{"id":154289,"date":"2026-01-19T17:11:55","date_gmt":"2026-01-19T15:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami"},"modified":"2026-01-19T17:11:55","modified_gmt":"2026-01-19T15:11:55","slug":"zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","title":{"rendered":"Captura controlului asupra pachetelor snap legate de domeniile expirate","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Alan Pope, fost manager de inginerie \u0219i rela\u021bii cu comunitatea la Canonical, a atras aten\u021bia asupra unei noi serii de atacuri \u00eempotriva utilizatorilor din catalogul de aplica\u021bii Snap Store. \u00cen loc s\u0103 \u00eenregistreze noi conturi, atacatorii au \u00eenceput s\u0103 achizi\u021bioneze domenii expirate asociate cu adresele de email ale dezvoltatorilor \u00eenregistra\u021bi ai pachetelor snap. Dup\u0103 achizi\u021bia domeniului, atacatorii redirec\u021bioneaz\u0103 traficul de email c\u0103tre serverul lor \u0219i, ob\u021bin\u00e2nd controlul asupra emailului, ini\u021biaz\u0103 procesul de recuperare a parolei uitate pentru accesul la cont. <\/p>\n

Ob\u021bin\u00e2nd controlul asupra contului existent, atacatorii pot publica actualiz\u0103ri mali\u021bioase pentru aplica\u021biile de \u00eencredere care au fost anterior publicate, ocolind verific\u0103rile extinse aplicate noilor participan\u021bi \u0219i evit\u00e2nd ad\u0103ugarea de etichete de avertizare pentru proiectele noi. Alan Pope a identificat cel pu\u021bin dou\u0103 domenii (enstorewise.tech \u0219i vagueentertainment.com) achizi\u021bionate de atacatori pentru a captura conturi, dar se estimeaz\u0103 c\u0103 sunt mult mai multe astfel de cazuri. <\/p>\n

\u00cen trecut, atacatorii se limitau la \u00eenregistrarea propriilor conturi prin care publicau pachete mali\u021bioase care se d\u0103deau drept versiuni oficiale ale unor programe populare, sau foloseau nume asem\u0103n\u0103toare cu pachetele deja existente (typosquatting). Ca r\u0103spuns, Canonical a implementat o verificare manual\u0103 a noilor nume de pachete publicate pentru prima dat\u0103 \u00een Snap Store. Dup\u0103 aceasta, activitatea principal\u0103 a distribuitorilor de malware s-a concentrat pe publicarea pachetelor originale, promovarea lor pe re\u021belele sociale \u0219i publicarea, dup\u0103 un timp, a unei actualiz\u0103ri mali\u021bioase care \u00eencerca s\u0103 ocoleasc\u0103 verific\u0103rile automate \u0219i filtrele existente \u00een Snap Store. <\/p>\n

Acum, vectorul atacului s-a mutat c\u0103tre achizi\u021bia domeniilor expirate, \u00eentruc\u00e2t \u00een depozitul Snap Store nu a fost implementat\u0103 o verificare a actualit\u0103\u021bii nume de domeniu<\/a>, folosite \u00een adresele de email. Anul trecut, depozitul PyPI (Python Package Index) s-a confruntat cu o problem\u0103 similar\u0103, care a \u00eenceput s\u0103 transforme automat emailurile cu domenii expirate \u00een stare neconfirmat\u0103. \u00cen PyPI, au fost blocate peste 1800 de astfel de adrese de email.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u043b\u0430\u043d \u041f\u043e\u0443\u043f (Alan Pope), \u0431\u044b\u0432\u0448\u0438\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e \u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0443 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044e \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Canonical, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Snap Store. \u0412\u043c\u0435\u0441\u0442\u043e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0432\u044b\u043a\u0443\u043f\u0430\u0442\u044c \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b, \u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432 email \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 snap-\u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u043a\u0443\u043f\u043a\u0438 \u0434\u043e\u043c\u0435\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-154289","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Preluarea controlului asupra pachetelor snap legate de domenii expirate | ProHoster","description":"Alan Pope, fost manager de inginerie \u0219i interac\u021biune cu comunitatea la Canonical, a observat o nou\u0103 serie de atacuri asupra utilizatorilor din catalogul aplica\u021biilor Snap Store.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0445\u0432\u0430\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 snap-\u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 | ProHoster","og:description":"\u0410\u043b\u0430\u043d \u041f\u043e\u0443\u043f (Alan Pope), \u0431\u044b\u0432\u0448\u0438\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e \u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433\u0443 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044e \u0441 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Canonical, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Snap Store.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/zahvat-kontrolya-nad-snap-paketami-svyazannymi-s-prosrochennymi-domenami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-01-19T15:11:55+00:00","article:modified_time":"2026-01-19T15:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"154289","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:56:45","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 14:16:45","updated":"2026-02-08 20:56:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/154289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=154289"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/154289\/revisions"}],"predecessor-version":[{"id":158116,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/154289\/revisions\/158116"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=154289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=154289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=154289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}