{"id":103587,"date":"2022-03-22T15:37:30","date_gmt":"2022-03-22T13:37:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fishing-cherez-simulyacziyu-interfejsa-brauzera-vo-vsplyvayushhem-okne"},"modified":"2022-03-22T15:37:30","modified_gmt":"2022-03-22T13:37:31","slug":"fishing-cherez-simulyacziyu-interfejsa-brauzera-vo-vsplyvayushhem-okne","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/fishing-cherez-simulyacziyu-interfejsa-brauzera-vo-vsplyvayushhem-okne","title":{"rendered":"Phishing par simulation d'interface de navigateur dans une fen\u00eatre contextuelle","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Des informations ont \u00e9t\u00e9 publi\u00e9es sur une m\u00e9thode de phishing permettant de cr\u00e9er chez l'utilisateur l'illusion de travailler avec un formulaire d'authentification l\u00e9gitime gr\u00e2ce \u00e0 la recr\u00e9ation de l'interface du navigateur dans une zone affich\u00e9e au-dessus de la fen\u00eatre actuelle \u00e0 l'aide d'un iframe. Alors que par le pass\u00e9, les attaquants essayaient de tromper les utilisateurs en enregistrant des domaines similaires ou en manipulant les param\u00e8tres dans l'URL, cette m\u00e9thode utilise des outils HTML et CSS pour dessiner des \u00e9l\u00e9ments dans la partie sup\u00e9rieure de la fen\u00eatre contextuelle, r\u00e9p\u00e9tant l'interface du navigateur, y compris le titre avec les boutons de contr\u00f4le de la fen\u00eatre et la barre d'adresse, affichant une adresse qui ne correspond pas \u00e0 l'adresse r\u00e9elle du contenu.

\"Phishing<\/center> <\/p>\n

\u00c9tant donn\u00e9 que de nombreux sites utilisent des formulaires d'authentification via des services tiers prenant en charge le protocole OAuth, et que ces formulaires sont affich\u00e9s dans une fen\u00eatre s\u00e9par\u00e9e, la g\u00e9n\u00e9ration d'une fausse interface de navigateur peut tromper m\u00eame un utilisateur exp\u00e9riment\u00e9 et attentif. Cette m\u00e9thode pourrait, par exemple, \u00eatre utilis\u00e9e sur des sites pirat\u00e9s ou peu fiables pour collecter des donn\u00e9es sur les mots de passe des utilisateurs. <\/p>\n

Le chercheur, ayant port\u00e9 attention \u00e0 ce probl\u00e8me, a publi\u00e9 un ensemble de maquettes simulant l'interface de Chrome dans des th\u00e8mes sombres et clairs pour macOS et Windows. La fen\u00eatre contextuelle est form\u00e9e \u00e0 l'aide d'un iframe, rendu au-dessus du contenu. Pour plus de r\u00e9alisme, des gestionnaires sont attach\u00e9s via JavaScript, permettant de d\u00e9placer la fen\u00eatre factice et d'appuyer sur les boutons de contr\u00f4le de la fen\u00eatre.

\"Phishing<\/center>
\r\n \"Lire\r\n
<\/div>\r\n <\/div><\/center>
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043c\u0435\u0442\u043e\u0434\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u043b\u044e\u0437\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 \u0444\u043e\u0440\u043c\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438, \u0432\u044b\u0432\u043e\u0434\u0438\u043c\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043e\u043a\u043d\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 iframe. \u0415\u0441\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043f\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044e \u0434\u043e\u043c\u0435\u043d\u044b \u0438\u043b\u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0432 URL, \u0442\u043e \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 HTML \u0438 CSS \u0432 \u0432\u0435\u0440\u0445\u043d\u0435\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":103588,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103587","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Phishing par simulation de l'interface du navigateur dans une fen\u00eatre contextuelle | ProHoster","description":"Des informations ont \u00e9t\u00e9 publi\u00e9es sur une m\u00e9thode de phishing permettant de cr\u00e9er chez l'utilisateur l'illusion de travailler avec un formulaire d'authentification l\u00e9gitime gr\u00e2ce \u00e0 la recr\u00e9ation de l'interface du navigateur dans une zone affich\u00e9e au-dessus de la fen\u00eatre actuelle.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/fishing-cherez-simulyacziyu-interfejsa-brauzera-vo-vsplyvayushhem-okne","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u0438\u0448\u0438\u043d\u0433 \u0447\u0435\u0440\u0435\u0437 \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u044e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0432\u043e \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043e\u043a\u043d\u0435 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043c\u0435\u0442\u043e\u0434\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u043b\u044e\u0437\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 \u0444\u043e\u0440\u043c\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438, \u0432\u044b\u0432\u043e\u0434\u0438\u043c\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043e\u043a\u043d\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/fishing-cherez-simulyacziyu-interfejsa-brauzera-vo-vsplyvayushhem-okne","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-03-22T13:37:31+00:00","article:modified_time":"2022-03-22T13:37:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103587","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-03-22 13:38:31","updated":"2022-09-27 22:53:36","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/103587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=103587"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/103587\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/103588"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=103587"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=103587"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=103587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}