
The Center for Combating Computer Incidents under the Special State Security Service Special Communication and Information Security State Agency has warned about the risk of hacker attacks to sites, the Center’s website report.
According to warning, the HTTPS cryptographic scheme, which protects millions of websites, is susceptible to a new attack that allows hackers to pluck e-mail addresses and certain types of security credentials out of encrypted pages, often in as little as 30 seconds.
It works against all versions of TLS and SSL regardless of the encryption algorithm or cipher that's used.
It requires that the attacker have the ability to passively monitor the traffic traveling between the end user and website. The attack also requires the attacker to force the victim to visit a malicious link. This can be done by injecting an iframe tag in a website.
/APA/