{"id":33450,"date":"2019-10-31T21:52:37","date_gmt":"2019-10-31T18:52:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii\/"},"modified":"2019-10-31T21:52:37","modified_gmt":"2019-10-31T18:52:37","slug":"zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii","title":{"rendered":"Une attaque de ransomwares sur des d\u00e9p\u00f4ts Git a \u00e9t\u00e9 signal\u00e9e","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Rapport\u00e9<\/a><\/noindex> sur la vague d'attaques visant \u00e0 chiffrer des d\u00e9p\u00f4ts Git sur les services GitHub, GitLab et Bitbucket. Les attaquants nettoient le d\u00e9p\u00f4t et laissent un message demandant d'envoyer 0,1 BTC (environ 700 $) pour r\u00e9cup\u00e9rer les donn\u00e9es \u00e0 partir d'une sauvegarde (en r\u00e9alit\u00e9, seuls les en-t\u00eates de commit sont alt\u00e9r\u00e9s, et les informations peuvent \u00eatre restaur\u00e9<\/a><\/noindex>). Sur GitHub, de cette mani\u00e8re, d\u00e9j\u00e0 371 d\u00e9p\u00f4ts ont \u00e9t\u00e9 touch\u00e9s.<\/a><\/noindex> Certaines victimes de l'attaque admettent avoir utilis\u00e9 des mots de passe peu fiables ou avoir oubli\u00e9 de supprimer les jetons d'acc\u00e8s de vieilles applications. Certains pensent (pour l'instant, ce ne sont que des hypoth\u00e8ses, et l'hypoth\u00e8se n'est pas encore confirm\u00e9e) que la cause de la fuite de donn\u00e9es d'identification a \u00e9t\u00e9 la compromission de l'application<\/p>\n

SourceTree , qui fournit une interface graphique pour travailler avec Git sur macOS et Windows. En mars, plusieurs<\/a><\/noindex>vuln\u00e9rabilit\u00e9s critiques ont \u00e9t\u00e9 d\u00e9couvertes dans SourceTree, permettant d'ex\u00e9cuter du code \u00e0 distance en acc\u00e9dant \u00e0 des d\u00e9p\u00f4ts contr\u00f4l\u00e9s par des cybercriminels.<\/a><\/noindex>Pour restaurer le d\u00e9p\u00f4t apr\u00e8s une attaque, il suffit d'ex\u00e9cuter \u00ab git checkout origin\/master \u00bb, apr\u00e8s quoi<\/p>\n

Pour restaurer le d\u00e9p\u00f4t apr\u00e8s une attaque, il suffit d'ex\u00e9cuter \u00ab git checkout origin\/master \u00bb, apr\u00e8s quoi
\nvous pouvez d\u00e9couvrir via \u00ab git reflog \u00bb le hash SHA de votre dernier commit et annuler les changements des attaquants avec la commande \u00ab git reset {SHA} \u00bb. Si une copie locale est disponible, le probl\u00e8me peut \u00eatre r\u00e9solu en ex\u00e9cutant \u00ab git push origin HEAD:master --force \u00bb.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0432\u043e\u043b\u043d\u0435 \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 GitHub, GitLab \u0438 Bitbucket. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0447\u0438\u0449\u0430\u044e\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c 0.1 BTC (\u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e $700) \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0439 \u043a\u043e\u043f\u0438\u0438 (\u043d\u0430 \u0434\u0435\u043b\u0435 \u043b\u0438\u0448\u044c \u043f\u043e\u0440\u0442\u044f\u0442\u0441\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430). \u041d\u0430 GitHub \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0443\u0436\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b 371 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0430\u0442\u0430\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33450","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Attaque par des ransomwares sur les d\u00e9p\u00f4ts Git confirm\u00e9e | ProHoster","description":"\ud83e\udd47Une attaque de ransomwares malveillants sur des d\u00e9p\u00f4ts Git a \u00e9t\u00e9 confirm\u00e9e | ProHoster","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u043d\u0430 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 | ProHoster","og:description":"\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0432\u043e\u043b\u043d\u0435 \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 GitHub, GitLab \u0438.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/zafiksirovana-ataka-vredonosnyh-shifrovalshhikov-na-git-repozitorii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:37+00:00","article:modified_time":"2019-10-31T18:52:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33450","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:19:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:40:27","updated":"2026-01-21 15:19:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=33450"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/33450\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=33450"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=33450"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=33450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}