{"id":331605,"date":"2024-05-03T15:16:37","date_gmt":"2024-05-03T13:16:37","guid":{"rendered":"https:\/\/sftarticles.wpenginepowered.com\/es\/?p=331605"},"modified":"2024-08-08T18:36:52","modified_gmt":"2024-08-08T16:36:52","slug":"dropbox-sufrio-un-grave-hackeo-que-expuso-datos-sensibles-de-sus-usuarios","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/es\/dropbox-sufrio-un-grave-hackeo-que-expuso-datos-sensibles-de-sus-usuarios\/","title":{"rendered":"Dropbox sufri\u00f3 un grave hackeo que expuso datos sensibles de sus usuarios"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Dropbox<\/strong>, el conocido servicio de almacenamiento en la nube, ha <a href=\"https:\/\/www.sec.gov\/Archives\/edgar\/data\/1467623\/000146762324000024\/may2024exhibit991.htm\" target=\"_blank\" rel=\"noopener nofollow\" title=\"\">revelado<\/a> que un hacker vulner\u00f3 sus sistemas inform\u00e1ticos el 24 de abril, lo que result\u00f3 en la <strong>filtraci\u00f3n de informaci\u00f3n confidencial<\/strong>, incluyendo contrase\u00f1as y datos de autentificaci\u00f3n. El acceso no autorizado se produjo en <strong>Dropbox Sign<\/strong>, anteriormente conocido como HelloSign, una empresa adquirida por Dropbox en 2019 que permite la <strong>firma digital de documentos<\/strong>.<\/p>\n\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-s\/p\/b1b649d8-96d8-11e6-a62d-00163ed833e7\/244422730\/dropbox-logo.png\" alt=\"Dropbox\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Dropbox<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/dropbox.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">DESCARGAR<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/dropbox.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">El hackeo <strong>comprometi\u00f3 la informaci\u00f3n de todos los usuarios de Dropbox Sign<\/strong>, incluyendo ajustes de cuenta, nombres, correos electr\u00f3nicos y, en algunos casos, n\u00fameros de tel\u00e9fono, contrase\u00f1as con hash, claves API y tokens OAuth. Sin embargo, hasta el momento <strong>no se ha encontrado evidencia de que se haya accedido al contenido de las cuentas de los usuarios o a datos de pago<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La empresa asegura que el incidente se limit\u00f3 a la infraestructura de Dropbox Sign y <strong>no afect\u00f3 a otros productos de Dropbox<\/strong>. Tambi\u00e9n afirma que ha contratado a investigadores forenses y se ha notificado a las autoridades reguladoras. Aunque <a href=\"https:\/\/www.softonic.com\/articulos\/dropbox-subir-fotos-videos-movil-android-ios\">Dropbox<\/a> no prev\u00e9 un impacto &#8220;material&#8221; en sus operaciones o situaci\u00f3n financiera, <strong>la compa\u00f1\u00eda prev\u00e9 posibles litigios y cambios en el comportamiento de los cliente<\/strong>s debido al incidente.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"611\" height=\"326\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/2\/2023\/05\/dropbox.jpg\" alt=\"\" class=\"wp-image-289352\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2023\/05\/dropbox.jpg 611w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2023\/05\/dropbox-300x160.jpg 300w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2023\/05\/dropbox-18x10.jpg 18w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2023\/05\/dropbox-150x80.jpg 150w\" sizes=\"auto, (max-width: 611px) 100vw, 611px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Los clientes de la API de Dropbox Sign tendr\u00e1n que generar nuevas claves de acceso, y <strong>tendr\u00e1n restringidas temporalmente ciertas funciones<\/strong>. &#8220;Solo las solicitudes de firma y las capacidades de firma seguir\u00e1n operativas para la continuidad de su negocio. Una vez que rotes tus claves API, se eliminar\u00e1n las restricciones y el producto seguir\u00e1 funcionando con normalidad&#8221;, afirma <a href=\"https:\/\/www.softonic.com\/articulos\/dropbox-lanza-una-nueva-funcion-para-enviar-achivos-pesados\">Dropbox<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La compa\u00f1\u00eda est\u00e1 en proceso de notificar a los usuarios afectados y proporcionar\u00e1 ayuda al respecto. Este incidente se suma a anteriores problemas de seguridad de Dropbox, como una campa\u00f1a de phishing en 2022 que <a href=\"https:\/\/dropbox.tech\/security\/a-recent-phishing-campaign-targeting-dropbox\" target=\"_blank\" rel=\"noopener nofollow\" title=\"\">permiti\u00f3 a un grupo de hackers acceder a cuentas de GitHub de la compa\u00f1\u00eda<\/a>, obteniendo informaci\u00f3n confidencial.<\/p>\n\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-s\/p\/b1b649d8-96d8-11e6-a62d-00163ed833e7\/244422730\/dropbox-logo.png\" alt=\"Dropbox\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Dropbox<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/dropbox.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">DESCARGAR<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/dropbox.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Dropbox, el conocido servicio de almacenamiento en la nube, ha revelado que un hacker vulner\u00f3 sus sistemas inform\u00e1ticos el 24 de abril, lo que result\u00f3 en la filtraci\u00f3n de informaci\u00f3n confidencial, incluyendo contrase\u00f1as y datos de autentificaci\u00f3n. El acceso no autorizado se produjo en Dropbox Sign, anteriormente conocido como HelloSign, una empresa adquirida por Dropbox &hellip; <a href=\"https:\/\/cms-articles.softonic.io\/es\/dropbox-sufrio-un-grave-hackeo-que-expuso-datos-sensibles-de-sus-usuarios\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Dropbox sufri\u00f3 un grave hackeo que expuso datos sensibles de sus usuarios&#8221;<\/span><\/a><\/p>\n","protected":false},"author":9256,"featured_media":331631,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":1},"categories":[9317],"tags":[9854],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-331605","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-app-subdomain-redirectiondropbox"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/331605","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/users\/9256"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/comments?post=331605"}],"version-history":[{"count":0,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/331605\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/media\/331631"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/media?parent=331605"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/categories?post=331605"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/tags?post=331605"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/usertag?post=331605"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/vertical?post=331605"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/content-category?post=331605"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}