Hack na GoDaddy mai ba da sabis, wanda ya haifar da sasantawa na 1.2 miliyan masu karɓar bakuncin WordPress

An bayyana bayani game da hack na GoDaddy, ɗaya daga cikin manyan masu rajistar yanki da masu ba da sabis, an bayyana. A ranar 17 ga Nuwamba, an gano alamun samun damar shiga mara izini ga sabobin da ke da alhakin samar da hosting dangane da dandalin WordPress (shiryan mahalli na WordPress wanda mai samarwa ke kiyayewa). Binciken abin da ya faru ya nuna cewa mutanen waje sun sami damar shiga tsarin gudanarwa na WordPress ta hanyar kalmar sirri na ɗaya daga cikin ma'aikata, kuma sun yi amfani da rashin lahani a cikin tsarin da ya wuce don samun damar samun bayanan sirri game da 1.2 miliyan masu aiki da masu amfani da WordPress masu aiki.

Maharan sun sami bayanai kan sunayen asusun da kalmomin shiga da abokan ciniki ke amfani da su a cikin DBMS da SFTP; kalmomin shiga na mai gudanarwa don kowane misali na WordPress, saita yayin ƙirƙirar farkon yanayin masauki; Maɓallan SSL masu zaman kansu na wasu masu amfani masu aiki; adiresoshin imel da lambobin abokin ciniki waɗanda za a iya amfani da su don yin phishing. An lura cewa maharan sun sami damar yin amfani da ababen more rayuwa tun daga ranar 6 ga watan Satumba.

source: budenet.ru

Add a comment