{"id":106247,"date":"2022-12-23T15:36:48","date_gmt":"2022-12-23T13:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass"},"modified":"2022-12-23T15:36:48","modified_gmt":"2022-12-23T13:36:48","slug":"utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","title":{"rendered":"Fuga di backup con dati utente di LastPass","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Gli sviluppatori del gestore di password LastPass, utilizzato da oltre 33 milioni di persone e pi\u00f9 di 100 mila aziende, hanno avvisato gli utenti di un incidente che ha permesso agli aggressori di accedere alle copie di backup del deposito contenente i dati degli utenti del servizio. I dati includevano informazioni come nome utente, indirizzo, email, telefono e indirizzi IP da cui si \u00e8 effettuato l'accesso al servizio, insieme ai nomi dei siti non crittografati memorizzati nel gestore di password, e le credenziali, le password, i dati dei moduli e le note sui siti memorizzati in forma crittografata. <\/p>\n

Per proteggere i nomi utente e le password dei siti \u00e8 stata utilizzata la crittografia AES con una chiave a 256 bit, generata utilizzando la funzione PBKDF2 basata su una password principale nota solo all'utente, di almeno 12 caratteri. La crittografia e la decrittazione di nomi utente e password in LastPass avviene esclusivamente lato utente, e la ricerca della password principale \u00e8 considerata irrealistica con l'hardware moderno, tenendo conto della lunghezza della password principale e del numero di iterazioni applicato con PBKDF2. <\/p>\n

Per effettuare l'attacco sono stati utilizzati i dati ottenuti dagli aggressori durante un precedente attacco avvenuto ad agosto, effettuato attraverso la compromissione dell'account di uno degli sviluppatori del servizio. L'hacking di agosto ha portato alla perdita del controllo su un ambiente di sviluppo, codice applicativo e informazioni tecniche. In seguito, \u00e8 emerso che gli aggressori hanno sfruttato i dati dall'ambiente di sviluppo per attaccare un altro sviluppatore, con il risultato di ottenere le chiavi di accesso al deposito cloud e le chiavi per decrittare i dati dai contenitori memorizzati l\u00ec. Nei cloud compromessi server<\/a> si trovavano copie di backup complete dei dati del servizio in uso.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 33 \u043c\u043b\u043d \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c \u043a\u043e\u043f\u0438\u044f\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u0414\u0430\u043d\u043d\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430\u0434\u0440\u0435\u0441, email, \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u0432\u0445\u043e\u0434 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106247","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fuga di backup con i dati degli utenti di LastPass | ProHoster","description":"Gli sviluppatori del gestore di password LastPass, utilizzato da oltre 33 milioni di persone e pi\u00f9 di 100 mila aziende, hanno avvisato gli utenti di un incidente che ha permesso agli aggressori di accedere ai backup.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 LastPass | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 33 \u043c\u043b\u043d \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-23T13:36:48+00:00","article:modified_time":"2022-12-23T13:36:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/106247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=106247"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/106247\/revisions"}],"predecessor-version":[{"id":164429,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/106247\/revisions\/164429"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=106247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=106247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=106247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}