{"id":104862,"date":"2022-08-16T21:36:39","date_gmt":"2022-08-16T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio"},"modified":"2022-08-16T21:36:39","modified_gmt":"2022-08-16T19:36:39","slug":"popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio","title":{"rendered":"Signal'i kasutajakontode haaramise katse SMS-teenuse Twilio kompromiteerimise kaudu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Avoh\u00f5lmatud avatud s\u00f5numirakenduse Signali arendajad avalikustasid teavet sihttaseme r\u00fcnnaku kohta, mille eesm\u00e4rk oli saada kontroll teatud kasutajate kontode \u00fcle. R\u00fcnnak toimus Twilio teenuse h\u00e4kkimise kaudu, mida Signal kasutab SMS-koodide saatmiseks. Andmeanal\u00fc\u00fcs n\u00e4itas, et Twilio h\u00e4kkimine v\u00f5is m\u00f5jutada umbes 1900 Signali kasutaja telefoni numbrit, mille puhul r\u00fcndajad said numbrid \u00fcmber registreerida teisele seadmele, saades p\u00e4rast seda s\u00f5numeid saata v\u00f5i vastu v\u00f5tta seotud telefoninumbri jaoks (juurdep\u00e4\u00e4s varasemale vestlusele, profiili teabele ja kontaktide loendile ei olnud v\u00f5imalik, kuna selline teave salvestatakse kasutaja seadmesse ja ei edastata Signali \u0441\u0435\u0440\u0432\u0435\u0440itesse). <\/p>\n

Ajavahemikul alates h\u00e4kkimisest kuni Twilio poolt r\u00fcnnaku jaoks kasutatud kompromiteeritud t\u00f6\u00f6taja konto blokeerimiseni, m\u00e4rgiti 1900 telefoni numbril aktiivsust, mis oli seotud konto registreerimise v\u00f5i kontrollkoodi saatmisega SMS-i teel. R\u00fcndajad, p\u00e4\u00e4sedes Twilio teenuse liidesele, olid huvitatud kolmest konkreetsest Signali kasutaja numbrist, ning v\u00e4hemalt \u00fche telefoni \u00f5nnestus siduda r\u00fcndajate seadmega, kui arvestada kaebust, mille sai kannatada saanud konto omanik. Signal saatis SMS-teate k\u00f5ikidele kasutajatele, keda r\u00fcnnak potentsiaalselt v\u00f5is puudutada, ja t\u00fchistas nende seadmete registreerimise. <\/p>\n

Twilio h\u00e4kkimine toimus sotsiaalse inseneeria meetodite abil, mis v\u00f5imaldas r\u00fcndajatel meelitada \u00fche ettev\u00f5tte t\u00f6\u00f6taja kalastamislehele ning saada juurdep\u00e4\u00e4s tema klienditoe s\u00fcsteemi kontole. Eelk\u00f5ige saatsid r\u00fcndajad Twilio t\u00f6\u00f6tajatele SMS-e, mis hoiatavad konto kehtivuse l\u00f5ppemise eest v\u00f5i sisaldavad teavet ajakava muutmise kohta, millele oli lisatud link vale lehele, mis oli kujundatud Twilio teenuse sisselogimise liidese sarnaseks. Twilio andmetel \u00f5nnestus r\u00fcndajatel, \u00fchendudes klienditoe liidesega, p\u00e4\u00e4seda ligi 125 kasutajaga seotud andmetele.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0430 Signal \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0410\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0437\u043b\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Twilio, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 Signal \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0441 \u043a\u043e\u0434\u0430\u043c\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f. \u0410\u043d\u0430\u043b\u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c Twilio \u043c\u043e\u0433 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043e\u043a\u043e\u043b\u043e 1900 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Signal, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0440\u0435\u0433\u0438\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u043c\u0435\u0440\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104862","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Signal'i kontode haaramise katse Twilio SMS-teenuse komprimeerimise kaudu | ProHoster","description":"Avaikse arendajad on avardanud teavet sihtotstarbelisest r\u00fcnnakust, mille eesm\u00e4rk on saada kontrolli teatud kasutajate kontode \u00fcle.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u043f\u044b\u0442\u043a\u0430 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 Signal \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e SMS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 Twilio | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0430 Signal \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-08-16T19:36:39+00:00","article:modified_time":"2022-08-16T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104862","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-08-16 19:37:46","updated":"2022-09-28 09:18:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104862","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=104862"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104862\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=104862"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=104862"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=104862"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}