{"id":42231,"date":"2019-03-18T00:00:00","date_gmt":"2019-03-17T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov"},"modified":"2020-02-18T13:45:03","modified_gmt":"2020-02-18T10:45:03","slug":"uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","title":{"rendered":"Wykryto 19-letni\u0105 podatno\u015b\u0107 w WinRAR, kt\u00f3ra jest ju\u017c wykorzystywana przez ponad sto exploit\u00f3w.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tak stara i popularna aplikacja jak WinRAR, o kt\u00f3rej wiadomo by\u0142o w zesz\u0142ym miesi\u0105cu, by\u0142a przez ostatnie 19 lat nara\u017cona na b\u0142\u0105d, kt\u00f3ry hakerzy i rozpowszechniciele z\u0142o\u015bliwego oprogramowania mog\u0105 \u0142atwo wykorzysta\u0107. Na szcz\u0119\u015bcie oprogramowanie zosta\u0142o naprawione w niedawnej wersji 5.70. Jednak wielu u\u017cytkownik\u00f3w od dawna nie aktualizowa\u0142o programu i robi to w og\u00f3le rzadko, wi\u0119c teraz nowa fala z\u0142o\u015bliwego oprogramowania aktywnie korzysta z tej podatno\u015bci.<\/p>\n

\"Wykryto<\/p>\n

Badacze bezpiecze\u0144stwa z Check Point, kt\u00f3rzy odkryli t\u0119 podatno\u015b\u0107, wyja\u015bnili, \u017ce b\u0142\u0105d w archiwizatorze jest wykorzystywany poprzez rozpowszechnianie z\u0142o\u015bliwych archiw\u00f3w w formacie RAR, kt\u00f3re po otwarciu mog\u0105 automatycznie wydobywa\u0107 z\u0142o\u015bliwy kod. Te programy instaluj\u0105 si\u0119 w folderze autostartu komputera, a nast\u0119pnie dzia\u0142aj\u0105 w dowolnym momencie, gdy komputer jest w\u0142\u0105czony, a wszystko to dzieje si\u0119 bez wiedzy u\u017cytkownika.<\/p>\n

\r\n \"Odtwarzaj\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Gdy tylko b\u0142\u0105d zosta\u0142 ujawniony, grupy hakerskie zacz\u0119\u0142y go wykorzystywa\u0107 dla swoich interes\u00f3w, a r\u00f3\u017cne kraje sta\u0142y si\u0119 celem kampanii szpiegostwa komputerowego, maj\u0105cych na celu zebranie danych wywiadowczych. Firma McAfee zajmuj\u0105ca si\u0119 bezpiecze\u0144stwem oprogramowania zauwa\u017cy\u0142a, \u017ce odkryto ju\u017c ponad 100 unikalnych exploit\u00f3w wykorzystuj\u0105cych b\u0142\u0105d WinRAR \u2013 wi\u0119kszo\u015b\u0107 z nich jest skierowana na Stany Zjednoczone.<\/p>\n

<\/center><\/p>\n

Dystrybutorzy z\u0142o\u015bliwego oprogramowania doskonale zdaj\u0105 sobie spraw\u0119 z popularno\u015bci WinRAR w\u015br\u00f3d os\u00f3b preferuj\u0105cych nielegalne pobieranie r\u00f3\u017cnorodnych plik\u00f3w multimedialnych. McAfee zauwa\u017ca, \u017ce jeden z najpopularniejszych exploit\u00f3w jest skierowany do os\u00f3b poszukuj\u0105cych w sieci pirackich kopii najnowszego albumu Ariany Grande \u2013 Thank U, Next.<\/p>\n

<\/p>\n
\n

Przyk\u0142ad exploitacji WinRAR (#CVE-2018-20250) (united nations .rar) zdaje si\u0119 celowa\u0107 w Bliski Wsch\u00f3d. Zawiera dokumenty zastawione dotycz\u0105ce Praw Cz\u0142owieka ONZ i #UN w j\u0119zyku arabskim, kt\u00f3re ostatecznie pobieraj\u0105 i uruchamiaj\u0105 #Revenge RAT. https:\/\/t.co\/WJ4oJ1UxAz pic.twitter.com\/fgHYSD4Mk5<\/p>\n

\u2013 360 Threat Intelligence Center (@360TIC) 12 marca 2019 r.<\/p><\/blockquote>\n

<\/center><\/p>\n

Oczywi\u015bcie, narz\u0119dzie WinRAR nie jest ju\u017c tak popularne jak wiele lat temu, ale bior\u0105c pod uwag\u0119, \u017ce przez prawie 20 lat liczba jego u\u017cytkownik\u00f3w osi\u0105gn\u0119\u0142a 500 milion\u00f3w, nie da si\u0119 powiedzie\u0107, ile system\u00f3w wci\u0105\u017c pozostaje podatnych na ten atak. Ponadto, chocia\u017c wersja 5.70 zosta\u0142a wydana pod koniec stycznia, nale\u017cy j\u0105 pobra\u0107 i zainstalowa\u0107 r\u0119cznie z oficjalnej strony internetowej, co sprawia, \u017ce wi\u0119kszo\u015b\u0107 u\u017cytkownik\u00f3w nie jest \u015bwiadoma tego krytycznego aktualizacji.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center><\/p>\n

\u0179r\u00f3d\u0142o: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u043e\u043b\u044c \u0441\u0442\u0430\u0440\u0430\u044f \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u0430, \u043a\u0430\u043a WinRAR, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 19 \u043b\u0435\u0442 \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 5.70. \u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u043e \u0440\u0435\u0434\u043a\u043e, \u0442\u0430\u043a \u0447\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":42232,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-42231","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719-letnia luka w WinRAR jest ju\u017c wykorzystywana przez ponad 100 exploity | ProHoster","description":"Tak stara i popularna aplikacja jak WinRAR, jak si\u0119 dowiedzieli\u015bmy w zesz\u0142ym miesi\u0105cu, przez ostatnie 19 lat by\u0142a podatna na b\u0142\u0105d, kt\u00f3ry mo\u017ce by\u0107 \u0142atwo wykorzystany przez haker\u00f3w i dystrybutor\u00f3w z\u0142o\u015bliwego oprogramowania.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 19-\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 WinRAR \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0441\u043e\u0442\u043d\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0421\u0442\u043e\u043b\u044c \u0441\u0442\u0430\u0440\u0430\u044f \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u0430, \u043a\u0430\u043a WinRAR, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 19 \u043b\u0435\u0442 \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-03-17T21:00:00+00:00","article:modified_time":"2020-02-18T10:45:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42231","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 07:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:04:28","updated":"2026-01-22 07:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/42231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=42231"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/42231\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/42232"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=42231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=42231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=42231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}