{"id":114076,"date":"2024-03-03T12:26:03","date_gmt":"2024-03-03T10:26:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom"},"modified":"2024-03-03T12:26:03","modified_gmt":"2024-03-03T10:26:03","slug":"na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","title":{"rendered":"Plus de 100 000 d\u00e9p\u00f4ts malveillants identifi\u00e9s sur GitHub","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Des chercheurs en s\u00e9curit\u00e9 de la soci\u00e9t\u00e9 Apiiro ont d\u00e9couvert une activit\u00e9 malveillante o\u00f9 des cybercriminels publient sur GitHub des clones modifi\u00e9s de d\u00e9p\u00f4ts de divers projets, int\u00e9grant de petites modifications destin\u00e9es \u00e0 des actes nuisibles. En g\u00e9n\u00e9ral, le d\u00e9p\u00f4t malveillant est cr\u00e9\u00e9 sous le m\u00eame nom, mais rattach\u00e9 \u00e0 une autre organisation (\u00ab github.org\/org1\/proj \u00bb -> \u00ab github.org\/org2\/proj \u00bb), ou avec un nom l\u00e9g\u00e8rement diff\u00e9rent de l'original (typosquatting), en esp\u00e9rant que la victime ne remarquera pas les diff\u00e9rences et utilisera le code contenant les modifications malveillantes. Pour attirer les utilisateurs, des liens vers des d\u00e9p\u00f4ts malveillants sont activement partag\u00e9s sur divers r\u00e9seaux sociaux, forums et chats. <\/p>\n

On signale la d\u00e9couverte de plus de 100 000 d\u00e9p\u00f4ts similaires, mais selon les chercheurs, le nombre total de d\u00e9p\u00f4ts contenant des modifications malveillantes pourrait s'\u00e9lever \u00e0 des millions, car la majorit\u00e9 des d\u00e9p\u00f4ts cr\u00e9\u00e9s automatiquement sont supprim\u00e9s par GitHub quelques heures apr\u00e8s leur publication. Parmi les motifs pouvant \u00eatre utilis\u00e9s pour d\u00e9tecter la pr\u00e9sence d'inclusions malveillantes dans les d\u00e9p\u00f4ts t\u00e9l\u00e9charg\u00e9s, on mentionne : exec(Fernet exec(requests exec(__import exec(bytes exec(\"\"\"\\nimport exec(compiler __import__(\"builtins\").exec( <\/p>\n

Le code malveillant attach\u00e9 est une version modifi\u00e9e de BlackCap-Grabber, qui, une fois ex\u00e9cut\u00e9e, recherche des donn\u00e9es sensibles, telles que des identifiants de compte, des tokens, des mots de passe sauvegard\u00e9s dans le navigateur et des cookies, et les envoie \u00e0 serveur<\/a> des attaquants. Le code malveillant prend \u00e9galement en charge la substitution des adresses de cryptomonnaies transf\u00e9r\u00e9es via le presse-papiers, peut cr\u00e9er des captures d'\u00e9cran et recevoir des commandes d'un contr\u00f4leur de serveurs<\/a> (C&C)
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Apiiro \u0432\u044b\u044f\u0432\u0438\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 GitHub \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u043e\u043d\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u0441 \u0442\u0435\u043c \u0436\u0435 \u0438\u043c\u0435\u043d\u0435\u043c, \u043d\u043e \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u044b\u043c \u043a \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 («github.org\/org1\/proj» -> «github.org\/org2\/proj»), \u0438\u043b\u0438 \u0441 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u043e\u0442 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u0430 \u0438\u043c\u0435\u043d\u0435\u043c (\u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0438\u043d\u0433), \u0441 \u0440\u0430\u0441\u0447\u0451\u0442\u043e\u043c, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114076","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Plus de 100 000 d\u00e9p\u00f4ts avec du code malveillant identifi\u00e9s sur GitHub | ProHoster","description":"Des chercheurs en s\u00e9curit\u00e9 de la soci\u00e9t\u00e9 Apiiro ont identifi\u00e9 l'activit\u00e9 de cybercriminels qui publient sur GitHub des clones modifi\u00e9s de d\u00e9p\u00f4ts de divers projets, dans lesquels de petits changements sont apport\u00e9s dans le but de.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430 GitHub \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Apiiro \u0432\u044b\u044f\u0432\u0438\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 GitHub \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u043e\u043d\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-03T10:26:03+00:00","article:modified_time":"2024-03-03T10:26:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114076","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-22 15:29:46","updated":"2026-02-22 15:29:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/114076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=114076"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/114076\/revisions"}],"predecessor-version":[{"id":172914,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/114076\/revisions\/172914"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=114076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=114076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=114076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}