{"id":145782,"date":"2025-10-19T23:11:55","date_gmt":"2025-10-19T21:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po"},"modified":"2026-02-09T17:18:08","modified_gmt":"2026-02-09T15:18:08","slug":"vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","title":{"rendered":"Le piratage du site Xubuntu avec remplacement des liens sur la page de t\u00e9l\u00e9chargement par des logiciels malveillants","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Le site officiel de la distribution Xubuntu a \u00e9t\u00e9 compromis par des cybercriminels inconnus, qui ont modifi\u00e9 les liens sur la page de t\u00e9l\u00e9chargement de la distribution pour rediriger vers le fichier \"https:\/\/xubuntu.org\/wp-content\/Xubuntu-Safe-Download.zip\". En cons\u00e9quence, la page de t\u00e9l\u00e9chargement ne contenait que des liens vers une archive malveillante et des miroirs disponibles. Les d\u00e9veloppeurs de Xubuntu n'ont pas encore comment\u00e9 la situation, mais quelques heures plus t\u00f4t, ils ont supprim\u00e9 l'archive malveillante et bloqu\u00e9 l'acc\u00e8s \u00e0 la section \"xubuntu.org\/download\/\", redirigeant vers la page principale du site. <\/p>\n

Des copies de xubuntu.org ont \u00e9t\u00e9 prises par le service archive.org les 11 et 18 octobre \u2014 le 11 octobre, la page n'avait pas encore \u00e9t\u00e9 modifi\u00e9e, alors que le 18 octobre, la page pr\u00e9sentait d\u00e9j\u00e0 une modification malveillante. Les miroirs du projet, par lesquels sont diffus\u00e9es les images iso, semblent, selon une analyse pr\u00e9liminaire des sommes de contr\u00f4le, n'avoir pas \u00e9t\u00e9 touch\u00e9s et correspondent \u00e0 cdimage.ubuntu.com. Des traces de compromission ont jusqu'\u00e0 pr\u00e9sent \u00e9t\u00e9 remarqu\u00e9es uniquement sur le site xubuntu.org, utilisant un syst\u00e8me de gestion de contenu WordPress<\/a>. Le piratage aurait \u00e9t\u00e9 r\u00e9alis\u00e9 via un plugin non mis \u00e0 jour pour WordPress, contenant une vuln\u00e9rabilit\u00e9. <\/p>\n

L'archive diffus\u00e9e par les cybercriminels, \"Xubuntu-Safe-Download.zip\", contient un fichier ex\u00e9cutable pour la plateforme Windows, pr\u00e9sent\u00e9 comme l'installateur de Xubuntu. La v\u00e9rification du fichier sp\u00e9cifi\u00e9 sur le service VirusTotal r\u00e9v\u00e8le la pr\u00e9sence de logiciels malveillants. <\/p>\n

Lors du lancement du fichier ex\u00e9cutable, une interface frauduleuse s'affiche, comprenant des champs pour choisir la version de la distribution \u00e0 t\u00e9l\u00e9charger et le type de paquet, ainsi qu'un bouton \"Generate Download Link\". En cliquant sur le bouton, un fichier nomm\u00e9 \"elzvcf.exe\" est enregistr\u00e9 dans le r\u00e9pertoire \"AppData Roaming\" et son ex\u00e9cution est configur\u00e9e dans le registre Windows au d\u00e9marrage du syst\u00e8me. Selon les premi\u00e8res informations, le logiciel malveillant analyse les donn\u00e9es dans le presse-papiers et remplace les adresses des portefeuilles Bitcoin, Litecoin, Ethereum, Dogecoin, Tron, Ripple et Cardano par celles des cybercriminels.

\"Le<\/center> <\/p>\n

Fait int\u00e9ressant, le 10 septembre, l'un des utilisateurs s'est plaint de l'apparition d'un article de blog sur le site xubuntu.org faisant la promotion d'un casino, mais cet article a \u00e9t\u00e9 rapidement supprim\u00e9 et l'incident n'a pas \u00e9t\u00e9 d\u00e9velopp\u00e9 (probablement jug\u00e9 que la publicit\u00e9 avait \u00e9t\u00e9 implant\u00e9e par le logiciel malveillant de l'utilisateur).
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Xubuntu \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u044b, \u043d\u0430 \u0444\u0430\u0439\u043b «https:\/\/xubuntu.org\/wp-content\/Xubuntu-Safe-Download.zip». \u0412 \u0438\u0442\u043e\u0433\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0437\u0435\u0440\u043a\u0430\u043b\u0430. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Xubuntu \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u043e\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043d\u0430\u0437\u0430\u0434 \u0443\u0434\u0430\u043b\u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u0437\u0434\u0435\u043b\u0443 «xubuntu.org\/download\/», \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0432 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":145783,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-145782","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Piratage du site Xubuntu avec substitution des liens sur la page de t\u00e9l\u00e9chargement par des logiciels malveillants | ProHoster","description":"Le site officiel de la distribution Xubuntu a \u00e9t\u00e9 compromis par des inconnus, qui ont remplac\u00e9 les liens vers les torrents sur la page de t\u00e9l\u00e9chargement de la distribution par un fichier.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0430\u0439\u0442\u0430 Xubuntu \u0441 \u0437\u0430\u043c\u0435\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043e\u043a \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster","og:description":"\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Xubuntu \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u044b, \u043d\u0430 \u0444\u0430\u0439\u043b.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-19T21:11:55+00:00","article:modified_time":"2026-02-09T15:18:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"145782","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:18:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:26:19","updated":"2026-02-09 15:18:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/145782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=145782"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/145782\/revisions"}],"predecessor-version":[{"id":158408,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/145782\/revisions\/158408"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/145783"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=145782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=145782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=145782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}