{"id":42943,"date":"2020-02-17T14:41:56","date_gmt":"2020-02-17T11:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij"},"modified":"2020-02-17T14:41:56","modified_gmt":"2020-02-17T11:41:56","slug":"iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","title":{"rendered":"Plus de 500 extensions malveillantes ont \u00e9t\u00e9 supprim\u00e9es du Chrome Web Store","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/duo.com\/labs\/research\/crxcavator-malvertising-2020\">Les r\u00e9sultats ont \u00e9t\u00e9 annonc\u00e9s<\/a><\/noindex> du blocage d'une s\u00e9rie d'extensions malveillantes pour le navigateur Chrome, dont plusieurs millions d'utilisateurs ont \u00e9t\u00e9 victimes. Lors de la premi\u00e8re \u00e9tape, la chercheuse ind\u00e9pendante Jamila Kaya (<noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/bumblebreaches\/status\/1228058396923875328\">Jamila Kaya<\/a><\/noindex>) et la soci\u00e9t\u00e9 Duo Security ont identifi\u00e9 71 extensions malveillantes dans le catalogue du Chrome Web Store. Au total, ces extensions comptaient plus de 1,7 million d'installations. Apr\u00e8s avoir inform\u00e9 Google du probl\u00e8me, le catalogue a r\u00e9v\u00e9l\u00e9 plus de 430 extensions similaires, dont le nombre d'installations n'est pas divulgu\u00e9. <\/p>\n<p>Il est notables que malgr\u00e9 un nombre d'installations aussi impressionnant, aucune des extensions probl\u00e9matiques n'a re\u00e7u d'avis d'utilisateurs, ce qui soul\u00e8ve des questions sur la fa\u00e7on dont ces extensions ont \u00e9t\u00e9 install\u00e9es et comment l'activit\u00e9 malveillante est rest\u00e9e inaper\u00e7ue. \u00c0 l'heure actuelle, toutes les extensions probl\u00e9matiques ont \u00e9t\u00e9 supprim\u00e9es du Chrome Web Store.<br \/>\nSelon les chercheurs, l'activit\u00e9 malveillante li\u00e9e aux extensions bloqu\u00e9es se d\u00e9roule depuis janvier 2019, mais certains domaines utilis\u00e9s pour mener des actions malveillantes ont \u00e9t\u00e9 enregistr\u00e9s d\u00e8s 2017. <\/p>\n<p>Dans l'ensemble, les extensions malveillantes se pr\u00e9sentaient comme des outils pour promouvoir des produits et participer \u00e0 des services publicitaires (l'utilisateur regarde des publicit\u00e9s et re\u00e7oit des commissions). Les extensions utilisaient une technique de redirection vers des sites promotionn\u00e9s lors de l'ouverture de pages qui \u00e9taient affich\u00e9es avant d'afficher le site demand\u00e9. <\/p>\n<p>Toutes les extensions utilisaient une technique similaire pour masquer l'activit\u00e9 malveillante et contourner les m\u00e9canismes de v\u00e9rification des extensions dans le Chrome Web Store. Le code de toutes les extensions \u00e9tait presque identique au niveau du code source, sauf pour les noms des fonctions, qui \u00e9taient uniques dans chaque extension. La transmission de la logique malveillante se faisait depuis des serveurs de contr\u00f4le centralis\u00e9s. Au d\u00e9but, l'extension se connectait \u00e0 un domaine ayant le m\u00eame nom que celui de l'extension (par exemple, Mapstrek.com), puis \u00e9tait redirig\u00e9e vers l'un des serveurs de contr\u00f4le qui fournissait le script des actions \u00e0 suivre.<\/p>\n<p>Parmi les actions effectu\u00e9es via les extensions, on mentionne le t\u00e9l\u00e9chargement de donn\u00e9es confidentielles de l'utilisateur sur un serveur externe, le redirection vers des sites malveillants et la complicit\u00e9 dans l'installation d'applications nuisibles (par exemple, un message d'infection de l'ordinateur appara\u00eet et un logiciel malveillant se pr\u00e9sente sous la forme d'un antivirus ou d'une mise \u00e0 jour du navigateur). Les domaines vers lesquels les redirections ont eu lieu incluent divers domaines de phishing et des sites destin\u00e9s \u00e0 exploiter des navigateurs non mis \u00e0 jour, contenant des vuln\u00e9rabilit\u00e9s non corrig\u00e9es (par exemple, apr\u00e8s exploitation, des tentatives d'installation de programmes malveillants interceptant les acc\u00e8s et analysant le transfert de donn\u00e9es confidentielles via le presse-papiers ont \u00e9t\u00e9 r\u00e9alis\u00e9es).<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52371\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043d\u044b \u0438\u0442\u043e\u0433\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0443 Chrome, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430 \u043f\u0435\u0440\u0432\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u0436\u0430\u043c\u0438\u043b\u044f \u041a\u0430\u0439\u044f (Jamila Kaya) \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Duo Security \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Chrome Web Store 71 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 1.7 \u043c\u043b\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a. \u041f\u043e\u0441\u043b\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Google \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435, \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-42943","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043d\u044b \u0438\u0442\u043e\u0433\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0443 Chrome, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u0437 Chrome Web Store \u0443\u0434\u0430\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043d\u044b \u0438\u0442\u043e\u0433\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0443 Chrome, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-17T11:41:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-17T11:41:56+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Plus de 500 extensions malveillantes supprim\u00e9es du Chrome Web Store | ProHoster","description":"Les r\u00e9sultats du blocage d'une s\u00e9rie d'extensions malveillantes pour le navigateur Chrome, dont plusieurs utilisateurs ont \u00e9t\u00e9 victimes, ont \u00e9t\u00e9 pr\u00e9sent\u00e9s.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437 Chrome Web Store \u0443\u0434\u0430\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043d\u044b \u0438\u0442\u043e\u0433\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0443 Chrome, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e.","og:url":"https:\/\/prohoster.info\/fr\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-17T11:41:56+00:00","article:modified_time":"2020-02-17T11:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42943","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:51:33","updated":"2022-09-28 18:42:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/42943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=42943"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/42943\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=42943"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=42943"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=42943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}