{"id":106247,"date":"2022-12-23T15:36:48","date_gmt":"2022-12-23T13:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass"},"modified":"2022-12-23T15:36:48","modified_gmt":"2022-12-23T13:36:48","slug":"utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","title":{"rendered":"L\u00e4ckage av s\u00e4kerhetskopior med anv\u00e4ndardata fr\u00e5n LastPass.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Utvecklarna av l\u00f6senordshanteraren LastPass, som anv\u00e4nds av mer \u00e4n 33 miljoner personer och \u00f6ver 100 000 f\u00f6retag, har informerat anv\u00e4ndarna om en incident d\u00e4r angripare lyckades f\u00e5 tillg\u00e5ng till s\u00e4kerhetskopior av anv\u00e4ndardata fr\u00e5n tj\u00e4nsten. Datat inkluderade information som anv\u00e4ndarnamn, adress, e-post, telefonnummer och IP-adresser som anv\u00e4ndes f\u00f6r inloggning till tj\u00e4nsten, samt oskyddade webbplatsnamn som sparats i l\u00f6senordshanteraren och inloggningar, l\u00f6senord, formul\u00e4rdata och anteckningar om dessa webbplatser som lagrades i krypterad form. <\/p>\n

F\u00f6r att skydda inloggningar och l\u00f6senord anv\u00e4ndes AES-kryptering med en 256-bitars nyckel, som genererades med hj\u00e4lp av PBKDF2-funktionen baserad p\u00e5 ett endast f\u00f6r anv\u00e4ndaren k\u00e4nt huvudl\u00f6senord, som \u00e4r minst 12 tecken l\u00e5ngt. Kryptering och dekryptering av inloggningar och l\u00f6senord i LastPass utf\u00f6rs endast p\u00e5 anv\u00e4ndarens sida, och att kn\u00e4cka huvudl\u00f6senordet betraktas som orealistiskt med modern utrustning, med tanke p\u00e5 storleken p\u00e5 huvudl\u00f6senordet och det antal iterationer av PBKDF2 som anv\u00e4nds. <\/p>\n

F\u00f6r att genomf\u00f6ra attacken anv\u00e4nde angriparna data som de f\u00e5tt vid en tidigare attack som intr\u00e4ffade i augusti och genomf\u00f6rdes genom att kompromettera ett av utvecklarnas konton. Augustis hack ledde till att angriparna fick tillg\u00e5ng till utvecklingsmilj\u00f6n, k\u00e4llkoden f\u00f6r applikationen och teknisk information. Senare visade det sig att angriparna utnyttjade data fr\u00e5n utvecklingsmilj\u00f6n f\u00f6r att attackera en annan utvecklare, vilket gjorde att de lyckades f\u00e5 nycklar till cloud-lagring och nycklar f\u00f6r att dekryptera data fr\u00e5n de lagrade containrarna. I de komprometterade moln servrar<\/a> fanns fullst\u00e4ndiga s\u00e4kerhetskopior av data fr\u00e5n den aktiva tj\u00e4nsten.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 33 \u043c\u043b\u043d \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c \u043a\u043e\u043f\u0438\u044f\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u0414\u0430\u043d\u043d\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430\u0434\u0440\u0435\u0441, email, \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u0432\u0445\u043e\u0434 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106247","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Data\u00f6vertr\u00e4delser med s\u00e4kerhetskopior fr\u00e5n LastPass-anv\u00e4ndare | ProHoster","description":"Utvecklarna av l\u00f6senordshanteraren LastPass, som anv\u00e4nds av mer \u00e4n 33 miljoner personer och \u00f6ver 100 000 f\u00f6retag, har informerat anv\u00e4ndarna om en incident d\u00e4r angripare lyckades f\u00e5 tillg\u00e5ng till s\u00e4kerhetskopior.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 LastPass | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 33 \u043c\u043b\u043d \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-23T13:36:48+00:00","article:modified_time":"2022-12-23T13:36:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/106247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=106247"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/106247\/revisions"}],"predecessor-version":[{"id":164429,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/106247\/revisions\/164429"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=106247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=106247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=106247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}