{"id":78074,"date":"2020-04-16T07:41:56","date_gmt":"2020-04-16T05:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov"},"modified":"2020-04-16T07:41:56","modified_gmt":"2020-04-16T05:41:56","slug":"v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov","title":{"rendered":"Le Chrome Web Store a r\u00e9v\u00e9l\u00e9 49 extensions interceptant les cl\u00e9s des portefeuilles cryptographiques","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Les entreprises MyCrypto et PhishFort ont identifi\u00e9<\/a><\/noindex> ont identifi\u00e9 49 extensions malveillantes dans le Chrome Web Store, qui envoient des cl\u00e9s et des mots de passe de portefeuilles cryptographiques vers des serveurs d'attaquants. Les extensions ont \u00e9t\u00e9 diffus\u00e9es en utilisant des m\u00e9thodes de publicit\u00e9 par phishing et \u00e9taient pr\u00e9sent\u00e9es comme des impl\u00e9mentations de divers portefeuilles de cryptomonnaies. Les extensions \u00e9taient bas\u00e9es sur le code des portefeuilles officiels, mais incluaient des modifications malveillantes qui transmettaient des cl\u00e9s priv\u00e9es, des codes de r\u00e9cup\u00e9ration et des fichiers contenant des cl\u00e9s. <\/p>\n

Pour certaines extensions, des utilisateurs fictifs ont \u00e9t\u00e9 utilis\u00e9s pour maintenir artificiellement une note positive et des avis positifs ont \u00e9t\u00e9 publi\u00e9s. Google a supprim\u00e9 les extensions concern\u00e9es du Chrome Web Store dans les 24 heures suivant la notification. La publication des premi\u00e8res extensions malveillantes a commenc\u00e9 en f\u00e9vrier, mais le pic a eu lieu en mars (34,69 %) et en avril (63,26 %).<\/p>\n

La cr\u00e9ation de toutes les extensions est li\u00e9e \u00e0 un groupe d'attaquants ayant d\u00e9ploy\u00e9 14 serveurs de contr\u00f4le pour g\u00e9rer le code malveillant et collecter les donn\u00e9es intercept\u00e9es par les extensions. Toutes les extensions utilisaient un code malveillant standard, mais les extensions \u00e9taient camoufl\u00e9es sous diff\u00e9rents produits. y compris<\/a><\/noindex> Ledger (57 % des extensions malveillantes), MyEtherWallet (22 %), Trezor (8 %), Electrum (4 %), KeepKey (4 %), Jaxx (2 %), MetaMask et Exodus.
\n Lors de la configuration initiale de l'extension, les donn\u00e9es \u00e9taient envoy\u00e9es sur un serveur externe et apr\u00e8s un certain temps, des fonds \u00e9taient retir\u00e9s du portefeuille.<\/p>\n

\r\n \"Lire\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 MyCrypto \u0438 PhishFort \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Chrome Web Store 49 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043b\u044e\u0447\u0438 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u0414\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0438 \u043f\u0440\u0435\u043f\u043e\u0434\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442. \u0414\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043a\u043e\u0434\u0435 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432, \u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u043a\u043e\u0434\u043e\u0432 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78074","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 49 extensions interceptant les cl\u00e9s des portefeuilles cryptographiques d\u00e9couvertes dans le Chrome Web Store | ProHoster","description":"Les entreprises MyCrypto et PhishFort ont identifi\u00e9 49 extensions malveillantes dans le Chrome Web Store qui envoient des cl\u00e9s.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome Web Store \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 49 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043a\u043b\u044e\u0447\u0438 \u043e\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 MyCrypto \u0438 PhishFort \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Chrome Web Store 49 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043b\u044e\u0447\u0438.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-16T05:41:56+00:00","article:modified_time":"2020-04-16T05:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78074","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:06:36","updated":"2022-09-28 14:56:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/78074","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=78074"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/78074\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=78074"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=78074"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=78074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}