{"id":6409,"date":"2014-10-18T12:39:57","date_gmt":"2014-10-18T12:39:57","guid":{"rendered":"http:\/\/megahost.ro\/blog\/?p=6409"},"modified":"2014-10-18T12:39:57","modified_gmt":"2014-10-18T12:39:57","slug":"un-nou-tip-de-atac-permite-descarcarea-fisierelor-fara-a-fi-uploadate","status":"publish","type":"post","link":"https:\/\/megahost.ro\/blog\/un-nou-tip-de-atac-permite-descarcarea-fisierelor-fara-a-fi-uploadate.html","title":{"rendered":"Un nou tip de atac permite descarcarea fisierelor fara a fi uploadate"},"content":{"rendered":"

\"8589130484164-warning-signs-danger-wallpaper-hd\"<\/a>In cazul celor mai multe atacuri web, malware-ul este descarcat pe calculatoarele victimelor de pe un server compromis sau care este folosit in scopuri rau intentioante. Cu toate acestea, un cercetator a descoperit un nou tip de atac in care fisierul malware este descarcat fara ca acesta sa fie uploadat nicaieri.<\/p>\n

Oren Hafif, cercetator de securitate in cadrul companiei Trustwave, va prezenta noul tip de atac web, pe care acesta il numeste Reflected File Download (RFD)<\/strong>, la conferinta de securitate Black Hat Europe, care va avea loc la sfarsitul acestei saptamani in Amsterdam, Olanda.<\/p>\n

Similar cu alte tipuri de atacuri web, cum ar fi cross-site scripting (XSS), RFD presupune ca victima sa dea click pe un link malitios, actiune care are ca rezultat descarcarea unui fisier malware pe computerul vizat.<\/p>\n

Potrivit cercetatorului, acest tip de atac este periculos pentru ca URL-ul creat de atacator pointeaza catre site-uri de incredere, cum ar fi Google.com si Bing.com. Hafif spune ca a identificat cel putin 20 de site-uri cu profil inalt care sunt vulnerabile la atacuri RFD.<\/p>\n

Odata ce malware-ul este instalat pe sistem, acesta poate efectua o gama larga de actiuni cu privilegii de administrator, la nivelul sistemului de operare. De exemplu, un atacator poate executa comenzi care ii permit sa instaleze alte tipuri de malware, sa fure date din sesiunile de navigare ale victimei sau sa obtina controlul complet asupra computerului vizat. De asemenea, se pot executa scripturi malware si se pot exploata vulnerabilitati din alte software-uri instalate pe sistemul infectat.<\/p>\n

Sursa<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

In cazul celor mai multe atacuri web, malware-ul este descarcat pe calculatoarele victimelor de pe un server compromis sau care este folosit in scopuri rau intentioante. Cu toate acestea<\/p>\n","protected":false},"author":1,"featured_media":6410,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47,5,121],"tags":[687,114,684,689],"class_list":["post-6409","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet","category-securitate-online","category-software","tag-internet","tag-malware","tag-securitate-online","tag-software"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"Un nou tip de atac permite descarcarea fisierelor fara a fi uploadate | megahost.ro","description":"In cazul celor mai multe atacuri web, malware-ul este descarcat pe calculatoarele victimelor de pe un server compromis sau care este folosit in scopuri rau intentioante. Cu toate acestea","canonical_url":"https:\/\/megahost.ro\/blog\/un-nou-tip-de-atac-permite-descarcarea-fisierelor-fara-a-fi-uploadate.html","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null},"aioseo_meta_data":{"post_id":"6409","title":"Un nou tip de atac permite descarcarea fisierelor fara a fi uploadate | megahost.ro","description":"In cazul celor mai multe atacuri web, malware-ul este descarcat pe calculatoarele victimelor de pe un server compromis sau care este folosit in scopuri rau intentioante. Cu toate acestea","keywords":[{"label":"malware","value":"malware"},{"label":"securitate online","value":"securitate online"},{"label":"software","value":"software"}],"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-20 22:18:48","updated":"2025-06-04 04:49:18","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"

\n\t\t\tHome<\/a>\n\t\t<\/span>\u00bb<\/span>\n\t\t\tSecuritate Online<\/a>\n\t\t<\/span>\u00bb<\/span>\n\t\t\tUn nou tip de atac permite descarcarea fisierelor fara a fi uploadate\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/megahost.ro\/blog\/"},{"label":"Securitate Online","link":"https:\/\/megahost.ro\/blog\/category\/securitate-online"},{"label":"Un nou tip de atac permite descarcarea fisierelor fara a fi uploadate","link":"https:\/\/megahost.ro\/blog\/un-nou-tip-de-atac-permite-descarcarea-fisierelor-fara-a-fi-uploadate.html"}],"_links":{"self":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/6409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/comments?post=6409"}],"version-history":[{"count":0,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/6409\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media\/6410"}],"wp:attachment":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media?parent=6409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/categories?post=6409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/tags?post=6409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}