{"id":78074,"date":"2020-04-16T07:41:56","date_gmt":"2020-04-16T05:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov"},"modified":"2020-04-16T07:41:56","modified_gmt":"2020-04-16T05:41:56","slug":"v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov","title":{"rendered":"W Chrome Web Store zidentyfikowano 49 dodatk\u00f3w, kt\u00f3re przechwytuj\u0105 klucze do portfeli kryptowalutowych","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Firmy MyCrypto i PhishFort ujawnili<\/a><\/noindex> w katalogu Chrome Web Store 49 z\u0142o\u015bliwych dodatk\u00f3w, kt\u00f3re wysy\u0142a\u0142y klucze i has\u0142a do portfeli kryptowalut na serwery przest\u0119pc\u00f3w. Dodatki by\u0142y rozpowszechniane przy u\u017cyciu metod reklam phishingowych i przedstawiane jako realizacje r\u00f3\u017cnych portfeli kryptowalut. Dodatki opiera\u0142y si\u0119 na kodzie oficjalnych portfeli, ale zawiera\u0142y z\u0142o\u015bliwe modyfikacje, kt\u00f3re wysy\u0142a\u0142y klucze prywatne, kody odzyskiwania i pliki z kluczami. <\/p>\n

W przypadku niekt\u00f3rych dodatk\u00f3w sztucznie utrzymywano pozytywn\u0105 ocen\u0119 przy pomocy fikcyjnych u\u017cytkownik\u00f3w oraz publikowano pozytywne recenzje. Firma Google usun\u0119\u0142a wymienione dodatki z katalogu Chrome Web Store w ci\u0105gu 24 godzin od zg\u0142oszenia. Publikacja pierwszych z\u0142o\u015bliwych dodatk\u00f3w rozpocz\u0119\u0142a si\u0119 w lutym, ale szczyt przypad\u0142 na marzec (34,69%) i kwiecie\u0144 (63,26%).<\/p>\n

Tworzenie wszystkich dodatk\u00f3w wi\u0105\u017ce si\u0119 z jedn\u0105 grup\u0105 atakuj\u0105cych, kt\u00f3ra uruchomi\u0142a 14 serwer\u00f3w do zarz\u0105dzania z\u0142o\u015bliwym kodem oraz zbierania danych przechwyconych przez dodatki. We wszystkich dodatkach u\u017cyto standardowego z\u0142o\u015bliwego kodu, ale same dodatki kamuflowano pod r\u00f3\u017cne produkty, w tym<\/a><\/noindex> Ledger (57% z\u0142o\u015bliwych dodatk\u00f3w), MyEtherWallet (22%), Trezor (8%), Electrum (4%), KeepKey (4%), Jaxx (2%), MetaMask i Exodus.
\n W trakcie pocz\u0105tkowej konfiguracji dodatk\u00f3w dane by\u0142y wysy\u0142ane na zewn\u0119trzny serwer i po pewnym czasie \u015brodki by\u0142y \u015bci\u0105gane z portfela.<\/p>\n

\r\n \"Odtwarzaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 MyCrypto \u0438 PhishFort \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Chrome Web Store 49 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043b\u044e\u0447\u0438 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u0414\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0438 \u043f\u0440\u0435\u043f\u043e\u0434\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442. \u0414\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043a\u043e\u0434\u0435 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432, \u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0438\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u043a\u043e\u0434\u043e\u0432 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78074","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47W Chrome Web Store zidentyfikowano 49 dodatk\u00f3w, kt\u00f3re przechwytuj\u0105 klucze do portfeli kryptowalut | ProHoster","description":"Firmy MyCrypto i PhishFort zidentyfikowa\u0142y w katalogu Chrome Web Store 49 z\u0142o\u015bliwych dodatk\u00f3w, kt\u00f3re wysy\u0142a\u0142y klucze.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome Web Store \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 49 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043a\u043b\u044e\u0447\u0438 \u043e\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 MyCrypto \u0438 PhishFort \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Chrome Web Store 49 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u043b\u044e\u0447\u0438.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-chrome-web-store-vyyavleno-49-dopolnenij-perehvatyvayushhih-klyuchi-ot-kriptokoshelkov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-16T05:41:56+00:00","article:modified_time":"2020-04-16T05:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78074","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:06:36","updated":"2022-09-28 14:56:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/78074","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=78074"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/78074\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=78074"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=78074"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=78074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}