{"id":33450,"date":"2019-10-31T21:52:37","date_gmt":"2019-10-31T18:52:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii\/"},"modified":"2019-10-31T21:52:37","modified_gmt":"2019-10-31T18:52:37","slug":"zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii","title":{"rendered":"Attacke b\u00f6sartiger Verschl\u00fcsselungssoftware auf Git-Repositories festgestellt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Es wird berichtet<\/a><\/noindex> \u00dcber eine Welle von Angriffen, die auf die Verschl\u00fcsselung von Git-Repositories in den Diensten GitHub, GitLab und Bitbucket abzielen. Angreifer leeren das Repository und hinterlassen eine Nachricht mit der Aufforderung, 0,1 BTC (etwa 700 $) zur Wiederherstellung von Daten aus einem Backup zu senden (in Wirklichkeit werden nur die Commit-Header besch\u00e4digt und die Informationen k\u00f6nnen wiederhergestellt werden) wiederhergestellt<\/a><\/noindex>). Auf GitHub sind bereits auf diese Weise 371 Repositories betroffen.<\/a><\/noindex> Einige Opfer des Angriffs geben zu, dass sie unsichere Passw\u00f6rter verwendet oder vergessen haben, Zugriffstoken aus alten Anwendungen zu entfernen. Einige vermuten (bis jetzt ist das nur eine Annahme, und die Hypothese ist noch nicht best\u00e4tigt), dass die Ursache der Datenleckage eine Kompromittierung der Anwendung<\/p>\n

SourceTree , die eine GUI f\u00fcr die Arbeit mit Git unter macOS und Windows bereitstellt. Im M\u00e4rz wurden mehrere<\/a><\/noindex>kritische Sicherheitsanf\u00e4lligkeiten in SourceTree entdeckt, die es erm\u00f6glichen, bei Zugriff auf von Angreifern kontrollierte Repositories eine Remote-Codeausf\u00fchrung zu initiieren.<\/a><\/noindex>F\u00fcr die Wiederherstellung des Repositories nach einem Angriff gen\u00fcgt es, \u00abgit checkout origin\/master\u00bb auszuf\u00fchren, danach<\/p>\n

Um ein Repository nach einem Angriff wiederherzustellen, gen\u00fcgt es, \u201egit checkout origin\/master\u201c auszuf\u00fchren, danach
\nden SHA-Hash des letzten Commits \u00fcber \u201egit reflog\u201c zu ermitteln und die \u00c4nderungen des Angreifers mit dem Befehl \u201egit reset {SHA}\u201c zur\u00fcckzusetzen. Wenn eine lokale Kopie vorhanden ist, kann das Problem durch \u201egit push origin HEAD:master \u2014force\u201c gel\u00f6st werden.<\/p>\n

<\/a><\/noindex><\/p>\n

Quelle: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0432\u043e\u043b\u043d\u0435 \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 GitHub, GitLab \u0438 Bitbucket. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0447\u0438\u0449\u0430\u044e\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 0.1 BTC (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e $700) \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0439 \u043a\u043e\u043f\u0438\u0438 (\u043d\u0430 \u0434\u0435\u043b\u0435 \u043b\u0438\u0448\u044c \u043f\u043e\u0440\u0442\u044f\u0442\u0441\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430). \u041d\u0430 GitHub \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0443\u0436\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b 371 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0430\u0442\u0430\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33450","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ein Angriff von b\u00f6sartigen Ransomware auf Git-Repositorys wurde festgestellt | ProHoster","description":"\ud83e\udd47Ein Angriff von b\u00f6sartigen Verschl\u00fcsselungssoftware auf Git-Repositories wurde festgestellt | ProHoster","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u043d\u0430 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 | ProHoster","og:description":"\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0432\u043e\u043b\u043d\u0435 \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 GitHub, GitLab \u0438.","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:37+00:00","article:modified_time":"2019-10-31T18:52:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33450","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:19:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:40:27","updated":"2026-01-21 15:19:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/33450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=33450"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/33450\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=33450"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=33450"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=33450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}