{"id":42943,"date":"2020-02-17T14:41:56","date_gmt":"2020-02-17T11:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij"},"modified":"2020-02-17T14:41:56","modified_gmt":"2020-02-17T11:41:56","slug":"iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","title":{"rendered":"Chromei veebipoest on eemaldatud rohkem kui 500 pahatahtlikku laiendust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kokkuv\u00f5tted on tehtud<\/a><\/noindex> Chrome'i brauseri pikenduste kahjutuks muutmise kohta, mille ohvriks langesid miljonid kasutajad. Esimeses etapis tuvastas s\u00f5ltumatu teadlane Jamila Kaya (Jamila Kaya<\/a><\/noindex>) ja ettev\u00f5te Duo Security Chrome'i veebipoes 71 kahjulikku pikendust. Kokku oli neil pikendustel \u00fcle 1,7 miljoni installi. P\u00e4rast Google'i teavitamist probleemist leiti poes veel \u00fcle 430 sarnase pikenduse, mille installide arvu ei ole teada. <\/p>\n

On t\u00e4helepanuv\u00e4\u00e4rne, et vaatamata suurele installide arvule ei ole \u00fchelgi probleemsete pikenduste puhul kasutajate arvustusi, mis tekitab k\u00fcsimusi, kuidas need pikendused olid installitud ja kuidas kahjulik tegevus j\u00e4i m\u00e4rkamatuks. Praegu on k\u00f5ik probleemsed pikendused Chrome'i veebipoest eemaldatud.
\nUurijate arvates on kahtlase tegevusega seotud kahjulikud pikendused tegutsenud alates 2019. aasta jaanuarist, kuid m\u00f5ned domeenid, mida kahjuliku tegevuse teostamiseks kasutati, registreeriti juba 2017. aastal. <\/p>\n

Enamik kahjulikest pikendustest esitati tooteteeninduse ja reklaamiteenustes osalemise t\u00f6\u00f6riistadena (kasutaja vaatab reklaame ja teenib raha). Pikendustes rakendati tehnikaid, mis suunasid reklaamitud saitidele, kui kasutaja avas lehti, mis n\u00e4idati enne n\u00f5utud saidi kuvamist. <\/p>\n

K\u00fcmmnes k\u00f5igis pikendustes kasutati sarnast tehnikat kahjuliku tegevuse varjamiseks ja Chrome'i veebipoe kinnitamismehhanismidega manipuleerimiseks. K\u00f5igi pikenduste kood oli praktiliselt identne algse tekstitasemel, v\u00e4lja arvatud funktsioonide nimed, mis olid igas pikenduses unikaalsed. Kahjuliku loogika edastamine toimus kesksetelt juhtimiserveritelt. Alguses \u00fchendas pikendus domeeniga, mille nimi oli sama kui pikenduse nimi (n\u00e4iteks Mapstrek.com), seej\u00e4rel suunati see \u00fche juhtimiserveri juurde, mis edastas j\u00e4rgmiste tegevuste stsenaariumi.<\/p>\n

Lisaks lisandmoodulite kaudu tehtavatele toimingutele mainitakse kasutaja konfidentsiaalsete andmete laadimist v\u00e4lisele serverile, suunamist pahatahtlikele veebisaitidele ja pahatahtlike rakenduste installimise soosimist (n\u00e4iteks kuvatakse teade arvuti nakatumisest ja pakutakse pahatahtlikku tarkvara viiruset\u00f5rje v\u00f5i brauseri uuenduse n\u00e4ol). \u00dcksikuteks domeenideks, millele suunati, olid erinevad fi\u0161ingudomeenid ja saidid, mis kasutasid vananenud brausereid, mis sisaldasid parandamata haavatavusi (n\u00e4iteks p\u00e4rast \u00e4rakasutamist tehti katseid pahatahtlike programmide installimiseks, mis p\u00fc\u00fcdsid kinni juurdep\u00e4\u00e4suv\u00f5tmeid ja anal\u00fc\u00fcsisid konfidentsiaalsete andmete edastamist l\u00f5ikepaberil).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043d\u044b \u0438\u0442\u043e\u0433\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0443 Chrome, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430 \u043f\u0435\u0440\u0432\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u0436\u0430\u043c\u0438\u043b\u044f \u041a\u0430\u0439\u044f (Jamila Kaya) \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Duo Security \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Chrome Web Store 71 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 1.7 \u043c\u043b\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a. \u041f\u043e\u0441\u043b\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Google \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435, \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-42943","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome Web Store'ist on eemaldatud \u00fcle 500 pahatahtliku lisandmooduli | ProHoster","description":"Kokkuv\u00f5ttes on blokeeritud seeria pahatahtlikke lisandmooduleid Chrome'i veebibrauseris, kelle ohvriteks langes mitu inimest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437 Chrome Web Store \u0443\u0434\u0430\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043d\u044b \u0438\u0442\u043e\u0433\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0443 Chrome, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e.","og:url":"https:\/\/prohoster.info\/et\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-17T11:41:56+00:00","article:modified_time":"2020-02-17T11:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42943","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:51:33","updated":"2022-09-28 18:42:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/42943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=42943"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/42943\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=42943"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=42943"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=42943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}