惡意軟件攻擊採礦網站。

in #cn7 years ago

maxresdefault.jpg
超過4000個網站已經通過受到威脅的第三方JavaScript庫感染了cryptomining惡意軟件。
站點可以確保通過使用HTML腳本標記中的“子資源完整性”屬性,第三方庫不會被篡改。

根據安全研究人員斯科特·赫爾梅 的說法,在美國,英國和澳大利亞的政府網站在第三方服務遭到破壞之後,一直在為遊客提供惡意軟件服務。被Coinhive cryptocurrency礦工感染。

在英國,受影響的網站包括信息專員辦公室,學生貸款公司和英國國民健康服務(NHS)蘇格蘭;在美國,uscourts.gov 並在澳大利亞昆士蘭州政府門戶網站。
所有這些網站使用的受損服務是 Browsealoud JavaScript 庫,這使得通過屏幕閱讀和翻譯工具訪問網站成為可能。

Helme說,事件證明了沒有正確保護加載到第三方託管的 JavaScript 庫中的頁面的危險,特別是因為這些庫是誘惑黑客的目標。

他寫道:“如果你想在1000多個網站上加載一個加密礦工,你不會攻擊1000多個網站,你會攻擊他們全部加載內容的網站。

Sort:  

Woff, woff!

Hello @sufiyanaliiqbal, Nice to meet you!

I'm a guide dog living in KR community. I can see that you want to contribute to KR community and communicate with other Korean Steemians. I really appreciate it and I'd be more than happy to help.

KR tag is used mainly by Koreans, but we give warm welcome to anyone who wish to use it. I'm here to give you some advice so that your post can be viewed by many more Koreans. I'm a guide dog after all and that's what I do!

Tips:

  • If you're not comfortable to write in Korean, I highly recommend you write your post in English rather than using Google Translate.
    Unfortunately, Google Translate is terrible at translating English into Korean. You may think you wrote in perfect Korean, but what KR Steemians read is gibberish. Sorry, even Koreans can't understand your post written in Google-Translated Korean.
  • So, here's what might happen afterward. Your Google-Translated post might be mistaken as a spam so that whales could downvote your post. Yikes! I hope that wouldn't happen to you.
  • If your post is not relevant to Korea, not even vaguely, but you still use KR tag, Whales could think it as a spam and downvote your post. Double yikes!
  • If your post is somebody else's work(that is, plagiarism), then you'll definitely get downvotes.
  • If you keep abusing tags, you may be considered as a spammer. It may result to put you into the blacklist. Oops!

I sincerely hope that you enjoy Steemit without getting downvotes. Because Steemit is a wonderful place. See? Korean Steemians are kind enough to raise a guide dog(that's me) to help you!

Woff, woff! 🐶

kr-guide!