{"id":31452,"date":"2019-10-31T21:41:20","date_gmt":"2019-10-31T18:41:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta\/"},"modified":"2019-10-31T21:41:20","modified_gmt":"2019-10-31T18:41:20","slug":"podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta","title":{"rendered":"Detaljer om den andra hackningen av Matrix. Projektets GPG-nycklar har komprometterats","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nya detaljer har offentliggjorts om hackingen av infrastrukturen f\u00f6r den decentraliserade meddelandeplattformen Matrix, som rapporterades om p\u00e5 morgonen. Den problematiska l\u00e4nken som angriparna utnyttjade var det kontinuerliga integrationssystemet Jenkins, som blev hackat redan den 13 mars. D\u00e4refter f\u00e5ngades en omdirigerad inloggning av en SSH-agent fr\u00e5n en av administrat\u00f6rerna p\u00e5 Jenkins-servern, och den 4 april fick angriparna tillg\u00e5ng till andra servrar i infrastrukturen.<\/p>\n

Vid det andra angreppet omdirigerades webbplatsen matrix.org till en annan server (matrixnotorg.github.io) genom att \u00e4ndra DNS-parametrar, med den API-nyckel som f\u00e5ngades under det f\u00f6rsta angreppet och anv\u00e4ndes f\u00f6r Cloudflares leveranssystem. N\u00e4r inneh\u00e5llet \u00e5teruppbyggdes. servrar<\/a> Efter det f\u00f6rsta hackningen uppdaterade administrat\u00f6rerna av Matrix endast nya personliga nycklar och missade att uppdatera nyckeln f\u00f6r Cloudflare. <\/p>\n

Under det andra angreppet f\u00f6rblev Matrix-servrarna intakta, och \u00e4ndringarna begr\u00e4nsades endast till att byta adresser i DNS. Om anv\u00e4ndaren redan har \u00e4ndrat sitt l\u00f6senord efter det f\u00f6rsta angreppet beh\u00f6vs ingen ytterligare \u00e4ndring. Men om l\u00f6senordet fortfarande inte har \u00e4ndrats, b\u00f6r det uppdateras s\u00e5 snart som m\u00f6jligt, eftersom l\u00e4ckan av databasen med l\u00f6senordshashar \u00e4r bekr\u00e4ftad. F\u00f6r tillf\u00e4llet planeras en tv\u00e5ngs\u00e5terst\u00e4llning av l\u00f6senordet vid n\u00e4sta inloggning.<\/p>\n

F\u00f6rutom l\u00e4ckan av l\u00f6senord har det ocks\u00e5 bekr\u00e4ftats att angriparna f\u00e5tt tag p\u00e5 GPG-nycklar som anv\u00e4nds f\u00f6r att skapa digitala signaturer f\u00f6r paket i Debian-repositoriet och utg\u00e5vorna av Riot\/Web. Nycklarna var l\u00f6senordsskyddade. F\u00f6r n\u00e4rvarande har nycklarna redan \u00e5terkallats. Nycklarna f\u00e5ngades den 4 april, men inga uppdateringar av Synapse har sl\u00e4ppts sedan dess, men en release av klienten Riot\/Web 1.0.7 har gjorts, (en prelimin\u00e4r kontroll visade att den inte hade komprometterats). <\/p>\n

Angriparen publicerade en serie rapporter med detaljer om angreppet p\u00e5 GitHub, men de har tagits bort. \u00c4nd\u00e5 har rapporterna bevarats i arkivet.
\n
K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Matrix, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0443\u0442\u0440\u043e\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0431\u044b\u043b\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 Jenkins, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u0430 \u0435\u0449\u0451 13 \u043c\u0430\u0440\u0442\u0430. \u0417\u0430\u0442\u0435\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 c Jenkins \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 SSH-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0432\u0445\u043e\u0434 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 4 \u0430\u043f\u0440\u0435\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31452","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Detaljer om den andra hackningen av Matrix. GPG-nycklarna f\u00f6r projektet har blivit komprometterade | ProHoster","description":"Nya detaljer har offentliggjorts om hackingen av infrastrukturen f\u00f6r den decentraliserade meddelandeplattformen Matrix, som rapporterades om p\u00e5 morgonen.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u0437\u043b\u043e\u043c Matrix. \u0421\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b GPG-\u043a\u043b\u044e\u0447\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Matrix, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0443\u0442\u0440\u043e\u043c.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:20+00:00","article:modified_time":"2019-10-31T18:41:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31452","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 16:59:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:16:23","updated":"2026-02-09 16:59:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/31452","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=31452"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/31452\/revisions"}],"predecessor-version":[{"id":158549,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/31452\/revisions\/158549"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=31452"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=31452"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=31452"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}