{"id":145782,"date":"2025-10-19T23:11:55","date_gmt":"2025-10-19T21:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po"},"modified":"2026-02-09T17:18:08","modified_gmt":"2026-02-09T15:18:08","slug":"vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","title":{"rendered":"Hjemmesiden for Xubuntu blev hacket, og links p\u00e5 downloadsiden blev erstattet med malware.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Den officielle hjemmeside for Xubuntu-distributionen er blevet kompromitteret af ukendte angribere, som har \u00e6ndret linksene til torrent-filer p\u00e5 download-siden til filen «https:\/\/xubuntu.org\/wp-content\/Xubuntu-Safe-Download.zip». Som f\u00f8lge heraf er der kun skadelige links og tilg\u00e6ngelige spejle p\u00e5 download-siden. Xubuntu-udviklerne har endnu ikke kommenteret situationen, men for et par timer siden blev den skadelige fil fjernet, og adgangen til sektionen «xubuntu.org\/download\/» blev blokeret, med omdirigering til hjemmesiden. <\/p>\n

Kopier af xubuntu.org blev lavet af archive.org den 11. og 18. oktober \u2014 den 11. oktober var siden endnu ikke \u00e6ndret, men den 18. oktober er der allerede skadelige \u00e6ndringer p\u00e5 siden. Spejle af projektet, der distribuerer iso-billeder, synes if\u00f8lge en forel\u00f8big kontrol af checksums ikke at v\u00e6re blevet ramt og stemmer overens med det officielle cdimage.ubuntu.com. Spor af kompromittering er indtil videre kun blevet bem\u00e6rket p\u00e5 hjemmesiden xubuntu.org, som anvender WordPress content management systemet<\/a>. Det antages, at angrebet blev udf\u00f8rt via en uopdateret plugin til WordPress, som indeholder en s\u00e5rbarhed. <\/p>\n

Den af angriberne distribuerede arkivfil «Xubuntu-Safe-Download.zip» indeholder en eksekverbar fil til Windows-platformen, som pr\u00e6senteres som en Xubuntu-installat\u00f8r. Kontrol af den n\u00e6vnte fil p\u00e5 VirusTotal viser tilstedev\u00e6relsen af skadelig software. <\/p>\n

N\u00e5r den eksekverbare fil startes, vises en falsk gr\u00e6nseflade, der inkluderer felter til valg af versionen af distributionen til download og typen af pakke samt en knap «Generate Download Link». N\u00e5r knappen trykkes, gemmes filen «elzvcf.exe» i mappen «AppData Roaming» og dens udf\u00f8relse konfigureres i Windows-registret, s\u00e5 den startes ved systemopstart. If\u00f8lge forel\u00f8bige oplysninger analyserer den skadelige software data i udklipsholderen og erstatter adresserne til kryptovaluta-wallets for Bitcoin, Litecoin, Ethereum, Dogecoin, Tron, Ripple og Cardano med angriberens wallets.

\"Hjemmesiden<\/center> <\/p>\n

Interessant nok klagede en af brugerne den 10. september over en blogpost p\u00e5 xubuntu.org, der reklamerede for et kasino, men denne blogpost blev hurtigt fjernet, og h\u00e6ndelsen fik ingen opm\u00e6rksomhed (sandsynligvis vurderede de, at reklamen var blevet indsat af ondsindet software p\u00e5 brugerens side).
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Xubuntu \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u044b, \u043d\u0430 \u0444\u0430\u0439\u043b «https:\/\/xubuntu.org\/wp-content\/Xubuntu-Safe-Download.zip». \u0412 \u0438\u0442\u043e\u0433\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0437\u0435\u0440\u043a\u0430\u043b\u0430. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Xubuntu \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u043e\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043d\u0430\u0437\u0430\u0434 \u0443\u0434\u0430\u043b\u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u0437\u0434\u0435\u043b\u0443 «xubuntu.org\/download\/», \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0432 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":145783,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-145782","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hacking af Xubuntu's hjemmeside med udskiftning af links p\u00e5 downloadsiden til skadelig software | ProHoster","description":"Den officielle hjemmeside for distributionen af Xubuntu er blevet kompromitteret af ukendte personer, som har \u00e6ndret linksene p\u00e5 downloadsiden fra torrent-links til en fil.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0430\u0439\u0442\u0430 Xubuntu \u0441 \u0437\u0430\u043c\u0435\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043e\u043a \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster","og:description":"\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Xubuntu \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u044b, \u043d\u0430 \u0444\u0430\u0439\u043b.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-19T21:11:55+00:00","article:modified_time":"2026-02-09T15:18:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"145782","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:18:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:26:19","updated":"2026-02-09 15:18:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/145782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=145782"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/145782\/revisions"}],"predecessor-version":[{"id":158408,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/145782\/revisions\/158408"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/145783"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=145782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=145782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=145782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}