{"id":33499,"date":"2019-10-31T21:52:57","date_gmt":"2019-10-31T18:52:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov\/"},"modified":"2019-10-31T21:52:57","modified_gmt":"2019-10-31T18:52:57","slug":"podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","title":{"rendered":"Picreel'i ja Alpaca Forms'i projektide koodi vahetamine t\u00f5i kaasa 4684 veebisaidi kompromiteerimise","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Turvauurija Willem de Groot et<\/a><\/noindex>, mis t\u00e4hendab, et r\u00fcnnaku tulemusena said sissetungijad sisestada pahatahtliku koodi veebianal\u00fc\u00fcsi s\u00fcsteemi Picreel<\/a><\/noindex> ja avatud platvormi interaktiivsete veebivormide genereerimiseks Alpaca Forms<\/a><\/noindex>. JavaScripti koodi vahetamine viis 4684 veebisaidi kompromiteerimiseni, mis kasutasid oma lehtedel nimetatud s\u00fcsteeme (1249<\/a><\/noindex> — Picreel \u0438 3435<\/a><\/noindex> — Alpaca Forms). <\/p>\n

Sisestatud pahatahtlik kood<\/a><\/noindex> kogus teavet k\u00f5igi veebivormide t\u00e4itmise kohta ja v\u00f5is isegi viia makseinfo ja autentimisparameetrite \u00fclekuulamiseni. K\u00fcberr\u00fcnnakult saadud teave edastati serverisse font-assets.com pildi p\u00e4ringuna. Informatsiooni selle kohta, kuidas t\u00e4pselt Picreel'i infrastruktuur ja CDN v\u00f5rgustik Alpaca Forms'i skripti edastamiseks oli kompromiteeritud, pole veel. Teada on ainult, et Alpaca Forms'i r\u00fcnnaku k\u00e4igus vahetati v\u00e4lja Cloud CMS-i kaudu edastatavad skriptid. Pahatahtlik kood<\/a><\/noindex> oli varjatud andmemassiivi alla minimeeritud versioonis<\/a><\/noindex> skripti (koodi dekodeerimist saab vaadata siit<\/a><\/noindex>).<\/p>\n

\"Picreel'i<\/a><\/noindex><\/center><\/p>\n

Kompromiteeritud projektide kasutajate seas on palju suurettev\u00f5tteid, sealhulgas Sony, Forbes, Trustico, FOX, ClassesUSA, 3Dcart, Saxo Bank, Foundr, RocketInternet, Sprit ja Virgin Mobile. Arvestades, et see ei ole esimene sellelaadne r\u00fcnnak (vt. incidents<\/a><\/noindex> StatCounter'i loenduri petmiseks), soovitatakse veebilehtede administreerijatel olla \u00e4\u00e4rmiselt ettevaatlikud kolmanda osapoole JavaScript-koodi paigutamisega, eriti makse- ja autentimisega seotud lehtedel.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0438\u043b\u043b\u0435\u043c \u0434\u0435 \u0413\u0440\u043e\u043e\u0442 (Willem de Groot) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0441\u0442\u0430\u0432\u043a\u0443 \u0432 \u043a\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b web-\u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Picreel \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 web-\u0444\u043e\u0440\u043c Alpaca Forms. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 JavaScript-\u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 4684 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (1249 — Picreel \u0438 3435 — Alpaca Forms). \u0412\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25200,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33499","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Picreel'i ja Alpaca Forms'i koodi petmine viis 4684 veebilehe kompromiteerimiseni | ProHoster","description":"Turvauuringute ekspert Willem de Groot teatas, et r\u00fcnnaku infrastruktuuri h\u00e4kkimise t\u00f5ttu \u00f5nnestus r\u00fcndajatel sisestada kahjulik kood Picreel'i veebianal\u00fc\u00fctika s\u00fcsteemi ja Alpaca Forms'i avatud platvormi interaktiivsete veebivormide genereerimiseks. JavaScript-koodi petmine viis 4684 veebilehe kompromiteerimiseni, mis kasutasid neid s\u00fcsteeme (1249 - Picreel ja 3435 - Alpaca Forms). Sisestatud","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 Picreel \u0438 Alpaca Forms \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 4684 \u0441\u0430\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0438\u043b\u043b\u0435\u043c \u0434\u0435 \u0413\u0440\u043e\u043e\u0442 (Willem de Groot) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0441\u0442\u0430\u0432\u043a\u0443 \u0432 \u043a\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b web-\u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Picreel \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 web-\u0444\u043e\u0440\u043c Alpaca Forms. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 JavaScript-\u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 4684 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (1249 - Picreel \u0438 3435 - Alpaca Forms). \u0412\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:57+00:00","article:modified_time":"2019-10-31T18:52:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33499","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:31:39","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:23","updated":"2026-01-21 15:31:39"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33499","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33499"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33499\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25200"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33499"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33499"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33499"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}