نقص جدید در افزونه Elementor وردپرس و در حال استفاده در بیش از یک میلیون سایت فعال

?? ????? ??????? ?????? ???? ???? ????? ?? ?????????? ?????? ?? ?????? ????? ?????? Essential Addons for Elementor ??? ??? ???[?] ?? ???????? ?? ??? ?????? ???? ??????? ?? ???????? ???? ?? ???????? ????????? ???? ??????????? ???? ????.

??? ???? ?? ?? ??? CVE-2023-32243 ????? ??????? ???? ?????????????? ?????? ?? ???? ????? ?? ?? ?? ?? ???? ????? ??? ????? ??? ???. Essential Addons ???? Elementor ??? ?? ?? ?????? ??? ???? ????.

???? ????? ???? Patchstack? ?? ??? ???? ???[?]: «??? ?????? ?? ?????????? ?????? ???????? ????? ???? ??? ?????? ? ?? ?? ????? ????? ???? ????? ?????? ?? ?????? ??? ?? ?? ?? ????? ?? ???? ?????? ?????? ???.»

??????????? ??????????? ?? ??? ??? ???????? ?? ?? ???? ????? ????? ??? ?? ??? ???? ?? ????? ?????? ?? ???????? ???? ?? ????? ?? ??? ???? ?? ??? ?????? ??? ???? ????. ?????? ?? ??? ??? ?? ??? ??? ?? ???? ????? ???? ????? ???.

??? ??? ???????? ????? ??? ????? ???? ???? ???????? ???? ???????? ??? ???? ????? ?? ???? ?????? ? ?? ????????? ????? ???? ??????? ??????????? ???? ????.

???? ???????? ???: «??? ?????????? ?? ??? ???? ?? ?????? ?? ??? ???? ???????? ??? ???? ???? ???????? ??? ???? ?? ????? ??????? ? ?? ??? ???????? ??? ???? ????? ??????? ?? ????? ??????».

??? ??????? ??? ?? ?? ??? ?? ?? ?? ???? ??????? ?? Patchstack ??? ???? ????? ?? ?? ???? ?????? ??? ???[?] ?? ????????? ???? ????? ?? ?????? ?? ??????????? ?? ???? ??????????? ???? ????.

??? ???????? ?????? ?? ????? ??? ??? ????? ?? ?????? ??? ?? ???????? ?????? ?? ?? ????? ???? ???? ??? ???? ??????? ?? ??? ????? ????? ???????? ????? [?]SocGholish (????? ?? FakeUpdates) ???.

[?]SocGholish ?? framework[6] ???????[?] ???? ???????[?] ??? ?? ???????? ?? ??????????? ?????? ????? ???? ????? ????? ??????? ????? ?? ?????????? ????? ??? ??????. ??? ??????? ?? ???? ????????? drive-by ?? ??? ??????????? ?????? ?? ????? ??? ???.

???????? ?????? ?? ???? Sucuri ??????? ??? ???? ?? ????????? ?????????? ?? ??????? ?? ???????? ?????????? ?? ??? zlib ???? ?????????? ???????? ???? ????? ?? ? ??????? ?? ??????? ??????? ??????.

???? ????????? ???? Sucuri? ?? ??? ???[?]: «???????? ?? ?? ??? ????? ?????????? ???????? ? ???????? ??? ?? ???? ???? ?? ??????? ? ?????? ??? ????????? ???????? ??? ????? ???????.»

??????? SocGholish ????? ???? ??? ???? ???? ???? ??????? ?????? ??? ?? ???????[??] ???? ????? ??????????? ???? ?? ??????????? ?????? ?? ???? ??? ????? ????????[??].

??? ??? SocGholish ????. Malwarebytes? ?? ?? ????? ??? ?? ???? ????? ?? ????? ?? ???????? ?? ????? ??? ?? ?? ????????????? ?????????? ????????[??] ????? ?????? ?? ?? ??????????? ???? ?????? ?? ????????? ?????? ?? ??????? «in2al5d p3in4er» (????? ?? ????? ???????) ?? ??? ???.

???? ?????? ???? ??????? ??????? ?? Malwarebytes? ?? ??? ???? ???[??]: «??? ??? ????? ??? ????? ??? ???? ???? ???? ????? ?? ??????? ???? ???? ?? ????? ???? ???? ?? ?????????? ?????? ?????? ?? ?????? ?? ???? ???.»

??? loader ?? ??? ????? ???? Morphisec ????????? ??[??]? ????? ??? ??? ?? ???? ?????? ????? ?? ????? ??? ?? ???? ??? ?? ??? ?? ?? ????? ????? ?? ??? ???? ??? ?? ?? ?? ???? sandbox? ? ?? ????? ??????? ???? ??????? Aurora[15] ?? ?????????? ??????.

??? ????? ?? ??? ?? ??? ????? ??? ?????? ????? ??? ?? ???? ???? ????? ??? ?? ???? ?????????????? ???????? ??? ? ??? ????? ? ????? ??? Amadey[16] ????? ???.

?????????? ????? ???? ??? ?????? Elementor ?? ??? ???? ???? ??????????? ???? ????????.

Wordfence ?? ????? ??? ???[??] ?? ?????????? ????? ?? ?????? Essential Addons for Elementor ?? ??? ???? ?? ??? ??????? ???? ??????????? ???? ??????? ? ??? ???? ?? ??? ??? ?? ??? ???? ??????? ?? ?? ???? ????? ????? ???? ? ??? ???? ????? ??? ?? ??????? ??????? ???? ??????????? ?? ????? ???? ????? ????.

?????

[?] https://wordpress.org/plugins/essential-addons-for-elementor-lite

[?] https://patchstack.com/articles/critical-privilege-escalation-in-essential-addons-for-elementor-plugin-affecting-1-million-sites

[?] https://apa.aut.ac.ir/?p=8705

[?] https://thehackernews.com/2023/03/cybercriminals-targeting-law-firms-with.html

[?] https://redcanary.com/threat-detection-report/threats/socgholish

[?] https://www.proofpoint.com/us/blog/threat-insight/part-1-socgholish-very-real-threat-very-fake-update

[?] https://www.cybereason.com/blog/threat-analysis-report-socgholish-and-zloader-from-fake-updates-and-installers-to-owning-your-systems

[?] https://www.sentinelone.com/labs/socgholish-diversifies-and-expands-its-malware-staging-infrastructure-to-counter-defenders

[?] https://blog.sucuri.net/2023/05/xjquery-wave-of-wordpress-socgholish-injections.html

[??] https://blog.sucuri.net/2022/08/socgholish-5-years-of-massive-website-infections.html

[??] https://blog.sucuri.net/2022/11/new-socgholish-malware-variant-uses-zip-compression-evasive-techniques.html

[??] https://www.malwarebytes.com/blog/threat-intelligence/2022/12/adult-popunder-campaign-used-in-mainstream-ad-fraud-scheme

[??] https://www.malwarebytes.com/blog/threat-intelligence/2023/05/fake-system-update-drops-new-highly-evasive-loader

[??] https://thehackernews.com/2023/04/youtube-videos-distributing-aurora.html

[??] https://thehackernews.com/2022/11/researchers-warn-of-cyber-criminals.html

[??] https://thehackernews.com/2022/11/amadey-bot-spotted-deploying-lockbit-30.html

[??] https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/essential-addons-for-elementor-lite/essential-addons-for-elementor-571-unauthenticated-arbitrary-password-reset-to-privilege-escalation

[??] https://thehackernews.com/2023/05/severe-security-flaw-exposes-over.html