uc8fc\uc694 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc774 \ubaa8\ub450 \ud0d0\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uc2e0\uc885 \uc545\uc131\ucf54\ub4dc\uac00 \ubc1c\uacac\ub41c \uac83\uc785\ub2c8\ub2e4. \uc774 \uc545\uc131\ucf54\ub4dc\uc758 \uc774\ub984\uc740 Plague\uc785\ub2c8\ub2e4.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/apollo89.com\/wordpress\/?p=9672\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c 'Plague' \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4 - Apollo89.com\" \/>\n<meta property=\"og:description\" content=\"2025\ub144 8\uc6d4, \ubcf4\uc548\uc5c5\uacc4\uc5d0 \ucda9\uaca9\uc801\uc778 \uc18c\uc2dd\uc774 \uc804\ud574\uc84c\uc2b5\ub2c8\ub2e4. \ubb34\ub824 66\uac1c\uc758 \uc8fc\uc694 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc774 \ubaa8\ub450 \ud0d0\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uc2e0\uc885 \uc545\uc131\ucf54\ub4dc\uac00 \ubc1c\uacac\ub41c \uac83\uc785\ub2c8\ub2e4. \uc774 \uc545\uc131\ucf54\ub4dc\uc758 \uc774\ub984\uc740 Plague\uc785\ub2c8\ub2e4.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/apollo89.com\/wordpress\/?p=9672\" \/>\n<meta property=\"og:site_name\" content=\"Apollo89.com\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-13T02:01:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-13T02:20:30+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2025\/08\/malware.jpg\" \/>\n<meta name=\"author\" content=\"apollo89\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\uae00\uc4f4\uc774\" \/>\n\t<meta name=\"twitter:data1\" content=\"apollo89\" \/>\n\t<meta name=\"twitter:label2\" content=\"\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04\" \/>\n\t<meta name=\"twitter:data2\" content=\"4\ubd84\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672\"},\"author\":{\"name\":\"apollo89\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\"},\"headline\":\"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c ‘Plague’ \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4\",\"datePublished\":\"2025-08-13T02:01:56+00:00\",\"dateModified\":\"2025-08-13T02:20:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672\"},\"wordCount\":109,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/malware.jpg\",\"articleSection\":[\"Reversing\",\"Security\\\/Hacking\"],\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672\",\"name\":\"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c 'Plague' \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4 - Apollo89.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/malware.jpg\",\"datePublished\":\"2025-08-13T02:01:56+00:00\",\"dateModified\":\"2025-08-13T02:20:30+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\"},\"description\":\"2025\ub144 8\uc6d4, \ubcf4\uc548\uc5c5\uacc4\uc5d0 \ucda9\uaca9\uc801\uc778 \uc18c\uc2dd\uc774 \uc804\ud574\uc84c\uc2b5\ub2c8\ub2e4. \ubb34\ub824 66\uac1c\uc758 \uc8fc\uc694 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc774 \ubaa8\ub450 \ud0d0\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uc2e0\uc885 \uc545\uc131\ucf54\ub4dc\uac00 \ubc1c\uacac\ub41c \uac83\uc785\ub2c8\ub2e4. \uc774 \uc545\uc131\ucf54\ub4dc\uc758 \uc774\ub984\uc740 Plague\uc785\ub2c8\ub2e4.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672#primaryimage\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/malware.jpg\",\"contentUrl\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/malware.jpg\",\"width\":1000,\"height\":545},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=9672#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\ud648\",\"item\":\"https:\\\/\\\/apollo89.com\\\/wordpress\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c ‘Plague’ \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/\",\"name\":\"Apollo89.com\",\"description\":\"\uc544\ud3f4\ub85c\uc528\uc758 \uc7a1\ub2e4\ud55c \uacbd\ud5d8\ub4e4..\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\",\"name\":\"apollo89\",\"description\":\"\uc544\ud3f4\ub85c89 \uc785\ub2c8\ub2e4.\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c 'Plague' \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4 - Apollo89.com","description":"2025\ub144 8\uc6d4, \ubcf4\uc548\uc5c5\uacc4\uc5d0 \ucda9\uaca9\uc801\uc778 \uc18c\uc2dd\uc774 \uc804\ud574\uc84c\uc2b5\ub2c8\ub2e4. \ubb34\ub824 66\uac1c\uc758 \uc8fc\uc694 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc774 \ubaa8\ub450 \ud0d0\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uc2e0\uc885 \uc545\uc131\ucf54\ub4dc\uac00 \ubc1c\uacac\ub41c \uac83\uc785\ub2c8\ub2e4. \uc774 \uc545\uc131\ucf54\ub4dc\uc758 \uc774\ub984\uc740 Plague\uc785\ub2c8\ub2e4.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/apollo89.com\/wordpress\/?p=9672","og_locale":"ko_KR","og_type":"article","og_title":"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c 'Plague' \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4 - Apollo89.com","og_description":"2025\ub144 8\uc6d4, \ubcf4\uc548\uc5c5\uacc4\uc5d0 \ucda9\uaca9\uc801\uc778 \uc18c\uc2dd\uc774 \uc804\ud574\uc84c\uc2b5\ub2c8\ub2e4. \ubb34\ub824 66\uac1c\uc758 \uc8fc\uc694 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc774 \ubaa8\ub450 \ud0d0\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uc2e0\uc885 \uc545\uc131\ucf54\ub4dc\uac00 \ubc1c\uacac\ub41c \uac83\uc785\ub2c8\ub2e4. \uc774 \uc545\uc131\ucf54\ub4dc\uc758 \uc774\ub984\uc740 Plague\uc785\ub2c8\ub2e4.","og_url":"https:\/\/apollo89.com\/wordpress\/?p=9672","og_site_name":"Apollo89.com","article_published_time":"2025-08-13T02:01:56+00:00","article_modified_time":"2025-08-13T02:20:30+00:00","og_image":[{"url":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2025\/08\/malware.jpg","type":"","width":"","height":""}],"author":"apollo89","twitter_card":"summary_large_image","twitter_misc":{"\uae00\uc4f4\uc774":"apollo89","\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04":"4\ubd84"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/apollo89.com\/wordpress\/?p=9672#article","isPartOf":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=9672"},"author":{"name":"apollo89","@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82"},"headline":"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c ‘Plague’ \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4","datePublished":"2025-08-13T02:01:56+00:00","dateModified":"2025-08-13T02:20:30+00:00","mainEntityOfPage":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=9672"},"wordCount":109,"commentCount":0,"image":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=9672#primaryimage"},"thumbnailUrl":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2025\/08\/malware.jpg","articleSection":["Reversing","Security\/Hacking"],"inLanguage":"ko-KR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/apollo89.com\/wordpress\/?p=9672#respond"]}]},{"@type":"WebPage","@id":"https:\/\/apollo89.com\/wordpress\/?p=9672","url":"https:\/\/apollo89.com\/wordpress\/?p=9672","name":"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c 'Plague' \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4 - Apollo89.com","isPartOf":{"@id":"https:\/\/apollo89.com\/wordpress\/#website"},"primaryImageOfPage":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=9672#primaryimage"},"image":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=9672#primaryimage"},"thumbnailUrl":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2025\/08\/malware.jpg","datePublished":"2025-08-13T02:01:56+00:00","dateModified":"2025-08-13T02:20:30+00:00","author":{"@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82"},"description":"2025\ub144 8\uc6d4, \ubcf4\uc548\uc5c5\uacc4\uc5d0 \ucda9\uaca9\uc801\uc778 \uc18c\uc2dd\uc774 \uc804\ud574\uc84c\uc2b5\ub2c8\ub2e4. \ubb34\ub824 66\uac1c\uc758 \uc8fc\uc694 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4 \uc5d4\uc9c4\uc774 \ubaa8\ub450 \ud0d0\uc9c0\ud558\uc9c0 \ubabb\ud558\ub294 \uc2e0\uc885 \uc545\uc131\ucf54\ub4dc\uac00 \ubc1c\uacac\ub41c \uac83\uc785\ub2c8\ub2e4. \uc774 \uc545\uc131\ucf54\ub4dc\uc758 \uc774\ub984\uc740 Plague\uc785\ub2c8\ub2e4.","breadcrumb":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=9672#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/apollo89.com\/wordpress\/?p=9672"]}]},{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/apollo89.com\/wordpress\/?p=9672#primaryimage","url":"https:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2025\/08\/malware.jpg","contentUrl":"https:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2025\/08\/malware.jpg","width":1000,"height":545},{"@type":"BreadcrumbList","@id":"https:\/\/apollo89.com\/wordpress\/?p=9672#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\ud648","item":"https:\/\/apollo89.com\/wordpress"},{"@type":"ListItem","position":2,"name":"\ud0d0\uc9c0 \ubd88\uac00\ub2a5\ud55c ‘Plague’ \uc545\uc131\ucf54\ub4dc\uac00 \ub9ac\ub205\uc2a4 \uc11c\ubc84\ub97c \ub178\ub9b0\ub2e4"}]},{"@type":"WebSite","@id":"https:\/\/apollo89.com\/wordpress\/#website","url":"https:\/\/apollo89.com\/wordpress\/","name":"Apollo89.com","description":"\uc544\ud3f4\ub85c\uc528\uc758 \uc7a1\ub2e4\ud55c \uacbd\ud5d8\ub4e4..","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/apollo89.com\/wordpress\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Person","@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82","name":"apollo89","description":"\uc544\ud3f4\ub85c89 \uc785\ub2c8\ub2e4.","url":"https:\/\/apollo89.com\/wordpress\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/9672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9672"}],"version-history":[{"count":3,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/9672\/revisions"}],"predecessor-version":[{"id":9679,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/9672\/revisions\/9679"}],"wp:attachment":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9672"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9672"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}