{"id":48957,"date":"2025-09-17T18:15:23","date_gmt":"2025-09-17T18:15:23","guid":{"rendered":"https:\/\/becolve.com\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/"},"modified":"2025-09-17T18:15:23","modified_gmt":"2025-09-17T18:15:23","slug":"dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas","status":"publish","type":"blog","link":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/","title":{"rendered":"Dragonfly e Sandworm em redes OT: impacto e contramedidas"},"content":{"rendered":"

Ap\u00f3s estudar em profundidade as caracter\u00edsticas e os vetores de ataque utilizados pelas APT Dragonfly<\/a> e Sandworm<\/a>, \u00e9 altura de analisar o impacto que podem ter numa rede OT<\/strong>.<\/p>\n

Entre as principais consequ\u00eancias, podemos destacar as seguintes:<\/p>\n

    \n
      \n
        \n
      1. A execu\u00e7\u00e3o de c\u00f3digo n\u00e3o autorizado<\/strong>: Devido \u00e0 exist\u00eancia de equipamentos em ambientes OT com n\u00edveis de autoriza\u00e7\u00e3o de \u201cadministrador\u201d, \u00e9 muito f\u00e1cil que este tipo de malware realize qualquer tipo de a\u00e7\u00e3o maliciosa, aproveitando o facto de existirem privil\u00e9gios m\u00e1ximos.<\/li>\n
      2. A divulga\u00e7\u00e3o de informa\u00e7\u00f5es<\/strong>: Que pode ser a base para ataques mais direcionados. Em particular, a associada a browser password, VPN configuration information e credenciais VPN que podem ser utilizadas para aceder de forma n\u00e3o autorizada a dispositivos de campo. <\/li>\n
      3. O acesso remoto n\u00e3o autorizado<\/strong>: Atrav\u00e9s da instala\u00e7\u00e3o de software com troianos descarregado de s\u00edtios Web de fornecedores ICS, como j\u00e1 se viu. Isto permitiria o acesso direto a ambientes OT. <\/li>\n
      4. A escrita sobre sistemas de controlo<\/strong>: Atrav\u00e9s do OpcEnum, \u00e9 poss\u00edvel identificar clientes-servidores OPC e, se n\u00e3o existirem contramedidas, \u00e9 f\u00e1cil poder aceder a estes servidores para escrever na OPC Tag Database.<\/li>\n
      5. Nega\u00e7\u00f5es de servi\u00e7o atrav\u00e9s dos RAT<\/strong>: Provocando o rein\u00edcio de m\u00e1quinas por infe\u00e7\u00e3o, a degrada\u00e7\u00e3o do desempenho dos sistemas infetados.<\/li>\n<\/ol>\n<\/ol>\n<\/ol>\n

        Que contramedidas parecem as mais adequadas para eliminar e\/ou mitigar este tipo de amea\u00e7as?<\/h4>\n
          \n
        1. Associadas \u00e0 segmenta\u00e7\u00e3o e fortifica\u00e7\u00e3o de redes<\/strong>.<\/li>\n<\/ol>\n
            \n
              \n
            • Realizar uma an\u00e1lise aprofundada do estado das redes.<\/li>\n
            • Incorporar solu\u00e7\u00f5es antipishing e drive-by download.<\/li>\n
            • Segmentar IT e OT fisicamente e, dentro de OT, segmentar e fortificar logicamente atrav\u00e9s de VLAN ou at\u00e9 mesmo de novo fisicamente, isolando sistemas cr\u00edticos.<\/li>\n
            • Incorporar dispositivos de eletr\u00f3nica de rede que permitam segmentar o tr\u00e1fego (network whitelisting).<\/li>\n
            • Realizar whitelisting de protocolos.<\/li>\n
            • Fortificar os dispositivos de campo com firewalls DPI.<\/li>\n<\/ul>\n<\/ul>\n
                \n
              1. Associadas a estabelecer pol\u00edticas e procedimentos<\/strong>.<\/li>\n<\/ol>\n
                  \n
                    \n
                  • Desenvolver Planos Diretores de Ciberseguran\u00e7a Industrial.<\/li>\n
                  • Descarregar software em ambientes controlados (DMZ).<\/li>\n
                  • Testar software em ambientes de teste, antes de passar para produ\u00e7\u00e3o.<\/li>\n<\/ul>\n<\/ul>\n
                      \n
                    1. Associadas a estabelecer arquiteturas de rede segura<\/strong>.<\/li>\n<\/ol>\n
                        \n
                          \n
                        • Incluir whitelisting de aplica\u00e7\u00f5es.<\/li>\n
                        • Utilizar protocolos industriais seguros (OPC UA, SecureDNP3, etc\u2026) ou utilizar dispositivos que realizem \u201cSanity Check\u201d de protocolos industriais.<\/li>\n
                        • Realizar acessos remotos com base na segmenta\u00e7\u00e3o de rede realizada e com autentica\u00e7\u00e3o dupla.<\/li>\n<\/ul>\n<\/ul>\n

                           <\/p>\n

                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                          Que impacto podem ter o Dragonfly e o Sandworm na sua rede OT? Quais s\u00e3o as contramedidas mais adequadas? Neste artigo, tentaremos apresentar-lhe a solu\u00e7\u00e3o. Falamos sobre isso neste artigo. <\/p>\n","protected":false},"author":31,"featured_media":48958,"menu_order":0,"template":"","categories":[969],"tags":[],"arquitectura":[1838],"area":[],"sector":[],"experto":[203],"weborigen":[157],"productos-tax":[],"soluciones-tax":[],"marcas-tax":[],"coauthors":[],"class_list":["post-48957","blog","type-blog","status-publish","has-post-thumbnail","hentry","category-ciberseguranca","arquitectura-ciberseguranca-industrial","experto-ciberseguranca-industrial-disponibilidade-total","weborigen-ciberseguridadlogitek-com"],"acf":[],"yoast_head":"\nDragonfly e Sandworm em redes OT: impacto e contramedidas<\/title>\n<meta name=\"description\" content=\"Impacto do Dragonfly e Sandworm na rede OT e contramedidas.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Dragonfly e Sandworm em redes OT: impacto e contramedidas\" \/>\n<meta property=\"og:description\" content=\"Impacto do Dragonfly e Sandworm na rede OT e contramedidas.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/\" \/>\n<meta property=\"og:site_name\" content=\"Becolve Digital\" \/>\n<meta property=\"og:image\" content=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/contramedidas-dragonflly.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"620\" \/>\n\t<meta property=\"og:image:height\" content=\"250\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@Logitek_es\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo estimado de leitura\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Becolve Digital\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\\\/\",\"name\":\"Dragonfly e Sandworm em redes OT: impacto e contramedidas\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/contramedidas-dragonflly.jpg\",\"datePublished\":\"2025-09-17T18:15:23+00:00\",\"description\":\"Impacto do Dragonfly e Sandworm na rede OT e contramedidas.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\\\/#breadcrumb\"},\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\\\/#primaryimage\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/contramedidas-dragonflly.jpg\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/contramedidas-dragonflly.jpg\",\"width\":620,\"height\":250},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog Items\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Dragonfly e Sandworm em redes OT: impacto e contramedidas\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"name\":\"Becolve Digital\",\"description\":\"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras\",\"publisher\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-PT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\",\"name\":\"Becolve Digital\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"width\":200,\"height\":64,\"caption\":\"Becolve Digital\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Logitek_es\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/becolve-digital\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Dragonfly e Sandworm em redes OT: impacto e contramedidas","description":"Impacto do Dragonfly e Sandworm na rede OT e contramedidas.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/","og_locale":"pt_PT","og_type":"article","og_title":"Dragonfly e Sandworm em redes OT: impacto e contramedidas","og_description":"Impacto do Dragonfly e Sandworm na rede OT e contramedidas.","og_url":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/","og_site_name":"Becolve Digital","og_image":[{"width":620,"height":250,"url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/contramedidas-dragonflly.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@Logitek_es","twitter_misc":{"Tempo estimado de leitura":"2 minutos","Written by":"Becolve Digital"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/","url":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/","name":"Dragonfly e Sandworm em redes OT: impacto e contramedidas","isPartOf":{"@id":"https:\/\/becolve.com\/pt-pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/#primaryimage"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/#primaryimage"},"thumbnailUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/contramedidas-dragonflly.jpg","datePublished":"2025-09-17T18:15:23+00:00","description":"Impacto do Dragonfly e Sandworm na rede OT e contramedidas.","breadcrumb":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/#breadcrumb"},"inLanguage":"pt-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/"]}]},{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/#primaryimage","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/contramedidas-dragonflly.jpg","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/contramedidas-dragonflly.jpg","width":620,"height":250},{"@type":"BreadcrumbList","@id":"https:\/\/becolve.com\/pt-pt\/blog\/dragonfly-e-sandworm-em-redes-ot-impacto-e-contramedidas\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/becolve.com\/pt-pt\/"},{"@type":"ListItem","position":2,"name":"Blog Items","item":"https:\/\/becolve.com\/pt-pt\/blog\/"},{"@type":"ListItem","position":3,"name":"Dragonfly e Sandworm em redes OT: impacto e contramedidas"}]},{"@type":"WebSite","@id":"https:\/\/becolve.com\/pt-pt\/#website","url":"https:\/\/becolve.com\/pt-pt\/","name":"Becolve Digital","description":"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras","publisher":{"@id":"https:\/\/becolve.com\/pt-pt\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/becolve.com\/pt-pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-PT"},{"@type":"Organization","@id":"https:\/\/becolve.com\/pt-pt\/#organization","name":"Becolve Digital","url":"https:\/\/becolve.com\/pt-pt\/","logo":{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","width":200,"height":64,"caption":"Becolve Digital"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Logitek_es","https:\/\/www.linkedin.com\/company\/becolve-digital\/"]}]}},"_links":{"self":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/48957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/users\/31"}],"version-history":[{"count":0,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/48957\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media\/48958"}],"wp:attachment":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media?parent=48957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/categories?post=48957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/tags?post=48957"},{"taxonomy":"arquitectura","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/arquitectura?post=48957"},{"taxonomy":"area","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/area?post=48957"},{"taxonomy":"sector","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/sector?post=48957"},{"taxonomy":"experto","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/experto?post=48957"},{"taxonomy":"weborigen","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/weborigen?post=48957"},{"taxonomy":"productos-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/productos-tax?post=48957"},{"taxonomy":"soluciones-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/soluciones-tax?post=48957"},{"taxonomy":"marcas-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/marcas-tax?post=48957"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/coauthors?post=48957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}