{"id":53591,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat"},"modified":"2020-02-18T14:01:31","modified_gmt":"2020-02-18T11:01:31","slug":"kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","title":{"rendered":"Jak mohou \u00fato\u010dn\u00edci \u010d\u00edst va\u0161i korespondenci na Telegramu. A jak jim v tom zabr\u00e1nit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Jak<\/p>\n

Na konci roku 2019 se na odd\u011blen\u00ed vy\u0161et\u0159ov\u00e1n\u00ed kybernetick\u00fdch zlo\u010din\u016f Group-IB obr\u00e1tilo n\u011bkolik rusk\u00fdch podnikatel\u016f, kte\u0159\u00ed se pot\u00fdkali s probl\u00e9mem neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu nezn\u00e1m\u00fdch osob k jejich korespondenci v messengeru Telegram. K incident\u016fm doch\u00e1zelo na za\u0159\u00edzen\u00edch iOS a Android, nez\u00e1visle na tom, kter\u00e9ho feder\u00e1ln\u00edho oper\u00e1tora mobiln\u00edch s\u00edt\u00ed byl po\u0161kozen\u00fd klientem.<\/p>\n

\u00datok za\u010d\u00ednal t\u00edm, \u017ee do messengeru Telegram p\u0159i\u0161la u\u017eivateli zpr\u00e1va od servisn\u00edho kan\u00e1lu Telegram (to je ofici\u00e1ln\u00ed kan\u00e1l messengeru s modrou ov\u011b\u0159ovac\u00ed zna\u010dkou) s potvrzovac\u00edm k\u00f3dem, kter\u00fd si u\u017eivatel nevy\u017e\u00e1dal. Pot\u00e9 na smartphone ob\u011bti dorazila SMS s aktiva\u010dn\u00edm k\u00f3dem \u2014 a prakticky okam\u017eit\u011b p\u0159i\u0161lo na servisn\u00ed kan\u00e1l Telegram ozn\u00e1men\u00ed, \u017ee k \u00fa\u010dtu byl proveden p\u0159\u00edstup z nov\u00e9ho za\u0159\u00edzen\u00ed.<\/a><\/noindex><\/p>\n

\"Jak <\/p>\n

Ve v\u0161ech p\u0159\u00edpadech, o kter\u00fdch v\u00ed Group-IB, se \u00fato\u010dn\u00edci p\u0159ihla\u0161ovali do ciz\u00edho \u00fa\u010dtu p\u0159es mobiln\u00ed internet (pravd\u011bpodobn\u011b byly pou\u017eity jednor\u00e1zov\u00e9 SIM karty), a IP adresa \u00fato\u010dn\u00edk\u016f byla ve v\u011bt\u0161in\u011b p\u0159\u00edpad\u016f um\u00edst\u011bna v Sam\u00e1\u0159e. <\/p>\n

P\u0159\u00edstup na objedn\u00e1vku <\/h3>\n

\nV\u00fdzkum Laborato\u0159e po\u010d\u00edta\u010dov\u00e9 kriminalistiky Group-IB, kam byly p\u0159ed\u00e1ny elektronick\u00e9 za\u0159\u00edzen\u00ed po\u0161kozen\u00fdch, uk\u00e1zal, \u017ee technika nebyla infikov\u00e1na \u0161kodliv\u00fdm softwarem typu spyware nebo bankovn\u00edm trojanem, neprob\u011bhlo \u017e\u00e1dn\u00e9 hackerstv\u00ed na \u00fa\u010dtech, SIM karty nebyly vym\u011bn\u011bny. Ve v\u0161ech p\u0159\u00edpadech \u00fato\u010dn\u00edci z\u00edskali p\u0159\u00edstup k messengeru ob\u011bti pomoc\u00ed SMS k\u00f3d\u016f, kter\u00e9 byly obdr\u017een\u00e9 p\u0159i p\u0159ihla\u0161ov\u00e1n\u00ed do \u00fa\u010dtu z nov\u00e9ho za\u0159\u00edzen\u00ed. <\/p>\n

Tento proces vypad\u00e1 n\u00e1sledovn\u011b: p\u0159i aktivaci messengeru na nov\u00e9m za\u0159\u00edzen\u00ed, Telegram ode\u0161le k\u00f3d p\u0159es servisn\u00ed kan\u00e1l na v\u0161echna za\u0159\u00edzen\u00ed u\u017eivatele, a pot\u00e9 ji\u017e (na vy\u017e\u00e1d\u00e1n\u00ed) doraz\u00ed SMS zpr\u00e1va na telefon. V\u011bdoma si toho, \u00fato\u010dn\u00edci sami iniciuj\u00ed \u017e\u00e1dost o odesl\u00e1n\u00ed SMS k\u00f3du aktivace messengerem, zachyt\u00ed tuto SMS a pou\u017eij\u00ed obdr\u017een\u00fd k\u00f3d k \u00fasp\u011b\u0161n\u00e9 autorizaci v messengeru. <\/p>\n

\u00dato\u010dn\u00edci tak z\u00edsk\u00e1vaj\u00ed neleg\u00e1ln\u00ed p\u0159\u00edstup ke v\u0161em aktu\u00e1ln\u00edm chat\u016fm, krom\u011b tajn\u00fdch, a tak\u00e9 k historii zpr\u00e1v v t\u011bchto chatech, v\u010detn\u011b soubor\u016f a fotografi\u00ed, kter\u00e9 byly v nich zas\u00edl\u00e1ny. Pokud to leg\u00e1ln\u00ed u\u017eivatel Telegramu zjist\u00ed, m\u016f\u017ee n\u00e1siln\u011b ukon\u010dit relaci \u00fato\u010dn\u00edka. D\u00edky zaveden\u00e9mu mechanismu ochrany se to nem\u016f\u017ee st\u00e1t naopak; \u00fato\u010dn\u00edk nem\u016f\u017ee ukon\u010dit star\u0161\u00ed relace skute\u010dn\u00e9ho u\u017eivatele po dobu 24 hodin. Proto je d\u016fle\u017eit\u00e9 v\u010das odhalit ciz\u00ed relaci a ukon\u010dit ji, aby nedo\u0161lo ke ztr\u00e1t\u011b p\u0159\u00edstupu k \u00fa\u010dtu. Specialist\u00e9 ze skupiny Group-IB informovali t\u00fdm Telegram o sv\u00e9m v\u00fdzkumu situace.<\/p>\n

Studium incident\u016f pokra\u010duje a v tuto chv\u00edli nen\u00ed p\u0159esn\u011b stanoveno, jak\u00fd konkr\u00e9tn\u00ed zp\u016fsob byl pou\u017eit k obch\u00e1zen\u00ed SMS faktoru. V r\u016fzn\u00fdch obdob\u00edch uv\u00e1d\u011bli v\u00fdzkumn\u00edci p\u0159\u00edklady zachycen\u00ed SMS prost\u0159ednictv\u00edm \u00fatok\u016f na protokoly SS7 nebo Diameter, kter\u00e9 se pou\u017e\u00edvaj\u00ed v mobiln\u00edch s\u00edt\u00edch. Teoreticky je mo\u017en\u00e9 takov\u00e9 \u00fatoky realizovat neleg\u00e1ln\u00edm zp\u016fsobem pomoc\u00ed zvl\u00e1\u0161tn\u00edch technick\u00fdch prost\u0159edk\u016f nebo z insider\u016f v mobiln\u00edch oper\u00e1torech. Zejm\u00e9na na hackersk\u00fdch f\u00f3rech na Darknetu se objevuj\u00ed nov\u00e9 nab\u00eddky na hackov\u00e1n\u00ed r\u016fzn\u00fdch messenger\u016f, v\u010detn\u011b Telegramu. <\/p>\n

\"Jak<\/p>\n

\"Specialist\u00e9 v r\u016fzn\u00fdch zem\u00edch, v\u010detn\u011b Ruska, opakovan\u011b tvrdili, \u017ee soci\u00e1ln\u00ed s\u00edt\u011b, mobiln\u00ed bankovnictv\u00ed a messengery lze hacknout pomoc\u00ed zranitelnosti v protokolu SS7, av\u0161ak to byly ojedin\u011bl\u00e9 p\u0159\u00edpady c\u00edlen\u00fdch \u00fatok\u016f nebo experiment\u00e1ln\u00edch v\u00fdzkum\u016f,\" komentuje Sergej Lupanin, vedouc\u00ed odd\u011blen\u00ed vy\u0161et\u0159ov\u00e1n\u00ed kybernetick\u00fdch zlo\u010din\u016f v Group-IB, \"V s\u00e9rii nov\u00fdch incident\u016f, kter\u00fdch ji\u017e bylo v\u00edce ne\u017e 10, je o\u010dividn\u011b snaha \u00fato\u010dn\u00edk\u016f tento zp\u016fsob ob\u017eivy institucionalizovat. Aby se to nestalo, je t\u0159eba zvy\u0161ovat vlastn\u00ed \u00farove\u0148 digit\u00e1ln\u00ed hygieny: minim\u00e1ln\u011b pou\u017e\u00edvat dvoufaktorovou autentizaci v\u0161ude, kde je to mo\u017en\u00e9, a p\u0159id\u00e1vat k SMS povinn\u00fd druh\u00fd faktor, co\u017e je funk\u010dn\u011b zakotveno i v samotn\u00e9m Telegramu.\"<\/p>\n

Jak se br\u00e1nit?<\/h3>\n

\n 1. V Telegramu ji\u017e byly zavedeny v\u0161echny pot\u0159ebn\u00e9 mo\u017enosti kybernetick\u00e9 bezpe\u010dnosti, kter\u00e9 zma\u0159\u00ed \u00fasil\u00ed \u00fato\u010dn\u00edk\u016f.
\n 2. Na za\u0159\u00edzen\u00edch iOS a Android pro Telegram je nutn\u00e9 p\u0159ej\u00edt do nastaven\u00ed Telegramu, vybrat z\u00e1lo\u017eku \u201eSoukrom\u00ed\u201c a nastavit \u201eCloudov\u00e9 heslo Dvoufaktorov\u00e9 ov\u011b\u0159en\u00ed\u201c nebo \u201eTwo step verification\u201c. Podrobn\u00e9 instrukce k aktivaci t\u00e9to mo\u017enosti jsou uvedeny na ofici\u00e1ln\u00edch str\u00e1nk\u00e1ch messengeru: telegram.org\/blog\/sessions-and-2-step-verification<\/a><\/noindex> (https:\/\/telegram.org\/blog\/sessions-and-2-step-verification)<\/p>\n

\"Jak<\/p>\n

3. Je d\u016fle\u017eit\u00e9 nenastavovat e-mailovou adresu pro obnoven\u00ed tohoto hesla, proto\u017ee obvykle obnovov\u00e1n\u00ed hesla k e-mailu prob\u00edh\u00e1 tak\u00e9 p\u0159es SMS. Podobn\u011b lze zlep\u0161it zabezpe\u010den\u00ed \u00fa\u010dtu ve WhatsApp.<\/p>\n

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center>
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u043d\u0446\u0435 2019 \u0433\u043e\u0434\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439 Group-IB \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a \u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435 \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0435 Telegram. \u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438 Android, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0442\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043a\u0430\u043a\u043e\u0433\u043e \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0439. \u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0430\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440 Telegram \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53591","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jak mohou \u00fato\u010dn\u00edci \u010d\u00edst va\u0161e zpr\u00e1vy v Telegramu. A jak tomu zabr\u00e1nit | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0430\u0448\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 Telegram. \u0418 \u043a\u0430\u043a \u0438\u043c \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53591","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:01:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:22:49","updated":"2026-01-24 08:01:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/53591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=53591"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/53591\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=53591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=53591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=53591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}