{"id":114076,"date":"2024-03-03T12:26:03","date_gmt":"2024-03-03T10:26:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom"},"modified":"2024-03-03T12:26:03","modified_gmt":"2024-03-03T10:26:03","slug":"na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","title":{"rendered":"Na GitHubu bylo nalezeno v\u00edce ne\u017e 100 tis\u00edc repozit\u00e1\u0159\u016f s \u0161kodliv\u00fdm k\u00f3dem.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edci z firmy Apiiro zjistili aktivitu \u00fato\u010dn\u00edk\u016f, kte\u0159\u00ed na GitHubu umis\u0165uj\u00ed modifikovan\u00e9 klony repozit\u00e1\u0159\u016f r\u016fzn\u00fdch projekt\u016f, do nich\u017e byly provedeny drobn\u00e9 zm\u011bny zam\u011b\u0159en\u00e9 na vykon\u00e1v\u00e1n\u00ed \u0161kodliv\u00fdch \u010din\u016f. Obvykle je \u0161kodliv\u00fd repozit\u00e1\u0159 vytvo\u0159en s t\u00edm sam\u00fdm n\u00e1zvem, ale p\u0159ipojen k jin\u00e9 organizaci («github.org\/org1\/proj» -> «github.org\/org2\/proj»), nebo s m\u00edrn\u011b odli\u0161n\u00fdm n\u00e1zvem od origin\u00e1lu (typosquatting), s p\u0159edpokladem, \u017ee si ob\u011b\u0165 rozd\u00edl\u016f nev\u0161imne a vyu\u017eije k\u00f3d se \u0161kodliv\u00fdmi zm\u011bnami. Pro nal\u00e1k\u00e1n\u00ed u\u017eivatel\u016f jsou odkazy na \u0161kodliv\u00e9 repozit\u00e1\u0159e aktivn\u011b umis\u0165ov\u00e1ny na r\u016fzn\u00fdch soci\u00e1ln\u00edch s\u00edt\u00edch, f\u00f3rech a chatech. <\/p>\n

Bylo hl\u00e1\u0161eno o v\u00edce ne\u017e 100 tis\u00edc\u00edch podobn\u00fdch repozit\u00e1\u0159\u016f, ale podle p\u0159edpokladu v\u00fdzkumn\u00edk\u016f by celkov\u00fd po\u010det um\u00edst\u011bn\u00fdch repozit\u00e1\u0159\u016f se \u0161kodliv\u00fdmi zm\u011bnami mohl \u010dinit miliony, proto\u017ee drtiv\u00e1 v\u011bt\u0161ina automaticky vytvo\u0159en\u00fdch repozit\u00e1\u0159\u016f je odstran\u011bna silami GitHubu b\u011bhem n\u011bkolika hodin po jejich um\u00edst\u011bn\u00ed. Mezi maskami, kter\u00e9 lze pou\u017e\u00edt k ur\u010den\u00ed p\u0159\u00edtomnosti \u0161kodliv\u00fdch vlo\u017een\u00ed v nahran\u00fdch repozit\u00e1\u0159\u00edch, se zmi\u0148uj\u00ed: exec(Fernet exec(requests exec(__import exec(bytes exec(“””\nimport exec(compile __import__(“builtins”).exec( <\/p>\n

P\u0159ipojen\u00fd \u0161kodliv\u00fd k\u00f3d p\u0159edstavuje modifikovanou verzi BlackCap-Grabber, kter\u00e1 po spu\u0161t\u011bn\u00ed vyhled\u00e1v\u00e1 citliv\u00e9 \u00fadaje, jako jsou p\u0159ihla\u0161ovac\u00ed \u00fadaje, tokeny, ulo\u017een\u00e1 hesla v prohl\u00ed\u017ee\u010di a cookie, a odes\u00edl\u00e1 je na server<\/a> \u00fato\u010dn\u00edky. \u0160kodliv\u00fd k\u00f3d tak\u00e9 podporuje substituci adres kryptom\u011bn p\u0159en\u00e1\u0161en\u00fdch p\u0159es schr\u00e1nku, m\u016f\u017ee vytv\u00e1\u0159et sn\u00edmky obrazovky a p\u0159ij\u00edmat p\u0159\u00edkazy od \u0159\u00edd\u00edc\u00edho serveru<\/a> (C&C)
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Apiiro \u0432\u044b\u044f\u0432\u0438\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 GitHub \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u043e\u043d\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u0441 \u0442\u0435\u043c \u0436\u0435 \u0438\u043c\u0435\u043d\u0435\u043c, \u043d\u043e \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u044b\u043c \u043a \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 («github.org\/org1\/proj» -> «github.org\/org2\/proj»), \u0438\u043b\u0438 \u0441 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u043e\u0442 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u0430 \u0438\u043c\u0435\u043d\u0435\u043c (\u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0438\u043d\u0433), \u0441 \u0440\u0430\u0441\u0447\u0451\u0442\u043e\u043c, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114076","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Na GitHubu bylo odhaleno v\u00edce ne\u017e 100 tis\u00edc repozit\u00e1\u0159\u016f se \u0161kodliv\u00fdm k\u00f3dem | ProHoster","description":"Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edci ze spole\u010dnosti Apiiro odhalili aktivitu \u00fato\u010dn\u00edk\u016f, kte\u0159\u00ed na GitHubu zve\u0159ej\u0148uj\u00ed modifikovan\u00e9 klony repozit\u00e1\u0159\u016f r\u016fzn\u00fdch projekt\u016f, do nich\u017e jsou provedeny drobn\u00e9 zm\u011bny zam\u011b\u0159en\u00e9 na.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430 GitHub \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Apiiro \u0432\u044b\u044f\u0432\u0438\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 GitHub \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u043e\u043d\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-03T10:26:03+00:00","article:modified_time":"2024-03-03T10:26:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114076","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-22 15:29:46","updated":"2026-02-22 15:29:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=114076"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114076\/revisions"}],"predecessor-version":[{"id":172914,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114076\/revisions\/172914"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=114076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=114076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=114076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}