{"id":119649,"date":"2024-08-28T03:43:01","date_gmt":"2024-08-28T01:43:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod"},"modified":"2024-08-28T03:43:01","modified_gmt":"2024-08-28T01:43:01","slug":"v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","title":{"rendered":"V vti\u010dniku ss-otr za Pidgin je bil odkrit zlonamerni kodeks.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Razvijalci Pidgina, odjemalca za takoj\u0161nje sporo\u010danje, ki podpira delovanje z omre\u017eji, kot so Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime in Zephyr, so napovedali odkritje zlonamernega kodeksa v vti\u010dniku ss-otr (ScreenShareOTR), ki je prisoten v imeniku vti\u010dnikov, ki jih razvija skupnost. Vti\u010dnik je bil objavljen v imeniku 6. julija, distribucija pa je bila omejena le na binarno obliko in je Pidginu dodala mo\u017enost skupne rabe zaslona z uporabo protokola OTR (Off-the-Record). 16. avgusta so raziskovalci varnosti odkrili zlonamerno dejavnost v ss-otr, ki se je izra\u017eala v zagonu keyloggerja in po\u0161iljanju posnetkov zaslona na zunanje stre\u017enike. <\/p>\n

Analiza zlonamernih sprememb, ki jo je izvedla dru\u017eba ESET, je pokazala prisotnost kode za nalaganje in zagon skriptov ter izvr\u0161ljivih datotek v knji\u017enicah pidgin-screenshare in libotr. stre\u017enika<\/a> Z napadalcev (jabberplugins.net) je bilo za uporabnike sistema Windows z natan\u010dno platformo nalo\u017eeno in name\u0161\u010deno zlonamerno programsko opremo DarkGate, ki podpira module za izvedbo \u0161irokega spektra zlonamernih dejanj, med katerimi so rudarjenje, bele\u017eenje dejavnosti tipkovnice, organiziranje oddaljenega dostopa, kraje osebnih podatkov, klju\u010dev in gesel iz priljubljenih aplikacij. Tudi v gradnjah za Linux je bila prisotna funkcionalnost nalaganja in izvajanja zunanjih kod (kaj to\u010dno je bilo nalo\u017eeno na sisteme z Linuxom, \u0161e vedno ni jasno). <\/p>\n

Da bi zmanj\u0161ali tveganje za nastanek podobnih incidentov v prihodnosti, nameravajo razvijalci Pidgina vklju\u010devati v imenik le vti\u010dnike, katerih koda je na voljo pod odprtimi licencami, odobrenimi s strani OSI. Prav tako nameravajo navajati le zunanje vti\u010dnike, za katere je bila izvedena varnostna preveritev.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Pidgin, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u0430\u043a Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime \u0438 Zephyr, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 ss-otr (ScreenShareOTR), \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c. \u041f\u043b\u0430\u0433\u0438\u043d \u0431\u044b\u043b \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 6 \u0438\u044e\u043b\u044f, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u043c \u0432\u0438\u0434\u0435 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b \u0432 Pidgin \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119649","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V vti\u010dniku ss-otr za Pidgin je bil odkrit zlonamerni kodeks | ProHoster","description":"Razvijalci Pidgina, odjemalca za takoj\u0161nje sporo\u010danje, ki podpira delovanje z omre\u017eji, kot so Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime in Zephyr, so napovedali odkritje.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 ss-otr \u043a Pidgin \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Pidgin, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u0430\u043a Jabber\/XMPP, Bonjour, Gadu-Gadu, IRC, Novell GroupWise, Lotus Sametime \u0438 Zephyr, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/v-plagine-ss-otr-k-pidgin-vyyavlen-vredonosnyj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-08-28T01:43:01+00:00","article:modified_time":"2024-08-28T01:43:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119649","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:45:25","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:10:21","updated":"2026-02-22 15:45:25","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/119649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=119649"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/119649\/revisions"}],"predecessor-version":[{"id":162461,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/119649\/revisions\/162461"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=119649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=119649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=119649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}