Hackers use Google Analytics to steal credit cards, bypass CSP
Master <[email protected]> Sat, 11 Jul 2020 20:47:38 -0000 (UTC)
| Newsgroups | alt.privacy, alt.anonymous, rocksolid.shared.news, alt.hackers.malicious, alt.comp.google, alt.google-sucks, comp.internet.services.google, comp.security.misc |
|---|---|
| Organization | Neodome |
| Message-ID | <[email protected]> |
PGh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3Mvc2VjdXJpdHkvaGFja2Vycy11 c2UtZ29vZ2xlLWFuYWx5dGljcy10by1zdGVhbC1jcmVkaXQtY2FyZHMtYnlwYXNzLWNzcC8/bWlk PTE+CgpIYWNrZXJzIGFyZSB1c2luZyBHb29nbGUncyBzZXJ2ZXJzIGFuZCB0aGUgR29vZ2xlIEFu YWx5dGljcyBwbGF0Zm9ybSB0byBzdGVhbCBjcmVkaXQgY2FyZCBpbmZvcm1hdGlvbiBzdWJtaXR0 ZWQgYnkgY3VzdG9tZXJzIG9mIG9ubGluZSBzdG9yZXMuCgpBIG5ldyBtZXRob2QgdG8gYnlwYXNz IENvbnRlbnQgU2VjdXJpdHkgUG9saWN5IChDU1ApIHVzaW5nIHRoZSBHb29nbGUgQW5hbHl0aWNz IEFQSSBkaXNjbG9zZWQgbGFzdCB3ZWVrIGhhcyBhbHJlYWR5IGJlZW4gZGVwbG95ZWQgaW4gb25n b2luZyBNYWdlY2FydCBhdHRhY2tzIGRlc2lnbmVkIHRvIHNjcmFwZSBjcmVkaXQgY2FyZCBkYXRh IGZyb20gc2V2ZXJhbCBkb3plbiBlLWNvbW1lcmNlIHNpdGVzLgoKVGhpcyBuZXcgdGFjdGljIHRh a2VzIGFkdmFudGFnZSBvZiB0aGUgZmFjdCB0aGF0IGUtY29tbWVyY2Ugd2ViIHNpdGVzIHVzaW5n IEdvb2dsZSdzIHdlYiBhbmFseXRpY3Mgc2VydmljZSBmb3IgdHJhY2tpbmcgdmlzaXRvcnMgYXJl IHdoaXRlbGlzdGluZyBHb29nbGUgQW5hbHl0aWNzIGRvbWFpbnMgaW4gdGhlaXIgQ1NQIGNvbmZp Z3VyYXRpb24gKGEgc2VjdXJpdHkgc3RhbmRhcmQgdXNlZCB0byBibG9jayB0aGUgZXhlY3V0aW9u IG9mIHVudHJ1c3RlZCBjb2RlIG9uIHdlYiBhcHBzKS4KCk5ldyByZXNlYXJjaCBmcm9tIHdlYiBz ZWN1cml0eSBjb21wYW5pZXMgU2Fuc2VjIGFuZCBQZXJpbWV0ZXJYIHNob3dzIHRoYXQgdXNpbmcg Q1NQIHRvIHByZXZlbnQgY3JlZGl0IGNhcmQgc2tpbW1pbmcgYXR0YWNrcyBpcyBwb2ludGxlc3Mg b24gc2l0ZXMgdGhhdCBhbHNvIGRlcGxveSBHb29nbGUgQW5hbHl0aWNzIChHQSkgYXMgdGhyZWF0 IGFjdG9ycyBjYW4gdXNlIGl0IHRvIGV4ZmlsdHJhdGUgaGFydmVzdGVkIGRhdGEgdG8gdGhlaXIg b3duIGFjY291bnRzLgoKQnlwYXNzaW5nIENTUCB1c2luZyBHb29nbGUgQW5hbHl0aWNzCgpPbiBK dW5lIDE3LCBQZXJpbWV0ZXJYIGZvdW5kIGFuZCBkZW1vbnN0cmF0ZWQgImFuIGVhc3kgdG8gcmVw cm9kdWNlIHZ1bG5lcmFiaWxpdHkgaW4gdGhlIGNvcmUgZnVuY3Rpb25hbGl0eSBvZiBDU1Agd2hl biB1c2luZyBpdCBmb3IgYmxvY2tpbmcgdGhlZnQgb2YgY3JlZGVudGlhbHMsIFBJSSBhbmQgcGF5 bWVudCBkYXRhIGxpa2UgY3JlZGl0IGNhcmRzLiIKCkluc3RlYWQgb2YgYmxvY2tpbmcgaW5qZWN0 aW9uLWJhc2VkIGF0dGFja3MsIGFsbG93aW5nIEdvb2dsZSBBbmFseXRpY3Mgc2NyaXB0cyBiZW5l Zml0cyBhdHRhY2tlcnMgYXMgdGhleSBjYW4gdXRpbGl6ZSB0aGVtIHRvIHN0ZWFsIGRhdGEuIFRo aXMgaXMgZG9uZSB0aHJvdWdoIGEgd2ViIHNraW1tZXIgc2NyaXB0IHRoYXQgaXMgc3BlY2lmaWNh bGx5IGRlc2lnbmVkIHRvIGVuY29kZSBzdG9sZW4gZGF0YSBhbmQgZGVsaXZlciBpdCB0byB0aGUg YXR0YWNrZXIncyBHQSBkYXNoYm9hcmQgaW4gYW4gZW5jcnlwdGVkIGZvcm0uCgpUaGUgYXR0YWNr ZXJzIG9ubHkgaGF2ZSB0byB1c2UgdGhlaXIgb3duIFRhZyBJRCBvd25lciBvZiB0aGUgVUEtIyMj IyMjIy0jIGZvcm0gYXMgInRoZSBDU1AgcG9saWN5IGNhbuKAmXQgZGlzY3JpbWluYXRlIGJhc2Vk IG9uIHRoZSBUYWcgSUQiIGZvciB0aGVpciBzY3JpcHRzIHRvIGJlIGFibGUgdG8gYWJ1c2UgR0Eg Zm9yIHNlbmRpbmcgaGFydmVzdGVkIGluZm8gc3VjaCBhcyBjcmVkZW50aWFscywgY3JlZGl0IGNh cmQgZGF0YSwgYW5kIG1vcmUuCgoiVGhlIHNvdXJjZSBvZiB0aGUgcHJvYmxlbSBpcyB0aGF0IHRo ZSBDU1AgcnVsZSBzeXN0ZW0gaXNu4oCZdCBncmFudWxhciBlbm91Z2gsIiBQZXJpbWV0ZXJYJ3Mg VlAgb2YgcmVzZWFyY2ggYW5kIGRldmVsb3BtZW50IEFtaXIgU2hha2VkIGV4cGxhaW5lZC4KClJl Y29nbml6aW5nIGFuZCBibG9ja2luZyBzY3JpcHRzIGRlc2lnbmVkIHRvIGFidXNlIHRoaXMgZmxh dyAicmVxdWlyZXMgYWR2YW5jZWQgdmlzaWJpbGl0eSBzb2x1dGlvbnMgdGhhdCBjYW4gZGV0ZWN0 IHRoZSBhY2Nlc3MgYW5kIGV4ZmlsdHJhdGlvbiBvZiBzZW5zaXRpdmUgdXNlciBkYXRhIChpbiB0 aGlzIGNhc2UgdGhlIHVzZXLigJlzIGVtYWlsIGFkZHJlc3MgYW5kIHBhc3N3b3JkKS4iCgpXaGls ZSBTaGFrZWQgdXNlZCBHQSBhcyBhbiBleGFtcGxlIG9mIGF0dGFja2VycyB1c2luZyBob3N0cyB3 aGl0ZWxpc3RlZCBpbiBDU1AgYXMgaXQgaXMgdGhlIG1vc3QgY29tbW9ubHkgd2hpdGVsaXN0ZWQg dGhpcmQtcGFydHkgc2VydmljZSBpbiBDU1AgY29uZmlncywgYW55IG90aGVyIHdoaXRlbGlzdGVk IGRvbWFpbiB0aGF0IGdldHMgY29tcHJvbWlzZWQgb3IgcHJvdmlkZXMgYWNjb3VudC1iYXNlZCBt YW5hZ2VtZW50IGp1c3QgYXMgR0EgY2FuIGJlIHVzZWQgYXMgYW4gZXhmaWx0cmF0aW9uIGNoYW5u ZWwuCgpPdXQgb2YgdGhlIHRvcCAzIG1pbGxpb24gSW50ZXJuZXQgZG9tYWlucywgb25seSAyMTAs MDAwIGFyZSB1c2luZyBDU1AgYWNjb3JkaW5nIHRvIHN0YXRpc3RpY3MgZnJvbSBQZXJpbWV0ZXJY IGJhc2VkIG9uIGFuIEhUVFBBcmNoaXZlIHNjYW4gZnJvbSBNYXJjaCAyMDIwLiAxNywwMDAgb2Yg dGhlIHdlYnNpdGVzIHJlYWNoYWJsZSB2aWEgdGhvc2UgZG9tYWlucyBhcmUgd2hpdGVsaXN0aW5n IHRoZSBnb29nbGUtYW5hbHl0aWNzLmNvbS4KCkJhc2VkIG9uIHN0YXRzIHByb3ZpZGVkIGJ5IEJ1 aWx0V2l0aCwgb3ZlciAyOSBtaWxsaW9uIHdlYnNpdGVzIGFyZSBjdXJyZW50bHkgdXNpbmcgR29v Z2xlJ3MgR0Egd2ViIGFuYWx5dGljcyBzZXJ2aWNlcywgd2l0aCBCYWlkdSBBbmFseXRpY3MgYW5k IFlhbmRleCBNZXRyaWthIGFsc28gYmVpbmcgdXNlZCBvbiBtb3JlIHRoYW4gNyBtaWxsaW9uIGFu ZCAyIG1pbGxpb24sIHJlc3BlY3RpdmVseS4KCkNTUCBieXBhc3NlZCBvbiBkb3plbnMgb2Ygc2l0 ZXMgYnkgTWFnZWNhcnQgYWN0b3JzCgpTYW5zZWMncyBUaHJlYXQgUmVzZWFyY2ggVGVhbSB0b2Rh eSBkaXNjbG9zZWQgdGhhdCBpdCB3YXMgdHJhY2tpbmcgYSBNYWdlY2FydCBjYW1wYWlnbiBzaW5j ZSBNYXJjaCAxNywgd2l0aCB0aGUgYXR0YWNrZXJzIGFidXNpbmcgdGhpcyBleGFjdCBpc3N1ZSB0 byBieXBhc3MgQ1NQIG9uIHNldmVyYWwgZG96ZW4gZS1jb21tZXJjZSBzaXRlcyB1c2luZyBHb29n bGUgQW5hbHl0aWNzLgoKVGhlIHRocmVhdCBhY3RvcnMgYmVoaW5kIHRoaXMgY2FtcGFpZ24gd2Vu dCBhIHN0ZXAgZnVydGhlciBieSBtYWtpbmcgc3VyZSB0aGF0IGFsbCB0aGUgY2FtcGFpZ24gY29t cG9uZW50cyBhcmUgdXNpbmcgR29vZ2xlIHNlcnZlcnMsIGFzIHRoZXkgZGVsaXZlcmVkIHRoZSBj cmVkaXQgY2FyZCB3ZWIgc2tpbW1lciB0byB0aGVpciB0YXJnZXRzJyBzaXRlcyB2aWEgR29vZ2xl J3Mgb3BlbiBzdG9yYWdlIHBsYXRmb3JtIGZpcmViYXNlc3RvcmFnZS5nb29nbGVhcGlzLmNvbS4K CiJUeXBpY2FsbHksIGEgZGlnaXRhbCBza2ltbWVyIChha2EgTWFnZWNhcnQpIHJ1bnMgb24gZG9k Z3kgc2VydmVycyBpbiB0YXggaGF2ZW5zLCBhbmQgaXRzIGxvY2F0aW9uIHJldmVhbHMgaXRzIG5l ZmFyaW91cyBpbnRlbnQsIiBTYW5zZWMgZXhwbGFpbmVkLgoKIkJ1dCB3aGVuIGEgc2tpbW1pbmcg Y2FtcGFpZ24gcnVucyBlbnRpcmVseSBvbiB0cnVzdGVkIEdvb2dsZSBzZXJ2ZXJzLCB2ZXJ5IGZl dyBzZWN1cml0eSBzeXN0ZW1zIHdpbGwgZmxhZyBpdCBhcyAnc3VzcGljaW91cycuIEFuZCBtb3Jl IGltcG9ydGFudGx5LCBwb3B1bGFyIGNvdW50ZXJtZWFzdXJlcyBsaWtlIENvbnRlbnQtU2VjdXJp dHktUG9saWN5IChDU1ApIHdpbGwgbm90IHdvcmsgd2hlbiBhIHNpdGUgYWRtaW5pc3RyYXRvciB0 cnVzdHMgR29vZ2xlLiIKClRoZSBsb2FkZXIgdGhlIGF0dGFja2VycyB1c2UgdG8gaW5qZWN0IHRo ZWlyIHdlYiBza2ltbWVyIGhhcyBtdWx0aXBsZSBsYXllcnMgb2Ygb2JmdXNjYXRpb24gYW5kIGl0 IGlzIHVzZWQgdG8gbG9hZCBhbiBhdHRhY2tlci1jb250cm9sbGVkIEdBIGFjY291bnQgd2l0aGlu IGEgdGVtcG9yYXJ5IGlGcmFtZS4KCk9uY2UgbG9hZGVkLCB0aGUgc2tpbW1lciB3aWxsIG1vbml0 b3IgdGhlIGNvbXByb21pc2VkIHNpdGUgZm9yIHVzZXIgaW5wdXQgYW5kIGl0IHdpbGwgZ3JhYiBh bnkgZW50ZXJlZCBjcmVkaXQgY2FyZCBpbmZvcm1hdGlvbiwgZW5jcnlwdCBpdCwgYW5kIGF1dG9t YXRpY2FsbHkgZGVsaXZlciBpdCB0byBpdHMgbWFzdGVycycgR0EgZGFzaGJvYXJkLgoKVGhlIGF0 dGFja2VycyBjYW4gdGhlbiBjb2xsZWN0IHRoZSBzdG9sZW4gY3JlZGl0IGNhcmQgZGF0YSBmcm9t IHRoZWlyIGZyZWUgR29vZ2xlIEFuYWx5dGljcyBkYXNoYm9hcmQgYW5kIGRlY3J5cHQgaXQgdXNp bmcgYW4gWE9SIGVuY3J5cHRpb24ga2V5LgoKQXMgU2Fuc2VjIGFsc28gZGlzY292ZXJlZCwgaWYg dGhlIGNvbXByb21pc2VkIG9ubGluZSBzdG9yZSdzIGN1c3RvbWVycyB3b3VsZCBvcGVuIHRoZWly IGJyb3dzZXJzJyBEZXZlbG9wZXIgVG9vbHMsIHRoZXknZCBnZXQgZmxhZ2dlZCBhbmQgdGhlIHNr aW1tZXIgd291bGQgYXV0b21hdGljYWxseSBkaXNhYmxlLgoKIkV2ZXJ5dGhpbmcgaXMgYWxsb3dl ZCBieSBkZWZhdWx0LiBDU1Agd2FzIGludmVudGVkIHRvIGxpbWl0IHRoZSBleGVjdXRpb24gb2Yg dW50cnVzdGVkIGNvZGUuIEJ1dCBzaW5jZSBwcmV0dHkgbXVjaCBldmVyeWJvZHkgdHJ1c3RzIEdv b2dsZSwgdGhlIG1vZGVsIGlzIGZsYXdlZCwiIFNhbnNlYyBDRU8gYW5kIGZvdW5kZXIgV2lsbGVt IGRlIEdyb290IHRvbGQgQmxlZXBpbmdDb21wdXRlci4KCkJhc2VkIG9uIHRoZXNlIGZpbmRpbmdz LCBDU1AgaXMgZmFyIGZyb20gYSBmb29scHJvb2YgYWdhaW5zdCBpbmplY3Rpb24tYmFzZWQgd2Vi IGFwcCBhdHRhY2tzIHN1Y2ggYXMgTWFnZWNhcnQgaWYgYXR0YWNrZXJzIGZpbmQgYSB3YXkgdG8g dGFrZSBhZHZhbnRhZ2Ugb2YgYW4gYWxyZWFkeSBhbGxvd2VkIGRvbWFpbi9zZXJ2aWNlIHRvIGV4 ZmlsdHJhdGUgaW5mb3JtYXRpb24uCgoiQSBwb3NzaWJsZSBzb2x1dGlvbiB3b3VsZCBjb21lIGZy b20gYWRhcHRpdmUgVVJMcywgYWRkaW5nIHRoZSBJRCBhcyBwYXJ0IG9mIHRoZSBVUkwgb3Igc3Vi ZG9tYWluIHRvIGFsbG93IGFkbWlucyB0byBzZXQgQ1NQIHJ1bGVzIHRoYXQgcmVzdHJpY3QgZGF0 YSBleGZpbHRyYXRpb24gdG8gb3RoZXIgYWNjb3VudHMsIiBTaGFrZWQgY29uY2x1ZGVkLgoKIkEg bW9yZSBncmFudWxhciBmdXR1cmUgZGlyZWN0aW9uIGZvciBzdHJlbmd0aGVuaW5nIENTUCBkaXJl Y3Rpb24gdG8gY29uc2lkZXIgYXMgcGFydCBvZiB0aGUgQ1NQIHN0YW5kYXJkIGlzIFhIUiBwcm94 eSBlbmZvcmNlbWVudC4gVGhpcyB3aWxsIGVzc2VudGlhbGx5IGNyZWF0ZSBhIGNsaWVudC1zaWRl IFdBRiB0aGF0IGNhbiBlbmZvcmNlIGEgcG9saWN5IG9uIHdoZXJlIHNwZWNpZmljIGRhdGEgZmll bGQgYXJlIGFsbG93ZWQgdG8gYmUgdHJhbnNtaXR0ZWQuIgoKIldlIHdlcmUgcmVjZW50bHkgbm90 aWZpZWQgb2YgdGhpcyBhY3Rpdml0eSBhbmQgaW1tZWRpYXRlbHkgc3VzcGVuZGVkIHRoZSBvZmZl bmRpbmcgYWNjb3VudHMgZm9yIHZpb2xhdGluZyBvdXIgdGVybXMgb2Ygc2VydmljZSwiIGEgR29v Z2xlIHNwb2tlc3BlcnNvbiB0b2xkIEJsZWVwaW5nQ29tcHV0ZXIuICJXaGVuIHdlIGZpbmQgdW5h dXRob3JpemVkIHVzZSBvZiBHb29nbGUgQW5hbHl0aWNzLCB3ZSB0YWtlIGFjdGlvbi4iCgpfX19f X19fX19fX19fX19fX18KClVwZGF0ZTogQWRkZWQgR29vZ2xlJ3Mgc3RhdGVtZW50Lg==