{"id":4272,"date":"2020-10-30T21:03:52","date_gmt":"2020-10-30T20:03:52","guid":{"rendered":"https:\/\/webhosting.de\/?p=4272"},"modified":"2025-02-19T18:56:21","modified_gmt":"2025-02-19T17:56:21","slug":"ecremage-en-ligne-1-000-francais-affecte-aux-boutiques-en-ligne","status":"publish","type":"post","link":"https:\/\/webhosting.de\/fr\/online-skimming-1-000-deutsche-online-shops-betroffen\/","title":{"rendered":"\u00c9cr\u00e9mage en ligne : 1 000 boutiques en ligne allemandes touch\u00e9es"},"content":{"rendered":"<p>L'Office f\u00e9d\u00e9ral allemand pour la s\u00e9curit\u00e9 de l'information (BSI) dispose d'informations selon lesquelles au moins 1 000&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">En ligne<\/span><span lang=\"en-GB\" xml_lang=\"en-GB\">-Shops<\/span>&nbsp;\u00e0 partir de&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">\u00c9cr\u00e9mage en ligne<\/span>&nbsp;sont touch\u00e9s. Profitez-en&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">Cyber<\/span>-vuln\u00e9rabilit\u00e9s de la s\u00e9curit\u00e9 p\u00e9nale dans les versions obsol\u00e8tes de la&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">Logiciel de boutique<\/span>pour introduire un code malveillant. Ce code espionne ensuite les informations de paiement des clients lors du processus de commande et les transmet aux auteurs. Sont concern\u00e9s&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">En ligne<\/span><span lang=\"en-GB\" xml_lang=\"en-GB\">-Shops<\/span>qui s'appuient sur le syst\u00e8me de&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">Logiciels<\/span>&nbsp;Bas\u00e9 \u00e0 Magento.<\/p>\n<p>Le code infiltr\u00e9 et le flux de donn\u00e9es associ\u00e9 ne sont g\u00e9n\u00e9ralement pas visibles par les utilisateurs. Le BSI ne dispose actuellement d'aucune information sur l'\u00e9tendue des donn\u00e9es de paiement d\u00e9j\u00e0 publi\u00e9es par ces attaques.<\/p>\n<p>Sur la base d'une analyse effectu\u00e9e par un d\u00e9veloppeur d'outils de s\u00e9curit\u00e9 pour Magento, en septembre 2016, pr\u00e8s de 6.000&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">\u00c9cr\u00e9mage en ligne<\/span>&nbsp;concern\u00e9s&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">En ligne<\/span><span lang=\"en-GB\" xml_lang=\"en-GB\">-Shops<\/span>&nbsp;identifi\u00e9s, dont plusieurs centaines&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">Magasins<\/span>&nbsp;Op\u00e9rateur allemand.&nbsp;<abbr lang=\"en-GB\" title=\"\u00c9quipe d&#039;intervention en cas d&#039;urgence informatique\" xml_lang=\"en-GB\">CERT<\/abbr>-Le gouvernement f\u00e9d\u00e9ral a alors inform\u00e9 les op\u00e9rateurs de r\u00e9seau responsables en Allemagne des personnes concern\u00e9es&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">En ligne<\/span>-Shops. Selon les r\u00e9sultats actuels, cette infection n'a pas encore \u00e9t\u00e9 \u00e9limin\u00e9e par de nombreux op\u00e9rateurs ou par l&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\"><a href=\"https:\/\/webhosting.de\/fr\/switch-rechenzentren-zahlen-geld-fuer-server-abwaerme\/\">Serveur<\/a><\/span>&nbsp;ont \u00e9t\u00e9 compromis une fois de plus. Les vuln\u00e9rabilit\u00e9s de Magento exploit\u00e9es par les attaquants ont \u00e9t\u00e9 exploit\u00e9es par les exploitants de magasins malgr\u00e9 les&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">Mises \u00e0 jour des logiciels<\/span>apparemment pas ferm\u00e9. Cela permet&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">Cyber<\/span>-Les criminels peuvent continuer \u00e0 utiliser les donn\u00e9es de paiement et autres donn\u00e9es personnelles saisies lors des commandes. <a href=\"https:\/\/webhosting.de\/fr\/personenbezogene-daten-sozialen-netzwerken\/\">Donn\u00e9es<\/a> de leurs clients. Le nombre de victimes actuellement connues&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">En ligne<\/span><span lang=\"en-GB\" xml_lang=\"en-GB\">-Shops&nbsp;<\/span>en Allemagne est pass\u00e9 \u00e0 au moins 1 000.<\/p>\n<p>Le&nbsp;<abbr lang=\"en-GB\" title=\"\u00c9quipe d&#039;intervention en cas d&#039;urgence informatique\" xml_lang=\"en-GB\">CERT<\/abbr>-Aujourd'hui, l'Office f\u00e9d\u00e9ral allemand pour la s\u00e9curit\u00e9 de l'information (BSI) a de nouveau notifi\u00e9 aux op\u00e9rateurs de r\u00e9seau responsables en Allemagne les&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">En ligne<\/span><span lang=\"en-GB\" xml_lang=\"en-GB\">-Shops<\/span>&nbsp;dans leurs r\u00e9seaux et demande&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">Fournisseur<\/span>de transmettre les informations \u00e0 leurs clients (exploitants de magasins).<\/p>\n<p><q>\"Malheureusement, il s'av\u00e8re encore que de nombreux exploitants ne prennent pas en compte la protection de leurs <a href=\"https:\/\/webhosting.de\/fr\/webhoster-und-performance-bei-online-shops\/\">boutiques en ligne<\/a> agissent avec beaucoup de n\u00e9gligence. Un grand nombre de boutiques fonctionnent avec des versions de logiciels obsol\u00e8tes qui contiennent plusieurs failles de s\u00e9curit\u00e9 connues\".<\/q>explique le pr\u00e9sident du BSI, Arne Sch\u00f6nbohm.&nbsp;<q>\"Les op\u00e9rateurs doivent \u00eatre \u00e0 la hauteur de leur responsabilit\u00e9 envers leurs clients et assurer leurs services de mani\u00e8re rapide et coh\u00e9rente\".<\/q><\/p>\n<h3>Responsabilit\u00e9 de l'exploitant du magasin<\/h3>\n<p>En vertu de l'article 13, paragraphe 7&nbsp;<abbr title=\"Loi sur les t\u00e9l\u00e9m\u00e9dias\">TMG<\/abbr>&nbsp;sont des op\u00e9rateurs de&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">En ligne<\/span><span lang=\"en-GB\" xml_lang=\"en-GB\">-Shops<\/span>&nbsp;sont tenus de maintenir leurs syst\u00e8mes conform\u00e9ment \u00e0 la&nbsp;<a class=\"RichTextIntLink Publication FTpdf\" title=\"Protection de pointe des services de t\u00e9l\u00e9m\u00e9dias (Ouvrira une nouvelle fen\u00eatre)\" href=\"https:\/\/www.bsi.bund.de\/DE\/Presse\/Pressemitteilungen\/Presse2017\/ACS\/DE\/_\/downloads\/BSI-CS_125.html\" target=\"_blank\" rel=\"noopener noreferrer\">\u00e9tat de l'art<\/a>&nbsp;pour se prot\u00e9ger contre les attaques. Une mesure fondamentale et efficace \u00e0 cet \u00e9gard est l'installation r\u00e9guli\u00e8re et rapide des mises \u00e0 jour de s\u00e9curit\u00e9 disponibles.<\/p>\n<p>Le BSI souligne \u00e0 ce stade que l'obligation de s\u00e9curiser les syst\u00e8mes ne concerne pas seulement les entreprises, mais aussi tous les autres op\u00e9rateurs commerciaux de&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">Sites web<\/span>&nbsp;s'applique. Cela inclut \u00e9galement, par exemple, les sites web de particuliers ou d'associations si leur fonctionnement est destin\u00e9 \u00e0 g\u00e9n\u00e9rer des revenus de mani\u00e8re permanente. C'est d\u00e9j\u00e0 le cas si de la publicit\u00e9 payante sous forme de banni\u00e8res est plac\u00e9e sur les sites web.<\/p>\n<p>Op\u00e9rateur de&nbsp;<span lang=\"en-GB\" xml_lang=\"en-GB\">En ligne<\/span><span lang=\"en-GB\" xml_lang=\"en-GB\">-Shops<\/span>&nbsp;bas\u00e9 sur Magento peut \u00eatre utilis\u00e9 avec le service gratuit&nbsp;<a class=\"RichTextExtLink ExternalLink\" title=\"Lien externe MageReport\" href=\"https:\/\/www.magereport.com\/\" target=\"_blank\" rel=\"noopener\">MageReport<\/a>&nbsp;v\u00e9rifiez si le syst\u00e8me de votre boutique pr\u00e9sente des failles de s\u00e9curit\u00e9 connues et est affect\u00e9 par les attaques actuelles. Des informations d\u00e9taill\u00e9es sur la mani\u00e8re de r\u00e9soudre chaque probl\u00e8me d\u00e9tect\u00e9 sont fournies.<\/p>","protected":false},"excerpt":{"rendered":"<p>Dem Bundesamt f\u00fcr Sicherheit in der Informationstechnik (BSI) liegen Informationen vor, nach denen aktuell mindestens 1.000 deutsche&nbsp;Online-Shops&nbsp;von&nbsp;Online-Skimming&nbsp;betroffen sind. Dabei nutzen&nbsp;Cyber-Kriminelle Sicherheitsl\u00fccken in veralteten Versionen der&nbsp;Shopsoftware, um sch\u00e4dlichen Programmcode einzuschleusen. Dieser sp\u00e4ht dann beim Bestellvorgang die Zahlungsinformationen der Kunden aus und \u00fcbermittelt sie an die T\u00e4ter. Betroffen sind&nbsp;Online-Shops, die auf der weit verbreiteten&nbsp;Software&nbsp;Magento basieren. Der eingeschleuste [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1084,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_crdt_document":"","inline_featured_image":false,"footnotes":""},"categories":[685,678],"tags":[301,302,303,304],"class_list":["post-4272","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-allgemein","category-ecommerce","tag-bsi","tag-hack","tag-magento","tag-skimming"],"acf":[],"_wp_attached_file":null,"_wp_attachment_metadata":null,"litespeed-optimize-size":null,"litespeed-optimize-set":null,"_elementor_source_image_hash":null,"_wp_attachment_image_alt":null,"stockpack_author_name":null,"stockpack_author_url":null,"stockpack_provider":null,"stockpack_image_url":null,"stockpack_license":null,"stockpack_license_url":null,"stockpack_modification":null,"color":null,"original_id":null,"original_url":null,"original_link":null,"unsplash_location":null,"unsplash_sponsor":null,"unsplash_exif":null,"unsplash_attachment_metadata":null,"_elementor_is_screenshot":null,"surfer_file_name":null,"surfer_file_original_url":null,"envato_tk_source_kit":null,"envato_tk_source_index":null,"envato_tk_manifest":null,"envato_tk_folder_name":null,"envato_tk_builder":null,"envato_elements_download_event":null,"_menu_item_type":null,"_menu_item_menu_item_parent":null,"_menu_item_object_id":null,"_menu_item_object":null,"_menu_item_target":null,"_menu_item_classes":null,"_menu_item_xfn":null,"_menu_item_url":null,"_trp_menu_languages":null,"rank_math_primary_category":"685","rank_math_title":null,"inline_featured_image":null,"_yoast_wpseo_primary_category":"678","rank_math_schema_blogposting":null,"rank_math_schema_videoobject":null,"_oembed_049c719bc4a9f89deaead66a7da9fddc":null,"_oembed_time_049c719bc4a9f89deaead66a7da9fddc":null,"_yoast_wpseo_focuskw":null,"_yoast_wpseo_linkdex":null,"_oembed_27e3473bf8bec795fbeb3a9d38489348":null,"_oembed_c3b0f6959478faf92a1f343d8f96b19e":null,"_trp_translated_slug_en_us":null,"_wp_desired_post_slug":null,"_yoast_wpseo_title":null,"tldname":null,"tldpreis":null,"tldrubrik":null,"tldpolicylink":null,"tldsize":null,"tldregistrierungsdauer":null,"tldtransfer":null,"tldwhoisprivacy":null,"tldregistrarchange":null,"tldregistrantchange":null,"tldwhoisupdate":null,"tldnameserverupdate":null,"tlddeletesofort":null,"tlddeleteexpire":null,"tldumlaute":null,"tldrestore":null,"tldsubcategory":null,"tldbildname":null,"tldbildurl":null,"tldclean":null,"tldcategory":null,"tldpolicy":null,"tldbesonderheiten":null,"tld_bedeutung":null,"_oembed_d167040d816d8f94c072940c8009f5f8":null,"_oembed_b0a0fa59ef14f8870da2c63f2027d064":null,"_oembed_4792fa4dfb2a8f09ab950a73b7f313ba":null,"_oembed_33ceb1fe54a8ab775d9410abf699878d":null,"_oembed_fd7014d14d919b45ec004937c0db9335":null,"_oembed_21a029d076783ec3e8042698c351bd7e":null,"_oembed_be5ea8a0c7b18e658f08cc571a909452":null,"_oembed_a9ca7a298b19f9b48ec5914e010294d2":null,"_oembed_f8db6b27d08a2bb1f920e7647808899a":null,"_oembed_168ebde5096e77d8a89326519af9e022":null,"_oembed_cdb76f1b345b42743edfe25481b6f98f":null,"_oembed_87b0613611ae54e86e8864265404b0a1":null,"_oembed_27aa0e5cf3f1bb4bc416a4641a5ac273":null,"_oembed_time_27aa0e5cf3f1bb4bc416a4641a5ac273":null,"_tldname":null,"_tldclean":null,"_tldpreis":null,"_tldcategory":null,"_tldsubcategory":null,"_tldpolicy":null,"_tldpolicylink":null,"_tldsize":null,"_tldregistrierungsdauer":null,"_tldtransfer":null,"_tldwhoisprivacy":null,"_tldregistrarchange":null,"_tldregistrantchange":null,"_tldwhoisupdate":null,"_tldnameserverupdate":null,"_tlddeletesofort":null,"_tlddeleteexpire":null,"_tldumlaute":null,"_tldrestore":null,"_tldbildname":null,"_tldbildurl":null,"_tld_bedeutung":null,"_tldbesonderheiten":null,"_oembed_ad96e4112edb9f8ffa35731d4098bc6b":null,"_oembed_8357e2b8a2575c74ed5978f262a10126":null,"_oembed_3d5fea5103dd0d22ec5d6a33eff7f863":null,"_eael_widget_elements":null,"_oembed_0d8a206f09633e3d62b95a15a4dd0487":null,"_oembed_time_0d8a206f09633e3d62b95a15a4dd0487":null,"_aioseo_description":null,"_eb_attr":null,"_eb_data_table":null,"_oembed_819a879e7da16dd629cfd15a97334c8a":null,"_oembed_time_819a879e7da16dd629cfd15a97334c8a":null,"_acf_changed":null,"_wpcode_auto_insert":null,"_edit_last":"1","_edit_lock":"1604486480:1","_oembed_e7b913c6c84084ed9702cb4feb012ddd":null,"_oembed_bfde9e10f59a17b85fc8917fa7edf782":null,"_oembed_time_bfde9e10f59a17b85fc8917fa7edf782":null,"_oembed_03514b67990db061d7c4672de26dc514":null,"_oembed_time_03514b67990db061d7c4672de26dc514":null,"rank_math_news_sitemap_robots":"index","rank_math_robots":["index"],"_eael_post_view_count":"4682","_trp_automatically_translated_slug_ru_ru":null,"_trp_automatically_translated_slug_et":"online-skimming-1-000-saksa-online-kauplused-saadavaks","_trp_automatically_translated_slug_lv":"online-skimming-1-000-german-online-shops-affected","_trp_automatically_translated_slug_fr_fr":null,"_trp_automatically_translated_slug_en_us":null,"_wp_old_slug":null,"_trp_automatically_translated_slug_da_dk":null,"_trp_automatically_translated_slug_pl_pl":null,"_trp_automatically_translated_slug_es_es":null,"_trp_automatically_translated_slug_hu_hu":null,"_trp_automatically_translated_slug_fi":"online-skimming-1-000-saksalaiset-online-kaupat-vaikuttavat","_trp_automatically_translated_slug_ja":"%e3%82%aa%e3%83%b3%e3%83%a9%e3%82%a4%e3%83%b3%e3%82%b9%e3%82%ad%e3%83%9f%e3%83%b3%e3%82%b0%e3%81%ae%e5%bd%b1%e9%9f%bf%e3%82%92%e5%8f%97%e3%81%91%e3%81%9f%e3%83%89%e3%82%a4%e3%83%84%e3%81%ae%e3%82%aa","_trp_automatically_translated_slug_lt_lt":null,"_elementor_edit_mode":null,"_elementor_template_type":null,"_elementor_version":null,"_elementor_pro_version":null,"_wp_page_template":"default","_elementor_page_settings":null,"_elementor_data":null,"_elementor_css":null,"_elementor_conditions":null,"_happyaddons_elements_cache":null,"_oembed_75446120c39305f0da0ccd147f6de9cb":null,"_oembed_time_75446120c39305f0da0ccd147f6de9cb":null,"_oembed_3efb2c3e76a18143e7207993a2a6939a":null,"_oembed_time_3efb2c3e76a18143e7207993a2a6939a":null,"_oembed_59808117857ddf57e478a31d79f76e4d":null,"_oembed_time_59808117857ddf57e478a31d79f76e4d":null,"_oembed_965c5b49aa8d22ce37dfb3bde0268600":null,"_oembed_time_965c5b49aa8d22ce37dfb3bde0268600":null,"_oembed_81002f7ee3604f645db4ebcfd1912acf":null,"_oembed_time_81002f7ee3604f645db4ebcfd1912acf":null,"_elementor_screenshot":null,"_oembed_7ea3429961cf98fa85da9747683af827":null,"_oembed_time_7ea3429961cf98fa85da9747683af827":null,"_elementor_controls_usage":null,"_elementor_page_assets":[],"_elementor_screenshot_failed":null,"theplus_transient_widgets":["tp-video-player"],"_eael_custom_js":null,"_wp_old_date":null,"_trp_automatically_translated_slug_it_it":null,"_trp_automatically_translated_slug_pt_pt":null,"_trp_automatically_translated_slug_zh_cn":null,"_trp_automatically_translated_slug_nl_nl":null,"_trp_automatically_translated_slug_pt_br":null,"_trp_automatically_translated_slug_sv_se":null,"rank_math_analytic_object_id":"944","rank_math_internal_links_processed":null,"_trp_automatically_translated_slug_ro_ro":null,"_trp_automatically_translated_slug_sk_sk":null,"_trp_automatically_translated_slug_bg_bg":null,"_trp_automatically_translated_slug_sl_si":null,"litespeed_vpi_list":["webhostinglogo.png"],"litespeed_vpi_list_mobile":["webhostinglogo.png"],"rank_math_seo_score":null,"rank_math_contentai_score":null,"ilj_limitincominglinks":null,"ilj_maxincominglinks":null,"ilj_limitoutgoinglinks":null,"ilj_maxoutgoinglinks":null,"ilj_limitlinksperparagraph":null,"ilj_linksperparagraph":null,"ilj_blacklistdefinition":null,"ilj_linkdefinition":["online-skimming: 1.000 deutsche online-shops betroffen","skimming","online shop","shop"],"_eb_reusable_block_ids":[],"rank_math_focus_keyword":null,"rank_math_og_content_image":null,"_yoast_wpseo_metadesc":"Viele deutsche Online Shops sind von Online Skimming betroffen. \u26a0\ufe0f Mit diesem kostenlosen Tool kannst du deinen Shop pr\u00fcfen. \u2705","_yoast_wpseo_content_score":"60","_yoast_wpseo_focuskeywords":"[]","_yoast_wpseo_keywordsynonyms":"[\"\"]","_yoast_wpseo_estimated-reading-time-minutes":null,"rank_math_description":"Viele deutsche Online Shops sind von Online Skimming betroffen. \u26a0\ufe0f Mit diesem kostenlosen Tool kannst du deinen Shop pr\u00fcfen. \u2705","surfer_last_post_update":null,"surfer_last_post_update_direction":null,"surfer_keywords":null,"surfer_location":null,"surfer_draft_id":null,"surfer_permalink_hash":null,"surfer_scrape_ready":null,"_thumbnail_id":"1084","footnotes":null,"_links":{"self":[{"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/posts\/4272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/comments?post=4272"}],"version-history":[{"count":1,"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/posts\/4272\/revisions"}],"predecessor-version":[{"id":8451,"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/posts\/4272\/revisions\/8451"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/media\/1084"}],"wp:attachment":[{"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/media?parent=4272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/categories?post=4272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webhosting.de\/fr\/wp-json\/wp\/v2\/tags?post=4272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}