{"id":119649,"date":"2024-08-28T03:43:01","date_gmt":"2024-08-28T01:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod"},"modified":"2024-08-28T03:43:01","modified_gmt":"2024-08-28T01:43:01","slug":"v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","title":{"rendered":"Du code malveillant a \u00e9t\u00e9 d\u00e9couvert dans le plugin ss-otr pour Pidgin.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Les d\u00e9veloppeurs du client de messagerie instantan\u00e9e Pidgin, qui prend en charge des r\u00e9seaux tels que Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime et Zephyr, ont annonc\u00e9 avoir d\u00e9tect\u00e9 du code malveillant dans le plugin ss-otr (ScreenShareOTR), pr\u00e9sent dans le r\u00e9pertoire des plugins d\u00e9velopp\u00e9s par la communaut\u00e9. Le plugin a \u00e9t\u00e9 ajout\u00e9 au r\u00e9pertoire le 6 juillet, \u00e9tait distribu\u00e9 uniquement sous forme binaire et ajoutait \u00e0 Pidgin la capacit\u00e9 de partager l'\u00e9cran en utilisant le protocole OTR (Off-the-Record). Le 16 ao\u00fbt, les chercheurs en s\u00e9curit\u00e9 ont d\u00e9couvert une activit\u00e9 malveillante dans ss-otr, qui se manifestait par le lancement d'un keylogger et l'envoi de captures d'\u00e9cran vers des serveurs externes. <\/p>\n

L'analyse des modifications malveillantes effectu\u00e9e par ESET a r\u00e9v\u00e9l\u00e9 la pr\u00e9sence, dans les biblioth\u00e8ques pidgin-screenshare et libotr, d'un code permettant de t\u00e9l\u00e9charger et d'ex\u00e9cuter des scripts et des fichiers ex\u00e9cutables depuis de serveurs<\/a> des attaquants (jabberplugins.net). Pour les utilisateurs Windows, un logiciel malveillant de type DarkGate, capable de r\u00e9aliser un large \u00e9ventail d'actions malveillantes, tel que le minage, l'enregistrement des frappes, l'organisation d'acc\u00e8s \u00e0 distance, le vol de donn\u00e9es personnelles, de cl\u00e9s et de mots de passe \u00e0 partir d'applications populaires, \u00e9tait t\u00e9l\u00e9charg\u00e9 et install\u00e9 depuis le serveur. Les versions pour Linux comportaient \u00e9galement une fonctionnalit\u00e9 pour t\u00e9l\u00e9charger et ex\u00e9cuter du code tiers (ce qui \u00e9tait exactement t\u00e9l\u00e9charg\u00e9 sur les syst\u00e8mes Linux n'est pas encore clair). <\/p>\n

Pour r\u00e9duire le risque d'incidents similaires \u00e0 l'avenir, les d\u00e9veloppeurs de Pidgin pr\u00e9voient d'inclure dans le r\u00e9pertoire uniquement les plugins dont le code est disponible sous des licences ouvertes approuv\u00e9es par l'organisation OSI. Ils envisagent \u00e9galement de ne faire r\u00e9f\u00e9rence qu'\u00e0 des plugins tiers pour lesquels un audit de s\u00e9curit\u00e9 a \u00e9t\u00e9 r\u00e9alis\u00e9.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Pidgin, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u0430\u043a Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime \u0438 Zephyr, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 ss-otr (ScreenShareOTR), \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c. \u041f\u043b\u0430\u0433\u0438\u043d \u0431\u044b\u043b \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 6 \u0438\u044e\u043b\u044f, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b \u0432 Pidgin \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119649","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Du code malveillant a \u00e9t\u00e9 identifi\u00e9 dans le plugin ss-otr pour Pidgin | ProHoster","description":"Les d\u00e9veloppeurs du client de messagerie instantan\u00e9e Pidgin, qui prend en charge des r\u00e9seaux tels que Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime et Zephyr, ont annonc\u00e9 avoir d\u00e9tect\u00e9.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 ss-otr \u043a Pidgin \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Pidgin, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u0430\u043a Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime \u0438 Zephyr, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-28T01:43:01+00:00","article:modified_time":"2024-08-28T01:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119649","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:45:25","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:10:21","updated":"2026-02-22 15:45:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/119649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=119649"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/119649\/revisions"}],"predecessor-version":[{"id":162461,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/119649\/revisions\/162461"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=119649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=119649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=119649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}