{"id":33499,"date":"2019-10-31T21:52:57","date_gmt":"2019-10-31T18:52:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov\/"},"modified":"2019-10-31T21:52:57","modified_gmt":"2019-10-31T18:52:57","slug":"podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/novosti-interneta\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","title":{"rendered":"Die Manipulation des Codes von Picreel und Alpaca Forms f\u00fchrte zur Kompromittierung von 4684 Webseiten.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sicherheitsforscher Willem de Groot berichtet<\/a><\/noindex>, wonach die Angreifer durch den Einbruch in die Infrastruktur in der Lage waren, sch\u00e4dlichen Code in das System der Web-Analyse einzuf\u00fcgen. Picreel<\/a><\/noindex> und der offenen Plattform zur Erstellung interaktiver Web-Formulare. Alpaca Forms<\/a><\/noindex>. Die Manipulation des JavaScript-Codes f\u00fchrte zur Kompromittierung von 4684 Webseiten, die diese Systeme auf ihren Seiten verwenden (1249<\/a><\/noindex> \u2014 Picreel und 3435<\/a><\/noindex> \u2014 Alpaca Forms). <\/p>\n

Der eingespeiste sch\u00e4dliche Code<\/a><\/noindex> sammelte Informationen zu allen ausgef\u00fcllten Web-Formularen auf den Webseiten und k\u00f6nnte unter anderem zur Abfassung von Zahlungsinformationen und Anmeldedaten gef\u00fchrt haben. Die abgefangenen Informationen wurden als Bildanfragen an den Server font-assets.com gesendet. Informationen dar\u00fcber, wie die Infrastruktur von Picreel und das CDN-Netzwerk zur Bereitstellung des Skripts von Alpaca Forms kompromittiert wurden, sind bislang nicht verf\u00fcgbar. Bekannt ist nur, dass bei dem Angriff auf Alpaca Forms die \u00fcber das Content Delivery Network Cloud CMS bereitgestellten Skripte manipuliert wurden. Die sch\u00e4dliche Einf\u00fcgung<\/a><\/noindex> wurde als Datenarray in der minimierten Version<\/a><\/noindex> des Skripts getarnt (die Entschl\u00fcsselung des Codes kann eingesehen werden) hier<\/a><\/noindex>).<\/p>\n

\"Die<\/a><\/noindex><\/center><\/p>\n

Unter den Nutzern kompromittierter Projekte befinden sich zahlreiche namhafte Unternehmen, darunter Sony, Forbes, Trustico, FOX, ClassesUSA, 3Dcart, Saxo Bank, Foundr, RocketInternet, Sprit und Virgin Mobile. Da es sich nicht um den ersten Vorfall dieser Art handelt (siehe Vorfall<\/a><\/noindex> ), wird Webseitenadministratoren dringend geraten, beim Einf\u00fcgen von externem JavaScript-Code, insbesondere auf Seiten, die mit Zahlungen und Authentifizierungen verbunden sind, \u00e4u\u00dferst vorsichtig zu sein.<\/p>\n

<\/a><\/noindex><\/p>\n

Quelle: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0438\u043b\u043b\u0435\u043c \u0434\u0435 \u0413\u0440\u043e\u043e\u0442 (Willem de Groot) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0441\u0442\u0430\u0432\u043a\u0443 \u0432 \u043a\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b web-\u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Picreel \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 web-\u0444\u043e\u0440\u043c Alpaca Forms. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 JavaScript-\u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 4684 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (1249 — Picreel \u0438 3435 — Alpaca Forms). \u0412\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25200,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33499","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Die Code-Manipulation der Projekte Picreel und Alpaca Forms f\u00fchrte zur Kompromittierung von 4684 Websites | ProHoster","description":"Der Sicherheitsexperte Willem de Groot berichtete, dass die Angreifer durch den Hack der Infrastruktur in der Lage waren, einen sch\u00e4dlichen Code in das Web-Analysetool Picreel und die offene Plattform zur Erstellung interaktiver Web-Formulare Alpaca Forms einzuschleusen. Der eingeschleuste JavaScript-Code f\u00fchrte zur Kompromittierung von 4684 Websites, die diese Systeme verwenden (1249 - Picreel und 3435 - Alpaca Forms). Der eingespeiste","canonical_url":"https:\/\/prohoster.info\/de\/blog\/novosti-interneta\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 Picreel \u0438 Alpaca Forms \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 4684 \u0441\u0430\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0438\u043b\u043b\u0435\u043c \u0434\u0435 \u0413\u0440\u043e\u043e\u0442 (Willem de Groot) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0441\u0442\u0430\u0432\u043a\u0443 \u0432 \u043a\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b web-\u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Picreel \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 web-\u0444\u043e\u0440\u043c Alpaca Forms. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 JavaScript-\u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 4684 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (1249 - Picreel \u0438 3435 - Alpaca Forms). \u0412\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u0439","og:url":"https:\/\/prohoster.info\/de\/blog\/novosti-interneta\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:57+00:00","article:modified_time":"2019-10-31T18:52:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33499","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:31:39","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:23","updated":"2026-01-21 15:31:39"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/33499","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=33499"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/33499\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media\/25200"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=33499"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=33499"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=33499"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}