{"id":54400,"date":"2019-12-25T00:00:00","date_gmt":"2019-12-24T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kitajskih-hakerov-pojmali-na-obhode-dvuhfaktornoj-avtorizatsii"},"modified":"2020-02-18T14:02:24","modified_gmt":"2020-02-18T11:02:24","slug":"kitajskih-hakerov-pojmali-na-obhode-dvuhfaktornoj-avtorizatsii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/kitajskih-hakerov-pojmali-na-obhode-dvuhfaktornoj-avtorizatsii","title":{"rendered":"\u010c\u00ednsk\u00e9 hackery chytili p\u0159i obch\u00e1zen\u00ed dvoufaktorov\u00e9 autentizace","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u010c\u00edn\u0161t\u00ed hacke\u0159i byli chyceni<\/a><\/noindex> p\u0159i obch\u00e1zen\u00ed dvoufaktorov\u00e9 autentizace, ale to nen\u00ed jist\u00e9. N\u00ed\u017ee budou uvedeny domn\u011bnky nizozemsk\u00e9 spole\u010dnosti Fox-IT, kter\u00e1 se specializuje na poradenstv\u00ed v oblasti kybernetick\u00e9 bezpe\u010dnosti. P\u0159edpokl\u00e1d\u00e1 se, \u017ee, \u010demu\u017e nejsou p\u0159\u00edm\u00e9 d\u016fkazy, na \u010d\u00ednsk\u00e9 vl\u00e1dn\u00ed struktury pracuje skupina hacker\u016f zn\u00e1m\u00e1 jako APT20.<\/p>\n

\"\u010c\u00ednsk\u00e9<\/p>\n

Poprv\u00e9 byla hackerstv\u00ed, p\u0159i\u010d\u00edtan\u00e9 skupin\u011b APT20, objeveno v roce 2011. V letech 2016\u20132017 skupina zmizela z dohledu odborn\u00edk\u016f a teprve ned\u00e1vno Fox-IT odhalila stopy z\u00e1sahu APT20 v s\u00edti jednoho ze sv\u00fdch klient\u016f, kter\u00fd po\u017e\u00e1dal o vy\u0161et\u0159en\u00ed naru\u0161en\u00ed kybernetick\u00e9 bezpe\u010dnosti.<\/p>\n

Podle n\u00e1zoru Fox-IT se v posledn\u00edch dvou letech skupina APT20 zam\u011b\u0159ila na hackov\u00e1n\u00ed a p\u0159\u00edstup k dat\u016fm st\u00e1tn\u00edch org\u00e1n\u016f, velk\u00fdch firem a poskytovatel\u016f slu\u017eeb v USA, Francii, N\u011bmecku, It\u00e1lii, Mexiku, Portugalsku, \u0160pan\u011blsku, Velk\u00e9 Brit\u00e1nii a Braz\u00edlii. Hacke\u0159i z APT20 byli tak\u00e9 aktivn\u00ed v oblastech jako je letectv\u00ed, zdravotnictv\u00ed, finance, poji\u0161t\u011bn\u00ed, energetika a dokonce v oblastech jako jsou hazardn\u00ed hry a elektronick\u00e9 z\u00e1mky.<\/p>\n

<\/center><\/p>\n

Obvykle hacke\u0159i z APT20 pou\u017e\u00edvali zranitelnosti ve webov\u00fdch serverech a konkr\u00e9tn\u011b na platform\u011b podnikov\u00fdch aplikac\u00ed Jboss pro vstup do syst\u00e9m\u016f ob\u011bt\u00ed. Po z\u00edsk\u00e1n\u00ed p\u0159\u00edstupu a instalaci shell\u016f pronikali hacke\u0159i prost\u0159ednictv\u00edm s\u00edt\u00ed ob\u011bt\u00ed do v\u0161ech mo\u017en\u00fdch syst\u00e9m\u016f. Nalezen\u00e9 \u00fa\u010dty umo\u017enily \u00fato\u010dn\u00edk\u016fm kr\u00e1st data pomoc\u00ed standardn\u00edch n\u00e1stroj\u016f, ani\u017e by museli instalovat malware. Hlavn\u00edm probl\u00e9mem v\u0161ak je, \u017ee skupina APT20 \u00fadajn\u011b dok\u00e1zala obch\u00e1zet dvoufaktorovou autentizaci pomoc\u00ed token\u016f.<\/p>\n

\"\u010c\u00ednsk\u00e9<\/p>\n

V\u00fdzkumn\u00edci tvrd\u00ed, \u017ee na\u0161li stopy toho, \u017ee hacke\u0159i se p\u0159ipojili k \u00fa\u010dt\u016fm VPN chr\u00e1n\u011bn\u00fdm dvoufaktorovou autentizac\u00ed. Jak k tomu do\u0161lo, odborn\u00edci z Fox-IT mohou pouze h\u00e1dat. Nejpravd\u011bpodobn\u011bj\u0161\u00ed z nich je, \u017ee hacke\u0159i mohli ukr\u00e1st z kompromitovan\u00e9ho syst\u00e9mu programov\u00fd token RSA SecurID. S pomoc\u00ed ukraden\u00e9ho programu n\u00e1sledn\u011b hacke\u0159i mohli generovat jednor\u00e1zov\u00e9 k\u00f3dy pro obch\u00e1zen\u00ed dvoufaktorov\u00e9 ochrany.<\/p>\n

Za norm\u00e1ln\u00edch okolnost\u00ed je to nemo\u017en\u00e9. Programov\u00fd token nefunguje bez p\u0159ipojen\u00ed k lok\u00e1ln\u00edmu syst\u00e9mu hardwarov\u00e9ho tokenu. Bez n\u011bj program RSA SecurID hl\u00e1s\u00ed chybu. Programov\u00fd token je vytv\u00e1\u0159en pro konkr\u00e9tn\u00ed syst\u00e9m a s p\u0159\u00edstupem k \u201ehardwaru\u201c ob\u011bti lze z\u00edskat specifick\u00e9 \u010d\u00edslo pro spu\u0161t\u011bn\u00ed programov\u00e9ho tokenu.<\/p>\n

\"\u010c\u00ednsk\u00e9<\/p>\n

Odborn\u00edci z Fox-IT tvrd\u00ed, \u017ee pro spu\u0161t\u011bn\u00ed (ukraden\u00e9ho) softwarov\u00e9ho tokenu nen\u00ed v\u016fbec nutn\u00fd p\u0159\u00edstup k po\u010d\u00edta\u010di a hardwarov\u00e9mu tokenu ob\u011bti. Cel\u00fd komplex po\u010d\u00e1te\u010dn\u00edho ov\u011b\u0159en\u00ed prob\u00edh\u00e1 pouze p\u0159i importu po\u010d\u00e1te\u010dn\u00edho vektoru generov\u00e1n\u00ed \u2014 n\u00e1hodn\u00e9ho 128-bitov\u00e9ho \u010d\u00edsla odpov\u00eddaj\u00edc\u00edho konkr\u00e9tn\u00edmu tokenu (SecurID Token Seed<\/a><\/noindex>). Toto \u010d\u00edslo nem\u00e1 \u017e\u00e1dnou souvislost s po\u010d\u00e1te\u010dn\u00edm \u010d\u00edslem, kter\u00e9 se n\u00e1sledn\u011b vztahuje k generaci skute\u010dn\u00e9ho softwarov\u00e9ho tokenu. Pokud lze ov\u011b\u0159en\u00ed SecurID Token Seed n\u011bjak\u00fdm zp\u016fsobem obej\u00edt (napatchovat), pak nic v budoucnu nebr\u00e1n\u00ed generov\u00e1n\u00ed k\u00f3d\u016f pro dvoufaktorovou autentizaci. Spole\u010dnost Fox-IT uv\u00e1d\u00ed, \u017ee obej\u00edt ov\u011b\u0159en\u00ed lze zm\u011bnou pouze jedn\u00e9 instrukce. Po tomto bude syst\u00e9m ob\u011bti zcela a leg\u00e1ln\u011b otev\u0159en \u00fato\u010dn\u00edkovi bez pou\u017eit\u00ed speci\u00e1ln\u00edch utilit a rozhran\u00ed.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Zdroj: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043f\u043e\u0439\u043c\u0430\u043b\u0438 \u043d\u0430 \u043e\u0431\u0445\u043e\u0434\u0435 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u0442\u043e\u0447\u043d\u043e. \u041d\u0438\u0436\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u044b \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0433\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Fox-IT, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u0443\u0433\u0430\u0445 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0435\u043c\u0443 \u043d\u0435\u0442 \u043f\u0440\u044f\u043c\u044b\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432, \u0447\u0442\u043e \u043d\u0430 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0433\u0440\u0443\u043f\u043f\u0430 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u043c\u044f APT20. \u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0443\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0435 APT20, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 2011 \u0433\u043e\u0434\u0443. \u0412 2016–2017 \u0433\u043e\u0434\u0430\u0445 \u0433\u0440\u0443\u043f\u043f\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-54400","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u010c\u00edn\u0161t\u00ed hacke\u0159i byli chyceni p\u0159i obch\u00e1zen\u00ed dvoufaktorov\u00e9 autentizace | ProHoster","description":"\u010c\u00edn\u0161t\u00ed hacke\u0159i byli chyceni p\u0159i obch\u00e1zen\u00ed dvoufaktorov\u00e9ho ov\u011b\u0159en\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/kitajskih-hakerov-pojmali-na-obhode-dvuhfaktornoj-avtorizatsii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043f\u043e\u0439\u043c\u0430\u043b\u0438 \u043d\u0430 \u043e\u0431\u0445\u043e\u0434\u0435 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043f\u043e\u0439\u043c\u0430\u043b\u0438 \u043d\u0430 \u043e\u0431\u0445\u043e\u0434\u0435 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/kitajskih-hakerov-pojmali-na-obhode-dvuhfaktornoj-avtorizatsii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-24T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54400","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 11:13:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:06:38","updated":"2026-01-24 11:13:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54400","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=54400"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/54400\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=54400"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=54400"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=54400"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}