{"id":49357,"date":"2025-09-17T18:22:45","date_gmt":"2025-09-17T18:22:45","guid":{"rendered":"https:\/\/becolve.com\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/"},"modified":"2025-09-17T18:22:45","modified_gmt":"2025-09-17T18:22:45","slug":"laziok-o-novo-troiano-que-ameaca-o-setor-energetico","status":"publish","type":"blog","link":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/","title":{"rendered":"Laziok: o novo troiano que amea\u00e7a o setor energ\u00e9tico"},"content":{"rendered":"<p class=\"p1\">Durante os meses de <strong>janeiro e fevereiro de 2015<\/strong>, diferentes empresas pertencentes ao <strong>setor energ\u00e9tico<\/strong> (em particular, empresas do <strong>setor Oil&amp;Gas<\/strong> localizadas no M\u00e9dio Oriente) sofreram ataques perpetrados por<strong> um troiano descoberto e denominado pela Symantec como Laziok,<\/strong> <!--more-->que permite ao atacante aceder a informa\u00e7\u00f5es confidenciais guardadas nas m\u00e1quinas que foram comprometidas.<\/p>\n<p class=\"p1\">O vetor de ataque utilizado por <strong>Laziok<\/strong> \u00e9, de novo, o <strong>Spear Fishing<\/strong>, em particular, atrav\u00e9s do envio de e-mails utilizando um servidor de SPAM.<\/p>\n<p class=\"p1\">O e-mail que a v\u00edtima recebe cont\u00e9m um ficheiro Excel que, ao ser aberto, faz com que o troiano Lazaiock infete a m\u00e1quina. O <strong>malware<\/strong> oculta-se na m\u00e1quina, mudando de nome a cada certo tempo, e pode encontrar-se em algum dos seguintes diret\u00f3rios: <\/p>\n<ul class=\"ul1\">\n<li class=\"li1\">  %SystemDrive%Documents and SettingsAll UsersApplication DataSystemOracleazioklmpxsearch.exe<\/li>\n<li class=\"li1\">  %SystemDrive%Documents and SettingsAll UsersApplication DataSystemOracleazioklmpxati.exe  <span class=\"Apple-converted-space\">   <\/span><\/li>\n<li class=\"li1\">  %SystemDrive%Documents and SettingsAll UsersApplication DataSystemOracleazioklmpxlsass.exe<\/li>\n<li class=\"li1\">%SystemDrive%Documents and SettingsAll UsersApplication DataSystemOracleazioklmpxsmss.exe<span class=\"Apple-converted-space\">   <\/span><\/li>\n<li class=\"li1\">%SystemDrive%Documents and SettingsAll UsersApplication DataSystemOracleazioklmpxadmin.exe<\/li>\n<li class=\"li1\">%SystemDrive%Documents and SettingsAll UsersApplication DataSystemOracleazioklmpxkey.exe  <span class=\"Apple-converted-space\">   <\/span><\/li>\n<li class=\"li1\">%SystemDrive%Documents and SettingsAll UsersApplication DataSystemOracleazioklmpxtaskmgr.exe<\/li>\n<li class=\"li1\">%SystemDrive%Documents and SettingsAll UsersApplication DataSystemOracleazioklmpxchrome.exe<\/li>\n<\/ul>\n<p class=\"p3\"><span class=\"s3\">A vulnerabilidade que o <strong>Laziok explora \u00e9 a <\/strong><\/span><strong>(CVE-2012-0158)<\/strong>  <a href=\"http:\/\/www.securityfocus.com\/bid\/52911%22%20%5Ct%20%22_self\"><span class=\"s4\">Microsoft Windows Common Controls ActiveX Control Remote Code Execution Vulnerability<\/span><\/a> que afeta principalmente os servidores <strong>SQL da Microsoft<\/strong>. Esta vulnerabilidade j\u00e1 tinha sido utilizada por outro tipo de APT, a <a href=\"http:\/\/www.symantec.com\/connect\/blogs\/symantec-protections-red-october%22%20%5Ct%20%22_self\"><span class=\"s4\">Red October<\/span><\/a>. <\/p>\n<p class=\"p3\">O processo que o troiano segue ap\u00f3s residir na m\u00e1quina \u00e9 o seguinte:<\/p>\n<p><span class=\"s5\">1. <\/span>Remete informa\u00e7\u00f5es ao atacante sobre a m\u00e1quina infetada: nome da m\u00e1quina, software instalado, tamanho da RAM, detalhes de CPU e GPU e tipo de antimalware instalado.<\/p>\n<p><span class=\"s5\">2. <\/span>O atacante utiliza esta informa\u00e7\u00e3o para realizar uma segunda infe\u00e7\u00e3o, distribuindo a partir de um C&amp;C (localizados nos EUA, Reino Unido e Bulg\u00e1ria) payloads denominados <a href=\"http:\/\/www.symantec.com\/security_response\/writeup.jsp?docid=2013-092512-2827-99%22%20%5Ct%20%22_self\"><span class=\"s6\">Backdoor.Cyberat<\/span><\/a><span class=\"s5\"> e <a href=\"http:\/\/www.symantec.com\/security_response\/writeup.jsp?docid=2010-011016-3514-99%22%20%5Ct\"><span class=\"s4\">Trojan.Zbot<\/span><\/a><\/span><span class=\"s7\">.<\/span><\/p>\n<p class=\"p3\">Atualmente, alguns fabricantes como a <strong>Symantec ou a Norton<\/strong> j\u00e1 lan\u00e7aram solu\u00e7\u00f5es espec\u00edficas para evitar o ataque do <strong>Laziok<\/strong>. Em qualquer caso, a seguir enumeramos algumas recomenda\u00e7\u00f5es que ajudam a evitar o ataque deste tipo de amea\u00e7as: <\/p>\n<ul class=\"ul1\">\n<li class=\"li3\">Evitar abrir e-mails, ficheiros e\/ou aceder a links de duvidosa proveni\u00eancia.<\/li>\n<li class=\"li3\">Utilizar solu\u00e7\u00f5es antimalware que incorporem prote\u00e7\u00e3o contra vulnerabilidades.<\/li>\n<li class=\"li3\">Segmentar e fortificar redes.<\/li>\n<li class=\"li3\">Manter uma pol\u00edtica correta de atualiza\u00e7\u00e3o de software.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Durante os meses de janeiro e fevereiro de 2015, diferentes empresas pertencentes ao setor energ\u00e9tico (em particular, empresas do setor Oil&amp;Gas localizadas no M\u00e9dio Oriente) sofreram ataques perpetrados por um troiano descoberto e denominado pela Symantec como Laziok,<\/p>\n","protected":false},"author":31,"featured_media":49359,"menu_order":0,"template":"","categories":[969],"tags":[],"arquitectura":[1838],"area":[186],"sector":[192],"experto":[203],"weborigen":[157],"productos-tax":[],"soluciones-tax":[],"marcas-tax":[],"coauthors":[],"class_list":["post-49357","blog","type-blog","status-publish","has-post-thumbnail","hentry","category-ciberseguranca","arquitectura-ciberseguranca-industrial","area-infraestruturas","sector-energia-pt-pt","experto-ciberseguranca-industrial-disponibilidade-total","weborigen-ciberseguridadlogitek-com"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Laziok: novo troiano que amea\u00e7a o setor energ\u00e9tico<\/title>\n<meta name=\"description\" content=\"Em janeiro e fevereiro de 2015, diferentes empresas do setor energ\u00e9tico sofreram ataques de um troiano descoberto e denominado pela Symantec como Laziok\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Laziok: novo troiano que amea\u00e7a o setor energ\u00e9tico\" \/>\n<meta property=\"og:description\" content=\"Em janeiro e fevereiro de 2015, diferentes empresas do setor energ\u00e9tico sofreram ataques de um troiano descoberto e denominado pela Symantec como Laziok\" \/>\n<meta property=\"og:url\" content=\"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/\" \/>\n<meta property=\"og:site_name\" content=\"Becolve Digital\" \/>\n<meta property=\"og:image\" content=\"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/Laziok.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"620\" \/>\n\t<meta property=\"og:image:height\" content=\"250\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@Logitek_es\" \/>\n<meta name=\"twitter:label1\" content=\"Tempo estimado de leitura\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Becolve Digital\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\\\/\",\"name\":\"Laziok: novo troiano que amea\u00e7a o setor energ\u00e9tico\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/Laziok.jpg\",\"datePublished\":\"2025-09-17T18:22:45+00:00\",\"description\":\"Em janeiro e fevereiro de 2015, diferentes empresas do setor energ\u00e9tico sofreram ataques de um troiano descoberto e denominado pela Symantec como Laziok\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\\\/#breadcrumb\"},\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\\\/#primaryimage\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/Laziok.jpg\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/Laziok.jpg\",\"width\":620,\"height\":250},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog Items\",\"item\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Laziok: o novo troiano que amea\u00e7a o setor energ\u00e9tico\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#website\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"name\":\"Becolve Digital\",\"description\":\"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras\",\"publisher\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-PT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#organization\",\"name\":\"Becolve Digital\",\"url\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"contentUrl\":\"https:\\\/\\\/becolve.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/becolve-logo-h-black_200.png\",\"width\":200,\"height\":64,\"caption\":\"Becolve Digital\"},\"image\":{\"@id\":\"https:\\\/\\\/becolve.com\\\/pt-pt\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Logitek_es\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/becolve-digital\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Laziok: novo troiano que amea\u00e7a o setor energ\u00e9tico","description":"Em janeiro e fevereiro de 2015, diferentes empresas do setor energ\u00e9tico sofreram ataques de um troiano descoberto e denominado pela Symantec como Laziok","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/","og_locale":"pt_PT","og_type":"article","og_title":"Laziok: novo troiano que amea\u00e7a o setor energ\u00e9tico","og_description":"Em janeiro e fevereiro de 2015, diferentes empresas do setor energ\u00e9tico sofreram ataques de um troiano descoberto e denominado pela Symantec como Laziok","og_url":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/","og_site_name":"Becolve Digital","og_image":[{"width":620,"height":250,"url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/Laziok.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@Logitek_es","twitter_misc":{"Tempo estimado de leitura":"2 minutos","Written by":"Becolve Digital"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/","url":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/","name":"Laziok: novo troiano que amea\u00e7a o setor energ\u00e9tico","isPartOf":{"@id":"https:\/\/becolve.com\/pt-pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/#primaryimage"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/#primaryimage"},"thumbnailUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/Laziok.jpg","datePublished":"2025-09-17T18:22:45+00:00","description":"Em janeiro e fevereiro de 2015, diferentes empresas do setor energ\u00e9tico sofreram ataques de um troiano descoberto e denominado pela Symantec como Laziok","breadcrumb":{"@id":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/#breadcrumb"},"inLanguage":"pt-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/"]}]},{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/#primaryimage","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/Laziok.jpg","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/Laziok.jpg","width":620,"height":250},{"@type":"BreadcrumbList","@id":"https:\/\/becolve.com\/pt-pt\/blog\/laziok-o-novo-troiano-que-ameaca-o-setor-energetico\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/becolve.com\/pt-pt\/"},{"@type":"ListItem","position":2,"name":"Blog Items","item":"https:\/\/becolve.com\/pt-pt\/blog\/"},{"@type":"ListItem","position":3,"name":"Laziok: o novo troiano que amea\u00e7a o setor energ\u00e9tico"}]},{"@type":"WebSite","@id":"https:\/\/becolve.com\/pt-pt\/#website","url":"https:\/\/becolve.com\/pt-pt\/","name":"Becolve Digital","description":"Impulsamos la transformaci\u00f3n digital en la industria e infraestructuras","publisher":{"@id":"https:\/\/becolve.com\/pt-pt\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/becolve.com\/pt-pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-PT"},{"@type":"Organization","@id":"https:\/\/becolve.com\/pt-pt\/#organization","name":"Becolve Digital","url":"https:\/\/becolve.com\/pt-pt\/","logo":{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/","url":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","contentUrl":"https:\/\/becolve.com\/wp-content\/uploads\/2023\/04\/becolve-logo-h-black_200.png","width":200,"height":64,"caption":"Becolve Digital"},"image":{"@id":"https:\/\/becolve.com\/pt-pt\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Logitek_es","https:\/\/www.linkedin.com\/company\/becolve-digital\/"]}]}},"_links":{"self":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/49357","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/users\/31"}],"version-history":[{"count":0,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/blog\/49357\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media\/49359"}],"wp:attachment":[{"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/media?parent=49357"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/categories?post=49357"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/tags?post=49357"},{"taxonomy":"arquitectura","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/arquitectura?post=49357"},{"taxonomy":"area","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/area?post=49357"},{"taxonomy":"sector","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/sector?post=49357"},{"taxonomy":"experto","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/experto?post=49357"},{"taxonomy":"weborigen","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/weborigen?post=49357"},{"taxonomy":"productos-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/productos-tax?post=49357"},{"taxonomy":"soluciones-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/soluciones-tax?post=49357"},{"taxonomy":"marcas-tax","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/marcas-tax?post=49357"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/becolve.com\/pt-pt\/wp-json\/wp\/v2\/coauthors?post=49357"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}