{"id":42943,"date":"2020-02-17T14:41:56","date_gmt":"2020-02-17T11:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij"},"modified":"2020-02-17T14:41:56","modified_gmt":"2020-02-17T11:41:56","slug":"iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","title":{"rendered":"Peste 500 de extensii mali\u021bioase au fost eliminate din Chrome Web Store","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Au fost prezentate rezultatele<\/a><\/noindex> blocate o serie de extensii mali\u021bioase pentru browserul Chrome, care au afectat milioane de utilizatori. \u00cen prima etap\u0103, cercet\u0103toarea independent\u0103 Jamila Kaya (Jamila Kaya<\/a><\/noindex>) \u0219i compania Duo Security au identificat \u00een catalogul Chrome Web Store 71 de extensii mali\u021bioase. \u00cen total, aceste extensii au avut peste 1,7 milioane de instal\u0103ri. Dup\u0103 ce Google a fost informat despre problem\u0103, \u00een catalog au fost descoperite \u00eenc\u0103 peste 430 de extensii similare, num\u0103rul instal\u0103rilor acestora nefiind comunicat. <\/p>\n

Este notabil c\u0103, \u00een ciuda num\u0103rului impresionant de instal\u0103ri, niciuna dintre extensiile problematic\u0103 nu are recenzii de utilizatori, ceea ce ridic\u0103 \u00eentreb\u0103ri cu privire la modul \u00een care au fost instalate extensiile \u0219i cum activitatea mali\u021bioas\u0103 a r\u0103mas neobservat\u0103. \u00cen prezent, toate extensiile problematice au fost eliminate din Chrome Web Store.
\nPotrivit cercet\u0103torilor, activitatea mali\u021bioas\u0103 legat\u0103 de extensiile blocate are loc din ianuarie 2019, dar domenii distincte utilizate pentru desf\u0103\u0219urarea activit\u0103\u021bilor mali\u021bioase au fost \u00eenregistrate \u00eenc\u0103 din 2017. <\/p>\n

Majoritatea extensiilor mali\u021bioase s-au prezentat ca instrumente pentru promovarea produselor \u0219i participarea la servicii de publicitate (utilizatorul vizioneaz\u0103 reclame \u0219i prime\u0219te comisioane). Extensiile foloseau tehnici de redirec\u021bionare c\u0103tre site-urile promovate atunci c\u00e2nd deschideau pagini care erau afi\u0219ate \u00eenainte de a se afi\u0219a site-ul solicitat. <\/p>\n

Toate extensiile foloseau o tehnic\u0103 similar\u0103 pentru a ascunde activitatea mali\u021bioas\u0103 \u0219i a ocoli mecanismele de verificare a extensiilor din Chrome Web Store. Codul tuturor extensiilor era practic identic la nivelul codului surs\u0103, cu excep\u021bia denumirilor func\u021biilor, care erau unice \u00een fiecare extensie. Transmiterea logicii mali\u021bioase se realiza de pe servere centrale de control. La \u00eenceput, extensia se conecta la un domeniu care avea acela\u0219i nume ca \u0219i extensia (de exemplu, Mapstrek.com), dup\u0103 care era redirec\u021bionat\u0103 c\u0103tre unul dintre serverele de control, care furnizau scenariul ac\u021biunilor ulterioare.<\/p>\n

Printre ac\u021biunile desf\u0103\u0219urate prin intermediul extensiilor se num\u0103r\u0103 \u00eenc\u0103rcarea pe un server extern a datelor confiden\u021biale ale utilizatorului, redirec\u021bionarea c\u0103tre site-uri mali\u021bioase \u0219i facilitarea instal\u0103rii aplica\u021biilor mali\u021bioase (de exemplu, apare un mesaj despre infectarea computerului \u0219i se propune un software mali\u021bios sub pretextul unui antivirus sau al unei actualiz\u0103ri de browser). \u00cen lista domeniilor c\u0103tre care s-a realizat redirec\u021bionarea se afl\u0103 diverse domenii de phishing \u0219i site-uri destinate exploat\u0103rii browserelor neactualizate, care con\u021bin vulnerabilit\u0103\u021bi nerezolvate (de exemplu, dup\u0103 exploatare, au avut loc \u00eencerc\u0103ri de instalare a programelor mali\u021bioase care interceptau parolele \u0219i analizau transmiterea de date confiden\u021biale prin clipboard).<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043d\u044b \u0438\u0442\u043e\u0433\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0443 Chrome, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430 \u043f\u0435\u0440\u0432\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u0436\u0430\u043c\u0438\u043b\u044f \u041a\u0430\u0439\u044f (Jamila Kaya) \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Duo Security \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Chrome Web Store 71 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 1.7 \u043c\u043b\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a. \u041f\u043e\u0441\u043b\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Google \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435, \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-42943","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Peste 500 de extensii mali\u021bioase eliminate din Chrome Web Store | ProHoster","description":"S-au tras concluziile bloc\u0103rii unei serii de extensii mali\u021bioase pentru browserul Chrome, victimele fiind mai multe persoane.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437 Chrome Web Store \u0443\u0434\u0430\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 500 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u041f\u043e\u0434\u0432\u0435\u0434\u0435\u043d\u044b \u0438\u0442\u043e\u0433\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0443 Chrome, \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/iz-chrome-web-store-udaleno-bolee-500-vredonosnyh-dopolnenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-17T11:41:56+00:00","article:modified_time":"2020-02-17T11:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42943","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:51:33","updated":"2022-09-28 18:42:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/42943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=42943"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/42943\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=42943"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=42943"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=42943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}