Время на прочтение1 мин
Количество просмотров4.7K
Microsoft 10 октября 2023 года прекращает поддержку Windows Server 2012 и 2012 R2. Обе операционные системы перестанут получать обновления безопасности, исправления ошибок и техническую поддержку.
Версию Server 2012 Microsoft запустила 4 сентября 2012 года. В том же году на рынок вышла Windows 8, которая к 2016 уже лишилась технической поддержки. На смену ей пришла Windows 10, и в итоге версия Server 2012 просуществовала дольше, чем базовая ОС.
Официально компания отказалась от развития Server 2012 ещё в октябре 2018 года, но пообещала выпускать обновления безопасности до 2023 года. Этот период подходит к концу 10 октября. После этого Microsoft завершает развитие и поддержку ОС.
Пользователи, которым важно ещё какое-то время пользоваться Server 2012, смогут оформить платную поддержку до 2026 года. Компания не сообщает цену услуги. Корпоративные пользователи могут узнать её у менеджеров Microsoft. Кроме того, есть возможность обновиться до Windows Server 2022.
Теги:
- microsoft
- windows
- windows server
- windows server 2012
- windows server 2012 r2
- операционные системы
- серверное администрирование
Хабы:
- Разработка под Windows
- Серверное администрирование
Если эта публикация вас вдохновила и вы хотите поддержать автора — не стесняйтесь нажать на кнопку
В октябре 2023 года Microsoft прекратит поддержку Windows Server 2012 и Windows Server 2012 R2. Это следует за окончанием поддержки Windows 7 и Windows 8.1, которые также больше не получают обновлений. Корпоративные клиенты могут продлить поддержку на три года, оплатив Microsoft сумму, эквивалентную полной стоимости лицензии. Для тех, кто ищет альтернативу, есть услуга 0Patch.
0Patch предлагает аналогичную трехлетнюю поддержку для указанных версий Windows Server, как они делали ранее для Windows Server 2008 R2, и обеспечивает важные обновления безопасности. В отличие от Microsoft, условия предоставления услуги одинаковы для всех клиентов.
Сервис обеспечит критическими обновлениями безопасности Windows Server 2012 и Windows Server 2012 R2 до октября 2026 года или дольше, если спрос сохранится. Планы поддержки начинаются от 24,95 евро в год для однопользовательской лицензии и 34,95 евро для лицензии Enterprise.
Компания 0Patch специализируется на отслеживании критических уязвимостей в поддерживаемых ОС и создает микропатчи для их исправления. Они работают с многими продуктами Microsoft, и в отличие от стандартных патчей, их решения можно включать и отключать в реальном времени без необходимости перезагрузки системы.
Для использования 0Patch для Windows Server 2012 и R2, пользователи должны зарегистрироваться на сайте, установить последние обновления безопасности от Microsoft, установить агент 0Patch и связать его с их учетной записью. Более подробная информация доступна в блоге 0Patch.
Объявившийся в прошлом месяце облегченный Windows-стилер распространяется через вредоносные документы Google Drive, при открытии которых запускается обфусцированный скрипт PowerShell — загрузчик.
Проведенный в G DATA анализ показал, что новобранец Chihuahua создан на основе .NET, имеет модульную архитектуру и умело уклоняется от обнаружения.
Цепочку заражения запускает небольшой лаунчер, выполняющий Base64-строку с помощью командлета PowerShell. Это позволяет обойти политики запуска скриптов и незаметно внедрить runtime-логику в закодированную полезную нагрузку.
После декодирования скрипт второй ступени преобразует тяжелый обфусцированный пейлоад — удаляет кастомные разделители и заменяет шестнадцатеричные символы ASCII, динамически воссоздавая сценарий третьей ступени. Подобный трюк призван воспрепятствовать детектированию средствами статического анализа и песочницы.
Деобфусцированный скрипт создает запланированное задание на ежеминутный запуск проверки папки «Недавние места» на наличие маркеров инфицирования (файлов .normaldaki). При положительном результате происходит соединение с C2 для получения дальнейших инструкций.
На последней стадии заражения на машину жертвы скачиваются NET-сборка и финальный пейлоад — Chihuahua Stealer (VirusTotal — 52/72 на 14 мая), который расшифровывается и грузится в память для выполнения.
Примечательно, что при запуске вредонос вначале печатает в консоли текст песни из репертуара Джона Гарика — классический образец российского трэпа в транслите. Как оказалось, за это отвечает функция DedMaxim().
После столь необычной прелюдии инфостилер приступает к выполнению основных задач:
- дактилоскопирует зараженную машину (использует WMI для получения имени компьютера и серийного номера диска);
- крадет данные из браузеров и расширений-криптокошельков, которые находит по списку известных ID;
- пакует собранную информацию в ZIP-файл с расширением .chihuahua, шифруя его по AES-GCM с помощью Windows CNG API;
- отправляет добычу на свой сервер по HTTPS.
Завершив работу, зловред тщательно стирает следы своей деятельности — используя стандартные команды, удаляет созданные запланированное задание, временные файлы и консольный вывод.
Подписывайтесь на канал «AM Live» в Telegram, чтобы первыми узнавать о главных событиях и предстоящих мероприятиях по информационной безопасности.
-
Home
-
News
- Windows Server 2012 R2 Will End of Life on October 10, 2023
By Daisy | Follow |
Last Updated
According to the Microsoft official, Windows Server 2012/2012 R2 will reach its extended end of support date next year, October 10, 2023. To get more details about this news, this post from MiniTool can do you a favor.
Data of Server 2012 R2 End of Life
As Microsoft introduces many innovations to Windows Server, support for older versions and security updates released when that version is supported will end. Server 2012 R2 is one of the versions.
Windows Server 2012 R2 has been launched on November 25, 2013. The mainstream end date of Windows Server 2012 R2/2012 was October 9, 2018. Microsoft announces that the extended end data of Server 2012 R2 is October 10, 2023. After this date, Windows Server 2012 and 2012 R2 will stop receiving regular patches or critical security updates.
Server 2012 R2 end of life applies to the following editions: Datacenter, Essentials, for Embedded Systems, Foundation, Standard. This also applies to SQL Server 2012 and SQL Server 2012 R2, for which support ended on July 12, 2022.
Options for Server 2012 R2 End of Life
Microsoft recommends that administrators who want to keep their servers running and still receive bug fixes and security updates upgrade to Windows Server 2019 and SQL Server 2019.
Regarding the pricing scheme for Extended Security Updates, Microsoft says that they will only cost for on-premises deployments:
1. In Azure: Customers running SQL Server 2012 and Windows Server 2012 and 2012 R2 in Azure will get Extended Security Updates for free.
2. On-premises: Customers with active Software Assurance or subscription licenses can purchase Extended Security Updates annually for 75 percent of the license cost of the latest version of SQL Server or Windows Server for the first year, 100 percent of the license cost for the second year, and 125 percent of the license cost for the third year.-Microsoft
There are three different ways to deal with obsolete components.
1. Upgrading does not change technology
Invest in existing on-premises IT infrastructure and make necessary upgrades.
2. Upgrade with technological change
Think of outdated components as an opportunity to move your servers, applications, and workloads to the cloud without significantly changing applications and underlying infrastructure.
3. Upgrade through a complete modernization of the application architecture
View outdated components as an opportunity to modernize servers, applications, and workloads from the ground up using cloud services. Through this transition to the cloud, you’ll save on IT costs and benefit from the increased efficiency of your applications and processes.
Update Your System Before Windows Server 2012 R2 End of Support
If you’re still running Windows Server 2012 R2/2012, you have about 15 months to upgrade your server 2012 R2. It’s recommended to start thinking about this as early as possible. Your entire IT infrastructure may need to be upgraded to the latest version.
Before a Windows update, you’d better use professional data backup software like MiniTool ShadowMaker to make a full backup of your files and system to keep your data safe.
MiniTool ShadowMaker TrialClick to Download100%Clean & Safe
About The Author
Position: Columnist
Having been an editor at MiniTool since graduating college as an English major, Daisy specializes in writing about data backups, disk cloning, and file syncing as well as general computer knowledge and issues. In her free time, Daisy enjoys running and going with friends to the amusement park.
The last day of support for Windows Server 2012 and Windows Server 2012/R2 is set for October 10, 2023. Microsoft announced, “After this date, these products will no longer receive security updates, non-security updates, bug fixes, technical support, or online technical content updates.”
Recently, Windows 7/8/8.1 also reached their end of support. Without continual support from Microsoft, the software becomes less secure and more risky, so they end the life of the product.
The history of Windows Server 2012/R2
The end of life for Windows Server 2012 shouldn’t come as a surprise to any Windows users. October 9, 2018 marked the mainstream end date for the product after six years of providing the product, so organizations who used (or are using) Windows Server 2012 were then given an additional five years support extension to use the product and figure out how to transition. Now that the five year period is almost up and the life of the product is ending, any business that still runs Windows Server 2012 needs to consider how to plan and move forward with the change.
Why Microsoft is ending Windows Server 2012/R2
Microsoft’s Windows Server 2012/R2 follows their fixed lifestyle policy, which applies to a lot of their commercial products and some of their consumer products. The three main attributes of a fixed lifestyle policy consist of:
- Life cycle timeline at product launch
- 5 years of mainstream support
- Extended supported for select products
The end-of-life for Microsoft’s product simply follows the life cycle timeline that they provided when the product was initially launched. Since Windows Server 2012 is reaching the end of its extended support, the product is also coming to an end.
How businesses and IT professionals will be affected by the end-of-life for Windows Server 2012/R2
The ending of the Windows Server 2012 product can have a variety of positive and negative effects, depending on how prepared your organization is for the change.
Positive effects of Windows Server 2012 end-of-life
If your business and IT pros have updated or migrate from your Windows Server 2012, then you can enjoy these positive effects:
Continual tech support
One of the biggest benefits of staying current with the technology you use is the continual support you’ll receive with your products. If something goes wrong and you’re unable to figure it out through troubleshooting, it can escalate up to Microsoft, which is reassuring since they’re the creators of the system. You can also rest easy knowing that the systems you’re running in your IT environment are safe and healthy for the time being.
Updated technology
Keeping up-to-date with your Windows systems means that you’ll be able to enjoy faster and more efficient systems. This helps to increase your organization’s productivity and streamline processes that occur within the IT environment (and those processes are growing in number thanks to digital transformation).
Adherence to compliance standards
Regulatory compliance standards usually require businesses to run software and systems that are supported. By continuously updating these systems, you ensure that your organization remains in line with the industry’s compliance standards.
Negative effects of Windows Server 2012 end-of-life
On the other hand, if your organization is still running Windows Server 2012 because it follows the motto, “if it ain’t broke, don’t fix it,” it’s probably time to change that motto. The possible negative effects of still running Windows Server 2012 when it reaches its end-of-life include:
Loss of tech support
The end-of-life for Windows Server 2012 also signals the end of the extended support time. You’ll still be capable of running the system, but when you run into an issue and need to troubleshoot, Microsoft won’t be able to help. Running an old system also means that it’s susceptible to more problems.
Non-compliance
Running supported systems in your IT environment is a common requirement of compliance standards. If you are still running Windows Server 2012 when it has reached its end of life, you will be out of compliance. If you fail to meet the compliance requirements, then you may experience hefty fines.
Security risks
The end-of-life for Windows Server 2012 means that there will no longer be security patches or security updates for the system. This is potentially one of the biggest risks that comes with running the product after Microsoft no longer supports it.
3 actions to prepare for Windows Server 2012/R2 end-of-life
To assist businesses who are currently using Windows Server 2012 or Windows Server 2012 R2, Microsoft has provided options to get ready for the upcoming change. Depending on your the state of your organization’s IT environment, whether it’s cloud or on-prem, and other related factors, they suggest three actions you can take to prepare for Windows 2012/R2 end of life:
1. Migrate to Azure with up to 3 years of security updates
The first action they suggest is to Migrate from Windows 2012/R2 to Azure. Microsoft Azure is a cloud computing platform with a variety of options which include Azure Virtual Machines, Azure Dedicated Host, Azure VMware Solution, and Azure Stack HCI. This will allow you to protect the workloads on your Windows Server 2012 while modernizing your IT environment.
2. Upgrade to Windows Server 2022 on-prem
If you want to stick with the Windows Server on-prem platform, then you should definitely consider upgrading to the latest Windows Server 2022. This latest version has advanced protection against cyber threats, hybrid capabilities, and improved system functions. To help with upgrade considerations, take a look at this handy comparison chart highlighting the differences between Windows Server 2016, 2019, and 2022. Additionally, ReadyWorks discusses how to migrate and outlines the steps for successful migration.
3. Buy extended security updates for Windows Server 2012/R2
For businesses who still can’t meet the October deadline or some other extenuating circumstances, Microsoft is still offering the option to purchase Extended Security Updates. This ensures that, at the very least, you’ll still be able to receive updates that are rated as either critical or important. If you decide to choose this option, we recommend creating a technology roadmap with details on how you’ll update your IT environment moving forward.
How to determine which path your organization should take for upcoming Windows Server 2012/R2 end-of-life
Technology is always changing and advancing, and it’s important to stay up-to-date on these changes. Determining the path for your technological updates and changes takes a lot of planning and preparation, but it will ultimately make your business technology more secure, efficient, and reliable. Additionally, there are plenty of best practices for managing EOL software out there, so you’ll have the resources necessary to make the switch as smooth as possible.
Take into account all components related to your Windows Server, whatever version it may be, and consider the possible impacts of staying with your current software. Those of you with Windows Server 2012/R2 will want to take upgrades and migrations into serious consideration because of the risks involved with unsupported systems. If you have a newer version of the product, but not the latest, there are opportunities for your organization to have larger tech roadmap discussions with your organization regarding project work and driving standardization.
Moving forward with NinjaOne
NinjaOne is a cloud-based IT management software solution that provides remote monitoring of servers and workstations. Keep your Windows Server updated and secure using our Windows Server patch management. Sign up for a free trial today and find out how easy it can be to manage your organization’s servers and systems.