{"id":72851,"date":"2020-03-05T02:41:57","date_gmt":"2020-03-04T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni"},"modified":"2020-03-05T02:41:57","modified_gmt":"2020-03-04T23:41:57","slug":"vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni","title":{"rendered":"Posibilitatea de a \u00eenregistra domenii de phishing cu simboluri unicode asem\u0103n\u0103toare \u00een nume","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Cercet\u0103torii de la compania Soluble <noindex><a rel=\"nofollow\" href=\"https:\/\/www.soluble.ai\/blog\/public-disclosure-emoji-to-zero-day\">au identificat<\/a><\/noindex> o nou\u0103 metod\u0103 de \u00eenregistrare a domeniilor cu <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%9E%D0%BC%D0%BE%D0%B3%D0%BB%D0%B8%D1%84\">homoglife<\/a><\/noindex>, care arat\u0103 similar cu alte domenii, dar se deosebesc \u00een fapt prin prezen\u021ba simbolurilor cu semnifica\u021bii diferite. Domeniile interna\u021bionalizate (<noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/IDN\">IDN<\/a><\/noindex>) pot p\u0103rea la prima vedere identice cu cele ale companiilor \u0219i serviciilor cunoscute, ceea ce permite utilizarea lor pentru phishing, inclusiv ob\u021bin\u00e2nd certificate TLS corecte pentru acestea.<\/p>\n<p>Metoda clasic\u0103 de \u00eenlocuire printr-un domeniu IDN similar a fost blocat\u0103 de mult \u00een browsere \u0219i de c\u0103tre registratori, datorit\u0103 interzicerii amestec\u0103rii simbolurilor din diferite alfabeturi. De exemplu, domeniul fals a lui aapple.com (xn--pple-43d.com) nu poate fi creat prin \u00eenlocuirea literelor latine \u201ea\u201d (U+0061) cu litera chirilic\u0103 \u201e\u0430\u201d (U+0430), deoarece amestecarea literelor din diferite alfabeturi in domeniu nu este permis\u0103. \u00cen 2017, a fost <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=46394\">g\u0103sit<\/a><\/noindex> descoperit\u0103 o metod\u0103 de a ocoli o astfel de protec\u021bie prin utilizarea doar a simbolurilor unicode \u00een domeniu, f\u0103r\u0103 utilizarea literelor latine (de exemplu, prin simboluri din limbi cu caractere asem\u0103n\u0103toare cu cele latine).<\/p>\n<p>Acum a fost g\u0103sit\u0103 \u00eenc\u0103 o metod\u0103 de a ocoli protec\u021bia, bazat\u0103 pe faptul c\u0103 registratorii blocheaz\u0103 amestecarea literelor latine \u0219i Unicode, dar dac\u0103 simbolurile Unicode indicate \u00een domeniu apar\u021bin grupului de simboluri latine, o astfel de amestecare este permis\u0103, deoarece simbolurile apar\u021bin aceluia\u0219i alfabet. Problema este c\u0103 \u00een extensia <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/IPA_Extensions\">Unicode Latin IPA<\/a><\/noindex> exist\u0103 homoglife care arat\u0103 similar cu alte simboluri ale alfabetului latin:<br \/>\nsimbol \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Latin_alpha\">\u02bd<\/a><\/noindex>\u201d seam\u0103n\u0103 cu \u201ea\u201d, \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Voiced_velar_stop\">\u0279<\/a><\/noindex>\u201d \u2014 \u201eg\u201d, \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Latin_iota\">\u0283<\/a><\/noindex>\u201d \u2014 \u201el\u201d. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.soluble.ai\/hs-fs\/hubfs\/homoglyph4.jpeg?width=888&#038;name=homoglyph4.jpeg\"><img decoding=\"async\" alt=\"Posibilitatea de a \u00eenregistra domenii de phishing cu simboluri unicode asem\u0103n\u0103toare \u00een nume\" src=\"\/wp-content\/uploads\/2020\/03\/4c7ab1abba84d76486b24d2c9e34017e.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Posibilitatea \u00eenregistr\u0103rii domeniilor \u00een care latina este amestecat\u0103 cu simbolurile Unicode indicate a fost descoperit\u0103 la registratorul Verisign (alte registre nu au fost verificate), iar subdomenii au fost create pe servicii precum Amazon, Google, Wasabi \u0219i DigitalOcean. Problema a fost descoperit\u0103 \u00een noiembrie anul trecut \u0219i, \u00een ciuda notific\u0103rilor trimise, dup\u0103 trei luni a fost rezolvat\u0103 \u00een ultimul moment doar \u00een Amazon \u0219i Verisign.<\/p>\n<p>\u00cen timpul experimentului, cercet\u0103torii au cheltuit 400 de dolari pentru a \u00eenregistra la Verisign urm\u0103toarele domenii:<\/p>\n<ul>\n<li> am\u02bdzon.com\n<li> ch\u02bdse.com\n<li> s\u02bdlesforce.com\n<li> \u0279m\u02bdil.com\n<li> \u02bdpp\u0283e.com\n<li> eb\u02bdy.com\n<li> \u0279static.com\n<li> ste\u02bdmpowered.com\n<li> the\u0279uardian.com\n<li> thever\u0279e.com\n<li> washin\u0279tonpost.com\n<li> p\u02bdyp\u02bd\u0279.com\n<li> w\u02bdlm\u02bdrt.com\n<li> w\u02bds\u02bdbisys.com\n<li> y\u02bdhoo.com\n<li> c\u0283oudf\u0283are.com\n<li> de\u0283\u0283.com\n<li> gm\u02bdi\u0283.com\n<li> goo\u0279leapis.com\n<li> huffin\u0279tonpost.com\n<li> insta\u0279am.com\n<li> microsoftonline.com\n<li> \u02bdm\u02bdzon\u02bdws.com\n<li> \u02bdndroid.com\n<li> netf\u0283ix.com\n<li> nvidi\u02bd.com\n<li> \u0279oog\u0283e.com\n<\/ul>\n<p>Cercet\u0103torii au lansat de asemenea <noindex><a rel=\"nofollow\" href=\"https:\/\/homoglyphs.storage.googleapis.com\">un serviciu online<\/a><\/noindex> pentru a verifica domeniile proprii \u00een c\u0103utarea unor variante alternative cu omoglife, inclusiv verificarea domeniilor deja \u00eenregistrate \u0219i a certificatelor TLS cu nume similare. \u00cen ceea ce prive\u0219te certificatele HTTPS, au fost verificate peste 300 de domenii cu omoglife prin jurnalele Certificate Transparency, dintre care pentru 15 a fost \u00eenregistrat\u0103 generarea de certificate. <\/p>\n<p>Browserele actuale Chrome \u0219i Firefox afi\u0219eaz\u0103 astfel de domenii \u00een bara de adrese \u00een nota\u021bia cu prefixul \u201exn--\u201d, totu\u0219i \u00een hyperlinkuri domeniile apar f\u0103r\u0103 transformare, ceea ce poate fi folosit pentru a insera pe paginile resurselor d\u0103un\u0103toare sau linkuri, sub pretextul c\u0103 sunt desc\u0103rcate de pe site-uri legitime. De exemplu, pe unul dintre domeniile identificate cu omoglifuri a fost observat\u0103 propagarea unei variante mali\u021bioase a bibliotecii jQuery.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52479\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Soluble \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441 \u043e\u043c\u043e\u0433\u043b\u0438\u0444\u0430\u043c\u0438, \u0432\u043d\u0435\u0448\u043d\u0435 \u043f\u043e\u0445\u043e\u0436\u0438\u043c\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0434\u043e\u043c\u0435\u043d\u044b, \u043d\u043e \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0438\u0437-\u0437\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0441 \u0438\u043d\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b (IDN) \u043c\u043e\u0433\u0443\u0442 \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u043d\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0434\u043b\u044f \u043d\u0438\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0435 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72852,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72851","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Soluble \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441 \u043f\u043e\u0445\u043e\u0436\u0438\u043c\u0438 unicode-\u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u0432 \u0438\u043c\u0435\u043d\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Soluble \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-04T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-04T23:41:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Posibilitatea \u00eenregistr\u0103rii domeniilor de phishing cu simboluri unicode similare \u00een nume | ProHoster","description":"Cercet\u0103torii de la compania Soluble au descoperit o nou\u0103 metod\u0103 de \u00eenregistrare a domeniilor cu","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441 \u043f\u043e\u0445\u043e\u0436\u0438\u043c\u0438 unicode-\u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u0432 \u0438\u043c\u0435\u043d\u0438 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Soluble \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-04T23:41:57+00:00","article:modified_time":"2020-03-04T23:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72851","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:44:30","updated":"2022-09-30 23:20:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/72851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=72851"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/72851\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/72852"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=72851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=72851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=72851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}