{"id":33499,"date":"2019-10-31T21:52:57","date_gmt":"2019-10-31T18:52:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov\/"},"modified":"2019-10-31T21:52:57","modified_gmt":"2019-10-31T18:52:57","slug":"podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","title":{"rendered":"\u00cenlocuirea codului proiectelor Picreel \u0219i Alpaca Forms a dus la compromiterea a 4684 de site-uri","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cercet\u0103torul de securitate Willem de Groot a raportat<\/a><\/noindex>, ca urmare a atacului asupra infrastructurii, atacatorii au reu\u0219it s\u0103 integreze o inser\u021bie mali\u021bioas\u0103 \u00een codul sistemului de web-analitic\u0103 Picreel<\/a><\/noindex> \u0219i a platformei deschise pentru generarea formularelor web interactive Alpaca Forms<\/a><\/noindex>. \u00cenlocuirea codului JavaScript a dus la compromiterea a 4684 de site-uri care folosesc aceste sisteme (1249<\/a><\/noindex> \u2014 Picreel \u0219i 3435<\/a><\/noindex> \u2014 Alpaca Forms). <\/p>\n

Codul mali\u021bios<\/a><\/noindex> a colectat informa\u021bii despre completarea tuturor formularelor web de pe site-uri \u0219i putea, de asemenea, s\u0103 duc\u0103 la interceptarea informa\u021biilor de plat\u0103 \u0219i autentificare. Informa\u021biile interceptate erau trimise pe serverul font-assets.com sub aparen\u021ba unei cereri de imagini. Informa\u021biile cu privire la modul \u00een care infrastructura Picreel \u0219i re\u021beaua CDN pentru livrarea scriptului Alpaca Forms au fost compromise nu sunt disponibile momentan. Este cunoscut doar c\u0103, \u00een timpul atacului asupra Alpaca Forms, scripturile livrate prin re\u021beaua de livrare a con\u021binutului Cloud CMS au fost \u00eenlocuite. Inser\u021bia mali\u021bioas\u0103<\/a><\/noindex> a fost camuflat\u0103 sub un array de date \u00een versiunea minimizat\u0103<\/a><\/noindex> a scriptului (decriptarea codului poate fi vizualizat\u0103 aici<\/a><\/noindex>).<\/p>\n

\"\u00cenlocuirea<\/a><\/noindex><\/center><\/p>\n

. Printre utilizatorii proiectelor compromise se num\u0103r\u0103 multe companii mari, inclusiv Sony, Forbes, Trustico, FOX, ClassesUSA, 3Dcart, Saxo Bank, Foundr, RocketInternet, Sprit \u0219i Virgin Mobile. Av\u00e2nd \u00een vedere c\u0103 acesta nu este primul atac de acest tip (vezi incidentul<\/a><\/noindex> cu \u00eenlocuirea contorului StatCounter), administratorilor de site-uri li se recomand\u0103 s\u0103 fie foarte aten\u021bi \u00een privin\u021ba integr\u0103rii codului JavaScript de la ter\u021bi, \u00een special pe paginile legate de pl\u0103\u021bi \u0219i autentificare.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0438\u043b\u043b\u0435\u043c \u0434\u0435 \u0413\u0440\u043e\u043e\u0442 (Willem de Groot) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0441\u0442\u0430\u0432\u043a\u0443 \u0432 \u043a\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b web-\u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Picreel \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 web-\u0444\u043e\u0440\u043c Alpaca Forms. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 JavaScript-\u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 4684 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (1249 — Picreel \u0438 3435 — Alpaca Forms). \u0412\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25200,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33499","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cenlocuirea codului proiectelor Picreel \u0219i Alpaca Forms a dus la compromiterea a 4684 de site-uri | ProHoster","description":"Cercet\u0103torul de securitate Willem de Groot a raportat c\u0103, \u00een urma atacului asupra infrastructurii.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 Picreel \u0438 Alpaca Forms \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 4684 \u0441\u0430\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0438\u043b\u043b\u0435\u043c \u0434\u0435 \u0413\u0440\u043e\u043e\u0442 (Willem de Groot) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/podmena-koda-proektov-picreel-i-alpaca-forms-privela-k-komprometatsii-4684-sajtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:57+00:00","article:modified_time":"2019-10-31T18:52:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33499","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:31:39","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:23","updated":"2026-01-21 15:31:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33499","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=33499"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33499\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/25200"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=33499"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=33499"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=33499"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}