{"id":141439,"date":"2025-08-24T11:11:56","date_gmt":"2025-08-24T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking"},"modified":"2026-01-24T17:56:45","modified_gmt":"2026-01-24T15:56:45","slug":"ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","title":{"rendered":"B\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyek elleni t\u00e1mad\u00e1s jelsz\u00f3kezel\u0151kkel, amely klikkzneki t\u00e1mad\u00e1st haszn\u00e1l.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A DEF CON 33 konferenci\u00e1n bemutat\u00e1sra ker\u00fclt egy t\u00e1mad\u00e1si m\u00f3dszer, amely a b\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyek \u00e1ltal az aktu\u00e1lis weboldalra besz\u00fart kezel\u0151fel\u00fcletelemeket c\u00e9lozza meg. A t\u00e1mad\u00e1s alkalmaz\u00e1sa jelsz\u00f3kezel\u0151k b\u0151v\u00edtm\u00e9nyeire az ilyen programokban t\u00e1rolt inform\u00e1ci\u00f3k, p\u00e9ld\u00e1ul az autentik\u00e1ci\u00f3s adatok, hitelk\u00e1rtya adatok, szem\u00e9lyes adatok \u00e9s a k\u00e9tfaktoros hiteles\u00edt\u00e9shez haszn\u00e1lt egyszeri jelszavak kisziv\u00e1rg\u00e1s\u00e1hoz vezethet. A probl\u00e9ma minden tesztelt jelsz\u00f3kezel\u0151t \u00e9rint, bele\u00e9rtve az 1Password, Bitwarden, LastPass, KeePassXC-Browser, NordPass, ProtonPass \u00e9s Keeper alkalmaz\u00e1sokat.    <\/p>\n<p>A t\u00e1mad\u00e1si m\u00f3dszer azon alapul, hogy a b\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyek k\u00f6zvetlen\u00fcl az aktu\u00e1lis weboldalra egy jelsz\u00f3 automatikus kit\u00f6lt\u00e9s\u00e9re vonatkoz\u00f3 p\u00e1rbesz\u00e9dablakot helyeznek, integr\u00e1lva elemeiket az adott weboldal DOM-j\u00e1ba (Document Object Model). Ha a t\u00e1mad\u00f3 k\u00e9pes JavaScript k\u00f3dot v\u00e9grehajtani az oldalon, p\u00e9ld\u00e1ul XSS sebezhet\u0151s\u00e9get kihaszn\u00e1lva, akkor manipul\u00e1lhatja az \u00f6sszes DOM elemet, bele\u00e9rtve a b\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyeket.     <\/p>\n<p>T\u00f6bbek k\u00f6z\u00f6tt lehet\u0151s\u00e9g van a meger\u0151s\u00edt\u0151 p\u00e1rbesz\u00e9dablak \u00e1ttetsz\u0151v\u00e9 t\u00e9tel\u00e9re, valamint a p\u00e1rbesz\u00e9dablak gombj\u00e1t egy t\u00e1mad\u00f3 \u00e1ltal l\u00e9trehozott, hamis p\u00e1rbesz\u00e9dablak gombj\u00e1val t\u00e9rben \u00f6sszeilleszteni, amely a felhaszn\u00e1l\u00f3t kattint\u00e1sra \u00f6szt\u00f6nzi. Ilyen hamis p\u00e1rbesz\u00e9dablakokk\u00e9nt haszn\u00e1lhat\u00f3k a s\u00fcti kezel\u00e9s\u00e9hez sz\u00fcks\u00e9ges jogosults\u00e1gok hamis k\u00e9rd\u00e9sei, rekl\u00e1mok vagy captcha \u0171rlapok. Ha a jelsz\u00f3kezel\u0151 p\u00e1rbesz\u00e9dablakj\u00e1t \u00e1ttetsz\u0151v\u00e9 tessz\u00fck, \u00e9s a gombok elhelyezked\u00e9s\u00e9t egybeillesztj\u00fck a k\u00e9perny\u0151n, el\u00e9rhetj\u00fck, hogy a felhaszn\u00e1l\u00f3 kattint\u00e1sa a jelsz\u00f3kezel\u0151 p\u00e1rbesz\u00e9dablak\u00e1ban tal\u00e1lhat\u00f3 autentik\u00e1ci\u00f3s adatok meger\u0151s\u00edt\u00e9s\u00e9re szolg\u00e1l\u00f3 gombra essen, felt\u00e9ve, hogy a felhaszn\u00e1l\u00f3 azt hiszi, hogy p\u00e9ld\u00e1ul egy rekl\u00e1mablak bez\u00e1r\u00e1s\u00e1ra kattintott.     <center><img decoding=\"async\" alt=\"B\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyek elleni t\u00e1mad\u00e1s jelsz\u00f3kezel\u0151kkel, amely klikkzneki t\u00e1mad\u00e1st haszn\u00e1l.\" src=\"\/wp-content\/uploads\/2025\/08\/9df2f88789928b98278bb49ac8522c38.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>A t\u00e1mad\u00e1s a k\u00f6vetkez\u0151 l\u00e9p\u00e9sekb\u0151l \u00e1ll:  <\/p>\n<ul>\n<li class=\"l\"> K\u00e9nyszer\u00edt\u0151 elem l\u00e9trehoz\u00e1sa az oldalon, amely kattint\u00e1sra \u00f6szt\u00f6n\u00f6z.\n<li class=\"l\"> Web-\u0171rlap hozz\u00e1ad\u00e1sa a bel\u00e9p\u00e9shez vagy a szem\u00e9lyes adatok kit\u00f6lt\u00e9s\u00e9hez.\n<li class=\"l\"> \u00c1tl\u00e1that\u00f3s\u00e1g be\u00e1ll\u00edt\u00e1sa webform\u00e1khoz (&#171;opacity: 0.001&#187; a CSS-ben).\n<li class=\"l\"> A focus() m\u00f3dszer alkalmaz\u00e1s\u00e1val a f\u00f3kusz be\u00e1ll\u00edt\u00e1sa az \u0171rlap egy mez\u0151j\u00e9re, amely aktiv\u00e1lja a jelsz\u00f3kezel\u0151 automatikus kit\u00f6lt\u00e9s p\u00e1rbesz\u00e9dablak\u00e1t.\n<li class=\"l\"> A DOM-ban megjelen\u0151 jelsz\u00f3kezel\u0151 p\u00e1rbesz\u00e9dablak keres\u00e9se \u00e9s \u00e1ttetsz\u0151s\u00e9g be\u00e1ll\u00edt\u00e1sa sz\u00e1m\u00e1ra.\n<li class=\"l\"> A felhaszn\u00e1l\u00f3 kattint\u00e1s\u00e1nak v\u00e1rakoz\u00e1sa egy l\u00e1that\u00f3, zavar\u00f3 elemre az oldalon, amely a l\u00e1that\u00f3 \u00e9s l\u00e1thatatlan elemek megfelel\u0151 \u00f6sszekapcsol\u00e1s\u00e1val nyom\u00e1sra k\u00e9szteti a gombot egy \u00e1tl\u00e1tsz\u00f3 p\u00e1rbesz\u00e9dablakban, \u00e9s kit\u00f6lti a jelsz\u00f3kezel\u0151 \u00e1ltal biztos\u00edtott mez\u0151ket.\n<li class=\"l\"> Adatok kinyer\u00e9se a kit\u00f6lt\u00f6tt webform\u00e1b\u00f3l \u00e9s elk\u00fcld\u00e9se a t\u00e1mad\u00f3 szerver\u00e9re.  <\/ul>\n<p>Mivel a jelsz\u00f3kezel\u0151ben az hiteles\u00edt\u00e9si param\u00e9terek automatikus kit\u00f6lt\u00e9se csak azokhoz a webhelyekhez aktiv\u00e1l\u00f3dik, ahol ezeket a param\u00e9tereket kor\u00e1bban elmentett\u00e9k, a t\u00e1mad\u00e1s megszervez\u00e9s\u00e9hez lehet\u0151s\u00e9g kell, hogy legyen saj\u00e1t JavaScript-k\u00f3dot futtatni a t\u00e1madott webhelyen vagy annak egyik alk\u00f6nyvt\u00e1r\u00e1ban. \u00cdgy a t\u00e1mad\u00e1shoz vagy ugyanazon a tartom\u00e1nyon bel\u00fcl kell alk\u00f6nyvt\u00e1rat szerezni, mint a t\u00e1madott webhely, vagy XSS-sebezhet\u0151s\u00e9get kell tal\u00e1lni a webhelyen, amely lehet\u0151v\u00e9 teszi saj\u00e1t k\u00f3dunk beilleszt\u00e9s\u00e9t a felhaszn\u00e1l\u00f3nak megjelen\u00edtett tartalomba.    <\/p>\n<p>Megjegyzend\u0151, hogy sok felhaszn\u00e1l\u00f3 egyetlen jelsz\u00f3kezel\u0151t haszn\u00e1l bel\u00e9p\u00e9si param\u00e9tereik t\u00e1rol\u00e1s\u00e1ra \u00e9s egyszeri jelszavak gener\u00e1l\u00e1s\u00e1ra a k\u00e9tfaktoros hiteles\u00edt\u00e9shez, amely lehet\u0151v\u00e9 teszi a vizsg\u00e1lt t\u00e1mad\u00e1si m\u00f3dszer alkalmaz\u00e1s\u00e1t az egyszeri jelszavak automatikus kit\u00f6lt\u00e9sekor. P\u00e9ldak\u00e9nt bemutat\u00e1sra ker\u00fclt a t\u00e1mad\u00e1s a issuetracker.google.com webhelyen, amely XSS-sebezhet\u0151s\u00e9get tartalmaz. A bel\u00e9p\u00e9si param\u00e9terek \u00e9s a k\u00e9tfaktoros hiteles\u00edt\u00e9shez sz\u00fcks\u00e9ges k\u00f3d megszerz\u00e9s\u00e9hez elegend\u0151 elk\u00fcldeni a felhaszn\u00e1l\u00f3nak egy, az XSS-sebezhet\u0151s\u00e9get kihaszn\u00e1l\u00f3 linken kereszt\u00fcl, \u00e9s h\u00e1rom kattint\u00e1sra k\u00e9nyszer\u00edteni hamis zavar\u00f3 lek\u00e9rdez\u00e9sek helyettes\u00edt\u00e9s\u00e9vel (a Cookie-k feldolgoz\u00e1s\u00e1nak enged\u00e9lyez\u00e9se, a szem\u00e9lyre szab\u00e1s enged\u00e9lyez\u00e9se \u00e9s a mag\u00e1n\u00e9let v\u00e9delm\u00e9r\u0151l sz\u00f3l\u00f3 ir\u00e1nyelv elfogad\u00e1sa).        <center>  <video controls=\"\" style=\"width: 700px; height: 400px; max-width:100%\"><source src=\"https:\/\/marektoth.com\/video\/dom-extension-clickjacking-demo7.mp4\" type=\"video\/mp4\"><\/video>  <\/center>    <\/p>\n<p>Az XSS sebezhet\u0151s\u00e9gekkel rendelkez\u0151 webhelyek mellett a t\u00e1mad\u00e1s olyan szolg\u00e1ltat\u00e1sokra is ir\u00e1nyulhat, amelyek aldomain-ket k\u00edn\u00e1lnak mindenkinek \u2014 a legt\u00f6bb jelsz\u00f3kezel\u0151 alap\u00e9rtelmezett konfigur\u00e1ci\u00f3ban nemcsak a f\u0151 domainhez, hanem az aldomain-ekhez is kit\u00f6lti a bejelentkez\u00e9si param\u00e9tereket.      <\/p>\n<p>A t\u00e1mad\u00e1s arra is alkalmazhat\u00f3, hogy az \u00e1tver\u00e9ssel megszerzett jelsz\u00f3kezel\u0151ben t\u00e1rolt felhaszn\u00e1l\u00f3i szem\u00e9lyes adatokat \u00e9s bankk\u00e1rtya-adatait megismerj\u00e9k. Ehhez a szem\u00e9lyes adatok kisziv\u00e1rg\u00e1s\u00e1hoz nincs sz\u00fcks\u00e9g a JavaScript k\u00f3d v\u00e9grehajt\u00e1s\u00e1ra m\u00e1s webhelyek kontextus\u00e1ban, elegend\u0151 a c\u00e9lpontot az t\u00e1mad\u00f3 webhely\u00e9re vonzani \u2014 a szem\u00e9lyes adatok eset\u00e9ben a webform\u00e1k kit\u00f6lt\u00e9se az adatok t\u00edpusa (c\u00edm, bankk\u00e1rtyasz\u00e1m, n\u00e9v) alapj\u00e1n t\u00f6rt\u00e9nik, f\u00fcggetlen\u00fcl att\u00f3l, hogy <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/domain\/\"   title=\"domain\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1242\">domain<\/a>. A legvesz\u00e9lyesebb a bankk\u00e1rtya-param\u00e9terek kisziv\u00e1rg\u00e1sa, mivel a jelsz\u00f3kezel\u0151k nemcsak a k\u00e1rtyasz\u00e1mot, hanem a lej\u00e1rati d\u00e1tumot \u00e9s a biztons\u00e1gi k\u00f3dot is megadj\u00e1k.    <\/p>\n<p>A probl\u00e9m\u00e1t felfed\u0151 kutat\u00f3 11 jelsz\u00f3kezel\u0151 b\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyt tesztelt, \u00f6sszesen 39,7 milli\u00f3 akt\u00edv telep\u00edt\u00e9ssel, \u00e9s mindegyik sebezhet\u0151 volt az ilyen t\u00edpus\u00fa t\u00e1mad\u00e1sokkal szemben. N\u00e9h\u00e1ny gy\u00e1rt\u00f3 friss\u00edt\u00e9seket adott ki (NordPass 5.13.24, ProtonPass 1.31.6, RoboForm 9.7.6, Dashlane 6.2531.1, Keeper 17.2.0, Enpass 6.11.6, Bitwarden 2025.8.1), amelyek megpr\u00f3b\u00e1lt\u00e1k blokkolni a t\u00e1mad\u00e1s v\u00e9grehajt\u00e1s\u00e1t. M\u00e1s b\u0151v\u00edtm\u00e9nyek (KeePassXC-Browser, 1Password, iCloud Passwords, Enpass, LastPass, LogMeOnce) m\u00e9g nem kaptak jav\u00edt\u00e1st. A k\u00fcl\u00f6nb\u00f6z\u0151 jelsz\u00f3kezel\u0151kben megjelen\u0151 sebezhet\u0151s\u00e9g ellen\u0151rz\u00e9s\u00e9re publik\u00e1ltak egy tesztoldalcsomagot.  <center><img decoding=\"async\" alt=\"B\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyek elleni t\u00e1mad\u00e1s jelsz\u00f3kezel\u0151kkel, amely klikkzneki t\u00e1mad\u00e1st haszn\u00e1l.\" src=\"\/wp-content\/uploads\/2025\/08\/abdf3d7673c340401721d85f7e7856c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <center><img decoding=\"async\" alt=\"B\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyek elleni t\u00e1mad\u00e1s jelsz\u00f3kezel\u0151kkel, amely klikkzneki t\u00e1mad\u00e1st haszn\u00e1l.\" src=\"\/wp-content\/uploads\/2025\/08\/3a9691b4707e6d5bfe9a2604868c896a.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>A jav\u00edt\u00e1st nem kiad\u00f3 1Password fejleszt\u0151inek \u00e1ll\u00e1spontja szerint a sebezhet\u0151s\u00e9g alapvet\u0151 \u00e9s nem k\u00f6zvetlen\u00fcl kapcsol\u00f3dik egy adott b\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyhez, ez\u00e9rt a b\u0151v\u00edtm\u00e9ny oldal\u00e1n tett megold\u00e1si k\u00eds\u00e9rletek csak egyes t\u00e1mad\u00e1si vektorokat blokkolnak, de mag\u00e1t a probl\u00e9m\u00e1t nem sz\u00fcntetik meg, amit a b\u00f6ng\u00e9sz\u0151ben vagy k\u00fcl\u00f6n meger\u0151s\u00edt\u00e9s k\u00e9r\u00e9s\u00e9vel kell megoldani az \u0171rlapok automatikus kit\u00f6lt\u00e9se el\u0151tt. Megeml\u00edtik, hogy az 1Password m\u00e1r t\u00e1mogatja a fizet\u00e9si param\u00e9terek automatikus kit\u00f6lt\u00e9se el\u0151tti meger\u0151s\u00edt\u0151 k\u00e9r\u00e9s megjelen\u00edt\u00e9s\u00e9t, \u00e9s a k\u00f6vetkez\u0151 verzi\u00f3ban lehet\u0151s\u00e9g lesz hasonl\u00f3 k\u00e9r\u00e9s megjelen\u00edt\u00e9s\u00e9re minden automatikusan kit\u00f6lt\u00f6tt adatfajr\u00f3l (a munkafolyamat k\u00e9nyelm\u00e9nek cs\u00f6kken\u00e9se miatt ezt az opci\u00f3t nem aktiv\u00e1lj\u00e1k alap\u00e9rtelmez\u00e9s szerint).         <\/p>\n<p>A kutat\u00f3 \u00e1ltal javasolt v\u00e9delmi m\u00f3dszerek k\u00f6z\u00f6tt eml\u00edt\u00e9st nyer a weboldalra besz\u00fart elemek st\u00edlusainak v\u00e1ltoz\u00e1s\u00e1nak nyomon k\u00f6vet\u00e9se a MutationObserver API seg\u00edts\u00e9g\u00e9vel, a Shadow DOM 'closed' m\u00f3dban val\u00f3 blokkol\u00e1sa, az elemek \u00e1tl\u00e1that\u00f3s\u00e1g\u00e1nak nyomon k\u00f6vet\u00e9se, a Popover API haszn\u00e1lata p\u00e1rbesz\u00e9dablakok megjelen\u00edt\u00e9s\u00e9hez, a r\u00e9tegek \u00e1tfed\u00e9s\u00e9nek ellen\u0151rz\u00e9se, valamint az esem\u00e9nyek feldolgoz\u00e1s\u00e1nak ideiglenes letilt\u00e1sa (pointer-events:none) minden \u00fasz\u00f3 elem eset\u00e9ben a jelsz\u00f3kezel\u0151 p\u00e1rbesz\u00e9dablak megjelen\u00edt\u00e9se alatt. Ezen v\u00e9dekez\u00e9si oszt\u00e1ly teljes blokkol\u00e1s\u00e1hoz <a href=\"https:\/\/prohoster.info\/hu\/zhashchita-ot-ddos\/\"  data-wpil-monitor-id=\"6\">a t\u00e1mad\u00e1sok f\u00fcggv\u00e9ny\u00e9ben javasolt a b\u00f6ng\u00e9sz\u0151 szintj\u00e9n egy k\u00fcl\u00f6n API megval\u00f3s\u00edt\u00e1sa a v\u00e9delem \u00e9rdek\u00e9ben.<\/a> a klikkjacking ellen.    <\/p>\n<p>A Chromium motorra \u00e9p\u00fcl\u0151 b\u00f6ng\u00e9sz\u0151kben a felhaszn\u00e1l\u00f3knak aj\u00e1nlott enged\u00e9lyezni a webhelyhez val\u00f3 kieg\u00e9sz\u00edt\u0151 hozz\u00e1f\u00e9r\u00e9s meger\u0151s\u00edt\u00e9si m\u00f3dj\u00e1t (Kieg\u00e9sz\u00edt\u0151 be\u00e1ll\u00edt\u00e1sai &#8594; &#171;helyi hozz\u00e1f\u00e9r\u00e9s&#187; &#8594; &#171;kelj fel&#187;), amely sor\u00e1n a kieg\u00e9sz\u00edt\u0151 csak a c\u00edmsor jobb oldal\u00e1n tal\u00e1lhat\u00f3 ikonnal t\u00f6rt\u00e9n\u0151 kattint\u00e1s ut\u00e1n kap hozz\u00e1f\u00e9r\u00e9st a webhelyhez. Alternat\u00edv v\u00e9dekez\u00e9si m\u00f3dk\u00e9nt eml\u00edtik a \u0171rlapok automatikus kit\u00f6lt\u00e9s\u00e9nek letilt\u00e1s\u00e1t \u00e9s a jelszavak manu\u00e1lis \u00e1t m\u00e1sol\u00e1s\u00e1t a v\u00e1g\u00f3lap \u00e1ltal, de ez a k\u00f6z\u00f6s v\u00e1g\u00f3lap adatsziv\u00e1rg\u00e1s\u00e1nak probl\u00e9m\u00e1j\u00e1val \u00e9s a phishing k\u00eds\u00e9rletek \u00e9szlel\u00e9s\u00e9nek neh\u00e9zs\u00e9geivel j\u00e1r.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63754\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443. \u041f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043a \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f\u043c \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0439 \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442, \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":141440,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-141439","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0430\u044f \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-08-24T09:11:59+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-01-24T15:56:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47A b\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyek jelsz\u00f3kezel\u0151ivel szembeni klikkjacking t\u00e1mad\u00e1s | ProHoster","description":"A DEF CON 33 konferenci\u00e1n bemutat\u00e1sra ker\u00fclt egy m\u00f3dszer a b\u00f6ng\u00e9sz\u0151b\u0151v\u00edtm\u00e9nyek ellen, amelyek saj\u00e1t interf\u00e9sz elemeiket helyezik el a megtekintett oldalon.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0430\u044f \u043a\u043b\u0438\u043a\u0434\u0436\u0435\u043a\u0438\u043d\u0433 | ProHoster","og:description":"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEF CON 33 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u0432\u043e\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/ataka-na-brauzernye-dopolneniya-s-menedzherami-parolej-ispolzuyushhaya-klikdzheking","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-08-24T09:11:59+00:00","article:modified_time":"2026-01-24T15:56:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"141439","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 14:25:19","updated":"2026-02-09 15:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/141439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=141439"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/141439\/revisions"}],"predecessor-version":[{"id":158486,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/141439\/revisions\/158486"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/141440"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=141439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=141439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=141439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}