Hauv Firefox add-ons directory () Kev tshaj tawm loj ntawm kev phem add-ons disguised raws li cov haujlwm paub zoo. Piv txwv li, cov npe muaj cov add-ons siab phem "Adobe Flash Player", "ublock origin Pro", "Adblock Flash Player", thiab lwm yam.
Raws li xws li add-ons raug tshem tawm ntawm cov catalog, attackers tam sim ntawd tsim ib tug account tshiab thiab rov tshaj tawm lawv add-ons. Piv txwv li, ib tus account tau tsim ob peb teev dhau los , nyob rau hauv uas cov add-ons "Youtube Adblock", "Ublock ntxiv", "Adblock Plus 2019" nyob. Thaj, cov lus piav qhia ntawm cov add-ons yog tsim los xyuas kom meej tias lawv tshwm nyob rau sab saum toj rau cov lus nug tshawb "Adobe Flash Player" thiab "Adobe Flash".
Thaum ntsia, add-ons nug kom tso cai nkag mus rau tag nrho cov ntaub ntawv ntawm cov chaw koj tab tom saib. Thaum lub sijhawm ua haujlwm, tus keylogger raug tso tawm, uas xa cov ntaub ntawv hais txog kev sau cov ntawv thiab teeb tsa cov ncuav qab zib rau tus tswv tsev theridgeatdanbury.com. Cov npe ntawm cov ntaub ntawv txuas ntxiv yog "adpbe_flash_player-*.xpi" lossis "player_downloader-*.xpi". Cov ntawv sau hauv cov add-ons txawv me ntsis, tab sis cov kev ua phem uas lawv ua tau pom tseeb thiab tsis zais.
Nws yog qhov zoo li qhov tsis muaj cov txheej txheem los nkaum kev ua phem phem thiab cov cai yooj yim heev ua rau nws muaj peev xwm hla lub tshuab hluav taws xob rau kev tshuaj xyuas ua ntej ntawm add-ons. Nyob rau tib lub sijhawm, nws tsis paub meej li cas qhov kev kuaj xyuas automated tsis quav ntsej qhov tseeb ntawm qhov tseeb thiab tsis zais xa cov ntaub ntawv los ntawm add-on mus rau lwm tus tswv tsev.
Cia peb nco qab tias, raws li Mozilla, kev taw qhia txog kev txheeb xyuas tus lej kos npe digital yuav thaiv kev sib kis ntawm cov add-ons siab phem uas neeg soj xyuas cov neeg siv. Qee qhov add-on developers nrog rau txoj haujlwm no, lawv ntseeg hais tias lub tshuab ntawm qhov yuav tsum tau ua pov thawj siv cov kos npe digital tsuas yog tsim teeb meem rau cov neeg tsim khoom thiab ua rau muaj kev nce ntxiv hauv lub sijhawm nws yuav siv los coj cov kev kho kom raug rau cov neeg siv, tsis muaj kev cuam tshuam rau kev ruaj ntseg hauv txhua txoj kev. Muaj ntau yam tsis tseem ceeb thiab pom tseeb kom bypass lub automated check rau add-ons uas tso cai rau siab phem code yuav tsum tau muab tso rau unnoticed, piv txwv li, los ntawm generating ib tug khiav ntawm ya los ntawm concatenating ob peb txoj hlua thiab ces executing lub resulting hlua los ntawm kev hu eval. Mozilla txoj haujlwm Yog vim li cas yog tias feem ntau cov kws sau ntawv tsis zoo add-ons yog tub nkeeg thiab yuav tsis siv cov tswv yim zoo li no los nkaum kev ua phem.
Lub Kaum Hli 2017, AMO catalog suav nrog tshiab kev tshuaj xyuas ntxiv. Kev txheeb xyuas phau ntawv tau hloov los ntawm cov txheej txheem tsis siv neeg, uas tshem tawm cov kev tos ntev hauv kab rau kev txheeb xyuas thiab nce qhov ceev ntawm kev xa tawm tshiab rau cov neeg siv. Nyob rau tib lub sijhawm, kev txheeb xyuas phau ntawv tsis raug tshem tawm tag nrho, tab sis yog ua los xaiv rau cov ntawv tshaj tawm ntxiv lawm. Ntxiv rau kev tshuaj xyuas phau ntawv raug xaiv raws li kev suav cov kev pheej hmoo.
Tau qhov twg los: opennet.ru