{"id":148861,"date":"2025-11-19T17:11:58","date_gmt":"2025-11-19T15:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org"},"modified":"2026-02-09T17:18:08","modified_gmt":"2026-02-09T15:18:08","slug":"razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org","title":{"rendered":"Xubuntude arendajad avaldasid aruande Xubuntu.org veebisaidi h\u00e4kkimise kohta.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Xubuntu projekti arendajad avaldasid aruande kuu aega tagasi toimunud Xubuntu.org veebisaidi rikke kohta, mille tulemusena oli distributsiooni allalaadimise lehele paigutatud link arhivile «Xubuntu-Safe-Download.zip», mis sisaldas kahjulikku koodi. Arhivi sees levitati Xubuntule ainulaadse paigaldaja nime all Windowsi platvormi t\u00e4itmisfaili, mille kasutamine installeeris s\u00fcsteemi kahjuliku tarkvara, mis anal\u00fc\u00fcsis l\u00f5ikepuhvrisse salvestatud andmeid ning asendas kr\u00fcptovaluuta aadresse. <\/p>\n

Intsidendi anal\u00fc\u00fcs n\u00e4itas, et veebisaidile p\u00e4\u00e4se saadi WordPressi platvormi haavatava komponendi abil, mille hooldamise eest vastutas Canonical. P\u00e4rast juurdep\u00e4\u00e4su saamist suutsid r\u00fcndajad oma koodi platvormi sisestada, muutes allalaadimise lehe linke, ja paigaldades faili «https:\/\/xubuntu.org\/wp-content\/Xubuntu-Safe-Download.zip». <\/p>\n

Esimesed teated kompromiteerimise kohta p\u00e4rinevad 15. oktoobrist. T\u00f5detakse, et Canonicali meeskonnad, kes hooldavad infrastruktuuri, said kaebustest peagi p\u00e4rast teate saamist teatavaks, seej\u00e4rel alustasid nad viivitamatult uurimist ja sulgesid laadimislehe (m\u00e4rkused: vaatamata v\u00e4itele, et juhtumi anal\u00fc\u00fcs algas peaaegu kohe, j\u00e4i kahjulik fail laadimislehele kuni 19. oktoobri \u00f5htuni). <\/p>\n

11. novembril andis Canonical Xubuntu arendajatele aruande, milles kinnitati haavatavuse k\u00f5rvaldamist, muudatuste tegemist kaitse tugevdamiseks ja laadimislehe taask\u00e4ivitamist ainult lugemise re\u017eiimis. Tulevaste sarnaste juhtumite v\u00e4ltimiseks on otsustatud asendada sisu haldamise s\u00fcsteemi WordPress<\/a> Hugo staatilise veebigeneraatoriga, millega saab veebisaidile paigutada ainult staatilist sisu. <\/p>\n

N\u00e4htavasti piirdus r\u00fcnnak ainult Xubuntu.org veebisaidi lingi asendamisega, m\u00f5jutamata teisi infrastruktuuri elemente. Eelk\u00f5ige ei tabanud r\u00fcnnak koostamise s\u00fcsteemi, teenust cdimages.ubuntu.com, peegeldusi, pakettide hoidlaid ega teisi Xubuntu arenduse elemente. Kasutajad, kes on alla laadinud arhiivi Xubuntu-Safe-Download.zip ja k\u00e4ivitanud sealset exe-faili, peaksid pidama oma s\u00fcsteeme kompromiteerituks ja kasutama pahavara puhastamise t\u00f6\u00f6riistu.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Xubuntu \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434 \u0432\u0437\u043b\u043e\u043c\u0435 \u0441\u0430\u0439\u0442\u0430 Xubuntu.org, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0431\u044b\u043b\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0432 «Xubuntu-Safe-Download.zip» \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u0412\u043d\u0443\u0442\u0440\u0438 \u0430\u0440\u0445\u0438\u0432\u0430 \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 Xubuntu \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows, \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0431\u0443\u0444\u0435\u0440\u0435 \u043e\u0431\u043c\u0435\u043d\u0430 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-148861","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Xubuntu arendajad avaldasid aruande Xubuntu.org veebisaidi h\u00e4kkimise kohta | ProHoster","description":"Xubuntu projekti arendajad avaldasid aruande kuu aega tagasi toimunud Xubuntu.org veebisaidi h\u00e4kkimise kohta, mille tulemuseks oli laadimislehe link, mis suunas nakkusfaili \"Xubuntu-Safe-Download.zip\" eksitavatele allalaadimistele. Arhiivis, mis varjas end Xubuntu installijana, leiti Windowsi jaoks m\u00f5eldud k\u00e4ivitatav fail, mille kasutamine installoris s\u00fcsteemi kahjuliku tarkvara, mis anal\u00fc\u00fcsis l\u00f5ikelaual olevaid andmeid ja asendas.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Xubuntu \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0441\u0430\u0439\u0442\u0430 Xubuntu.org | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Xubuntu \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434 \u0432\u0437\u043b\u043e\u043c\u0435 \u0441\u0430\u0439\u0442\u0430 Xubuntu.org, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0431\u044b\u043b\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0432 "Xubuntu-Safe-Download.zip" \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u0412\u043d\u0443\u0442\u0440\u0438 \u0430\u0440\u0445\u0438\u0432\u0430 \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 Xubuntu \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows, \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0431\u0443\u0444\u0435\u0440\u0435 \u043e\u0431\u043c\u0435\u043d\u0430 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-19T15:11:58+00:00","article:modified_time":"2026-02-09T15:18:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"148861","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:18:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:05:20","updated":"2026-02-09 15:18:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/148861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=148861"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/148861\/revisions"}],"predecessor-version":[{"id":158407,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/148861\/revisions\/158407"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=148861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=148861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=148861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}