{"id":170849,"date":"2026-05-18T00:24:45","date_gmt":"2026-05-17T22:24:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-linux-sborkah-emulyatora-cemu-obnaruzheno-vredonosnoe-po"},"modified":"2026-05-18T00:24:45","modified_gmt":"2026-05-17T22:24:46","slug":"v-linux-sborkah-emulyatora-cemu-obnaruzheno-vredonosnoe-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/v-linux-sborkah-emulyatora-cemu-obnaruzheno-vredonosnoe-po","title":{"rendered":"\u00c8 stato rilevato malware nelle versioni Linux dell'emulatore Cemu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23428\/original.png\">           <img decoding=\"async\" alt=\"\u00c8 stato rilevato malware nelle versioni Linux dell&#039;emulatore Cemu\" src=\"\/wp-content\/uploads\/2026\/05\/1f070363a0264dd8ef7bd2b9917cc2b9.jpg\" style=\"display:block;margin: 0 auto;\" \/>         <\/a>                <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23429\/original.jpg\">           <img decoding=\"async\" alt=\"\u00c8 stato rilevato malware nelle versioni Linux dell&#039;emulatore Cemu\" src=\"\/wp-content\/uploads\/2026\/05\/e7705df7d37a2ddb7bcd6f10343b1950.jpg\" style=\"display:block;margin: 0 auto;\" \/>         <\/a>                                              <noindex>          <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23428\/original.png\" class=\"active\"><\/a><\/noindex>                                                      <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23429\/original.jpg\"><\/a>                                     <\/p>\n<p>Tra il 6 e il 12 maggio 2026, le versioni ufficiali del popolare emulatore Wii U Cemu, versione 2.6, sono state compromesse. Invece di scaricare un programma pulito, gli utenti hanno scaricato malware che rubava password, chiavi SSH, token GitHub e credenziali dei servizi cloud. Gli aggressori sono riusciti a sostituire i file binari nel repository ufficiale del progetto su GitHub.<\/p>\n<p>Gli utenti a rischio sono quelli che hanno scaricato e avviato:<\/p>\n<ul>\n<li>Cemu-2.6-x86_64.AppImage (pacchetto portabile)<\/li>\n<li>cemu-2.6-ubuntu-22.04-x64.zip (archivio per Ubuntu)<\/li>\n<\/ul>\n<p><strong>Importante:<\/strong> La versione Flatpak dell'emulatore, le versioni per Windows e macOS non sono state colpite dall'attacco.<\/p>\n<p>Cemu \u00e8 un popolare emulatore per Nintendo Wii U che permette di eseguire giochi esclusivi, come The Legend of Zelda: Breath of the Wild, su computer personali. Il progetto \u00e8 stato creato nel 2015 dal developer olandese Exzap e inizialmente esisteva solo per Windows. Un momento cruciale \u00e8 arrivato nel 2022, quando Cemu ha reso il codice sorgente disponibile sotto licenza MPL 2.0, attirando nuovi contributori e permettendo di portare l'emulatore su Linux e macOS. Oggi Cemu \u00e8 scritto in C++ e pu\u00f2 emulare non solo la console principale, ma anche il GamePad, il Pro Controller e supporta l'input da tastiera e gamepad.<\/p>\n<p><strong>Dettagli sull'accaduto:<\/strong><\/p>\n<ul>\n<li><strong>Vettore di attacco:<\/strong> L'attacco \u00e8 avvenuto a livello della catena di fornitura (supply chain attack). Uno dei contributori del progetto ha accidentalmente eseguito un pacchetto Python compromesso, il che ha portato al furto del suo token di accesso GitHub. Utilizzando questo token, gli aggressori hanno sovrascritto automaticamente i file \u00abpuliti\u00bb di rilascio con file dannosi.<\/li>\n<li><strong>Pubblico target:<\/strong> Il codice \u00e8 destinato principalmente a sviluppatori e ingegneri DevOps. Il malware ruba dati di autenticazione da fornitori di cloud, sistemi di controllo versione e CI\/CD.<\/li>\n<li><strong>Il \u00absurprise\u00bb israeliano:<\/strong> \u00e8 stato identificato un modulo distruttivo per utenti israeliani. Se il sistema identifica la localizzazione e il fuso orario in Israele, c'\u00e8 una probabilit\u00e0 di 1 su 6 che si attivi un allarme sonoro e venga eseguita la comando rm -rf \/, tentando di eliminare tutti i dati sul disco.<\/li>\n<li><strong>Portata:<\/strong> Secondo le stime preliminari, i file infetti potrebbero essere stati scaricati quasi 20.000 volte.<\/li>\n<\/ul>\n<p><strong>Cosa fare<\/strong><\/p>\n<ul>\n<li>Ripristina tutto: Assicurati di cambiare tutte le password importanti, revoca e rigenera le chiavi SSH e i token GitHub che erano memorizzati nel sistema compromesso.<\/li>\n<li>Se hai eseguito una versione compromessa, il modo pi\u00f9 sicuro \u00e8 reinstallare il sistema operativo<\/li>\n<li>L'assenza di segni evidenti di infezione non garantisce sicurezza. Il malware ruba silenziosamente i dati, attualmente non conosciamo l'entit\u00e0 delle sue capacit\u00e0.<\/li>\n<\/ul>\n<p>Fonte: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18292461\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0448\u0435\u0441\u0442\u0438 \u0434\u043d\u0435\u0439 \u2014 \u0441 6 \u043f\u043e 12 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u2014 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 Linux-\u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 Wii U Cemu \u0432\u0435\u0440\u0441\u0438\u0438 2.6 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b. \u0412\u043c\u0435\u0441\u0442\u043e \u0447\u0438\u0441\u0442\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u043e\u0440\u043e\u0432\u0430\u043b\u043e \u043f\u0430\u0440\u043e\u043b\u0438, \u043a\u043b\u044e\u0447\u0438 SSH, \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430 GitHub. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":170850,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170849","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/v-linux-sborkah-emulyatora-cemu-obnaruzheno-vredonosnoe-po\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412 Linux-\u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 Cemu \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/v-linux-sborkah-emulyatora-cemu-obnaruzheno-vredonosnoe-po\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-17T22:24:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-17T22:24:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47In alcune build di Linux dell'emulatore Cemu \u00e8 stato scoperto del malware | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/v-linux-sborkah-emulyatora-cemu-obnaruzheno-vredonosnoe-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Linux-\u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 Cemu \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e | ProHoster","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/v-linux-sborkah-emulyatora-cemu-obnaruzheno-vredonosnoe-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-17T22:24:46+00:00","article:modified_time":"2026-05-17T22:24:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/170849","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=170849"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/170849\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/170850"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=170849"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=170849"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=170849"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}