{"id":141439,"date":"2025-08-24T11:11:56","date_gmt":"2025-08-24T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking"},"modified":"2026-01-24T17:56:45","modified_gmt":"2026-01-24T15:56:45","slug":"ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","title":{"rendered":"R\u00fcnnak brauserilaiendite vastu, mis kasutavad paroolihaldureid, kasutades klikkimist","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>DEF CON 33 konverentsil esitati r\u00fcnnakumeetod brauserilaiendite vastu, mis sisestavad oma liideselemente vaadatavatele lehtedele. R\u00fcnnaku rakendamine paroolide haldamise laienditele v\u00f5ib viia infokadu, mis on salvestatud paroolihalduritesse, sealhulgas autentimise parameetrid, krediitkaardi andmed, isikuandmed ning \u00fchekordsed paroolid kahefaktorilise autentimise jaoks. Probleem puudutab k\u00f5iki testitud paroolihaldureid, sealhulgas 1Password, Bitwarden, LastPass, KeePassXC-Browser, NordPass, ProtonPass ja Keeper.    <\/p>\n<p>R\u00fcnnakumeetod p\u00f5hineb sellel, et brauserilaiendid sisestavad automatiseeritud parooli sisestamise dialooge otse kuvavale lehele, integreerides oma elemendid antud lehe DOM-i (dokumendi objekti mudel). Kui r\u00fcndajal on v\u00f5imalik oma JavaScripti koodi lehe peal k\u00e4ivitada, n\u00e4iteks kasutades saidi XSS-august, saab ta manipuleerida k\u00f5igi DOM-i elementidega, sealhulgas sisestatud brauserilaienditega.     <\/p>\n<p>Muuhulgas on v\u00f5imalus muuta kinnituse dialoog l\u00e4bipaistvaks ja koondada nupp selles dialoogis r\u00fcndaja loodud vale dialooge, mis manitseb kasutajat klikkima. Selliste vale dialoogide hulka v\u00f5ivad kuuluda vale autoriseerimisn\u00f5uded Cookies'i t\u00f6\u00f6tlemiseks, reklaamb\u00e4nnerid v\u00f5i CAPTCHA vormid. Asetades vale dialooge l\u00e4bipaistva paroolihalduri dialooge kohakuti ja joondades nuppude asukohad ekraanil, on v\u00f5imalik saavutada, et kasutaja klikk on suunatud paroolihalduri autentimise parameetrite t\u00e4itmise kinnitamise nuppule, kuigi kasutaja arvab klikinud n\u00e4iteks reklaami sulgemise nuppu.     <center><img decoding=\"async\" alt=\"R\u00fcnnak brauserilaiendite vastu, mis kasutavad paroolihaldureid, kasutades klikkimist\" src=\"\/wp-content\/uploads\/2025\/08\/9df2f88789928b98278bb49ac8522c38.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>R\u00fcnnak koosneb j\u00e4rgmistest sammudest:  <\/p>\n<ul>\n<li class=\"l\"> Kutsuva elemendi loomine lehel, mis manitseb kliki sooritama.\n<li class=\"l\"> Veebivormi lisamine sisenemiseks v\u00f5i isikuandmete t\u00e4itmiseks.\n<li class=\"l\"> Web-vormide l\u00e4bipaistvuse seadmine (&#171;opacity: 0.001&#187; CSS-is).\n<li class=\"l\"> focus() meetodi kasutamine, et seada sisestusfookus vormi v\u00e4ljale, mis aktiveerib paroolihalduri automaatse t\u00e4itmise dialooge.\n<li class=\"l\"> Paroolihalduri dialooge otsimine DOM-is ja nende l\u00e4bitavaks seadmine.\n<li class=\"l\"> Kasutaja kliki ootamine n\u00e4htaval kutsuval elemendil lehe peal, mis \u00f5ige elementide segunemise korral viib klikkimiseni l\u00e4bipaistva dialoogis oleva nupule ja paroolihalduri v\u00e4ljade t\u00e4itmisele.\n<li class=\"l\"> Andmete v\u00e4ljav\u00f5tmine t\u00e4idetud veebivormist ja nende saatmine r\u00fcndaja serverisse.  <\/ul>\n<p>Kuna paroolihalduri autentimise parameetrite automaatne t\u00e4itmine aktiveeritakse ainult veebilehtedel, mille jaoks need parameetrid on salvestatud, tuleb r\u00fcnnaku korral kasutada oma JavaScripti koodi k\u00e4ivitamiseks r\u00fcndatava saidi v\u00f5i alams\u00fcsteemi osi. Seega tuleb kas saada alams\u00fcsteem samas domeenis, millega r\u00fcnnatav sait asub, v\u00f5i leida saidil XSS-augud, mis v\u00f5imaldavad oma koodi kasutajale suunatud sisu integreerida.    <\/p>\n<p>M\u00e4rgitakse, et paljud kasutajad kasutavad \u00fchte paroolihaldurit nii sisenemisparameetrite salvestamiseks kui ka \u00fchekordsete paroolide genereerimiseks kahefaktorilise autentimise jaoks, mis v\u00f5imaldab kasutada arutletud r\u00fcnnakumeetodit \u00fchekordsete paroolide automaatse t\u00e4itmise korral. N\u00e4iteks demonstreeritakse r\u00fcnnakut saidile issuetracker.google.com, mis sisaldab XSS-augus. Sisenemise parameetrite ja kahefaktorilise autentimise koodi saamiseks piisab kasutajale XSS augustavat linki saatmisest ja kolme kliki saavutamisest vale koore\u00fctleude abil (Cookies'i t\u00f6\u00f6tlemise n\u00f5usolek, isikup\u00e4rastamise n\u00f5usolek ja privaatsuspoliitikaga n\u00f5ustumise n\u00f5usolek).        <center>  <video controls=\"\" style=\"width: 700px; height: 400px; max-width:100%\"><source src=\"https:\/\/marektoth.com\/video\/dom-extension-clickjacking-demo7.mp4\" type=\"video\/mp4\"><\/video>  <\/center>    <\/p>\n<p>Lisaks XSS-i haavatavustega saitidele v\u00f5ib r\u00fcnnak toimuda ka teenuste vastu, mis pakuvad alams\u00fcsteeme k\u00f5igile soovijatele \u2014 enamik paroolihaldureid t\u00e4idab vaikimisi sisestusparameetreid mitte ainult p\u00f5hilehe, vaid ka alams\u00fcsteemide jaoks.      <\/p>\n<p>R\u00fcnnakut v\u00f5ib kasutada ka paroolihalduris salvestatud kasutaja isikuandmete ja krediitkaartide andmete m\u00e4\u00e4ramiseks. Seejuures ei ole vaja JavaScripti koodi k\u00e4ivitada kolmandal osapoole saidil, piisab, kui petta ohver sisenema r\u00fcndaja saidile \u2014 isikuandmete puhul t\u00e4idetakse web-vormid vastavalt nende t\u00fc\u00fcbile (aadress, krediitkaardi number, nimi), ilma sidemeta. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/domain\/\"   title=\"domaadi\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1242\">domaadi<\/a>. K\u00f5ige ohtlikum on krediitkaardiandmete lekkimine, kuna paroolihaldurid sisestavad mitte ainult kaardi numbri, vaid ka kehtivuse kuup\u00e4eva ja turvakoodi.    <\/p>\n<p>Probleemi avastanud teadlane testis 11 paroolihalduri brauserilaiendust, millel on kokku 39,7 miljonit aktiivset installatsiooni, ja k\u00f5ik nad olid selliste r\u00fcnnakute suhtes kaitsetud. M\u00f5ned tootjad vabastasid uuendused (NordPass 5.13.24, ProtonPass 1.31.6, RoboForm 9.7.6, Dashlane 6.2531.1, Keeper 17.2.0, Enpass 6.11.6, Bitwarden 2025.8.1), mis p\u00fc\u00fcdsid ringiga r\u00fcnnakut blokeerida. Teised laiendused (KeePassXC-Browser, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce) j\u00e4\u00e4vad kuni praegu parandamata. Haavatavuse ilmnemise testimiseks erinevates paroolihaldurites on avaldatud testlehtede kogum.  <center><img decoding=\"async\" alt=\"R\u00fcnnak brauserilaiendite vastu, mis kasutavad paroolihaldureid, kasutades klikkimist\" src=\"\/wp-content\/uploads\/2025\/08\/abdf3d7673c340401721d85f7e7856c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <center><img decoding=\"async\" alt=\"R\u00fcnnak brauserilaiendite vastu, mis kasutavad paroolihaldureid, kasutades klikkimist\" src=\"\/wp-content\/uploads\/2025\/08\/3a9691b4707e6d5bfe9a2604868c896a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>1Passwordi arendajate seisukoht, kes ei ole parandust v\u00e4lja andnud, on, et haavatavus on fundamentaalne ja ei ole otseselt seotud konkreetse brauserilaiendusega, seet\u00f5ttu blokeerivad katsetused selle k\u00f5rvaldamiseks ainult \u00fcksikuid r\u00fcnnakute suundi, kuid ei lahenda ise probleemi, mida tuleb lahendada brauseris v\u00f5i eraldi kinnituse n\u00f5udmise kaudu enne automaatsete v\u00e4ljade t\u00e4itmist. Mainitakse, et 1Password toetab juba makseparameetrite automaatse t\u00e4itmise eel kinnitusk\u00fcsimuse kuvamist ning j\u00e4rgmises v\u00e4ljaandes lisatakse v\u00f5imalus sarnase k\u00fcsimuse kuvamiseks k\u00f5ikide automaatsete t\u00e4idetavate andmete liikide jaoks (kasutuse mugavuse v\u00e4henemise t\u00f5ttu ei aktiveerita sellist v\u00f5imalust vaikimisi).         <\/p>\n<p>Uuringu autor toob v\u00e4lja kaitsemeetodite hulgas j\u00e4lgimise stiilimuutuste osas, mis on lehe elementidele rakendatud, kasutades API-d MutationObserver, ja elementide muutmise blokeerimist Shadow DOM 'closed' re\u017eiimis. Samuti j\u00e4lgitakse l\u00e4bipaistvuse seadistust, kasutatakse API-d Popover dialoogide esitamiseks, kihtide kattumise kontrollimist ja ajutist n\u00e4idiku s\u00fcndmuste t\u00f6\u00f6tlemise v\u00e4ljal\u00fclitamist (pointer-events:none) k\u00f5igis kujunduselementides, kui paroolihalduri dialooge kuvatakse. T\u00e4ieliku blokeerimise saavutamiseks on ette n\u00e4htud kirjeldatud klass. <a href=\"https:\/\/prohoster.info\/et\/zhashchita-ot-ddos\/\"  data-wpil-monitor-id=\"6\">rakendada brauseritasemel eraldi API kaitseks<\/a> klikkide pistmiseks.    <\/p>\n<p>Kromiumip\u00f5histes brauserites soovitatakse kasutajatel lubada saidi t\u00e4ienduse juurdep\u00e4\u00e4su kinnitamise re\u017eiim (T\u00e4ienduse seaded &#8594; &#171;site access&#187; &#8594; &#171;on click&#187;), kusjuures t\u00e4iendusel on juurdep\u00e4\u00e4s saidile ainult siis, kui klikitakse aadressiriba paremas servas asuvale ikoonile. \u00dcmberk\u00e4imiseks soovitatakse ka vormide automaatse t\u00e4itmise keelamist ja paroolide k\u00e4sitsi kopeerimist l\u00f5ikelauale, kuid sellega kaasneb risk andmete lekkimisest \u00fchises l\u00f5ikelauas ja oht mitte m\u00e4rgata phishing-\u00fcritusi.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63754\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f\u043c \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442, \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":141440,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-141439","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f\u043c \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442, \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0430\u044f \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f\u043c \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442, \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-08-24T09:11:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-01-24T15:56:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47R\u00fcnnak brauserilaienduste vastu paroolihalduritelt, kasutades klikip\u00fc\u00fcgimeetodit | ProHoster","description":"DEF CON 33 konverentsil esitati r\u00fcnnakumeetod brauserilaienduste suhtes, mis sisestavad oma kasutajaliidese elemendid vaadatavasse lehte. R\u00fcnnaku rakendamine paroolihaldurite laiendustele v\u00f5ib viia salvestatud teabe, nagu autentimisandmed, krediitkaardiandmed, isiklikud andmed ja \u00fchekordsed paroolid kahes faktoris autentimise jaoks, lekkimiseni. Probleem puudutab k\u00f5iki testitud paroolihaldureid,","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0430\u044f \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433 | ProHoster","og:description":"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f\u043c \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442, \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439,","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-08-24T09:11:59+00:00","article:modified_time":"2026-01-24T15:56:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"141439","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 14:25:19","updated":"2026-02-09 15:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/141439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=141439"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/141439\/revisions"}],"predecessor-version":[{"id":158486,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/141439\/revisions\/158486"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/141440"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=141439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=141439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=141439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}