{"id":85878,"date":"2020-06-20T01:42:41","date_gmt":"2020-06-19T23:42:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh"},"modified":"2020-06-20T01:42:41","modified_gmt":"2020-06-19T23:42:41","slug":"111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh","title":{"rendered":"111 shtes\u00eb Chrome, t\u00eb shkarkuara 32 milion her\u00eb, jan\u00eb zbuluar se ngarkojn\u00eb t\u00eb dh\u00ebna t\u00eb ndjeshme","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Awake Security Tha<\/a><\/noindex> p\u00ebr identifikimin e 111 shtesave<\/a><\/noindex> p\u00ebr Google Chrome, q\u00eb d\u00ebrgojn\u00eb t\u00eb dh\u00ebna t\u00eb ndjeshme t\u00eb p\u00ebrdoruesve n\u00eb server\u00eb t\u00eb jasht\u00ebm. K\u00ebto shtesa kishin qasje n\u00eb krijimin e skrin\u00ebshoot-eve, leximin e p\u00ebrmbajtjes s\u00eb clipboard-it, analiz\u00ebn e pranishm\u00ebris\u00eb s\u00eb tokeneve t\u00eb qasjes n\u00eb cookie dhe kapjen e hyrjes n\u00eb formular\u00ebt web. N\u00eb total, shtesat malinje t\u00eb identifikuara num\u00ebronin 32.9 milion shkarkime n\u00eb Chrome Web Store, nd\u00ebrsa m\u00eb e popullarizuar (S\u00ebarch Manager) \u00ebsht\u00eb shkarkuar 10 milion her\u00eb dhe p\u00ebrmban 22 mij\u00eb komente.<\/p>\n

E supozuar \u00ebsht\u00eb se t\u00eb gjitha shtesat e shqyrtuara jan\u00eb p\u00ebrgatitur nga nj\u00eb ekip i vet\u00ebm hakerash, pasi n\u00eb t\u00eb gjitha u p\u00ebrdor<\/a><\/noindex> ka nj\u00eb skem\u00eb t\u00eb zakonshme p\u00ebr shp\u00ebrndarjen dhe organizimin e kapjes s\u00eb t\u00eb dh\u00ebnave t\u00eb ndjeshme, si dhe kan\u00eb elemente t\u00eb p\u00ebrbashk\u00ebta t\u00eb dizajnit dhe kodin e p\u00ebrs\u00ebritur. 79 shtesa<\/a><\/noindex> me nje kod t\u00eb d\u00ebmsh\u00ebm ishin vendosur n\u00eb katalogun e Chrome Store dhe tashm\u00eb ishin fshir\u00eb pas d\u00ebrgimit t\u00eb njoftimit p\u00ebr aktivitetin e d\u00ebmsh\u00ebm. Shum\u00eb shtesa t\u00eb d\u00ebmshme kopjonin funksionalitetin e shtesave t\u00eb njohura, duke p\u00ebrfshir\u00eb ato t\u00eb destinuara p\u00ebr t\u00eb ofruar mbrojtje shtes\u00eb p\u00ebr shfletuesin, rritjen e privat\u00ebsis\u00eb gjat\u00eb k\u00ebrkimit, konvertimin e PDF-ve dhe konvertimin e formateve.<\/p>\n

\"111<\/a><\/noindex><\/center><\/p>\n

Zhvilluesit e shtesave fillimisht vendosnin n\u00eb Chrome Store nj\u00eb version t\u00eb past\u00ebr pa kod t\u00eb d\u00ebmsh\u00ebm, kalonin rishikimin, dhe pastaj n\u00eb nj\u00eb nga p\u00ebrdit\u00ebsimet e tyre shtonin ndryshime q\u00eb ngarkonin kod t\u00eb d\u00ebmsh\u00ebm pas instalimit. P\u00ebr t\u00eb fshehur gjurm\u00ebt e aktivitetit t\u00eb d\u00ebmsh\u00ebm, gjithashtu p\u00ebrdorej teknika e p\u00ebrgjigjeve selektive \u2014 me k\u00ebrkes\u00ebn e par\u00eb ofrohej nj\u00eb shkarkim t\u00eb d\u00ebmsh\u00ebm, nd\u00ebrsa me k\u00ebrkesat e m\u00ebpasshme jepeshin t\u00eb dh\u00ebna q\u00eb nuk ngjallnin dyshime. <\/p>\n

\"111<\/a><\/noindex><\/center><\/p>\n

Si rrug\u00eb kryesore p\u00ebr shp\u00ebrndarjen e plot\u00ebsimeve keqdash\u00ebse, jan\u00eb p\u00ebrmendur promovimi i faqeve q\u00eb duken profesionalisht (si\u00e7 \u00ebsht\u00eb edhe n\u00eb imazhin m\u00eb posht\u00eb) dhe vendosja n\u00eb Chrome Web Store, duke anashkaluar mekanizmat e kontrollit p\u00ebr ngarkimin e kodit nga faqe t\u00eb jashtme. P\u00ebr t\u00eb anashkaluar kufizimet n\u00eb instalimin e plot\u00ebsimeve vet\u00ebm nga Chrome Web Store, sulmuesit shp\u00ebrndan\u00eb variante t\u00eb ve\u00e7anta t\u00eb Chromium me plot\u00ebsime t\u00eb instaluara m\u00eb par\u00eb, si dhe realizuan instalimin p\u00ebrmes aplikacioneve reklamuese q\u00eb tashm\u00eb ishin t\u00eb pranishme n\u00eb sistem (Adware). K\u00ebrkuesit analizuan 100 rrjete t\u00eb kompanive financiare, mediatike, mjek\u00ebsore, farmaceutike, naft\u00eb-gaz dhe tregtare, si dhe institucionesh arsimore dhe shtet\u00ebrore, dhe pothuajse n\u00eb t\u00eb gjitha k\u00ebto u zbuluan gjurm\u00eb t\u00eb pranis\u00eb s\u00eb k\u00ebtyre plot\u00ebsimeve keqdash\u00ebse. <\/p>\n

\"111<\/a><\/noindex><\/center><\/p>\n

Gjat\u00eb fushat\u00ebs p\u00ebr shp\u00ebrndarjen e plot\u00ebsimeve keqdash\u00ebse u regjistruan m\u00eb shum\u00eb se 15 mij\u00eb domen\u00eb<\/a><\/noindex>, q\u00eb p\u00ebrputhen me faqet e njohura (si gmaille.com, youtubeunblocked.net etj.) ose jan\u00eb regjistruar pas skadimit t\u00eb afatit t\u00eb rinovimit t\u00eb domeneve ekzistuese. K\u00ebto domene gjithashtu jan\u00eb p\u00ebrdorur n\u00eb infrastruktur\u00ebn e menaxhimit t\u00eb aktivitetit t\u00eb d\u00ebmsh\u00ebm dhe p\u00ebr ngarkimin e inserteve t\u00eb d\u00ebmshme JavaScript, t\u00eb ekzekutuara n\u00eb kontekstin e faqeve t\u00eb hapura nga p\u00ebrdoruesi.<\/p>\n

K\u00ebrkuesit dyshuan p\u00ebr nj\u00eb marr\u00ebveshje me regjistruesin e domain-eve Galcomm, ku ishin regjistruar 15 mij\u00eb domene p\u00ebr veprime t\u00eb d\u00ebmshme (60% e t\u00eb gjitha domain-eve t\u00eb dh\u00ebna nga ky regjistrues), por p\u00ebrfaq\u00ebsuesit e Galcomm e mohuan<\/a><\/noindex> k\u00ebt\u00eb supozim dhe theksuan se 25% e domeneve t\u00eb p\u00ebrmendura tashm\u00eb jan\u00eb eliminuar ose jan\u00eb dh\u00ebn\u00eb nga jo Galcomm, nd\u00ebrsa shumica e t\u00eb tjerave jan\u00eb domene t\u00eb parkuara pa aktivitet. P\u00ebrfaq\u00ebsuesit e Galcomm gjithashtu njoftuan se para publikimit t\u00eb raportit, askush nuk e kishte kontaktuar ata, dhe kishin marr\u00eb nj\u00eb list\u00eb t\u00eb domain-eve t\u00eb p\u00ebrdorura p\u00ebr q\u00ebllime t\u00eb d\u00ebmshme nga nj\u00eb pal\u00eb t\u00eb tret\u00eb dhe tani po b\u00ebjn\u00eb shqyrtimin e tyre.<\/p>\n

Studimet e zhvilluara tregojn\u00eb se k\u00ebrkuesit e problemeve krahasojn\u00eb shtesat e d\u00ebmshme me nj\u00eb rreth t\u00eb ri - aktiviteti kryesor i shum\u00eb p\u00ebrdoruesve realizohet p\u00ebrmes shfletuesit, i cili ofron qasje n\u00eb depozit\u00eb t\u00eb p\u00ebrbashk\u00ebt dokumentesh, sisteme informacioni t\u00eb korporatave dhe sh\u00ebrbimeve financiare. N\u00ebn k\u00ebto kushte, kriminel\u00ebt nuk e kan\u00eb kuptuar nevoj\u00ebn p\u00ebr t\u00eb k\u00ebrkuar m\u00ebnyra p\u00ebr t\u00eb komprometuar plot\u00ebsisht sistemin operativ p\u00ebr t\u00eb instaluar nj\u00eb rreth t\u00eb plot\u00eb - \u00ebsht\u00eb shum\u00eb m\u00eb e leht\u00eb t\u00eb arrijn\u00eb instalimin e nj\u00eb shtese t\u00eb d\u00ebmshme n\u00eb shfletues dhe t\u00eb kontrollojn\u00eb n\u00ebp\u00ebrmjet saj rrjedhjet e t\u00eb dh\u00ebnave t\u00eb ndjeshme. P\u00ebrve\u00e7 kontrollit t\u00eb t\u00eb dh\u00ebnave n\u00eb transit, shtesa mund t\u00eb k\u00ebrkoj\u00eb autorizime p\u00ebr qasje n\u00eb t\u00eb dh\u00ebnat lokale, web-kamerat, vendndodhjen. Si\u00e7 tregon praktika, shumica e p\u00ebrdoruesve nuk e kushtojn\u00eb v\u00ebmendje k\u00ebrkesave p\u00ebr autorizim, dhe 80% nga 1000 shtesat m\u00eb t\u00eb njohura k\u00ebrkojn\u00eb qasje n\u00eb t\u00eb dh\u00ebnat e t\u00eb gjitha faqeve t\u00eb p\u00ebrpunuara. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Awake Security \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 111 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a Google Chrome, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432, \u0447\u0442\u0435\u043d\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430, \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Cookie \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0432\u0432\u043e\u0434\u0430 \u0432 web-\u0444\u043e\u0440\u043c\u0430\u0445. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u043b\u0438 32.9 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 Chrome Web Store, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85879,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85878","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47111 shtesa Chrome, t\u00eb shkarkuara 32 milion her\u00eb, jan\u00eb kapur duke ngarkuar t\u00eb dh\u00ebna t\u00eb fshehta | ProHoster","description":"Kompania Awake Security njoftoi se zbuloi 111 shtesave p\u00ebr Google Chrome q\u00eb d\u00ebrgojn\u00eb t\u00eb dh\u00ebna t\u00eb fshehta t\u00eb p\u00ebrdoruesit n\u00eb servera t\u00eb jasht\u00ebm. K\u00ebto shtesa kishin qasje n\u00eb krijimin e screenshot-eve, leximin e p\u00ebrmbajtjes s\u00eb clipboard-it, analiz\u00ebn e pranishm\u00ebris\u00eb s\u00eb tokeneve t\u00eb aksesit n\u00eb Cookie dhe kapjen e inputeve n\u00eb formatet web. N\u00eb total, shtesat e d\u00ebmshme t\u00eb zbuluara num\u00ebronin 32.9 milion shkarkime n\u00eb Chrome Web Store,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47111 Chrome-\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 32 \u043c\u043b\u043d \u0440\u0430\u0437, \u0443\u043b\u0438\u0447\u0435\u043d\u044b \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Awake Security \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 111 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u043a Google Chrome, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432, \u0447\u0442\u0435\u043d\u0438\u044e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430, \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Cookie \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0432\u0432\u043e\u0434\u0430 \u0432 web-\u0444\u043e\u0440\u043c\u0430\u0445. \u0412 \u0441\u0443\u043c\u043c\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u043b\u0438 32.9 \u043c\u043b\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 Chrome Web Store,","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/111-chrome-dopolnenij-zagruzhennyh-32-mln-raz-ulicheny-v-zagruzke-konfidenczialnyh-dannyh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-19T23:42:41+00:00","article:modified_time":"2020-06-19T23:42:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85878","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:28:23","updated":"2022-09-27 16:37:49"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=85878"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85878\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/85879"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=85878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=85878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=85878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}