首页 ›资讯› 安全 › 查看内容

成千上万Wordpress网站上发现键盘记录器，你的按键都将被窃取

2018-1-28 14:01 |来自: 互联网 5279 1

摘要: Sucuri的研究人员刚刚发布的一份报告显示，网站又一次被加密货币挖矿代码感染 - 窃取计算机的资源为Monero加密货币挖矿。许多网民几乎肯定没有意识到，他们的笔记本电脑的风扇正在全速运转的原因是因为他们正在查看 ...

Sucuri的研究人员刚刚发布的一份报告显示，网站又一次被加密货币挖矿代码感染 - 窃取计算机的资源为Monero加密货币挖矿。

许多网民几乎肯定没有意识到，他们的笔记本电脑的风扇正在全速运转的原因是因为他们正在查看的网站而被赚取数字货币所必需的复杂数字运算所占用。

但是，这种特殊的攻击不仅仅是对挖掘Monero感兴趣。当网站的前端正用于挖掘加密货币时，网站后端悄悄地运行着一个键盘记录器（keylogger），用于窃取不知情用户的登录凭证。

运行键盘记录器后，受影响网站的网页表单上的任何信息都将被偷偷地发送给黑客。

是的，这包括网站的登录表单。

甚至在用户点击“登录”按钮之前，表单中输入的内容就会发送给黑客。

如果黑客设法窃取网站管理员的凭据，他们将不需要依靠漏洞就能进入该网站，他们可以在世界上任何地方登录（这是为什么WordPress帐号应该采用双因素身份验证的另一个原因）。

正如Bleeping Computer 报道，至少有2000个WordPress站点感染了键盘记录器。除此之外，上个月还有5,500个WordPress站点受到相关攻击。

如果您的网站是使用WordPress的自托管版本，则必须保持它和任何第三方插件的更新。

自托管的WordPress网站在很多方面都很有吸引力，但你必须承认，安全现在是你的责任（或者找一个WordPress技术支持人员为你服务）。软件本身及其成千上万的第三方插件中始终存在新的漏洞。

简而言之，如果您不知道自己在做什么，那么您的WordPress网站就有可能被恶意黑客攻击，这种安全漏洞可能会损害您的品牌，欺骗您的网站访问者，并帮助网络犯罪分子发财。

, groupId: 6515411061993112067, itemId: 6515411061993112067, type: 2, subInfo: { isOriginal: false, source: 安全编程笔记, time: 2018-01-27 06:30:17 }, tagInfo: { tags: [{"name":"WordPress"},{"name":"黑客"},{"name":"数字货币"},{"name":"笔记本电脑"},{"name":"软件"}], groupId: 6515411061993112067, itemId: 6515411061993112067, repin: 0, }, has_extern_link: 0 }, commentInfo: { groupId: 6515411061993112067, itemId: 6515411061993112067, comments_count: 1, ban_comment: 0 }, mediaInfo: { uid: 63164396264, name: 安全编程笔记, avatar: //p1.pstatp.com/large/46e500041bef9b0abcae, openUrl: /c/user/63164396264/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/63164396264/","avatar_url":"https://p1.pstatp.com/large/46e500041bef9b0abcae","media_id":1584319914986510,"name":"安全编程笔记","user_verified":false},"articles":[{"item_id":"6515587246853194248","url":"/item/6515587246853194248","title":"感染数千Wordpress网站的键盘记录器已进化并进一步扩散"},{"item_id":"6515411061993112067","url":"/item/6515411061993112067","title":"成千上万Wordpress网站上发现键盘记录器，你的按键都将被窃取"},{"item_id":"6515000103390937607","url":"/item/6515000103390937607","title":"因消费者对网络安全过分自信，助黑客在2017年窃取了1720亿美元"},{"item_id":"6513526786859483661","url":"/item/6513526786859483661","title":"在有些国家，白帽黑客的收入是软件工程师的16倍"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":1,"media_avatar_url":"//p2.pstatp.com/large/2588/483569061","is_feed_ad":false,"is_diversion_page":false,"title":"中国春节让美国巨亏360亿美元！中国：这锅我不背！","single_mode":true,"gallary_image_count":3,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513753136522330631/","source":"中日韩经济网","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/594c0005460e4d6e1125","group_id":"6513753136522330631","is_related":true,"media_url":"/c/user/3580860133/"},{"comments_count":101,"media_avatar_url":"//p1.pstatp.com/large/3e5b0003e8b7bba867b3","is_feed_ad":false,"is_diversion_page":false,"title":"台湾黑客发现一张动图能宕掉一台服务器，运维这个腊月又要忙了","single_mode":true,"gallary_image_count":5,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6514551846428738055/","source":"海阳顶端","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":231,"image_url":"//p1.pstatp.com/list/190x124/5b4900057373594447ef","group_id":"6514551846428738055","is_related":true,"media_url":"/c/user/3668637589/"},{"comments_count":1,"media_avatar_url":"//p6.pstatp.com/large/5b50000258873a1116a9","is_feed_ad":false,"is_diversion_page":false,"title":"利用蓝牙漏洞开发配对机制，可以完全控制受害者的手机","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6515186232773837315/","source":"互联黑科技","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b5600003800bfc157f6","group_id":"6515186232773837315","is_related":true,"media_url":"/c/user/80335348841/"},{"comments_count":76,"media_avatar_url":"//p1.pstatp.com/large/97e0012de2676b877ce","is_feed_ad":false,"is_diversion_page":false,"title":"橘皮秒破手机指纹锁这是史上最大的漏洞","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6515231479679681038/","source":"网络安全焦点","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":61,"image_url":"//p3.pstatp.com/list/190x124/5b550000f0fd5839c85a","group_id":"6515231479679681038","is_related":true,"media_url":"/c/user/6056786006/"},{"comments_count":9,"media_avatar_url":"//p1.pstatp.com/large/78f0007c459d5fbefb0","is_feed_ad":false,"is_diversion_page":false,"title":"台媒夸赞：大陆有两家芯片开发厂商特别牛都敢于向7纳米工艺挺进","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6514863643434156548/","source":"我为科技狂","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":33,"image_url":"//p1.pstatp.com/list/190x124/5b4d00048bc349918d36","group_id":"6514863643434156548","is_related":true,"media_url":"/c/user/6256375676/"},{"comments_count":29,"media_avatar_url":"//p3.pstatp.com/large/150e00114bd31e060560","is_feed_ad":false,"is_diversion_page":false,"title":"那些年非常火的十大黑客工具，你了解多少？","single_mode":true,"gallary_image_count":9,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6514996753190617608/","source":"Vzerda与你看科技","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":14,"image_url":"//p9.pstatp.com/list/190x124/5b5500019d7cb61ce8af","group_id":"6514996753190617608","is_related":true,"media_url":"/c/user/3314156587/"},{"comments_count":501,"media_avatar_url":"//p1.pstatp.com/large/16ab0000c69444edcb31","is_feed_ad":false,"is_diversion_page":false,"title":"干货，这些强大的电影网站你必须收藏","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6513143018562781710/","source":"木子淇","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":892,"image_url":"//p1.pstatp.com/list/190x124/594a0004852ea42c46cf","group_id":"6513143018562781710","is_related":true,"media_url":"/c/user/50517704788/"},{"comments_count":241,"media_avatar_url":"//p3.pstatp.com/large/39b300034d7935c074cb","is_feed_ad":false,"is_diversion_page":false,"title":"比特币挖矿疯狂背后——深圳华强北第一次站在了金字塔顶端","single_mode":true,"gallary_image_count":6,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6514531586195587597/","source":"区块链研究员威廉","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b4b0000cfc26aedcfe6","group_id":"6514531586195587597","is_related":true,"media_url":"/c/user/68499938991/"},{"comments_count":115,"media_avatar_url":"//p1.pstatp.com/large/16ab0000c69444edcb31","is_feed_ad":false,"is_diversion_page":false,"title":"干货，那些不为人知的搜索网站","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6513734621719429640/","source":"木子淇","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":92,"image_url":"//p9.pstatp.com/list/190x124/5b420002d94c97ea394b","group_id":"6513734621719429640","is_related":true,"media_url":"/c/user/50517704788/"},{"comments_count":98,"media_avatar_url":"//p1.pstatp.com/large/4e7e0000e00c08fd9fa9","is_feed_ad":false,"is_diversion_page":false,"title":"智能门锁风险最大的一个功能，大家尽量不要使用！","single_mode":true,"gallary_image_count":6,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6514897585923162631/","source":"引石老王","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":34,"image_url":"//p3.pstatp.com/list/190x124/5b4f0003d1b9da847343","group_id":"6514897585923162631","is_related":true,"media_url":"/c/user/80970293455/"},{"comments_count":101,"media_avatar_url":"//p2.pstatp.com/thumb/1721/4741882840","is_feed_ad":false,"is_diversion_page":false,"title":"比特币骗局暴露！美国操控比特币坑遍全世界","single_mode":true,"gallary_image_count":0,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513820721032987139/","source":"市商","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":145,"image_url":"//p3.pstatp.com/list/190x124/5b4400009cf0cdbbad58","group_id":"6513820721032987139","is_related":true,"media_url":"/c/user/3729135290/"},{"comments_count":46,"media_avatar_url":"//p1.pstatp.com/large/46df000543be162998a8","is_feed_ad":false,"is_diversion_page":false,"title":"推荐收藏！搜索资源、视频、电子书等，可试试这几个网站","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6513798956923748868/","source":"斜杠指南","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":20,"image_url":"//p9.pstatp.com/list/190x124/5b4400003caacdb79e7a","group_id":"6513798956923748868","is_related":true,"media_url":"/c/user/60540586285/"},{"comments_count":61,"is_related":true,"is_feed_ad":false,"is_diversion_page":false,"title":"有哪些网站可以查看行业数据？","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6515342532015030542/","source":"悟空问答","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5517000974a41c481365","group_id":"6515342532015030542"},{"comments_count":16,"media_avatar_url":"//p9.pstatp.com/large/4e6600021bf7af0a890f","is_feed_ad":false,"is_diversion_page":false,"title":"网赚新手：定位虚拟产品，走这么一个躺赚流程","single_mode":true,"gallary_image_count":9,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6515153332951056899/","source":"阿力推推2018","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5b50000423dc85334f67","group_id":"6515153332951056899","is_related":true,"media_url":"/c/user/56056629673/"},{"comments_count":28,"media_avatar_url":"//p3.pstatp.com/large/7169/8138447564","is_feed_ad":false,"is_diversion_page":false,"title":"这15个图片网站，至少让你的效率翻一倍！「图片资源网站」","single_mode":true,"gallary_image_count":16,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6515183179639292423/","source":"实习僧","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5b5000049cca458f9c78","group_id":"6515183179639292423","is_related":true,"media_url":"/c/user/5004526122/"},{"comments_count":24,"media_avatar_url":"//p3.pstatp.com/large/509a000322bf5b75f6f6","is_feed_ad":false,"is_diversion_page":false,"title":"淘宝运营：不开车快速打爆手淘首页流量，30天从0到10000访客","single_mode":true,"gallary_image_count":11,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6515600528427188744/","source":"我的运营笔记","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/5b5400047f7b430cb427","group_id":"6515600528427188744","is_related":true,"media_url":"/c/user/71910629213/"},{"comments_count":14,"media_avatar_url":"//p2.pstatp.com/large/567e0005a82191203196","is_feed_ad":false,"is_diversion_page":false,"title":"为什么iOS不开放降级？苹果官方公布了这些理由","single_mode":true,"gallary_image_count":6,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6515676289427309063/","source":"王石头","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p1.pstatp.com/list/190x124/5b52000548ec742f0ad5","group_id":"6515676289427309063","is_related":true,"media_url":"/c/user/5523563493/"},{"comments_count":314,"media_avatar_url":"//p3.pstatp.com/large/bc3000723916dbde449","is_feed_ad":false,"is_diversion_page":false,"title":"中俄封杀比特币后，俄罗斯或突然变脸反转，加拿大韩国更是急红眼","single_mode":true,"gallary_image_count":4,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513772867832775172/","source":"BWC中文网","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":391,"image_url":"//p3.pstatp.com/list/190x124/3b0d0001f8ce773aa486","group_id":"6513772867832775172","is_related":true,"media_url":"/c/user/3628653603/"},{"comments_count":372,"media_avatar_url":"//p8.pstatp.com/large/4e63000148c54ab885ec","is_feed_ad":false,"is_diversion_page":false,"title":"中国再次紧急叫停！比特币“挖矿”用电量超过全球100多个国家？","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6515648388552196622/","source":"金十数据","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":247,"image_url":"//p1.pstatp.com/list/190x124/5b5500048871d96552db","group_id":"6515648388552196622","is_related":true,"media_url":"/c/user/5543660331/"},{"comments_count":176,"media_avatar_url":"//p8.pstatp.com/large/249c001e1c62cb72c8f0","is_feed_ad":false,"is_diversion_page":false,"title":"区块链硬件设备异军突起，到底谁才是真正的区块链落地项目？","single_mode":true,"gallary_image_count":5,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6513754656621986308/","source":"暴走互联网","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/5b430002ac88d9666865","group_id":"6513754656621986308","is_related":true,"media_url":"/c/user/62310633936/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/item/6515411061993112067/, abstract: Sucuri的研究人员刚刚发布的一份报告显示，网站又一次被加密货币挖矿代码感染-窃取计算机的资源为Monero加密货币挖矿。

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除