Izinhlamvu ze-Kobold: Ukuhlasela Kobugebengu Bokweba imininingwane ye-imeyili esekwe ku-HTML
NgoMashi 31, 2024, uLuta Security wakhipha indatshana ekhanyisa okusha ukuphinga i-vector, Izinhlamvu ze-Kobold. Ngokungafani nemizamo evamile yobugebengu bokweba imininingwane ebucayi, ethembele emilayezweni ekhohlisayo ukuze iyengele izisulu ukuthi ziveze izinto ezizwelayo Imininingwane, lokhu okuhlukile kusebenzisa ukuguquguquka kwe-HTML kokushumeka okuqukethwe okufihliwe ngaphakathi kwama-imeyili. Ebizwa ngokuthi “izinhlamvu zamalahle” ngochwepheshe bezokuphepha, le milayezo efihliwe isebenzisa i-Document Object Model (DOM) ukuze iziveze ngokukhetha ngokusekelwe endaweni yayo ehlobene ngaphakathi kwesakhiwo se-imeyili.
Nakuba umqondo wokufihla izimfihlo ngaphakathi kwama-imeyili ungase uqale ubonakale ungenacala noma uhlakaniphile, iqiniso libi kakhulu. Abadlali abanonya bangasebenzisa leli qhinga ukuze bangatholi futhi basabalalise imithwalo ekhokhayo eyingozi. Ngokushumeka okuqukethwe okunonya ngaphakathi kwendikimba ye-imeyili, ikakhulukazi okuqukethwe okusebenza lapho kudluliswa phambili, izigilamkhuba zingase zikwazi ukugwema izindlela zokuphepha, ngaleyo ndlela zandise ingcuphe yokusabalalisa uhlelo olungayilungele ikhompuyutha noma benze amacebo okukhwabanisa.
Ngokuphawulekayo, lobu bungozi buthinta amaklayenti e-imeyili adumile njenge-Mozilla Thunderbird, i-Outlook kuwebhu, ne-Gmail. Naphezu kwemiphumela esabalele, iThunderbird kuphela ethathe izinyathelo zokubhekana nenkinga ngokubheka isiqeshana esizayo. Ngokuphambene, iMicrosoft ne-Google abakanikezeli ngezinhlelo ezibambekayo zokuxazulula lobu sengozini, okushiya abasebenzisi besengozini yokuxhashazwa.
Nakuba i-imeyili ihlezi iyisisekelo sokuxhumana kwesimanje, lokhu kuba sengozini kugqamisa isidingo sezinyathelo zokuphepha ze-imeyili eziqinile. Ukuqapha okuthuthukisiwe kanye nezinyathelo ezisebenzayo kubalulekile ukunciphisa ubungozi bokuvela kwezinsongo ze-imeyili. Ukwengeza, ukugqugquzela isiko lokuzibophezela okwabelwanayo kanye nokuxoxisana ngokuqhubekayo ngokubambisana nezinyathelo ezihlangene kubalulekile ekuqiniseni ukuzivikela.
