{"id":145782,"date":"2025-10-19T23:11:55","date_gmt":"2025-10-19T21:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po"},"modified":"2026-02-09T17:18:08","modified_gmt":"2026-02-09T15:18:08","slug":"vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","title":{"rendered":"Hack del sito Xubuntu con sostituzione dei link nella pagina di download con malware","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Il sito ufficiale della distribuzione Xubuntu \u00e8 stato compromesso da ignoti malintenzionati, i quali hanno modificato i collegamenti alla pagina di download del software, sostituendoli con un file \"https:\/\/xubuntu.org\/wp-content\/Xubuntu-Safe-Download.zip\". Di conseguenza, sulla pagina di download rimangono solo collegamenti a un archivio dannoso e specchi disponibili. Gli sviluppatori di Xubuntu non hanno ancora commentato la situazione, ma poche ore fa hanno rimosso l'archivio dannoso e bloccato l'accesso alla sezione \"xubuntu.org\/download\/\", dirigendo gli utenti alla pagina principale del sito. <\/p>\n

Il servizio archive.org ha effettuato delle copie di xubuntu.org l'11 e il 18 ottobre: l'11 ottobre la pagina non era ancora stata modificata, mentre il 18 ottobre la pagina presenta gi\u00e0 la modifica dannosa. Gli specchi del progetto, attraverso i quali vengono distribuite le immagini iso, a giudicare dall'analisi preliminare dei checksum, non sono stati compromessi e corrispondono a cdimage.ubuntu.com. Al momento, segni di compromissione sono stati notati solo sul sito xubuntu.org. il sistema di gestione dei contenuti WordPress<\/a>. Si presume che l'attacco sia stato eseguito tramite un plug-in non aggiornato per WordPress, contenente una vulnerabilit\u00e0. <\/p>\n

L'archivio \"Xubuntu-Safe-Download.zip\" distribuito dai malintenzionati contiene un file eseguibile per la piattaforma Windows, presentato come installatore di Xubuntu. Il controllo del file indicato sul servizio VirusTotal mostra la presenza di malware. <\/p>\n

All'avvio del file eseguibile viene visualizzata un'interfaccia fittizia, che include campi per selezionare la versione del software da scaricare e il tipo di pacchetto, oltre a un pulsante \"Generate Download Link\". Cliccando su questo pulsante, viene salvato un file \"elzvcf.exe\" nella cartella \"AppData Roaming\" e nel registro di Windows viene configurato il suo avvio all'accensione del sistema. Secondo le informazioni preliminari, il malware analizza i dati negli appunti e sostituisce gli indirizzi dei portafogli Bitcoin, Litecoin, Ethereum, Dogecoin, Tron, Ripple e Cardano con quelli dei malintenzionati.

\"Hack<\/center> <\/p>\n

\u00c8 interessante notare che il 10 settembre uno degli utenti ha segnalato l'apparizione di un post sul blog del sito xubuntu.org con pubblicit\u00e0 di un casin\u00f2, ma tale post \u00e8 stato rapidamente rimosso e l'incidente non ha avuto seguito (si presume che sia stato considerato che la pubblicit\u00e0 fosse stata inserita dal malware sul lato dell'utente).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Xubuntu \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u044b, \u043d\u0430 \u0444\u0430\u0439\u043b «https:\/\/xubuntu.org\/wp-content\/Xubuntu-Safe-Download.zip». \u0412 \u0438\u0442\u043e\u0433\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0437\u0435\u0440\u043a\u0430\u043b\u0430. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Xubuntu \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u043e\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043d\u0430\u0437\u0430\u0434 \u0443\u0434\u0430\u043b\u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u0437\u0434\u0435\u043b\u0443 «xubuntu.org\/download\/», \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0432 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":145783,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-145782","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hacking del sito Xubuntu con sostituzione dei link sulla pagina di download con malware | ProHoster","description":"Il sito ufficiale della distribuzione Xubuntu \u00e8 stato compromesso da ignoti malintenzionati, che hanno modificato i link sulla pagina di download della distribuzione, sostituendoli con un file di torrent.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0430\u0439\u0442\u0430 Xubuntu \u0441 \u0437\u0430\u043c\u0435\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043e\u043a \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster","og:description":"\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Xubuntu \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043d\u0430 \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u044b, \u043d\u0430 \u0444\u0430\u0439\u043b.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/vzlom-sajta-xubuntu-s-zamenoj-ssylok-na-stranicze-zagruzki-na-vredonosnoe-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-19T21:11:55+00:00","article:modified_time":"2026-02-09T15:18:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"145782","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 15:18:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:26:19","updated":"2026-02-09 15:18:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/145782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=145782"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/145782\/revisions"}],"predecessor-version":[{"id":158408,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/145782\/revisions\/158408"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/145783"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=145782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=145782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=145782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}