{"id":42231,"date":"2019-03-18T00:00:00","date_gmt":"2019-03-17T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov"},"modified":"2020-02-18T13:45:03","modified_gmt":"2020-02-18T10:45:03","slug":"uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","title":{"rendered":"Uma vulnerabilidade de 19 anos no WinRAR j\u00e1 est\u00e1 sendo explorada por mais de cem exploits","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Uma ferramenta t\u00e3o antiga e popular como o WinRAR, como foi revelado no m\u00eas passado, esteve vulner\u00e1vel a um erro que poderia ser facilmente explorado por hackers e distribuidores de malware durante os \u00faltimos 19 anos. Felizmente, o software foi corrigido na recente vers\u00e3o 5.70. No entanto, muitos usu\u00e1rios n\u00e3o atualizam o programa h\u00e1 muito tempo e fazem isso raramente, ent\u00e3o atualmente uma nova onda de malware est\u00e1 explorando esse problema.<\/p>\n

\"Uma<\/p>\n

Pesquisadores de seguran\u00e7a da Check Point, que descobriram a vulnerabilidade, explicaram que o erro no compactador est\u00e1 sendo explorado atrav\u00e9s da distribui\u00e7\u00e3o de arquivos maliciosos com extens\u00e3o RAR, que ao serem abertos podem extrair automaticamente c\u00f3digo malicioso. Esses programas s\u00e3o instalados na pasta de inicializa\u00e7\u00e3o do PC, operando sempre que o computador est\u00e1 ligado, tudo isso sem o conhecimento do usu\u00e1rio.<\/p>\n

\r\n \"Por\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Assim que a falha foi descoberta, grupos de hackers come\u00e7aram a us\u00e1-la em seus pr\u00f3prios interesses, e v\u00e1rios pa\u00edses se tornaram alvo de campanhas de ciberespionagem, tentando coletar informa\u00e7\u00f5es de intelig\u00eancia. A empresa McAfee, especializada em seguran\u00e7a de software, observou que mais de 100 exploits \u00fanicos j\u00e1 foram detectados, muitos dos quais visam os EUA.<\/p>\n

<\/center><\/p>\n

Os distribuidores de malware est\u00e3o bem cientes da popularidade do WinRAR entre aqueles que preferem baixar ilegalmente diversos arquivos de m\u00eddia. A McAfee observa que um dos exploits mais populares \u00e9 direcionado a quem busca c\u00f3pias piratas do \u00faltimo \u00e1lbum de Ariana Grande - Thank U, Next.<\/p>\n

<\/p>\n
\n

O exploit WinRAR (#CVE-2018-20250) amostra (united nations .rar) parece estar direcionado ao Oriente M\u00e9dio. Embutido com documentos isca relacionados aos Direitos Humanos da ONU e ao #UN em \u00e1rabe, ele finalmente baixa e executa o #Revenge RAT. https:\/\/t.co\/WJ4oJ1UxAz pic.twitter.com\/fgHYSD4Mk5<\/p>\n

- 360 Threat Intelligence Center (@360TIC) 12 de mar\u00e7o de 2019.<\/p><\/blockquote>\n

<\/center><\/p>\n

Claro, o utilit\u00e1rio WinRAR hoje j\u00e1 n\u00e3o \u00e9 t\u00e3o popular como era h\u00e1 muitos anos, mas, como o n\u00famero de seus usu\u00e1rios atingiu 500 milh\u00f5es ao longo de quase 20 anos, \u00e9 imposs\u00edvel dizer quantos sistemas ainda permanecem vulner\u00e1veis a esse ataque. Al\u00e9m disso, embora a vers\u00e3o 5.70 tenha sido lan\u00e7ada no final de janeiro, \u00e9 necess\u00e1rio baix\u00e1-la e instal\u00e1-la manualmente a partir do site oficial, fazendo com que a maioria dos usu\u00e1rios sequer saiba sobre a atualiza\u00e7\u00e3o cr\u00edtica.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center><\/p>\n

Fonte: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u043e\u043b\u044c \u0441\u0442\u0430\u0440\u0430\u044f \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u0430, \u043a\u0430\u043a WinRAR, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 19 \u043b\u0435\u0442 \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 5.70. \u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u043e \u0440\u0435\u0434\u043a\u043e, \u0442\u0430\u043a \u0447\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":42232,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-42231","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A vulnerabilidade de 19 anos no WinRAR j\u00e1 est\u00e1 sendo explorada por mais de cem exploits | ProHoster","description":"Um utilit\u00e1rio t\u00e3o antigo e popular como o WinRAR, como foi revelado no m\u00eas passado, esteve vulner\u00e1vel por uma falha nos \u00faltimos 19 anos, que pode ser facilmente explorada por hackers e distribuidores de malware.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 19-\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 WinRAR \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0441\u043e\u0442\u043d\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0421\u0442\u043e\u043b\u044c \u0441\u0442\u0430\u0440\u0430\u044f \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u0430, \u043a\u0430\u043a WinRAR, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 19 \u043b\u0435\u0442 \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-03-17T21:00:00+00:00","article:modified_time":"2020-02-18T10:45:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42231","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 07:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:04:28","updated":"2026-01-22 07:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/42231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=42231"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/42231\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/42232"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=42231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=42231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=42231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}