荣耀彩票代理

  • JS特效 http://chsp8.com/js/
  • JS特效代码也有可能导致信息泄露

    发布日期:2019-01-29 08:34:00


       现在的安全性实在是太差劲了,我们现在面对网络的快速进步感到高兴又害怕,高兴的是现在的网络如此的发展迅速给我们带来了不小的帮助,害怕的事就是因为网络这样快速的发展也给我们的数据信息安全性带来了很大的威胁。
     英国航空公司( British Airways,以下简称英航)发布声明称因遭黑客攻击从而导致其乘客数据被盗。在BBC的采访中,英航指出,经初步调查,约有38万乘客数据在此交数据泄露事件中受到影响,这些被盗数据信息包括个人基本信息和付款记录,但不包括个人护照信息。 
     随后,英航在其网站上发表了一篇文章,解释了该事件的相关细节和一些乘客担心的问题,该篇文章涉及的技术细节较少,但包括了以下信息:

      · TONGGUOYINGHANGGUANWANGJINXINGFUKUANCAOZUODECHENGKEXIANGGUANXINXISHOUDAOYINGXIANG

    荣耀彩票代理  · TONGGUOYINGHANGSHOUJIAPPYINGYONGJINXINGFUKUANCAOZUODECHENGKEXIANGGUANXINXISHOUDAOYINGXIANG

      · SHOUYINGXIANGDEFUKUANCHENGKESHIJIANDUANDAYUEWEI2018NIAN8YUE21RIWAN22:58ZHI2018NIAN9YUE5RIWAN21:45

      YINGHANGZAIWENZHONGBIAOMING,GONGJIZHECONGQIGUANWANGHEYIDONGYINGYONGCHENGXUZHONGQIEQULEYISHANGCHENGKESHUJUXINXI,DANBINGWEITIJIGENGDUOSHUJUKUHUOFUWUQIBEIRUQINDEYOUJIAZHIXIANSUO。YINWEIYINGHANGDEBEIDAOXINXIJINYUCHENGKEDEFUKUANJILUXIANGGUAN,KAOLVDAOXINYONGKASHUJUQIEQUDEQIANKE,WOMENDUICHOUMINGZHAOZHUDEWANGLUOFANZUIJITUANMagecartYOULEHUAIYI。

      在此之前,英国老牌票务网站Ticketmaster就报告过一起与英航类似的数据泄露事件,之后,我们RiskIQ调查清楚了整个事件。因为我们可以对涉事方官网进行网页抓取和互联网行为分析,因此我们团队可以扩展涉事时间段,发现比一些公开报告更多的被攻击网站。本文中,我们将对9月6日公开的英航数据被盗事件,进行前后15天的时间线扩展调查。

      Magecart: YIGECHOUMINGZHAOZHUDEWANGLUOFANZUIJITUAN

      ZI2016NIANYILAI,RiskIQDUIJINXINGWANGLUOXINYONGKAQIEQUDEZUZHIMagecartJINXINGLEDUOCIBAODAO。CHUANTONGSHANGLAISHUO,FANZUIFENZIHUISHIYONGYIZHONGKAPIANDUQUQIDEDONGXI,YINZANGFUJIAZAIWOMENPINGSHIYONGDAODEATMJI、JIAYOUZHANHEQITASHUAKASHEBEIZHONG,YICILAIQIEQUYONGHUXINYONGKAXINXI,BINGJINXINGKAPIANDAOSHUAHUOGERENXINXIZHUANMAI。ERXIANZAI,MagecartSHIYONGDESHIGEZHONGZAIXIANDIANZIQIEQUFANGSHILAISHIXIANYONGHUXINXIDAOQU。

      MagecartHUIDUIYIXIEZAIXIANYONGHUZHIFUWANGZHANZHURUJIAOBEN,HUORUQINYIXIEZHIFUXIANGGUANDEDISANFANGGONGYINGSHANGWANGZHAN,YICILAIQIEQUYONGHUSHUJU。JINQI,MagecartGONGJIZHEJIUTONGGUORUQINLEYIGEDISANFANGGONGNENGYINGYONG,RANHOUZAIYINGGUOPIAOWUWANGZHANTicketmasterSHANGZHIRULEYIGEZAIXIANDEXINYONGKADUQUJIAOBEN,CONGERDAOZHILETicketmasterDALIANGSHUJUXIELU。ZHENGJUBIAOMING,ZAITicketmasterZHIHOU,MagecartBAGONGJIMUBIAOZHUANXIANGLEYINGGUOHANGKONGGONGSI(British Airways)。

      YINGHANGSHUJUXIELUSHIJIANDIAOCHA

      WANGZHANYONGHUXINXIQIEQU

      DIAOCHAGANGKAISHI,LIYONGWOMENZIJIDEMagecartJIANCEMOSHI,WOMENBAMagecartHEYINGHANGSHUJUXIELUSHIJIANJINXINGLESHIPEIGUANLIAN。DUIWOMENLAISHUO,MagecartDEGONGJIFEICHANGCHANGJIAN,YIZHIYUZAIDIAOCHAGANGKAISHI,JIHUMEIXIAOSHIDOUNENGXIANGYINGDAOMagecartXIANGYINGHANGWANGZHANZHIRUDEKAPIANDUQUDAIMA。

      DUIRiskIQDEFENXIHOUDUANLAISHUO,QIYEMIANZHUAQUGUIMOSHIYIXIANGZHIDEKENDINGDENENGLI,WOMENMEITIANDEWANGYEZHUAQULIANGHUIDADAO20YIYE,BINGNENGZIDONGLEIJI,LINGWAIYOUYUHENDUOXIANDAIWANGZHANQINGXIANGYUSHIYONGJavaLAISHIXIANJIAZHANFUWU,SUOYI,WOMENZHIXUJIAZAIYINGHANGGONGSIWANGZHANDE20GEZUOYOUJIAOBENHE30GEZUOYOUDEYUDINGZIYEMIANJIUKEYILE。30GEYEMIANSUIRANBUDUO,DANQIZHONGDADUODOUSHISUOXIAODEYOUSHUQIANXINGDAIMADEJIAOBENYEMIAN。

      ZAIGAISHIJIANFENXIZHONG,WOMENJUEDINGJIZHONGJINGLISHIBIEYINGHANGGONGSIWANGZHANSHANGDEMEIGEJIAOBEN,YANZHENGWANGZHANSHANGDESUOYOUDUTEJIAOBEN,BINGZAIGAIGUOCHENGZHONGJIANCHAJIAOBENDEGEZHONGBIANHUAXINGWEI。ZUIZHONG,WOMENBUHUODAOLEQIZHONGYIGEJIAOBENmodernizr-2.6.2.min.jsDEBIANHUAXINGWEI,GENJUZHUAQUJILUXIANSHI,GAIJIAOBENSHIModernizr JavaKU2.6.2DEYIGEGENGGAIBANWENJIAN,YINGHANGGONGSIWANGZHANDECHENGKEXINGLIRENLINGYEMIANHUIJIAZAIGAIJIAOBEN。

    荣耀彩票代理  GAIJIAOBENMINGXIANDEBIANHUAZAIQIBUDAIMA,ZHEISHIGONGJIZHEGUANYONGDEXIUGAIJavaWENJIAN,SHIXIANGONGNENGPOHUAIMUDEDEJISHU。QIZHONGYIXIEXIAODEJIAOBENBIAOQIANYINQILEWOMENDEZHUYI

    荣耀彩票代理  ZHIHOU,WOMENZAIYINGHANGGONGSIWANGZHANFUWUQIFASONGDE“FUWUQITOUXINXI”ZHONGFAXIANLEGENGDUOZHENGJU,QIZHONGDE ‘Last-Modified’ BIAOMINGLEWENJIANJINGTAINEIRONGDEZUIJINYICIXIUGAISHIJIAN。GENJUWOMENDEZHUAQUJILUXIANSHI,ZHENGCHANGDEYINGHANGGONGSIWANGZHANmodernizr-2.6.2.min.jsWENJIANDETOUXINXIZHONG,‘Last-Modified’RIQIWEI2012NIAN12YUE18RI。

      DANZAIYINGHANGGONGSIDANGQIANWANGZHANDE,JINGGUOXIUGAIDEEYImodernizr-2.6.2.min.jsWENJIANZHONG,QITOUXINXIZHONGDE ‘Last-Modified’ SHIJIANCHUOYUYINGHANGDIAOCHAHOUJICHUDESHUJUXIELUSHIJIANDIANYIZHI-2018NIAN8YUE21RI

    泄露

      YIXIASHIEYIDEmodernizr-2.6.2.min.jsJIAOBENWENJIANTUSHI,TAZHIYOU22XINGJavaDAIMA,DANQUERANG38WANCHENGKESHUJUZAODAOQIEQU:

    荣耀彩票代理  ​SHIJILAISHUO,GAIJIAOBENFEICHANGJIANDANSHIYONG,WENJIANZHONGDEMEIGEYUANSUJIAZAIWANCHENGZHIHOU,JIANGHUIJINXINGYIXIACAOZUO:

    荣耀彩票代理  YONGYIXIAHUIDIAODAIMABAmouseupHEtouchendSHIJIANKUNBANGDAOsubmitButtonANNIUSHANG:

    荣耀彩票代理  · YONGidWEIpaymentFormDEXINGSHIJIANGSHUJUXULIEHUADAOYIGEZIDIANZHONG

      · YONGidWEIpersonPayingDEXINGSHIBAYEMIANTIAOMUXULIEHUA,BINGGUILEIWEIpaymentFormXINXI,BINGGUIRUZHIQIANDETONGYIGEZIDIANZHONG

      · YONGZHEIXIEXULIEHUASHUJUZHIZUOCHUYIGEWENBENZIFUCHUANWENJIAN

      · YONGJSONXINGSHIBAWENJIANSHUJUFASONGDAOGONGJIZHEJIASHEDEbaways.comWANGZHAN

    荣耀彩票代理  ZAISHIJICAOZUOZHONG,mouseupHEtouchendSHIJIANDAIBIAOLEZAIXIANYONGHUZAIWANGYEHUOSHOUJIAPPZHONG,DIANJIHUOTIJIAOLEMOUGEANNIUCAOZUO,RANHOUFANGKAISHUBIAOHUOLIKAISHOUJIPINGMUZHIHOUDECAOZUO。YEJIUSHISHUO,YIDANYONGHUDIANJILEYINGHANGGONGSIWANGZHANHUOAPPJINXINGFUKUANANNIUTIJIAOZHIHOU,QIFUKUANBIAODANZHONGDEXINXIJIANGHUIBEIEYIDAIMATIQU,HUIFUZHIYIFENFASONGDAOGONGJIZHEDEJIASHEFUWUQIbaways.comZHONG。

      YUWOMENGUOQUDUIMagecartZUZHIDEXINGWEIFENXIXIANGBI,ZHEIZHONGGONGJISHIYIZHONGJIANDANJIJUZHENDUIXINGDECAOZUO。QIZHONGZHIRUDEXINYONGKAQIEQUQIDAIMANENGWANQUANYUYINGHANGGONGSIWANGZHANFUKUANYEMIANSHIPEISHENGXIAO,KEYIKANCHU,MagecartMEIYOUCAIYONGCHANGGUIDEZHIRUDAIMA,DUIGAIWANGZHANDERUQINGONGJIWANQUANYOUZHEJINGXINDEKAOLV。

    荣耀彩票代理  JINGDIAOCHAFAXIAN,GONGJIZHEZAICICIGONGJIZHONGSHIYONGDEWANGLUOJIAGOU,WANQUANSHIWEIYINGHANGGONGSIDUSHENDAZAOBUSHUDE,TABAEYIJIAOBENYUFUKUANGONGNENGJINXINGLEWANMEIRONGHE,DADABIMIANLEBEIFAXIANHUAIYIDEKENENG。WOMENZAIGONGJIZHEJIASHEDEFUWUQI baways.comSHANGFAXIANLEYIXIEZHENGJUHEFEIQILUJING,GAIFUWUQITUOGUANZAILUOMANIYAIPDIZHI89.47.162.248SHANG。DANSHIJISHANG,GAIIPSHUYULITAOWANVPSGONGYINGSHANGTime4VPSSUOYOU,GONGJIZHESHIYONGSSLZHENGSHUJINXINGFUWUQIDENGLU。GENGYOUYISIDESHI,WEILEKANQILAIXIANGGEHEFADEFUWUQI,GONGJIZHEWEIYONGMIANFEIDELetsEncrypt ZHENGSHU,ERSHISHIYONGLEYIGEFUFEIDEComodoZHENGSHU。

    荣耀彩票代理  ZHEIGEMagecartSHIYONGDEFUFEIZHENGSHUSHI8YUE15RIBANFADE,JIANJIEBIAOMINGLE,MagecartGONGJIZHEKENENGZAI8YUE21RIQIANDEHENZHANGSHIJIANFANWEINEIJIUNENGRUQINKONGZHIYINGHANGGONGSIWANGZHANLE。YOUYUDUIZISHENWANGLUOZICHANMEIYOUMINGQUEDESHIBIEPANDUAN,YINGHANGGONGSIZUIZHONGMEINENGJIANCEDAOZHEIZHONGWANGZHANRUQINGONGJI。

    荣耀彩票代理  YIDONGAPPDEYONGHUSHUJUQIEQU

      在英航公司的安全公告中,它强调网站渠道和移动应用APP渠道的付款用户都受到了信息泄露影响。我们识别出了攻击者对网站用户数据的窃取方式,那么对移动端的窃取方式又是什么呢?我们先来看看英航公司的官方Android应用APP

      TONGCHANG,KAIFAZHEZAIKAIFAYIGEYIDONGAPPSHI,HUIYULIUYIGEKONGBAIDEshellQUYIBIANCONGQITADIFANGBANEIRONGJIAZAIJINLAI。ZAIZHEILIDEYINGHANGAPPZHONG,YOUYIBUFENAPPZUJIANSHIYUANSHENGDE,DANDABUFENGONGNENGDOUSHICONGYINGHANGGUANWANGJIAZAIGUOLAIDE。GAIYIDONGAPPZHONGYINGYONGLEYIZUBUTONGDETONGXUNZHUJIYUYINGHANGGUANWANGFUWUJIAOLIU

    荣耀彩票代理  SHIYONGAPIDEMUDEZAIYU,APPWEILEZAIUISHANGJINXINGKUAISUDESHUJUGENGXIN,DANYAOJINXINGYIXIESOUSUO、YUDINGHEGUANLIHANGBANCAOZUO,APPJIUDEDIAOYONGYINGHANGGUANWANGFUWULE,BIRUDIAOYONGYINGHANGGUANWANGDEYIGELUJING

    荣耀彩票代理  GAIDIAOYONGYEMIANGONGNENGWEI,CHENGKEXUANZELEBUTONGGUOJIABUTONGJICHANGZHIHOUDEFEIYONGQINGQIU,TAXIANSHIDEYEMIAN

    荣耀彩票代理  XIANZAI,WOMENLAIRENZHENKANKANZHEIGEYEMIANDEYUANDAIMA,YIFAXIANYIGEFEICHANGYOUYISIDEDIFANG-GAIYEMIANHEYINGHANGGUANWANGDEZUCHENGYIYANG,DOUSHIYOUCSSHEJavaZUJIANGOUCHENGDE,YEJIUSHIQISHEJIHEGONGNENGYUYINGHANGGUANWANGWANQUANLEISI。GUANJIANSHIZHEILIRENGRANBEIZHIRULEZHIQIANWOMENFENXIDEEYIJIAOBENmodernizr-2.6.2.min.js,GONGJIZHEJIUSHILIYONGZHEIGEJIAOBENZAICISHISHILEDUIYIDONGAPPYONGHUDESHUJUQIEQU

    荣耀彩票代理  ZHIDEZHUYIDEYIDIANSHI,MagecartGONGJIZHELIYONGLEZHIQIANDE touchend HUIDIAOSHIJIANSHIXIANLESHUJUQIEQU,SUOYI,BENZHISHANGLAIJIANG,ZHEIZHONGGONGJIJIANDANGAOXIAOYEFEICHANGSHIYONG。

      ZONGJIE

      ZHENGRUZAIYISHANGGONGJISHIJIANFENXIZHONGSUOKANDAODENEIYANG,MagecartTONGGUODINGZHIDE,YOUMUDEDEWANGLUOJIAGOUZIYUAN,YUYINGGUOHANGKONGGONGSIWANGZHANGONGNENGWANMEIRONGHE,WEIZHUANGDEJINHUTIANYIWUFENG。MUQIAN,WOMENWUFADEZHIGONGJIZHEZAIYINGGUOHANGKONGGONGSIWANGZHANFUWUQISHANGDESUOQIEQUDEJUTINEIRONG,DANTAMENJUBEIWANGZHANZIYUANWENJIANDEXIUGAIQUANXIANSHIXIANGDANGKEPADE,ERQIEGONGJIZHEZAIZHENZHENGSHUJUQIEQUZHIQIANJIUKENENGYIJINGDUIWANGZHANXINGCHENGLERUQIN,ZHEIDUIYINGHANGCUNZAILOUDONGDEWANGLUOZICHANLAISHUOSHIGEJINGTI。

    荣耀彩票代理  ZI2015NIANYILAI,RiskIQJIUYIZHIDUIMagecartZUZHIDEGONGJIHEFAQILEYUJING,YEJIANGJIXUGENZONGBAODAOQIKENENGDEGONGJISHIJIAN。MagecartDUIYINGHANGDEGONGJIBUXIANGDUIPIAOWUWANGZHANTicketmasterNEIYANGDEDISANFANGGONGJI,DANQUEYINFALEDUIDANGQIANYIXIEZHIFUANQUANWENTIDEZHIYI。SHOUJIYINGYONGGERENMINGANCAIWUSHUJUDEGONGSIYINGGAIHAOHAOKAOLVYIXIAZISHENDEXINXIANQUANXINGSHI,DANGRANHAIYAODUIYONGHUTIJIAODEZHIFUXINXIJINXINGYANGEKONGZHI。

      SHIBUSHIKANDAONEIMEDEDUODEZIXUNKANBUGUOLAILE,MEITIANWOMENDOUHUIZAICIJIDAJIAFENXIANGHEJIESHAOBUTONGDEXIANGGUANZIXUN,NIDOUHUIZAIWOMENDEWANGZHANKANDAOTADECUNZAI,GANXIENIMENDEZHICHIHEHEZUO,WOMENZHONGXINDEGANXIENIDESHIKEGUANZHU,WOMENJIANGHUICHENGXINCHENGYIWEINIDAILAIZUIXINXIAOXI。

    • 专题推荐

    次元立方 - 广告服务 - 隐私声明 - 版权申明 - 免责条款 - 网站地图 - 网友投稿 - 联系方式
    本站内容来自于互联网,仅供用于网络技术学习,学习中请遵循相关法律法规