Cov kws tshawb fawb los ntawm ESET Kev faib tawm ntawm qhov phem Tor Browser tsim los ntawm cov neeg tsis paub tus neeg tawm tsam. Lub rooj sib txoos tau muab tso ua tus nom Lavxias teb sab version ntawm Tor Browser, thaum nws cov neeg tsim tsis muaj dab tsi ua nrog Tor qhov project, thiab lub hom phiaj ntawm nws cov tsim yog los hloov Bitcoin thiab QIWI hnab nyiaj.
Txhawm rau ua rau cov neeg siv dag zog, cov tsim ntawm lub rooj sib txoos tau sau npe rau domains tor-browser.org thiab torproect.org (tshwj xeeb los ntawm lub vev xaib official torproJect.org los ntawm qhov tsis muaj tsab ntawv "J", uas tsis pom zoo los ntawm ntau tus neeg siv lus Lavxias). Tus tsim ntawm cov chaw tau stylized kom zoo li lub vev xaib official Tor. Thawj qhov chaw tau tso tawm ib nplooj ntawv nrog kev ceeb toom txog kev siv Tor Browser tsis tu ncua thiab cov lus pom zoo rau nruab qhov hloov tshiab (qhov txuas tau coj mus rau kev sib dhos nrog Trojan software), thiab ntawm qhov thib ob cov ntsiab lus yog tib yam li nplooj ntawv rub tawm. Tor Browser. Lub rooj sib txoos siab phem tau tsim rau Windows nkaus xwb.
Txij li thaum xyoo 2017, Trojan Tor Browser tau nce qib ntawm ntau lub rooj sib tham lus Lavxias, hauv kev sib tham txog kev tsaus ntuj, cryptocurrencies, hla Roskomnadzor thaiv thiab teeb meem ntiag tug. Txhawm rau faib qhov browser, pastebin.com kuj tau tsim ntau nplooj ntawv optimized kom pom nyob rau hauv cov kev tshawb fawb saum toj kawg nkaus ntawm cov ncauj lus hais txog ntau yam kev ua txhaum cai, kev censorship, cov npe ntawm cov nom tswv nto moo, thiab lwm yam.
Cov nplooj ntawv tshaj tawm cov ntawv tsis tseeb ntawm qhov browser ntawm pastebin.com tau pom ntau dua 500 txhiab zaus.
Kev tsim tsis tseeb yog ua raws li Tor Browser 7.5 codebase thiab, sib nrug los ntawm kev ua haujlwm tsis zoo, kev hloov kho me me rau Tus Neeg Siv-Tus Neeg Saib Xyuas, cuam tshuam cov ntawv pov thawj digital kos npe rau add-ons, thiab thaiv cov kev hloov kho tshiab, yog zoo tib yam rau cov nom tswv. Tor Browser. Qhov kev tso siab tsis zoo muaj xws li txuas tus neeg tuav cov ntsiab lus rau tus qauv HTTPS Txhua qhov chaw ntxiv-on (ib qho ntxiv script.js tsab ntawv ntxiv rau manifest.json). Cov kev hloov pauv ntxiv tau ua nyob rau theem ntawm kev kho cov chaw, thiab txhua qhov binary tseem nyob ntawm tus nom Tor Browser.
Cov ntawv sau ua ke rau hauv HTTPS Txhua qhov chaw, thaum qhib txhua nplooj ntawv, hu rau tus tswj server, uas xa rov qab JavaScript code uas yuav tsum tau ua hauv cov ntsiab lus ntawm nplooj ntawv tam sim no. Tus tswj server ua haujlwm raws li kev pabcuam Tor zais. Los ntawm kev ua tiav JavaScript code, cov neeg tawm tsam tuaj yeem cuam tshuam cov ntsiab lus ntawm lub vev xaib, hloov lossis zais cov ntsiab lus tsis txaus ntseeg ntawm nplooj ntawv, tso cov lus tsis tseeb, thiab lwm yam. Txawm li cas los xij, thaum txheeb xyuas cov lej tsis zoo, tsuas yog cov lej hloov pauv QIWI cov ntsiab lus thiab Bitcoin hnab nyiaj ntawm nplooj ntawv lees txais nyiaj ntawm qhov tsaus ntuj tau sau tseg. Thaum lub sijhawm ua phem, 4.8 Bitcoins tau sau rau ntawm lub hnab nyiaj siv rau kev dag, uas sib raug rau kwv yees li 40 txhiab nyiaj.
Tau qhov twg los: opennet.ru