{"id":33006,"date":"2019-10-31T21:50:14","date_gmt":"2019-10-31T18:50:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev\/"},"modified":"2019-10-31T21:50:14","modified_gmt":"2019-10-31T18:50:14","slug":"haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev","title":{"rendered":"Un hacker demande une ran\u00e7on pour r\u00e9cup\u00e9rer des d\u00e9p\u00f4ts Git supprim\u00e9s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Des sources r\u00e9seau rapportent que des centaines de d\u00e9veloppeurs ont d\u00e9couvert la disparition de code dans leurs d\u00e9p\u00f4ts Git. Un hacker inconnu menace de publier le code si ses exigences de ran\u00e7on ne sont pas satisfaites dans le d\u00e9lai imparti. Des rapports d'attaques ont \u00e9merg\u00e9 samedi. Apparemment, elles sont coordonn\u00e9es via . C'est tr\u00e8s pratique d'avoir tout au m\u00eame endroit. Gr\u00e2ce \u00e0 cela, en cas de probl\u00e8me, nos sp\u00e9cialistes vous aideront \u00e0 le r\u00e9soudre dans les plus brefs d\u00e9lais.<\/a>-des services Git (GitHub, Bitbucket, GitLab). Il reste encore flou comment les attaques ont \u00e9t\u00e9 r\u00e9alis\u00e9es.<\/p>\n

Il est rapport\u00e9 que le hacker supprime tout le code source du d\u00e9p\u00f4t, laissant \u00e0 la place un message demandant une ran\u00e7on de 0,1 bitcoin, ce qui \u00e9quivaut \u00e0 environ 570 $. Le hacker indique \u00e9galement que tout le code est sauvegard\u00e9 et se trouve sur l'un de ses serveurs. serveurs<\/a>Si la ran\u00e7on ne parvient pas dans les 10 jours, il promet de rendre le code vol\u00e9 public.<\/p>\n

\"Un<\/p>\n

Selon les donn\u00e9es de BitcoinAbuse.com, qui suit les adresses bitcoin impliqu\u00e9es dans des activit\u00e9s suspectes, 27 rapports ont \u00e9t\u00e9 enregistr\u00e9s pour l'adresse sp\u00e9cifi\u00e9e au cours des derni\u00e8res 24 heures, chacun contenant le m\u00eame texte.<\/p>\n

<\/center><\/p>\n

Certains utilisateurs ayant \u00e9t\u00e9 cibl\u00e9s par le hacker inconnu ont signal\u00e9 qu'ils utilisaient des mots de passe peu fiables pour leurs comptes et qu'ils n'avaient pas supprim\u00e9 les tokens d'acc\u00e8s pour les applications inutilis\u00e9es depuis longtemps. Apparemment, le hacker a scann\u00e9 le r\u00e9seau \u00e0 la recherche de fichiers de configuration Git, dont la d\u00e9couverte a permis d'extraire des informations d'identification utilisateur.<\/p>\n

La directrice de la s\u00e9curit\u00e9 de GitLab, Kathy Wang, a confirm\u00e9 l'existence du probl\u00e8me, d\u00e9clarant que l'enqu\u00eate sur l'incident avait \u00e9t\u00e9 lanc\u00e9e d\u00e8s hier, lorsqu'elle a re\u00e7u la premi\u00e8re plainte d'un utilisateur. Elle a \u00e9galement indiqu\u00e9 que des comptes qui avaient \u00e9t\u00e9 pirat\u00e9s avaient \u00e9t\u00e9 identifi\u00e9s et que leurs propri\u00e9taires avaient d\u00e9j\u00e0 \u00e9t\u00e9 inform\u00e9s. Le travail effectu\u00e9 a permis de confirmer l'hypoth\u00e8se selon laquelle les victimes utilisaient des mots de passe peu fiables. Les utilisateurs sont invit\u00e9s \u00e0 utiliser des outils de gestion des mots de passe ainsi qu'une authentification \u00e0 deux facteurs pour pr\u00e9venir de tels probl\u00e8mes \u00e0 l'avenir.<\/p>\n

\"Un<\/p>\n

Les participants au forum StackExchange ont examin\u00e9 la situation et sont parvenus \u00e0 la conclusion que le hacker ne supprime pas tout le code, mais modifie les en-t\u00eates des commits Git. Cela signifie que dans certains cas, les utilisateurs pourront r\u00e9cup\u00e9rer le code perdu. Il est recommand\u00e9 aux utilisateurs confront\u00e9s \u00e0 ce probl\u00e8me de contacter le support des services.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u043e\u0442\u043d\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0447\u0435\u0437\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0438\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445. \u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0434, \u0435\u0441\u043b\u0438 \u0435\u0433\u043e \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043e \u0432\u044b\u043a\u0443\u043f\u0435 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0441\u0440\u043e\u043a. \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443. \u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u043d\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0445\u043e\u0441\u0442\u0438\u043d\u0433-\u0441\u0435\u0440\u0432\u0438\u0441\u044b Git (GitHub, Bitbucker, GitLab). \u0412\u0441\u0451 \u0435\u0449\u0435 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u043d\u044f\u0442\u043d\u044b\u043c, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24764,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33006","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Le hacker exige une ran\u00e7on pour la r\u00e9cup\u00e9ration des d\u00e9p\u00f4ts Git supprim\u00e9s | ProHoster","description":"Des sources en ligne rapportent que des centaines de d\u00e9veloppeurs ont d\u00e9couvert la disparition de code dans leurs d\u00e9p\u00f4ts Git.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u0430\u043a\u0435\u0440 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u044b\u043a\u0443\u043f \u0437\u0430 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 | ProHoster","og:description":"\u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u043e\u0442\u043d\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0447\u0435\u0437\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0438\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:50:14+00:00","article:modified_time":"2019-10-31T18:50:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33006","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 20:17:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:48:29","updated":"2026-02-09 20:17:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=33006"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33006\/revisions"}],"predecessor-version":[{"id":159591,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33006\/revisions\/159591"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/24764"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=33006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=33006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=33006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}