{"id":114076,"date":"2024-03-03T12:26:03","date_gmt":"2024-03-03T10:26:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom"},"modified":"2024-03-03T12:26:03","modified_gmt":"2024-03-03T10:26:03","slug":"na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","title":{"rendered":"Mer \u00e4n 100 000 f\u00f6rr\u00e5d med skadlig kod uppt\u00e4cktes p\u00e5 GitHub","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

S\u00e4kerhetsforskare fr\u00e5n Apiiro har uppt\u00e4ckt aktivitet fr\u00e5n angripare som l\u00e4gger upp modifierade kloner av olika projektarsipter p\u00e5 GitHub, d\u00e4r sm\u00e5 \u00e4ndringar g\u00f6rs f\u00f6r att utf\u00f6ra skadliga handlingar. Vanligtvis skapas det skadliga arkivet under samma namn men kopplat till en annan organisation (\"github.org\/org1\/proj\" -> \"github.org\/org2\/proj\"), eller med ett namn som \u00e4r n\u00e5got annorlunda \u00e4n originalet (typo-squatting), i hopp om att offret inte m\u00e4rker skillnaden och anv\u00e4nder koden med de skadliga \u00e4ndringarna. F\u00f6r att locka anv\u00e4ndare placeras l\u00e4nkar till de skadliga arkiven aktivt p\u00e5 olika sociala medier, forum och chattar. <\/p>\n

Det rapporteras om att mer \u00e4n 100 000 s\u00e5dana arkiv har uppt\u00e4ckts, men enligt forskarna kan det totala antalet publicerade arkiv med skadliga \u00e4ndringar uppg\u00e5 till miljoner, eftersom den \u00f6verv\u00e4gande delen av automatiskt skapade arkiv raderas av GitHub inom n\u00e5gra timmar efter publiceringen. Bland de m\u00f6nster som kan anv\u00e4ndas f\u00f6r att identifiera f\u00f6rekomsten av skadliga inslag i uppladdade arkiv n\u00e4mns: exec(Fernet exec(requests exec(__import exec(bytes exec(\u201c\u201d\u201c\nimport exec(compile __import__(\u201cbuiltins\u201d).exec( <\/p>\n

Den bifogade skadliga koden \u00e4r en modifierad version av BlackCap-Grabber, som vid aktivering s\u00f6ker efter konfidentiella uppgifter s\u00e5som kontoinst\u00e4llningar, tokens, sparade l\u00f6senord i webbl\u00e4sare och cookies, och skickar dem till server<\/a> angriparna. Den skadliga koden st\u00f6djer ocks\u00e5 omdirigering av kryptovalutaadresser som \u00f6verf\u00f6rs via urklipp, kan ta sk\u00e4rmdumpar och ta emot kommandon fr\u00e5n en kontrollserver servern<\/a> (C&C)
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Apiiro \u0432\u044b\u044f\u0432\u0438\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 GitHub \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u043e\u043d\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u0441 \u0442\u0435\u043c \u0436\u0435 \u0438\u043c\u0435\u043d\u0435\u043c, \u043d\u043e \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u044b\u043c \u043a \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 («github.org\/org1\/proj» -> «github.org\/org2\/proj»), \u0438\u043b\u0438 \u0441 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u043e\u0442 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u0430 \u0438\u043c\u0435\u043d\u0435\u043c (\u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0438\u043d\u0433), \u0441 \u0440\u0430\u0441\u0447\u0451\u0442\u043e\u043c, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114076","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mer \u00e4n 100 000 lagrar med skadlig kod har p\u00e5tr\u00e4ffats p\u00e5 GitHub | ProHoster","description":"S\u00e4kerhetsforskare fr\u00e5n Apiiro har uppt\u00e4ckt aktiviteter fr\u00e5n angripare som laddar upp modifierade kloner av olika projekt p\u00e5 GitHub, d\u00e4r sm\u00e5 f\u00f6r\u00e4ndringar har gjorts.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430 GitHub \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Apiiro \u0432\u044b\u044f\u0432\u0438\u043b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 GitHub \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u043e\u043d\u044b \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/na-github-vyyavleno-bolee-100-tysyach-repozitoriev-s-vredonosnym-kodom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-03T10:26:03+00:00","article:modified_time":"2024-03-03T10:26:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114076","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-22 15:29:46","updated":"2026-02-22 15:29:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/114076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=114076"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/114076\/revisions"}],"predecessor-version":[{"id":172914,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/114076\/revisions\/172914"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=114076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=114076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=114076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}