{"id":167267,"date":"2026-04-03T11:11:59","date_gmt":"2026-04-03T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/raskryty-podrobnosti-zahvata-uchyotnyh-dannyh-soprovozhdayushhego-npm-paket-axios"},"modified":"2026-04-03T11:11:59","modified_gmt":"2026-04-03T09:11:59","slug":"raskryty-podrobnosti-zahvata-uchyotnyh-dannyh-soprovozhdayushhego-npm-paket-axios","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/raskryty-podrobnosti-zahvata-uchyotnyh-dannyh-soprovozhdayushhego-npm-paket-axios","title":{"rendered":"Sono emersi dettagli sul furto delle credenziali del pacchetto NPM axios","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Il pacchetto NPM di supporto axios, per il quale sono stati rilasciati aggiornamenti dannosi nei giorni scorsi, ha svelato i dettagli dell'attacco che ha consentito agli aggressori di accedere al suo computer e a tutte le credenziali. L'attacco \u00e8 stato condotto utilizzando un metodo classico di ingegneria sociale, gi\u00e0 impiegato in precedenza per compromettere gli sviluppatori di wallet crittografici e piattaforme AI. <\/p>\n

L'aggressore si \u00e8 finto il fondatore di una nota azienda e ha proposto di organizzare un progetto congiunto. Inizialmente, il collaboratore \u00e8 stato invitato in uno spazio di lavoro Slack, che sembrava realistico, conteneva canali con messaggi da LinkedIn e aveva profili falsi di dipendenti dell'azienda e rappresentanti di altri progetti aperti. <\/p>\n

Dopo un po', \u00e8 stata organizzata una riunione di gruppo sulla piattaforma MS Teams. Durante l'incontro si sono verificati problemi tecnici, attribuiti all'assenza del componente necessario da parte del collaboratore. Il collaboratore ha installato il componente mancante, che in realt\u00e0 si \u00e8 rivelato essere un trojan, fornendo agli aggressori accesso remoto al sistema. Si segnala che tutto \u00e8 stato professionalmente orchestrato e sembrava credibile.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 NPM-\u043f\u0430\u043a\u0435\u0442 axios, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0435\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0443 \u0438 \u0432\u0441\u0435\u043c \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u043c. \u0410\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0438\u043f\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 \u0438 AI-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u0434\u0430\u043b \u0441\u0435\u0431\u044f \u0437\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-167267","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dettagli svelati sulla cattura delle credenziali del collaboratore del pacchetto NPM axios | ProHoster","description":"Il pacchetto NPM di supporto axios, per il quale sono stati rilasciati aggiornamenti dannosi nei giorni scorsi, ha svelato i dettagli dell'attacco che ha consentito agli aggressori di accedere al suo computer e a tutte le credenziali.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/raskryty-podrobnosti-zahvata-uchyotnyh-dannyh-soprovozhdayushhego-npm-paket-axios","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e NPM-\u043f\u0430\u043a\u0435\u0442 axios | ProHoster","og:description":"\u0421\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 NPM-\u043f\u0430\u043a\u0435\u0442 axios, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0435\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0443 \u0438 \u0432\u0441\u0435\u043c \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u043c.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/raskryty-podrobnosti-zahvata-uchyotnyh-dannyh-soprovozhdayushhego-npm-paket-axios","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-03T09:11:59+00:00","article:modified_time":"2026-04-03T09:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/167267","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=167267"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/167267\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=167267"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=167267"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=167267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}