{"id":119649,"date":"2024-08-28T03:43:01","date_gmt":"2024-08-28T01:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod"},"modified":"2024-08-28T03:43:01","modified_gmt":"2024-08-28T01:43:01","slug":"v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","title":{"rendered":"V plugine ss-otr pre Pidgin bol zisten\u00fd \u0161kodliv\u00fd k\u00f3d.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdvoj\u00e1ri klienta pre instantn\u00e9 spr\u00e1vy Pidgin, ktor\u00fd podporuje \u010dinnos\u0165 v sie\u0165ach ako Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime a Zephyr, ozn\u00e1mili zistenie \u0161kodliv\u00e9ho k\u00f3du v plugine ss-otr (ScreenShareOTR), ktor\u00fd sa nach\u00e1dza v katal\u00f3gu pluginov spravovan\u00fdch komunitou. Plugin bol umiestnen\u00fd v katal\u00f3gu 6. j\u00fala, distribuoval sa iba v bin\u00e1rnej forme a prid\u00e1val Pidginu mo\u017enos\u0165 zdie\u013ea\u0165 obrazovku pomocou protokolu OTR (Off-the-Record). 16. augusta experti na bezpe\u010dnos\u0165 identifikovali \u0161kodliv\u00fa aktivitu v ss-otr, ktor\u00e1 sa prejavovala sp\u00fa\u0161\u0165an\u00edm keyloggera a odosielan\u00edm sn\u00edmok obrazovky na extern\u00e9 servery. <\/p>\n

Anal\u00fdza \u0161kodliv\u00fdch zmien vykonan\u00e1 spolo\u010dnos\u0165ou ESET uk\u00e1zala pr\u00edtomnos\u0165 k\u00f3du na na\u010d\u00edtanie a spustenie skriptov a spustite\u013en\u00fdch s\u00faborov v kni\u017eniciach pidgin-screenshare a libotr. servera<\/a> \u00dato\u010dn\u00edci (jabberplugins.net) dok\u00e1zali, \u017ee pre pou\u017e\u00edvate\u013eov Windows sa z servera s\u0165ahovalo a in\u0161talovalo typick\u00e9 \u0161kodliv\u00e9 softv\u00e9r DarkGate, ktor\u00fd podporuje moduly na vykon\u00e1vanie \u0161irokej \u0161k\u00e1ly \u0161kodliv\u00fdch \u010dinnost\u00ed, medzi nimi \u0165a\u017ebu kryptomien, zaznamen\u00e1vanie kl\u00e1vesnicov\u00fdch aktiv\u00edt, organizovanie vzdialen\u00e9ho pr\u00edstupu a kr\u00e1de\u017e osobn\u00fdch \u00fadajov, k\u013e\u00fa\u010dov a hesiel z popul\u00e1rnych aplik\u00e1ci\u00ed. V zostav\u00e1ch pre Linux bola tie\u017e pr\u00edtomn\u00e1 funk\u010dnos\u0165 na s\u0165ahovanie a spustenie cudz\u00edch k\u00f3dov (\u010do presne sa s\u0165ahovalo na syst\u00e9my s Linuxom zatia\u013e nie je jasn\u00e9). <\/p>\n

Aby sa v bud\u00facnosti zn\u00ed\u017eilo riziko tak\u00fdchto incidentov, pl\u00e1nuj\u00fa v\u00fdvoj\u00e1ri Pidginu zahrn\u00fa\u0165 do katal\u00f3gu iba pluginy, ktor\u00fdch k\u00f3d je dostupn\u00fd pod otvoren\u00fdmi licenciami schv\u00e1len\u00fdmi organiz\u00e1ciou OSI. Taktie\u017e sa pl\u00e1nuje odkazovanie iba na extern\u00e9 pluginy, pre ktor\u00e9 prebehla bezpe\u010dnostn\u00e1 kontrola.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Pidgin, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u0430\u043a Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime \u0438 Zephyr, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 ss-otr (ScreenShareOTR), \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c. \u041f\u043b\u0430\u0433\u0438\u043d \u0431\u044b\u043b \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 6 \u0438\u044e\u043b\u044f, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b \u0432 Pidgin \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119649","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V plugine ss-otr k Pidgin bol zisten\u00fd \u0161kodliv\u00fd k\u00f3d | ProHoster","description":"V\u00fdvoj\u00e1ri klienta pre instantn\u00e9 spr\u00e1vy Pidgin, ktor\u00fd podporuje \u010dinnos\u0165 v sie\u0165ach ako Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime a Zephyr, ozn\u00e1mili zistenie.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 ss-otr \u043a Pidgin \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Pidgin, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u0430\u043a Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime \u0438 Zephyr, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-28T01:43:01+00:00","article:modified_time":"2024-08-28T01:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119649","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:45:25","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:10:21","updated":"2026-02-22 15:45:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/119649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=119649"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/119649\/revisions"}],"predecessor-version":[{"id":162461,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/119649\/revisions\/162461"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=119649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=119649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=119649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}