Khampani ea Tsoha Security mabapi le ho tsebahatsa ho Google Chrome, ho romella lintlha tsa lekunutu ho li-server tsa kantle. Li-add-on li ne li boetse li na le monyetla oa ho nka linepe, ho bala se ka har'a clipboard, ho sekaseka boteng ba li-tokens tsa phihlello ho li-Cookie, le ho kenya letsoho liforomong tsa webo. Ka kakaretso, likeketso tse mpe tse bonts'itsoeng li bile teng ho khoasollotsoe ka limilione tse 32.9 Lebenkeleng la Webo la Chrome, 'me tse tsebahalang haholo (Motsamaisi oa Lipatlisiso) li jarollotsoe makhetlo a limilione tse 10 mme li kenyelletsa maikutlo a likete tse 22.
Ho nahanoa hore litlatsetso tsohle tse nkiloeng li lokiselitsoe ke sehlopha se le seng sa bahlaseli, kaha ho tsohle moralo o tloaelehileng oa ho aba le ho hlophisa ho ts'oaroa ha data ea lekunutu, hammoho le likarolo tse tloaelehileng tsa moralo le khoutu e pheta-phetoang. tse nang le khoutu e mpe li kentsoe lethathamong la Lebenkele la Chrome mme li se li hlakotsoe ka mor'a ho romella tsebiso mabapi le ts'ebetso e mpe. Li-add-on tse ngata tse mpe li kopitsitse ts'ebetso ea li-add-on tse fapaneng tse tsebahalang, ho kenyeletsoa tse reretsoeng ho fana ka ts'ireletso e eketsehileng ea sebatli, ho eketsa lekunutu la ho batla, ho fetolela PDF, le ho fetolela sebopeho.
Baetsi ba li-add-on ba ile ba qala ka ho beha mofuta o hloekileng ntle le khoutu e mpe Lebenkeleng la Chrome, ba hlahlojoa ke lithaka, 'me ba eketsa liphetoho ho e' ngoe ea lintlafatso tse kentseng khoutu e mpe ka mor'a ho e kenya. Ho pata mesaletsa ea ts'ebetso e mpe, ho ile ha sebelisoa mokhoa o ikhethileng oa ho arabela - kopo ea pele e khutlisitse khoasollo e mpe, 'me likopo tse latelang li khutlisitse data e sa belaetseng.
Mekhoa ea mantlha eo litlatsetso tse mpe li phatlalalitsoeng ka tsona ke ka ho nts'etsapele libaka tse shebahalang hantle (joalo ka setšoantšong se ka tlase) le ho beoa Lebenkeleng la Webo la Chrome, ho feta mekhoa ea netefatso bakeng sa ho khoasolla khoutu ho tsoa libakeng tsa kantle. E le ho qoba lithibelo tsa ho kenya li-add-on feela ho tloha Lebenkeleng la Websaete la Chrome, bahlaseli ba ile ba aba likopano tse arohaneng tsa Chromium le li-add-on tse kentsoeng pele, 'me ba li kenya ka lisebelisoa tsa papatso (Adware) tse seng li ntse li le teng tsamaisong. Bafuputsi ba ile ba hlahlobisisa marang-rang a 100 a lichelete, mecha ea litaba, bongaka, meriana, oli le khase le lik'hamphani tsa khoebo, hammoho le mekhatlo ea thuto le ea mmuso, 'me ba fumana mesaletsa ea boteng ba li-add-on tse mpe hoo e ka bang kaofela ha tsona.
Nakong ea letšolo la ho aba li-add-on tse kotsi, ho feta , ho kena-kenana le libaka tse tummeng (mohlala, gmaille.com, youtubeunblocked.net, joalo-joalo) kapa ho ngolisoa ka mor'a ho fela ha nako ea ho nchafatsa libaka tse neng li le teng pele. Likarolo tsena li ile tsa sebelisoa hape molemong oa taolo ea ts'ebetso e mpe le ho khoasolla tse kentsoeng tse mpe tsa JavaScript tse kentsoeng maemong a maqephe ao mosebelisi a a butseng.
Bafuputsi ba belaella morero oa bolotsana le sengoli sa marang-rang sa Galcomm, moo libaka tse likete tse 15 tsa mesebetsi e kotsi li ngolisitsoeng (60% ea libaka tsohle tse fanoeng ke mongolisi enoa), empa baemeli ba Galcomm. Mehopolo ena e bonts'itse hore 25% ea libaka tse thathamisitsoeng li se li hlakotsoe kapa ha lia fanoa ke Galcomm, 'me tse ling kaofela ke libaka tse pakiloeng tse sa sebetseng. Baemeli ba Galcomm le bona ba tlalehile hore ha ho motho ea ileng a ikopanya le bona pele ho phatlalatsoa phatlalatsa tlaleho, mme ba fumane lethathamo la libaka tse sebelisetsoang merero e mpe ho tsoa ho motho oa boraro mme joale ba ntse ba etsa tlhahlobo ea bona ho tsona.
Bafuputsi ba hlokometseng bothata ba bapisa li-add-on tse mpe le rootkit e ncha - mosebetsi o ka sehloohong oa basebelisi ba bangata o etsoa ka sebatli, seo ka sona ba fumanang polokelo ea litokomane tse arolelanoang, mekhoa ea boitsebiso ba lik'hamphani le litšebeletso tsa lichelete. Maemong a joalo, ha ho utloahale hore bahlaseli ba batle mekhoa ea ho sekisetsa ka botlalo sistimi ea ts'ebetso e le ho kenya rootkit e felletseng - ho bonolo haholo ho kenya sebatli se kotsi le ho laola phallo ea data ea lekunutu eona. Ntle le ho beha leihlo lintlha tsa lipalangoang, tlatsetso e ka kopa tumello ea ho fumana data ea lehae, kh'amera ea tepo kapa sebaka. Joalokaha tloaelo e bontša, basebelisi ba bangata ha ba ele hloko litumello tse kopiloeng, 'me 80% ea li-add-on tse tsebahalang tse 1000 li kopa ho fumana lintlha tsa maqephe ohle a sebetsitsoeng.
Source: opennet.ru