{"id":300223,"date":"2026-03-11T12:27:12","date_gmt":"2026-03-11T12:27:12","guid":{"rendered":"https:\/\/www.europesays.com\/pl\/300223\/"},"modified":"2026-03-11T12:27:12","modified_gmt":"2026-03-11T12:27:12","slug":"wchodzisz-na-strone-gminy-a-tu-zlosliwa-captcha-ktora-infekuje-twoj-komputer","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/pl\/300223\/","title":{"rendered":"Wchodzisz na stron\u0119 gminy &#8211; a tu z\u0142o\u015bliwa CAPTCHA, kt\u00f3ra infekuje Tw\u00f3j komputer"},"content":{"rendered":"<p>Tym razem chodzi o stron\u0119 gminy D\u0142ugo\u0142\u0119ka. Nasz czytelnik poinformowa\u0142 nas o takim incydencie:  wchodzisz na stron\u0119 gmina[.]dlugoleka[.]pl i od razu pojawia si\u0119 pro\u015bba o potwierdzenie, \u017ce jeste\u015b cz\u0142owiekiem:<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" width=\"1000\" height=\"355\" src=\"https:\/\/www.europesays.com\/pl\/wp-content\/uploads\/2026\/03\/u0-1000x355.png\" alt=\"\" class=\"wp-image-55418\"  \/><\/p>\n<p>No dobra, nie ma tu nic podejrzanego, klikamy dalej a tu co\u015b takiego:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" width=\"1014\" height=\"488\" src=\"https:\/\/www.europesays.com\/pl\/wp-content\/uploads\/2026\/03\/u1.png\" alt=\"\" class=\"wp-image-55419\"  \/><\/p>\n<p>W momencie klikni\u0119cia checkboxu na poprzednim zdj\u0119ciu, zainfekowana strona umie\u015bci\u0142a w schowku systemowym Windows z\u0142o\u015bliwe polecenie, a teraz chce nas sk\u0142oni\u0107 do tego \u017ceby\u015bmy je uruchomili!<\/p>\n<ul class=\"wp-block-list\">\n<li>Windows+R (otwiera windowsowe okno dialogowe \u201curuchom\u201d)<\/li>\n<li>Ctrl+V (wkleja polecenie ze schowka)<\/li>\n<li>Enter (wykonuje wklejone polecenie)<\/li>\n<\/ul>\n<p>W ten spos\u00f3b niczego nie\u015bwiadome ofiary infekuj\u0105 sw\u00f3j komputer. Sam Cloudflare nie uczestniczy w ca\u0142ym procederze \u2013 jego logo po prostu zosta\u0142o umieszczone przez atakuj\u0105cych na grafice wy\u017cej \u2013 tak \u017ceby uwiarygodni\u0107 ca\u0142\u0105 akcj\u0119.<\/p>\n<p>Jak w og\u00f3le do tego dosz\u0142o? Mo\u017cliwo\u015bci jest kilka:<\/p>\n<ul class=\"wp-block-list\">\n<li>Prze\u0142amanie zabezpiecze\u0144 strony gminy (czyli tzw. zhackowanie strony, poprzez wykorzystanie podatno\u015bci \u2013 najcz\u0119\u015bciej aplikacyjnych)<\/li>\n<li>Proste has\u0142o administracyjne do systemu<\/li>\n<li>Wyciek has\u0142a administracyjnego \/ przej\u0119cie komputera administratora strony<\/li>\n<\/ul>\n<p>W ka\u017cdym razie o problemie powiadomili\u015bmy CERT Polska, kt\u00f3ry skontaktowa\u0142 si\u0119 z Gmin\u0105.<\/p>\n<p>~ms<\/p>\n","protected":false},"excerpt":{"rendered":"Tym razem chodzi o stron\u0119 gminy D\u0142ugo\u0142\u0119ka. Nasz czytelnik poinformowa\u0142 nas o takim incydencie: wchodzisz na stron\u0119 gmina[.]dlugoleka[.]pl&hellip;\n","protected":false},"author":2,"featured_media":300224,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[20],"tags":[48388,48834,23758,11279,120,118,119,20060,42,38,40,39,41,116,114,115,121,117],"class_list":["post-300223","post","type-post","status-publish","format-standard","has-post-thumbnail","category-nauka-i-technika","tag-awareness","tag-captcha","tag-cloudflare","tag-infekcja","tag-nauka","tag-nauka-i-technika","tag-naukatechnika","tag-phishing","tag-pl","tag-poland","tag-polish","tag-polska","tag-polski","tag-science","tag-science-and-technology","tag-sciencetechnology","tag-technika","tag-technology"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@pl\/116210541862612837","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/posts\/300223","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/comments?post=300223"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/posts\/300223\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/media\/300224"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/media?parent=300223"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/categories?post=300223"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/pl\/wp-json\/wp\/v2\/tags?post=300223"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}