{"id":112727,"date":"2024-01-06T21:10:22","date_gmt":"2024-01-06T19:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin"},"modified":"2024-01-06T21:10:22","modified_gmt":"2024-01-06T19:10:22","slug":"orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","title":{"rendered":"Orange Espa\u00f1a h\u00e4kitakse, kuna RIPE NCC admin kasutaja parool oli ripeadmin","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Orange Espa\u00f1a, Hispaania teine suurim mobiilsideoperaator, koges t\u00f5sist riket kolmap\u00e4eval, kuna teadmata isik p\u00e4\u00e4ses juurde konto haldamiseks globaalsetes marsruutimistabelites, kasutades «naeruv\u00e4\u00e4rselt n\u00f5rka» parooli. Alates 9:28 UTC sisenes isik h\u00fc\u00fcdnimega Snow Orange'i kontole RIPE NCC-s, kasutades parooli ripeadmin. RIPE NCC vastutab IP-aadresside haldamise ja jaotamise eest ning teenindab 75 riiki Euroopas, L\u00e4his-Idas ja Kesk-Aasias.<\/p>\n

Snow lisas esmalt globaalsesse marsruutimistabelisse uusi ROAsid (Marsruudi Originaali Volitusi), mis esialgu ei p\u00f5hjustanud rikkeid. Hiljem lisas Snow ROAsid «valeallikatega», mis viis olulise arvu Orange'i kehtivate marsruutide v\u00e4henemiseni, mis omakorda p\u00f5hjustas teenuse rikkumise. Probleemi s\u00fcvendas RPKI (Resource Public Key Infrastructure) kasutamine, mis on m\u00f5eldud marsruutide ebaseadusliku \u00fclev\u00f5tmise ennetamiseks, muutes Orange'i v\u00f5rgu t\u00f5husalt mittet\u00f6\u00f6tavaks.<\/p>\n

Hudson Rock avastas, et internetipoodides on m\u00fc\u00fcgis volitused, mis on varastatud pahavara kaudu, mis oli paigaldatud Orange'i arvutisse alates septembrist. Uurijad p\u00f6\u00f6rasid t\u00e4helepanu ka tuhandetele teistele volitustele, mis kaitsevad RIPE kontosid ja on saadaval sellistes turuplaces.<\/p>\n

See juhtum r\u00f5hutab BGP s\u00fcsteemi n\u00f5rkust ja toob esile t\u00f5sised turvaprobleemid Orange'is. N\u00f5rkade paroolide kasutamine ja mitmeastmelise autentimise puudumine, samuti t\u00f6\u00f6taja arvutisse installitud pahavara, mis j\u00e4i neljaks kuuks m\u00e4rkamatuks, on t\u00f5sised eba\u00f5nnestumised, mis poleks kunagi pidanud juhtuma sellise suurusega organisatsioonis nagu Orange. Uurijad loodavad, et see juhtum teenib hoiatava m\u00e4rkina teistele teenusepakkujatele ja julgustab neid tugevdama oma turvameetmeid.<\/p>\n

Allikas: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e «\u0441\u043c\u0435\u0445\u043e\u0442\u0432\u043e\u0440\u043d\u043e \u0441\u043b\u0430\u0431\u043e\u0433\u043e» \u043f\u0430\u0440\u043e\u043b\u044f. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 9:28 UTC, \u043b\u0438\u0446\u043e \u043f\u043e\u0434 \u043d\u0438\u043a\u043e\u043c Snow \u0432\u043e\u0448\u043b\u043e \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c Orange \u0432 RIPE NCC, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u043e\u043b\u044c ripeadmin. RIPE NCC […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112727","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Orange Espa\u00f1a h\u00e4kitakse, kuna RIPE NCC konto admini kasutaja parool oli ripeadmin | ProHoster","description":"Orange Espa\u00f1a, Hispaania teine suurim mobiilsideoperaator, seisis silmitsi t\u00f5sise h\u00e4irega kolmap\u00e4eval p\u00e4rast seda, kui tundmatu isik p\u00e4\u00e4ses ligi globaalse marsruudi tabeli haldamise kontole \"naeruv\u00e4\u00e4rselt n\u00f5rgast\" paroolist. Alates kella 9:28 UTC, sisenes isik nimega Snow Orange'i kontole RIPE NCC-s, kasutades parooli ripeadmin. RIPE NCC","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Orange Espa\u00f1a \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f admin \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 RIPE NCC \u0431\u044b\u043b ripeadmin | ProHoster","og:description":"Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u00ab\u0441\u043c\u0435\u0445\u043e\u0442\u0432\u043e\u0440\u043d\u043e \u0441\u043b\u0430\u0431\u043e\u0433\u043e\u00bb \u043f\u0430\u0440\u043e\u043b\u044f. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 9:28 UTC, \u043b\u0438\u0446\u043e \u043f\u043e\u0434 \u043d\u0438\u043a\u043e\u043c Snow \u0432\u043e\u0448\u043b\u043e \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c Orange \u0432 RIPE NCC, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u043e\u043b\u044c ripeadmin. RIPE NCC","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-06T19:10:22+00:00","article:modified_time":"2024-01-06T19:10:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=112727"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112727\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=112727"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=112727"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=112727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}