{"id":85878,"date":"2020-06-20T01:42:41","date_gmt":"2020-06-19T23:42:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh"},"modified":"2020-06-20T01:42:41","modified_gmt":"2020-06-19T23:42:41","slug":"111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh","title":{"rendered":"111 shtesa t\u00eb Chrome, t\u00eb shkarkuara 32 milion her\u00eb, akuzohen p\u00ebr shkarkimin e t\u00eb dh\u00ebnave t\u00eb ndjeshme","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Awake Security njoftoi<\/a><\/noindex> p\u00ebr identifikimin 111 shtesave<\/a><\/noindex> n\u00eb Google Chrome, q\u00eb d\u00ebrgojn\u00eb t\u00eb dh\u00ebna t\u00eb ndjeshme t\u00eb p\u00ebrdoruesve n\u00eb servera t\u00eb jasht\u00ebm. Mes t\u00eb tjerash, shtesat kishin qasje n\u00eb krijimin e ekranfotove, leximin e p\u00ebrmbajtjes s\u00eb buferit t\u00eb shk\u00ebmbimit, analizimin e pranis\u00eb s\u00eb tokeneve t\u00eb aksesit n\u00eb Cookie dhe kapjen e inputeve n\u00eb formular\u00ebt web. N\u00eb total, shtesat e d\u00ebmshme t\u00eb identifikuara kishin arritur 32.9 milion shkarkime n\u00eb Chrome Web Store, nd\u00ebrsa ajo m\u00eb e njohura (S\u0435arch Manager) ishte shkarkuar 10 milion her\u00eb dhe p\u00ebrfshin 22 mij\u00eb rishikime.<\/p>\n

Supozohen se t\u00eb gjitha shtesat e shqyrtuara jan\u00eb p\u00ebrgatitur nga nj\u00eb ekip i vet\u00ebm sulmuesish, pasi n\u00eb t\u00eb gjitha u p\u00ebrdor<\/a><\/noindex> skemat tipike t\u00eb shp\u00ebrndarjes dhe organizimit t\u00eb kapjes s\u00eb t\u00eb dh\u00ebnave t\u00eb ndjeshme, si dhe elemente t\u00eb p\u00ebrbashk\u00ebta dizajni dhe kod t\u00eb p\u00ebrs\u00ebritur. 79 shtesa<\/a><\/noindex> me kode t\u00eb d\u00ebmshme u publikuan n\u00eb katalogun Chrome Store dhe tashm\u00eb jan\u00eb fshir\u00eb pas njoftimit p\u00ebr aktivitetet e d\u00ebmshme. Shum\u00eb nga k\u00ebto shtesa t\u00eb d\u00ebmshme kopjuan funksionalitetin e shtesave t\u00eb njohura, duke p\u00ebrfshir\u00eb ato q\u00eb synojn\u00eb t\u00eb ofrojn\u00eb mbrojtje shtes\u00eb t\u00eb shfletuesit, rritjen e privat\u00ebsis\u00eb gjat\u00eb k\u00ebrkimit, konvertimin e PDF dhe ndryshimin e formateve.<\/p>\n

\"111<\/a><\/noindex><\/center><\/p>\n

Zhvilluesit e shtesave n\u00eb fillim vendosnin nj\u00eb version t\u00eb past\u00ebr pa kod t\u00eb d\u00ebmsh\u00ebm n\u00eb Chrome Store, kalonin rishikimin, dhe pastaj n\u00eb nj\u00eb nga p\u00ebrdit\u00ebsimet shtonin ndryshime, t\u00eb cilat shkarkonin kod t\u00eb d\u00ebmsh\u00ebm pas instalimit. P\u00ebr t\u00eb fshehur gjurm\u00ebt e aktiviteve t\u00eb d\u00ebmshme, p\u00ebrdorej gjithashtu teknika e p\u00ebrgjigjeve selektive \u2014 n\u00eb k\u00ebrkes\u00ebn e par\u00eb jepte nj\u00eb shkarkim t\u00eb d\u00ebmsh\u00ebm, nd\u00ebrsa n\u00eb ato pasuese dh\u00ebna q\u00eb nuk shkaktonin dyshime. <\/p>\n

\"111<\/a><\/noindex><\/center><\/p>\n

Dy rrug\u00ebt kryesore t\u00eb shp\u00ebrndarjes s\u00eb shtesave t\u00eb d\u00ebmshme p\u00ebrfshijn\u00eb promovimin e faqeve q\u00eb duken profesionalisht (si\u00e7 tregohet n\u00eb figur\u00ebn m\u00eb posht\u00eb) dhe vendosjen n\u00eb Chrome Web Store, duke anashkaluar mekanizmat e verifikimit p\u00ebr ngarkimin e m\u00ebvonsh\u00ebm t\u00eb kodit nga faqe t\u00eb jashtme. P\u00ebr t\u00eb anashkaluar kufizimet p\u00ebr instalimin e shtesave vet\u00ebm nga Chrome Web Store, sulmuesit shp\u00ebrndan\u00eb versione t\u00eb ve\u00e7anta t\u00eb Chromium me shtesa t\u00eb paracaktuara, si dhe kryenin instalime p\u00ebrmes aplikacioneve t\u00eb reklamave (Adware) q\u00eb tashm\u00eb ishin t\u00eb pranishme n\u00eb sistem. Hulumtuesit analizuan 100 rrjete t\u00eb kompanive financiare, mediatike, mjek\u00ebsore, farmaceutike, naft\u00eb-gaz dhe tregtare, si dhe institucioneve arsimore dhe qeveritare, dhe gjet\u00ebn gjurm\u00eb t\u00eb shtesave t\u00eb d\u00ebmshme n\u00eb pothuajse t\u00eb gjitha ato. <\/p>\n

\"111<\/a><\/noindex><\/center><\/p>\n

Gjat\u00eb fushat\u00ebs p\u00ebr shp\u00ebrndarjen e shtesave t\u00eb d\u00ebmshme u regjistruan m\u00eb shum\u00eb 15 mij\u00eb domene<\/a><\/noindex>, q\u00eb nd\u00ebrlidhen me site t\u00eb njohura (p.sh., gmaille.com, youtubeunblocked.net, etj.) ose t\u00eb regjistruara pas skadimit t\u00eb afatit t\u00eb rinovimit t\u00eb domeve ekzistuese. K\u00ebto domene gjithashtu u p\u00ebrdor\u00ebn n\u00eb infrastruktur\u00ebn e menaxhimit t\u00eb aktiviteteve t\u00eb d\u00ebmshme dhe p\u00ebr ngarkimin e objekteve JavaScript t\u00eb d\u00ebmshme, t\u00eb ekzekutuara n\u00eb kontekstin e faqeve q\u00eb hapin p\u00ebrdoruesit.<\/p>\n

Hulumtuesit dyshuan p\u00ebr nj\u00eb marr\u00ebveshje me regjistruesin e domeve Galcomm, ku u regjistruan 15 mij\u00eb domene p\u00ebr aktivitete t\u00eb d\u00ebmshme (60% e t\u00eb gjitha domeve t\u00eb l\u00ebshuara nga ky regjistrues), por p\u00ebrfaq\u00ebsuesit e Galcomm e hodh\u00ebn posht\u00eb<\/a><\/noindex> k\u00ebt\u00eb supozim dhe theksuan se 25% e domeve t\u00eb lartp\u00ebrmendura tashm\u00eb jan\u00eb fshir\u00eb ose jan\u00eb l\u00ebshuar nga dikush tjet\u00ebr p\u00ebrve\u00e7 Galcomm, nd\u00ebrsa pjesa tjet\u00ebr jan\u00eb kryesisht domeine t\u00eb parkura pa aktivitet. P\u00ebrfaq\u00ebsuesit e Galcomm gjithashtu raportuan se para publikimit t\u00eb raportit askush nuk iu drejtua atyre, dhe se mor\u00ebn nj\u00eb list\u00eb domeinsh t\u00eb p\u00ebrdorura p\u00ebr q\u00ebllime t\u00eb d\u00ebmshme nga nj\u00eb pal\u00eb e tret\u00eb dhe tani po e analizojn\u00eb at\u00eb.<\/p>\n

K\u00ebrkuesit q\u00eb zbuluan problemin e krahasojn\u00eb shtesat e d\u00ebmshme me nj\u00eb rrotkit t\u00eb ri \u2014 aktiviteti kryesor i shumic\u00ebs s\u00eb p\u00ebrdoruesve zhvillohet p\u00ebrmes shfletuesit, p\u00ebrmes t\u00eb cilit b\u00ebhet qasje n\u00eb depo t\u00eb p\u00ebrbashk\u00ebta dokumentesh, n\u00eb sisteme informative korporatash dhe sh\u00ebrbime financiare. N\u00eb k\u00ebto kushte, kriminel\u00ebve nuk u ka kuptim t\u00eb k\u00ebrkojn\u00eb rrug\u00eb p\u00ebr komprometimin e plot\u00eb t\u00eb sistemit operativ p\u00ebr t\u00eb instaluar nj\u00eb rrotkit t\u00eb plot\u00eb \u2014 \u00ebsht\u00eb shum\u00eb m\u00eb e leht\u00eb t\u00eb sigurojn\u00eb instalimin e nj\u00eb shtese t\u00eb d\u00ebmshme t\u00eb shfletuesit dhe t\u00eb kontrollojn\u00eb p\u00ebrmes saj rrjedhat e t\u00eb dh\u00ebnave konfidenciale. P\u00ebrve\u00e7 kontrollit t\u00eb t\u00eb dh\u00ebnave tranzite, shtesa mund t\u00eb k\u00ebrkoj\u00eb autorizime p\u00ebr qasje n\u00eb t\u00eb dh\u00ebnat lokale, kamer\u00ebn web, lokacionin. Si\u00e7 tregon praktika, shumica e p\u00ebrdoruesve nuk e v\u00ebn\u00eb re k\u00ebrkes\u00ebn p\u00ebr autorizime, dhe 80% nga 1000 shtesat m\u00eb t\u00eb njohura k\u00ebrkojn\u00eb qasje n\u00eb t\u00eb dh\u00ebnat e t\u00eb gjitha faqeve q\u00eb p\u00ebrpunohen. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Awake Security \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 111 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a Google Chrome, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432, \u0447\u0442\u0435\u043d\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430, \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Cookie \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0432\u0432\u043e\u0434\u0430 \u0432 web-\u0444\u043e\u0440\u043c\u0430\u0445. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u043b\u0438 32.9 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 Chrome Web Store, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85879,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85878","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47111 shtesat e Chrome, t\u00eb shkarkuara 32 milion her\u00eb, jan\u00eb gjendur duke shkarkuar t\u00eb dh\u00ebna t\u00eb ndjeshme | ProHoster","description":"Kompania Awake Security njoftoi p\u00ebr identifikimin","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47111 Chrome-\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 32 \u043c\u043b\u043d \u0440\u0430\u0437, \u0443\u043b\u0438\u0447\u0435\u043d\u044b \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Awake Security \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-19T23:42:41+00:00","article:modified_time":"2020-06-19T23:42:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85878","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:28:23","updated":"2022-09-27 16:37:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=85878"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85878\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/85879"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=85878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=85878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=85878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}