{"id":178173,"date":"2025-10-03T10:40:02","date_gmt":"2025-10-03T09:40:02","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/es\/?p=397736"},"modified":"2025-10-03T10:41:00","modified_gmt":"2025-10-03T09:41:00","slug":"oracle-pourrait-avoir-un-grave-probleme-de-securite-entre-les-mains-sans-confirmation","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/fr\/oracle-pourrait-avoir-un-grave-probleme-de-securite-entre-les-mains-sans-confirmation\/","title":{"rendered":"Oracle pourrait avoir un grave probl\u00e8me de s\u00e9curit\u00e9 entre les mains sans confirmation"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Des groupes de cybercriminels associ\u00e9s au ransomware Clop ont commenc\u00e9 \u00e0 envoyer des e-mails aux clients d&#8217;Oracle, demandant des paiements de ran\u00e7on et affirmant avoir vol\u00e9 des donn\u00e9es de leur E-Business Suite. <strong>Bien que les enqu\u00eateurs n&#8217;aient pas confirm\u00e9 la v\u00e9racit\u00e9 de ces affirmations, plusieurs enqu\u00eates sont en cours sur les environnements Oracle appartenant aux organisations qui ont re\u00e7u ces communications<\/strong>.<\/p>\n\n\n<h2 class=\"wp-block-heading\">Extorsion ou vol de donn\u00e9es r\u00e9el ?<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Selon Charles Carmakal, CTO de Mandiant Consulting, une campagne de courriels \u00e0 fort volume a \u00e9t\u00e9 lanc\u00e9e depuis des centaines de comptes compromis.<strong> Les courriels contiennent des informations de contact et, curieusement, il a \u00e9t\u00e9 v\u00e9rifi\u00e9 que certaines des adresses fournies sont list\u00e9es publiquement sur le site de fuite de donn\u00e9es de Clop<\/strong>. Malgr\u00e9 cela, Clop n&#8217;a pas encore rendu publiques ses revendications sur ses plateformes de fuite.<\/p>\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Oracle Ad\" width=\"840\" height=\"473\" src=\"https:\/\/www.youtube.com\/embed\/q8rZwLC8iPo?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n<p class=\"wp-block-paragraph\">La campagne d&#8217;extorsion a impliqu\u00e9 l&#8217;envoi d&#8217;e-mails adress\u00e9s \u00e0 des dirigeants d&#8217;entreprises depuis des comptes tiers compromis, d\u00e9butant ou avant le 29 septembre. <strong>Genevieve Stark, responsable de l&#8217;analyse de l&#8217;intelligence sur la cybercriminalit\u00e9 au sein de Google Threat Intelligence Group, a comment\u00e9 que, bien que les indices pointent vers Clop, il n&#8217;est pas clair si les revendications du groupe sont cr\u00e9dibles ni comment ils ont obtenu acc\u00e8s aux informations d&#8217;Oracle<\/strong>.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Bien que des efforts soient d\u00e9ploy\u00e9s pour d\u00e9terminer l&#8217;authenticit\u00e9 de ces menaces, il n&#8217;y a actuellement aucune preuve d&#8217;un vol de donn\u00e9es r\u00e9ussi ni de malware sp\u00e9cifique li\u00e9 \u00e0 cette campagne.<strong> Les communications d&#8217;extorsion exercent une pression sur les victimes pour qu&#8217;elles entament des n\u00e9gociations, mais ne contiennent pas de demandes concr\u00e8tes<\/strong>. Des chercheurs travaillent en continu pour clarifier les d\u00e9tails de la mani\u00e8re dont cet acc\u00e8s possible \u00e0 la E-Business Suite d&#8217;Oracle s&#8217;est produit et l&#8217;impact que cela pourrait avoir sur ses clients.<\/p>\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-s\/p\/2d9f9134-96d0-11e6-bf8f-00163ec9f5fa\/1408299994\/avast-Avast_Symbol_V2_Positive_Orange_256x256.png\" alt=\"Avast Antivirus Gratuit\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Avast Antivirus Gratuit<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/avast.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">T\u00c9L\u00c9CHARGER<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        \r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/avast.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Des groupes d&#8217;attaquants associ\u00e9s au ransomware Clop ont commenc\u00e9 \u00e0 envoyer des courriels aux clients d&#8217;Oracle, demandant des paiements de ran\u00e7on et affirmant avoir vol\u00e9 des donn\u00e9es de leur E-Business Suite. Bien que les enqu\u00eateurs n&#8217;aient pas confirm\u00e9 la v\u00e9racit\u00e9 de ces affirmations, plusieurs enqu\u00eates sont en cours sur les environnements Oracle appartenant aux organisations qui ont re\u00e7u ces communications. Extorsion ou vol de donn\u00e9es r\u00e9el ? Selon Charles Carmakal, CTO de Mandiant Consulting, une campagne de courriels \u00e0 fort volume a \u00e9t\u00e9 observ\u00e9e, lanc\u00e9e depuis des centaines de comptes compromis. Les courriels contiennent des informations de contact et, curieusement, [&hellip;]<\/p>\n","protected":false},"author":9318,"featured_media":178174,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[16761,22339],"tags":[28096,17677,28097,28098,28099,28100,28101,4917,4395],"usertag":[],"vertical":[],"content-category":[18042],"class_list":["post-178173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-softwaresecurity","tag-atacantes","tag-ciberseguridad","tag-clop","tag-cto","tag-e-business-suite","tag-extorsion","tag-mandiant-consulting","tag-oracle","tag-ransomware","content-category-seguridad-privacidad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/posts\/178173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/users\/9318"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/comments?post=178173"}],"version-history":[{"count":2,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/posts\/178173\/revisions"}],"predecessor-version":[{"id":178184,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/posts\/178173\/revisions\/178184"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/media\/178174"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/media?parent=178173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/categories?post=178173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/tags?post=178173"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/usertag?post=178173"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/vertical?post=178173"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/fr\/wp-json\/wp\/v2\/content-category?post=178173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}