{"id":106247,"date":"2022-12-23T15:36:48","date_gmt":"2022-12-23T13:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass"},"modified":"2022-12-23T15:36:48","modified_gmt":"2022-12-23T13:36:48","slug":"utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","title":{"rendered":"Vazamento de backups com dados de usu\u00e1rios do LastPass","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Os desenvolvedores do gerenciador de senhas LastPass, que \u00e9 utilizado por mais de 33 milh\u00f5es de pessoas e mais de 100 mil empresas, notificaram os usu\u00e1rios sobre um incidente que permitiu que os hackers acessassem c\u00f3pias de seguran\u00e7a do armazenamento de dados dos usu\u00e1rios do servi\u00e7o. Os dados inclu\u00edam informa\u00e7\u00f5es como nome de usu\u00e1rio, endere\u00e7o, e-mail, telefone e endere\u00e7os IP usados para acessar o servi\u00e7o, bem como os nomes de sites armazenados no gerenciador de senhas em texto n\u00e3o criptografado, al\u00e9m de logins, senhas, dados de formul\u00e1rios e notas associados a esses sites, que estavam em formato criptografado. <\/p>\n

Para proteger logins e senhas dos sites, foi utilizada a criptografia AES com uma chave de 256 bits, gerada pela fun\u00e7\u00e3o PBKDF2 com base na senha mestra conhecida apenas pelo usu\u00e1rio, que cont\u00e9m pelo menos 12 caracteres. A criptografia e a descriptografia de logins e senhas no LastPass s\u00e3o realizadas apenas do lado do usu\u00e1rio, e a quebra da senha mestra \u00e9 considerada irrealista com o hardware moderno, considerando o tamanho da senha mestra e o n\u00famero de itera\u00e7\u00f5es aplicadas no PBKDF2. <\/p>\n

Para realizar o ataque, foram utilizados dados obtidos pelos hackers durante um ataque anterior realizado em agosto, que foi poss\u00edvel por meio da comprometimento de uma conta de um dos desenvolvedores do servi\u00e7o. O ataque de agosto levou os criminosos a acessarem o ambiente de desenvolvimento, o c\u00f3digo do aplicativo e informa\u00e7\u00f5es t\u00e9cnicas. Posteriormente, foi descoberto que os atacantes aproveitaram os dados do ambiente de desenvolvimento para atacar outro desenvolvedor, resultando na obten\u00e7\u00e3o de chaves de acesso ao armazenamento em nuvem e chaves para descriptografar dados dos containers armazenados l\u00e1. Nos containers comprometidos, servidores<\/a> estavam completas c\u00f3pias de seguran\u00e7a dos dados do servi\u00e7o em funcionamento.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 33 \u043c\u043b\u043d \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c \u043a\u043e\u043f\u0438\u044f\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u0414\u0430\u043d\u043d\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430\u0434\u0440\u0435\u0441, email, \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u0432\u0445\u043e\u0434 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106247","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vazamento de c\u00f3pias de seguran\u00e7a com dados de usu\u00e1rios do LastPass | ProHoster","description":"Os desenvolvedores do gerenciador de senhas LastPass, que \u00e9 utilizado por mais de 33 milh\u00f5es de pessoas e mais de 100 mil empresas, notificaram os usu\u00e1rios sobre um incidente que permitiu que os hackers acessassem.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 LastPass | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 33 \u043c\u043b\u043d \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-23T13:36:48+00:00","article:modified_time":"2022-12-23T13:36:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/106247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=106247"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/106247\/revisions"}],"predecessor-version":[{"id":164429,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/106247\/revisions\/164429"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=106247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=106247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=106247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}