{"id":154289,"date":"2026-01-19T17:11:55","date_gmt":"2026-01-19T15:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami"},"modified":"2026-01-19T17:11:55","modified_gmt":"2026-01-19T15:11:55","slug":"zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","title":{"rendered":"Prise de contr\u00f4le sur les paquets snap li\u00e9s aux domaines p\u00e9rim\u00e9s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Alan Pope, ancien responsable de l'ing\u00e9nierie et des relations avec la communaut\u00e9 chez Canonical, a attir\u00e9 l'attention sur une nouvelle vague d'attaques contre les utilisateurs du catalogue d'applications Snap Store. Au lieu de s'inscrire de nouveaux comptes, des attaquants ont commenc\u00e9 \u00e0 racheter des domaines expir\u00e9s associ\u00e9s aux adresses email des d\u00e9veloppeurs de paquets snap. Apr\u00e8s avoir rachet\u00e9 le domaine, les attaquants redirigent le trafic email vers leurs serveurs et, ayant pris le contr\u00f4le de l'email, d\u00e9clenchent le processus de r\u00e9cup\u00e9ration du mot de passe oubli\u00e9 pour acc\u00e9der au compte. <\/p>\n

En prenant le contr\u00f4le d'un compte existant, les attaquants peuvent d\u00e9ployer une mise \u00e0 jour malveillante des applications fiables d\u00e9j\u00e0 publi\u00e9es, contournant les v\u00e9rifications renforc\u00e9es appliqu\u00e9es aux nouveaux participants, et \u00e9vitant d'ajouter des \u00e9tiquettes d'avertissement sur les nouveaux projets. Alan Pope a identifi\u00e9 au moins deux domaines (enstorewise.tech et vagueentertainment.com) rachet\u00e9s par des attaquants pour s'emparer de comptes, mais il est suppos\u00e9 qu'il y a beaucoup d'autres cas. <\/p>\n

Par le pass\u00e9, les attaquants se limitaient \u00e0 s'inscrire avec leurs propres comptes afin de publier des paquets malveillants se faisant passer pour des versions officielles de programmes populaires, ou en utilisant des noms similaires \u00e0 ceux de paquets d\u00e9j\u00e0 existants (typosquatting). En r\u00e9ponse, Canonical a mis en place une v\u00e9rification manuelle des nouveaux noms de paquets d'abord publi\u00e9s dans le Snap Store. Suite \u00e0 cela, l'activit\u00e9 principale des distributeurs de logiciels malveillants s'est concentr\u00e9e sur la mise en ligne de paquets originaux, leur promotion sur les r\u00e9seaux sociaux et la publication, apr\u00e8s un certain temps, d'une mise \u00e0 jour malveillante qui tente de contourner les v\u00e9rifications et filtres automatis\u00e9s existants dans le Snap Store. <\/p>\n

Maintenant, le vecteur d'attaque s'est d\u00e9plac\u00e9 vers le rachat de domaines expir\u00e9s, puisque le Snap Store n'a pas mis en place de v\u00e9rification de la validit\u00e9 complets<\/a>, utilis\u00e9e dans les adresses email. L'ann\u00e9e derni\u00e8re, le d\u00e9p\u00f4t PyPI (Index de paquets Python) a rencontr\u00e9 un probl\u00e8me similaire, ayant commenc\u00e9 \u00e0 traduire automatiquement les emails avec des domaines expir\u00e9s en \u00e9tat non v\u00e9rifi\u00e9. Plus de 1800 de ces adresses email ont \u00e9t\u00e9 bloqu\u00e9es sur PyPI.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u043b\u0430\u043d \u041f\u043e\u0443\u043f (Alan Pope), \u0431\u044b\u0432\u0448\u0438\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e \u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0443 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044e \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Canonical, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Snap Store. \u0412\u043c\u0435\u0441\u0442\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0432\u044b\u043a\u0443\u043f\u0430\u0442\u044c \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b, \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432 email \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 snap-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u043a\u0443\u043f\u043a\u0438 \u0434\u043e\u043c\u0435\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-154289","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Prise de contr\u00f4le des paquets snap li\u00e9s \u00e0 des domaines expir\u00e9s | ProHoster","description":"Alan Pope, ancien responsable de l'ing\u00e9nierie et des interactions communautaires chez Canonical, a remarqu\u00e9 une nouvelle vague d'attaques visant les utilisateurs du catalogue d'applications Snap Store.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0445\u0432\u0430\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 snap-\u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 | ProHoster","og:description":"\u0410\u043b\u0430\u043d \u041f\u043e\u0443\u043f (Alan Pope), \u0431\u044b\u0432\u0448\u0438\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e \u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0443 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044e \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Canonical, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Snap Store.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-01-19T15:11:55+00:00","article:modified_time":"2026-01-19T15:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"154289","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:56:45","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 14:16:45","updated":"2026-02-08 20:56:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/154289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=154289"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/154289\/revisions"}],"predecessor-version":[{"id":158116,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/154289\/revisions\/158116"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=154289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=154289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=154289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}