{"id":7216,"date":"2023-12-02T10:19:34","date_gmt":"2023-12-02T10:19:34","guid":{"rendered":"https:\/\/musilda.cz\/?p=7216"},"modified":"2023-12-02T10:19:34","modified_gmt":"2023-12-02T10:19:34","slug":"phishing-scam-e-mail-vyzyva-uzivatele-k-instalaci-falesneho-wordpress-pluginu","status":"publish","type":"post","link":"https:\/\/affinite.io\/cs\/phishing-scam-e-mail-vyzyva-uzivatele-k-instalaci-falesneho-wordpress-pluginu\/","title":{"rendered":"Phishing scam e-mail vyz\u00fdv\u00e1 u\u017eivatele k instalaci fale\u0161n\u00e9ho WordPress pluginu"},"content":{"rendered":"\n

Phishing je jeden z „nejkonverzn\u011bj\u0161\u00edch“ typ\u016f podvodu v online prost\u0159ed\u00ed. S minimem n\u00e1klad\u016f, lze dos\u00e1hnout zna\u010dn\u00fdch zisk\u016f a proto se tyto podvody za\u010d\u00ednaj\u00ed zam\u011b\u0159ovat i na oblasti, kde to d\u0159\u00edve nebylo b\u011b\u017en\u00e9, jako jsou u\u017eivatel\u00e9 WordPressu.<\/p>\n\n\n\n

Ned\u00e1vno Wordfence Threat Intelligence t\u00fdm obdr\u017eel informace o podvodn\u00e9 kampani c\u00edlen\u00e9 na WordPress u\u017eivatele. V t\u00e9to kampani je rozes\u00edl\u00e1n fale\u0161n\u00fd e-mail, kter\u00fd se tv\u00e1\u0159\u00ed, \u017ee poch\u00e1z\u00ed od WordPress t\u00fdmu a upozor\u0148uje na \u00fadajnou zranitelnost umo\u017e\u0148uj\u00edc\u00ed vzd\u00e1len\u00e9 spou\u0161t\u011bn\u00ed k\u00f3du na str\u00e1nk\u00e1ch u\u017eivatele. Tato zranitelnost je ozna\u010dena identifik\u00e1torem CVE-2023-45124, kter\u00fd v\u0161ak moment\u00e1ln\u011b nen\u00ed platn\u00fd. E-mail d\u00e1le nab\u00e1d\u00e1 p\u0159\u00edjemce k sta\u017een\u00ed a instalaci dopl\u0148ku s n\u00e1zvem „Patch“, kter\u00fd je sou\u010d\u00e1st\u00ed scamu.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Odkaz Download Plugin p\u0159esm\u011bruje ob\u011b\u0165 na velmi p\u0159esv\u011bd\u010divou fale\u0161nou c\u00edlovou str\u00e1nku na adrese cs-gb-wordpress[.]org:<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Pokud ob\u011b\u0165 st\u00e1hne tento dopln\u011bk a nainstaluje ho na sv\u016fj WordPress web, dopln\u011bk se instaluje pod n\u00e1zvem wpress-security-wordpress a p\u0159id\u00e1 \u0161kodliv\u00e9ho administr\u00e1tora s u\u017eivatelsk\u00fdm jm\u00e9nem wpsecuritypatch. N\u00e1sledn\u011b odes\u00edl\u00e1 URL adresu str\u00e1nky a vygenerovan\u00e9 heslo pro tohoto u\u017eivatele na \u0159\u00edd\u00edc\u00ed dom\u00e9nu: wpgate[.]zip. \u0160kodliv\u00fd dopln\u011bk tak\u00e9 obsahuje funkci, kter\u00e1 zaji\u0161\u0165uje, \u017ee tento u\u017eivatel z\u016fstane skryt\u00fd. Krom\u011b toho stahuje samostatn\u00fd backdoor z wpgate[.]zip a ukl\u00e1d\u00e1 jej pod n\u00e1zvem wp-autoload.php do ko\u0159enov\u00e9ho adres\u00e1\u0159e webu. Tento samostatn\u00fd backdoor obsahuje pevn\u011b nastaven\u00e9 heslo a zahrnuje spr\u00e1vce soubor\u016f, SQL klienta, PHP konzolu a p\u0159\u00edkazovou \u0159\u00e1dku, nav\u00edc zobrazuje informace o serverov\u00e9m prost\u0159ed\u00ed.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

To umo\u017e\u0148uje \u00fato\u010dn\u00edk\u016fm udr\u017eet si trval\u00fd p\u0159\u00edstup prost\u0159ednictv\u00edm n\u011bkolika forem p\u0159\u00edstupu, co\u017e jim d\u00e1v\u00e1 plnou kontrolu nad WordPress str\u00e1nkou stejn\u011b jako nad u\u017eivatelsk\u00fdm \u00fa\u010dtem na serveru.<\/p>\n\n\n\n

Z\u00e1v\u011br<\/h2>\n\n\n\n

P\u0159esto\u017ee se m\u016f\u017ee e-mail na prvn\u00ed pohled jevit jako prav\u00fd, bu\u010fte velmi opatrn\u00ed, na co klik\u00e1te a bez porady s va\u0161\u00edm webmasterem nic do WordPressu neinstalujte. V\u017edy kontrolujte url, kam odkaz vede a p\u0159i podez\u0159en\u00ed, je lep\u0161\u00ed ned\u011blat nic, ne\u017e riskovat napaden\u00ed webu.<\/p>\n\n\n\n

Zdroj: Wordfence<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Phishing je jeden z „nejkonverzn\u011bj\u0161\u00edch“ typ\u016f podvodu v online prost\u0159ed\u00ed. S minimem n\u00e1klad\u016f, lze dos\u00e1hnout zna\u010dn\u00fdch zisk\u016f a proto se tyto podvody za\u010d\u00ednaj\u00ed zam\u011b\u0159ovat i na oblasti, kde to d\u0159\u00edve nebylo b\u011b\u017en\u00e9, jako jsou u\u017eivatel\u00e9 WordPressu. Ned\u00e1vno Wordfence Threat Intelligence t\u00fdm obdr\u017eel informace o podvodn\u00e9 kampani c\u00edlen\u00e9 na WordPress u\u017eivatele. V t\u00e9to kampani je rozes\u00edl\u00e1n<\/p>\n","protected":false},"author":1,"featured_media":1775,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[6],"tags":[],"class_list":["post-7216","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bezpecnost-wordpressu"],"_links":{"self":[{"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/posts\/7216"}],"collection":[{"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/comments?post=7216"}],"version-history":[{"count":0,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/posts\/7216\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/media\/1775"}],"wp:attachment":[{"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/media?parent=7216"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/categories?post=7216"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/affinite.io\/cs\/wp-json\/wp\/v2\/tags?post=7216"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}