Vatsvagiri kubva kuESET kuparadzirwa kweTor Browser ine hutsinye inovakwa nevanorwisa vasingazivikanwe. Gungano iri rakamisikidzwa seyepamutemo Russian vhezheni yeTor Browser, nepo vagadziri vayo vasina chekuita neTor purojekiti, uye chinangwa chekugadzirwa kwayo kwaive kutsiva Bitcoin neQIWI wallet.
Kutsausa vashandisi, vagadziri vegungano vakanyoresa domains tor-browser.org uye torproect.org (yakasiyana kubva kune yepamutemo torpro webhusaiti.Ject.org nekusavapo kwetsamba "J", iro rinoenda risingaonekwe nevazhinji vashandisi vanotaura chiRussia). Dhizaini yemasaiti yakashongedzwa kuti ifanane neyepamutemo Tor webhusaiti. Saiti yekutanga yakaratidza peji ine yambiro nezve kushandisa yakare vhezheni yeTor Browser uye chirevo chekuisa chigadziriso (chinongedzo chakatungamira kugungano neTrojan software), uye pane yechipiri zvirimo zvaive zvakafanana nepeji rekurodha. Tor Browser. Gungano rakashata rakagadzirirwa Windows chete.
Kubva 2017, iyo Trojan Tor Browser yakasimudzirwa pamaforamu akasiyana-siyana emutauro weRussia, muhurukuro dzine chekuita nedarknet, cryptocurrencies, nekupfuura Roskomnadzor ichivharira uye zvakavanzika nyaya. Kugovera bhurawuza, pastebin.com yakagadzirawo mapeji mazhinji akakwenenzverwa kuti aoneke muinjini dzepamusoro dzekutsvaga pamisoro ine chekuita neakasiyana mashandiro asiri pamutemo, censorship, mazita evezvematongerwo enyika vane mukurumbira, nezvimwe.
Mapeji ekushambadza vhezheni yekunyepedzera yebrowser pastebin.com akaonekwa kanopfuura zviuru mazana mashanu.
Kuvakwa kwekunyepedzera kwakavakirwa paTor Browser 7.5 codebase uye, kunze kweakavakirwa-mukati mabasa ane hutsinye, zvigadziriso zvidiki kune Mushandisi-Mumiriri, kudzima dhijitari siginecha verification yeadd-ons, uye kuvharira iyo yekumisikidza sisitimu, yakanga yakafanana neyemukuru. Tor Browser. Kuisa kwakashata kwaisanganisira kuisa chibatiso chemukati kune yakajairwa HTTPS Kwese kwese kuwedzera (imwe script.js script yakawedzerwa ku manifest.json). Shanduko dzakasara dzakaitwa pamwero wekugadzirisa zvigadziriso, uye ese mabhinari zvikamu zvakasara kubva kune yepamutemo Tor Browser.
Iyo script yakabatanidzwa muHTTPS Kwese kwese, pakuvhura peji rega rega, yakabata control server, iyo yakadzosa JavaScript kodhi iyo inofanirwa kuitiswa mukati meiyo yazvino peji. Iyo control server yakashanda seyakavanzika Tor sevhisi. Nekuita JavaScript kodhi, vapambi vaigona kubata zviri mukati memafomu ewebhu, kutsiva kana kuvanza zvinhu zvinopokana pamapeji, kuratidza meseji ekunyepedzera, nezvimwe. Nekudaro, kana uchiongorora iyo yakaipa kodhi, iyo chete kodhi yekutsiva QIWI ruzivo uye Bitcoin wallet pamapeji ekugamuchira mubhadharo padarknet yakanyorwa. Munguva yebasa rakashata, 4.8 Bitcoins dzakaunganidzwa pazvikwama zvakashandiswa kutsiva, izvo zvinoenderana neanenge zviuru makumi mana zvemadhora.
Source: opennet.ru