{"id":42231,"date":"2019-03-18T00:00:00","date_gmt":"2019-03-17T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov"},"modified":"2020-02-18T13:45:03","modified_gmt":"2020-02-18T10:45:03","slug":"uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","title":{"rendered":"O vulnerabilitate veche de 19 ani \u00een WinRAR este deja utilizat\u0103 de peste o sut\u0103 de exploat\u0103ri","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un utilitar foarte vechi \u0219i popular, cum ar fi WinRAR, a fost vulnerabil timp de 19 ani la o eroare care putea fi exploatat\u0103 cu u\u0219urin\u021b\u0103 de hackeri \u0219i distribuitori de programe malware, dup\u0103 cum s-a descoperit luna trecut\u0103. Din fericire, aplica\u021bia a fost corectat\u0103 \u00een cea mai recent\u0103 versiune 5.70. Cu toate acestea, mul\u021bi utilizatori nu au actualizat de mult programul \u0219i \u00eel fac rar, astfel c\u0103 acum o nou\u0103 avalan\u0219\u0103 de malware profit\u0103 activ de aceast\u0103 problem\u0103.<\/p>\n

\"O<\/p>\n

Cercet\u0103torii \u00een securitate de la Check Point, care au descoperit vulnerabilitatea, au explicat c\u0103 eroarea din arhivator este exploatat\u0103 prin distribuirea de arhive malware cu extensia RAR, care, odat\u0103 deschise, pot extrage automat cod mali\u021bios. Aceste programe se instaleaz\u0103 \u00een folderele de autostart ale PC-ului, func\u021bion\u00e2nd de fiecare dat\u0103 c\u00e2nd computerul este pornit, totul f\u0103r\u0103 cuno\u0219tin\u021ba utilizatorului.<\/p>\n

\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center><\/center><\/p>\n

Dup\u0103 ce vulnerabilitatea a fost descoperit\u0103, grupurile de hackeri au \u00eenceput s\u0103 o exploateze \u00een interesul lor, iar diferite \u021b\u0103ri au devenit obiective ale campaniilor de spionaj cibernetic, \u00eencerc\u00e2nd s\u0103 colecteze informa\u021bii de spionaj. Compania McAfee, specializat\u0103 \u00een probleme de securitate software, a remarcat c\u0103 au fost identificate deja peste 100 de exploat\u0103ri unice care folosesc vulnerabilitatea WinRAR \u2014 majoritatea dintre ele fiind direc\u021bionate c\u0103tre Statele Unite.<\/p>\n

<\/center><\/p>\n

Distribuitorii de malware sunt bine informa\u021bi despre popularitatea WinRAR \u00een r\u00e2ndul celor care prefer\u0103 s\u0103 descarce ilegal diferite fi\u0219iere media. McAfee subliniaz\u0103 c\u0103 unul dintre cele mai folosite exploat\u0103ri vizeaz\u0103 persoanele care caut\u0103 online copiile pirate ale celui mai recent album al Arianei Grande (Ariana Grande) \u2014 Thank U, Next.<\/p>\n

<\/p>\n
\n

Exemplul exploatului WinRAR (#CVE-2018-20250) (united nations .rar) pare s\u0103 vizeze Orientul Mijlociu. \u00cenc\u0103rcat cu documente-bait referitoare la Drepturile Omului ale Na\u021biunilor Unite \u0219i #UN \u00een limba arab\u0103, acesta descarc\u0103 \u0219i execut\u0103 \u00een cele din urm\u0103 #Revenge RAT.https:\/\/t.co\/WJ4oJ1UxAz pic.twitter.com\/fgHYSD4Mk5<\/p>\n

\u2014 360 Threat Intelligence Center (@360TIC) 12 martie 2019.<\/p><\/blockquote>\n

<\/center><\/p>\n

Desigur, utilitarul WinRAR nu mai este ast\u0103zi at\u00e2t de popular cum era acum mul\u021bi ani, dar av\u00e2nd \u00een vedere c\u0103, \u00een aproape 20 de ani, num\u0103rul utilizatorilor s\u0103i a ajuns la 500 de milioane de persoane, nu se poate spune c\u00e2te sisteme r\u0103m\u00e2n vulnerabile la acest atac. \u00cen plus, de\u0219i versiunea 5.70 a fost lansat\u0103 la sf\u00e2r\u0219itul lunii ianuarie, aceasta trebuie desc\u0103rcat\u0103 \u0219i instalat\u0103 manual de pe site-ul oficial, astfel c\u0103 majoritatea utilizatorilor nu sunt informa\u021bi despre actualizarea extrem de important\u0103.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center><\/p>\n

Sursa: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u043e\u043b\u044c \u0441\u0442\u0430\u0440\u0430\u044f \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u0430, \u043a\u0430\u043a WinRAR, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 19 \u043b\u0435\u0442 \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 5.70. \u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u0434\u0435\u043b\u0430\u044e\u0442 \u044d\u0442\u043e \u0440\u0435\u0434\u043a\u043e, \u0442\u0430\u043a \u0447\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":42232,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-42231","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitatea de 19 ani din WinRAR este deja folosit\u0103 de peste o sut\u0103 de exploat\u0103ri | ProHoster","description":"O utilitar at\u00e2t de vechi \u0219i popular ca WinRAR, a\u0219a cum s-a aflat luna trecut\u0103, a fost vulnerabil timp de 19 ani la o eroare care poate fi exploatat\u0103 cu u\u0219urin\u021b\u0103 de hackeri \u0219i distribuitori de programe mali\u021bioase.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 19-\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 WinRAR \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0441\u043e\u0442\u043d\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 | ProHoster","og:description":"\u0421\u0442\u043e\u043b\u044c \u0441\u0442\u0430\u0440\u0430\u044f \u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u0430, \u043a\u0430\u043a WinRAR, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 19 \u043b\u0435\u0442 \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-19-letnej-davnosti-v-winrar-uzhe-ispolzuetsya-bolee-chem-sotnej-eksplojtov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-03-17T21:00:00+00:00","article:modified_time":"2020-02-18T10:45:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42231","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 07:43:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:04:28","updated":"2026-01-22 07:43:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/42231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=42231"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/42231\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/42232"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=42231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=42231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=42231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}