{"id":33006,"date":"2019-10-31T21:50:14","date_gmt":"2019-10-31T18:50:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev\/"},"modified":"2019-10-31T21:50:14","modified_gmt":"2019-10-31T18:50:14","slug":"haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev","title":{"rendered":"Hacker exige resgate para a recupera\u00e7\u00e3o de reposit\u00f3rios Git perdidos.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Fontes internacionais relatam que centenas de desenvolvedores descobriram a falta de c\u00f3digo em seus reposit\u00f3rios do Git. Um hacker desconhecido amea\u00e7a publicar o c\u00f3digo se suas demandas de resgate n\u00e3o forem atendidas no prazo estipulado. Relat\u00f3rios sobre os ataques apareceram no s\u00e1bado. Evidentemente, eles foram coordenados atrav\u00e9s de para PrestaShop<\/a>-servi\u00e7os Git (GitHub, Bitbucket, GitLab). Ainda n\u00e3o est\u00e1 claro como os ataques foram realizados.<\/p>\n

Relata-se que o hacker est\u00e1 removendo todo o c\u00f3digo-fonte do reposit\u00f3rio e deixando uma mensagem solicitando um resgate de 0,1 bitcoin, o que \u00e9 aproximadamente $570. O hacker tamb\u00e9m informou que todo o c\u00f3digo foi salvo e est\u00e1 em um de seus servidores<\/a>. Se o resgate n\u00e3o for pago em 10 dias, promete liberar o c\u00f3digo roubado ao p\u00fablico.<\/p>\n

\"Hacker<\/p>\n

De acordo com o site BitcoinAbuse.com, que monitora endere\u00e7os de bitcoin envolvidos em atividades suspeitas, nas \u00faltimas 24 horas, foram registradas 27 den\u00fancias para o endere\u00e7o mencionado, cada uma contendo o mesmo texto.<\/p>\n

<\/center><\/p>\n

Parte dos usu\u00e1rios que foram atacados pelo hacker desconhecido relataram que usavam senhas inadequadas para suas contas, al\u00e9m de n\u00e3o terem removido tokens de acesso para aplicativos que n\u00e3o eram utilizados h\u00e1 muito tempo. Aparentemente, o hacker realizou uma varredura na rede buscando arquivos de configura\u00e7\u00e3o do Git, cuja descoberta permitiu acessar credenciais de usu\u00e1rios.<\/p>\n

A diretora de seguran\u00e7a do GitLab, Kathy Wang, confirmou a exist\u00eancia do problema, dizendo que a investiga\u00e7\u00e3o do incidente come\u00e7ou ontem, quando a primeira reclama\u00e7\u00e3o do usu\u00e1rio foi recebida. Ela tamb\u00e9m informou que as contas comprometidas foram identificadas e seus propriet\u00e1rios j\u00e1 foram notificados. O trabalho realizado ajudou a confirmar a suspeita de que os afetados usavam senhas inadequadas. Os usu\u00e1rios s\u00e3o aconselhados a utilizar ferramentas especiais de gerenciamento de senhas, bem como autentica\u00e7\u00e3o em duas etapas, para evitar problemas semelhantes no futuro.<\/p>\n

\"Hacker<\/p>\n

Os participantes do f\u00f3rum StackExchange estudaram a situa\u00e7\u00e3o e chegaram \u00e0 conclus\u00e3o de que o hacker n\u00e3o est\u00e1 excluindo todo o c\u00f3digo, mas sim alterando os cabe\u00e7alhos dos commits do Git. Isso significa que, em alguns casos, os usu\u00e1rios poder\u00e3o recuperar o c\u00f3digo perdido. Recomenda-se que os usu\u00e1rios enfrentando o problema entrem em contato com o suporte dos servi\u00e7os.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u043e\u0442\u043d\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0447\u0435\u0437\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0438\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445. \u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0434, \u0435\u0441\u043b\u0438 \u0435\u0433\u043e \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043e \u0432\u044b\u043a\u0443\u043f\u0435 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u0432 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u0441\u0440\u043e\u043a. \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443. \u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u043d\u0438 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0445\u043e\u0441\u0442\u0438\u043d\u0433-\u0441\u0435\u0440\u0432\u0438\u0441\u044b Git (GitHub, Bitbucker, GitLab). \u0412\u0441\u0451 \u0435\u0449\u0435 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u043d\u044f\u0442\u043d\u044b\u043c, \u043a\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24764,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33006","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hacker exige resgate para a recupera\u00e7\u00e3o de reposit\u00f3rios Git exclu\u00eddos | ProHoster","description":"Fontes de redes informam que centenas de desenvolvedores descobriram o desaparecimento de c\u00f3digo em seus reposit\u00f3rios Git.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u0430\u043a\u0435\u0440 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u044b\u043a\u0443\u043f \u0437\u0430 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 | ProHoster","og:description":"\u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u043e\u0442\u043d\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0447\u0435\u0437\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0438\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/haker-trebuet-vykup-za-vosstanovlenie-udalyonnyh-git-repozitoriev","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:50:14+00:00","article:modified_time":"2019-10-31T18:50:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33006","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 20:17:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:48:29","updated":"2026-02-09 20:17:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/33006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=33006"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/33006\/revisions"}],"predecessor-version":[{"id":159591,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/33006\/revisions\/159591"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/24764"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=33006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=33006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=33006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}