{"id":148861,"date":"2025-11-19T17:11:58","date_gmt":"2025-11-19T15:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org"},"modified":"2026-02-09T17:18:08","modified_gmt":"2026-02-09T15:18:08","slug":"razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org","title":{"rendered":"Les d\u00e9veloppeurs de Xubuntu ont publi\u00e9 un rapport sur le piratage du site Xubuntu.org","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Les d\u00e9veloppeurs du projet Xubuntu ont publi\u00e9 un rapport sur le piratage survenu il y a un mois sur le site Xubuntu.org, suite \u00e0 quoi un lien vers l'archive \u00ab Xubuntu-Safe-Download.zip \u00bb contenant du code malveillant a \u00e9t\u00e9 plac\u00e9 sur la page de t\u00e9l\u00e9chargement de la distribution. \u00c0 l'int\u00e9rieur de l'archive, sous l'apparence d'un installateur Xubuntu, un fichier ex\u00e9cutable pour la plateforme Windows \u00e9tait distribu\u00e9, qui, une fois utilis\u00e9, installait un logiciel malveillant sur le syst\u00e8me, analysant les donn\u00e9es du presse-papiers et rempla\u00e7ant les adresses des portefeuilles cryptographiques. <\/p>\n

L'analyse de l'incident a r\u00e9v\u00e9l\u00e9 que l'acc\u00e8s au site avait \u00e9t\u00e9 obtenu par une attaque contre un composant vuln\u00e9rable de la plateforme WordPress, dont la maintenance \u00e9tait assur\u00e9e par la soci\u00e9t\u00e9 Canonical. Apr\u00e8s avoir obtenu l'acc\u00e8s, les attaquants ont pu injecter leur code dans la plateforme, modifiant les liens sur la page de t\u00e9l\u00e9chargement et pla\u00e7ant le fichier \u00ab https:\/\/xubuntu.org\/wp-content\/Xubuntu-Safe-Download.zip \u00bb. <\/p>\n

Les premiers rapports de compromission datent du 15 octobre. Il est pr\u00e9cis\u00e9 que les \u00e9quipes de Canonical, responsables du maintien de l'infrastructure, ont \u00e9t\u00e9 averties peu apr\u00e8s avoir re\u00e7u des plaintes, apr\u00e8s quoi elles ont imm\u00e9diatement entam\u00e9 une enqu\u00eate et d\u00e9sactiv\u00e9 la page de t\u00e9l\u00e9chargement (note : malgr\u00e9 l'affirmation selon laquelle le travail d'analyse de l'incident a commenc\u00e9 presque imm\u00e9diatement, en r\u00e9alit\u00e9, le fichier malveillant est rest\u00e9 sur la page de t\u00e9l\u00e9chargement jusqu'au soir du 19 octobre). <\/p>\n

Le 11 novembre, la soci\u00e9t\u00e9 Canonical a fourni aux d\u00e9veloppeurs de Xubuntu un rapport confirmant l'\u00e9limination de la vuln\u00e9rabilit\u00e9, les modifications apport\u00e9es pour renforcer la s\u00e9curit\u00e9 et la reprise de la page de t\u00e9l\u00e9chargement en mode lecture seule. Pour \u00e9viter que des incidents similaires ne se reproduisent \u00e0 l'avenir, il a \u00e9t\u00e9 d\u00e9cid\u00e9 de remplacer un syst\u00e8me de gestion de contenu WordPress<\/a> par un g\u00e9n\u00e9rateur de site statique Hugo, qui ne publiera que du contenu statique sur le site. <\/p>\n

Il est affirm\u00e9 que l'attaque s'est limit\u00e9e \u00e0 la substitution d'un lien sur le site Xubuntu.org et n'a pas touch\u00e9 d'autres \u00e9l\u00e9ments de l'infrastructure. En particulier, l'attaque n'a pas affect\u00e9 le syst\u00e8me de construction, le service cdimages.ubuntu.com, les miroirs, les d\u00e9p\u00f4ts de paquets et d'autres \u00e9l\u00e9ments de d\u00e9veloppement de Xubuntu. Les utilisateurs ayant t\u00e9l\u00e9charg\u00e9 l'archive Xubuntu-Safe-Download.zip et ex\u00e9cut\u00e9 le fichier exe contenu \u00e0 l'int\u00e9rieur doivent consid\u00e9rer que leurs syst\u00e8mes ont \u00e9t\u00e9 compromis et utiliser un logiciel antivirus pour nettoyer leur syst\u00e8me des logiciels malveillants.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Xubuntu \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434 \u0432\u0437\u043b\u043e\u043c\u0435 \u0441\u0430\u0439\u0442\u0430 Xubuntu.org, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0431\u044b\u043b\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0432 «Xubuntu-Safe-Download.zip» \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u0412\u043d\u0443\u0442\u0440\u0438 \u0430\u0440\u0445\u0438\u0432\u0430 \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 Xubuntu \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows, \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0431\u0443\u0444\u0435\u0440\u0435 \u043e\u0431\u043c\u0435\u043d\u0430 \u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-148861","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Les d\u00e9veloppeurs de Xubuntu ont publi\u00e9 un rapport sur le piratage du site Xubuntu.org | ProHoster","description":"Les d\u00e9veloppeurs du projet Xubuntu ont publi\u00e9 un rapport sur le piratage survenu il y a un mois sur le site Xubuntu.org, \u00e0 la suite duquel un lien vers l'archive \"Xubuntu-Safe-Download.zip\" a \u00e9t\u00e9 plac\u00e9 sur la page de t\u00e9l\u00e9chargement de la distribution.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Xubuntu \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0441\u0430\u0439\u0442\u0430 Xubuntu.org | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Xubuntu \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0451\u0442 \u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u043c \u043c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434 \u0432\u0437\u043b\u043e\u043c\u0435 \u0441\u0430\u0439\u0442\u0430 Xubuntu.org, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0431\u044b\u043b\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0432 "Xubuntu-Safe-Download.zip".","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/razrabotchiki-xubuntu-opublikovali-otchyot-o-vzlome-sajta-xubuntu-org","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-19T15:11:58+00:00","article:modified_time":"2026-02-09T15:18:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"148861","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:18:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:05:20","updated":"2026-02-09 15:18:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/148861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=148861"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/148861\/revisions"}],"predecessor-version":[{"id":158407,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/148861\/revisions\/158407"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=148861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=148861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=148861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}