He aha mena ka kii atu ahau ki a koe ko te mahi anake a tetahi o nga waahanga rorohiko wheori he waitohu mamati pono ko te kohi i o tohu katoa kei roto i nga kaitirotiro Ipurangi rongonui? Ka pehea ahau ki te kii ahau kaore he mea nui ki a ia na wai te hiahia ki te kohi? Ka whakaaro pea koe he pohehe ahau. Kia kite tatou he pehea te tino?
Te maramatanga
E ora ana, e ora ana he kamupene wheori penei . Ka whakaputa i nga momo hua e pa ana ki te haumarutanga korero. He hua kore utu mo te kainga.
Kia aro nui ki te putanga kore utu ka kite he aha nga hua o o tatou hoa Tiamana e mahi. Ka titiro tatou ki te atanga - kaore he mea rereke. Kaore matou e kite i tetahi korero mo tetahi atu o nga hua o te kamupene - Kaiwhakahaere Kupuhipa Avira.
Me titiro ki te waahanga me te ingoa kaore e aro mai "Avira.PWM.NativeMessaging.exe"? Kua whakahiatohia mo te papaaho .NET me te kore e whakapourihia, no reira ka utaina ki roto i te dnSpy me te ako noa i te waehere hotaka.
He kaupapa whakamaarama te hotaka me te tumanako ki nga whakahau i roto i te awa whakauru paerewa. Mahi matua ma te "A tai'oi" ka panui i nga raraunga mai i te awa, ka tirohia te whakatakotoranga me te tuku i te whakahau ki te mahi "Karere Tukatuka" Ka rite ano, ka tirotirohia ko te whakahau tuku "tikiChromePasswords"ranei"fetchCredentials" (ahakoa he aha te rerekee mena he rite tonu te whanonga atu?) katahi ka timata te waahanga tino pai - te karanga i te mahi "RetrieveBrowserCredentials" He mea whakamere ... he aha te mahi me taua ingoa?
Kaore he mea rereke, ka kohia ki te rarangi kotahi nga kaute kaiwhakamahi katoa i tiakina i te wa e mahi ana me nga kaitirotiro Ipurangi "Chrome", "Opera" (i runga i te Chromium), "Firefox" me "Edge" (i runga i te Chromium) me te whakahoki i nga raraunga hei ahanoa JSON.
Ana, ka whakaatu i nga raraunga kua kohia ki te papatohu:
Te take o te raru
- Ka kohia e te waahanga nga tohu tohu kaiwhakamahi;
- Kaore te waahanga e manatoko i te kaupapa waea (hei tauira, mena he waitohu mamati mai i te kaihanga ake);
- He waitohu mamati "whakawhirinaki" te waahanga me te kore e whakapae i etahi atu kaihanga rorohiko anti-huaketo;
- Ka rere te waahanga hei tono motuhake.
IoC
SHA1: 13c95241e671b98342dba51741fd02621768ecd5.
I tukuna te CVE-2020-12680 mo tenei putanga.
I te 07.04.2020/XNUMX/XNUMX i tukuna e au he reta mo tenei raru ki: [email tiakina] и [email tiakina] me te whakamaarama katoa. Kaore he reta whakautu, tae atu ki nga punaha aunoa. He marama i muri mai, ka tohatoha tonu te waahanga kua whakaahuahia ki te tohatoha Avira Free Antivirus.
Source: will.com