{"id":154289,"date":"2026-01-19T17:11:55","date_gmt":"2026-01-19T15:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami"},"modified":"2026-01-19T17:11:55","modified_gmt":"2026-01-19T15:11:55","slug":"zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","title":{"rendered":"Przej\u0119cie kontroli nad pakietami snap zwi\u0105zanymi z wygas\u0142ymi domenami","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Alan Pope, by\u0142y mened\u017cer ds. in\u017cynierii i wsp\u00f3\u0142pracy z spo\u0142eczno\u015bci\u0105 w firmie Canonical, zwr\u00f3ci\u0142 uwag\u0119 na now\u0105 fal\u0119 atak\u00f3w na u\u017cytkownik\u00f3w katalogu aplikacji Snap Store. Zamiast rejestrowa\u0107 nowe konta, cyberprzest\u0119pcy zacz\u0119li wykupowa\u0107 wygas\u0142e domeny zwi\u0105zane z emailami zarejestrowanych deweloper\u00f3w snap-pakiet\u00f3w. Po przej\u0119ciu domeny, przest\u0119pcy przekierowuj\u0105 ruch e-mailowy na w\u0142asny serwer i, uzyskuj\u0105c kontrol\u0119 nad kontem email, inicjuj\u0105 proces resetowania zapomnianego has\u0142a dost\u0119pu do konta. <\/p>\n

Zdobywaj\u0105c kontrol\u0119 nad istniej\u0105cym kontem, atakuj\u0105cy mog\u0105 zamie\u015bci\u0107 z\u0142o\u015bliw\u0105 aktualizacj\u0119 wcze\u015bniej opublikowanych zaufanych aplikacji, omijaj\u0105c zaawansowane kontrole stosowane dla nowych uczestnik\u00f3w oraz unikaj\u0105c dodawania ostrze\u017ce\u0144 dotycz\u0105cych nowych projekt\u00f3w. Alan Pope zidentyfikowa\u0142 co najmniej dwie domeny (enstorewise.tech i vagueentertainment.com), kt\u00f3re zosta\u0142y przej\u0119te przez przest\u0119pc\u00f3w w celu zdobycia kont, ale przypuszcza si\u0119, \u017ce takich przypadk\u00f3w jest znacznie wi\u0119cej. <\/p>\n

W przesz\u0142o\u015bci przest\u0119pcy ograniczali si\u0119 do rejestrowania w\u0142asnych kont, z kt\u00f3rych publikowali z\u0142o\u015bliwe pakiety udaj\u0105ce oficjalne zestawy popularnych program\u00f3w lub u\u017cywali nazw podobnych do ju\u017c istniej\u0105cych pakiet\u00f3w (typowanie). W odpowiedzi firma Canonical wprowadzi\u0142a r\u0119czn\u0105 kontrol\u0119 nowych nazw pakiet\u00f3w po raz pierwszy umieszczanych w Snap Store. Po tym, g\u0142\u00f3wna aktywno\u015b\u0107 dystrybutor\u00f3w z\u0142o\u015bliwego oprogramowania skupi\u0142a si\u0119 na publikowaniu oryginalnych pakiet\u00f3w, ich promowaniu w mediach spo\u0142eczno\u015bciowych i publikacji po pewnym czasie z\u0142o\u015bliwej aktualizacji pr\u00f3buj\u0105cej obej\u015b\u0107 istniej\u0105ce w Snap Store automatyczne kontrole i filtry. <\/p>\n

Teraz wektor ataku przesun\u0105\u0142 si\u0119 w kierunku wykupu wygas\u0142ych domen, poniewa\u017c w repozytorium Snap Store nie wprowadzono weryfikacji aktualno\u015bci nazw domen<\/a>, u\u017cywanych w adresach email. W zesz\u0142ym roku podobny problem napotka\u0142o repozytorium PyPI (Python Package Index), kt\u00f3re zacz\u0119\u0142o automatycznie przek\u0142ada\u0107 emaile z wygas\u0142ymi domenami w stan niepotwierdzony. W PyPI zablokowano ponad 1800 takich adres\u00f3w email.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u043b\u0430\u043d \u041f\u043e\u0443\u043f (Alan Pope), \u0431\u044b\u0432\u0448\u0438\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e \u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0443 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044e \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Canonical, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Snap Store. \u0412\u043c\u0435\u0441\u0442\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0432\u044b\u043a\u0443\u043f\u0430\u0442\u044c \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b, \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432 email \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 snap-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u043a\u0443\u043f\u043a\u0438 \u0434\u043e\u043c\u0435\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-154289","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Przej\u0119cie kontroli nad snap-pakietami zwi\u0105zanymi z przeterminowanymi domenami | ProHoster","description":"Alan Pope, by\u0142y mened\u017cer ds. in\u017cynierii i relacji z spo\u0142eczno\u015bci\u0105 w firmie Canonical, zwr\u00f3ci\u0142 uwag\u0119 na now\u0105 fal\u0119 atak\u00f3w na u\u017cytkownik\u00f3w katalogu aplikacji Snap Store.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0445\u0432\u0430\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 snap-\u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 | ProHoster","og:description":"\u0410\u043b\u0430\u043d \u041f\u043e\u0443\u043f (Alan Pope), \u0431\u044b\u0432\u0448\u0438\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e \u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0443 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044e \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Canonical, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Snap Store.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-01-19T15:11:55+00:00","article:modified_time":"2026-01-19T15:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"154289","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:56:45","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 14:16:45","updated":"2026-02-08 20:56:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/154289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=154289"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/154289\/revisions"}],"predecessor-version":[{"id":158116,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/154289\/revisions\/158116"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=154289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=154289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=154289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}