{"id":121455,"date":"2025-01-23T15:46:01","date_gmt":"2025-01-23T13:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard"},"modified":"2026-02-04T17:53:52","modified_gmt":"2026-02-04T15:53:52","slug":"iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","title":{"rendered":"T\u00e4nu seadmisele tekkinud tr\u00fckiveale said r\u00fcndajad v\u00f5imaluse MasterCardi DNS-serverit asendada.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Seralys'i turvateadur tuvastas v\u00f5imaluse asendada DNS-server domeenile mastercard.com, mida kasutatakse MasterCardi makses\u00fcsteemi infrastruktuuris. Domeeni tsooni seadetes oli alates juunist 2020 olemas tr\u00fckiviga \u2014 DNS-serverite nimekirjas, mis teenindavad domeeni, oli hosti asemel \u00aba22-65.akam.net\u00bb (Akamai DNS-teenus) m\u00e4\u00e4ratud host \u00aba22-65.akam.ne\u00bb. Klienditalituse juurdev\u00f5tt \u00ab.ne\u00bb on seotud Nigeeria Vabariigiga ja domeen \u00abakam.ne\u00bb osutus m\u00fc\u00fcgiks k\u00e4ttesaadavaks. <\/p>\n

Seega oli nelja ja poole aasta jooksul iga\u00fchel v\u00f5imalik osta domeen<\/a> \u00abakam.ne\u00bb, luua host \u00aba22-65.akam.ne\u00bb, seadistada sellele DNS-server, luua oma variant DNS-tsoonist mastercard.com ja suunata k\u00f5ik alamdomeenid mastercard.com oma serverisse. DNSSEC-d mastercard.com jaoks ei kasutatud. Kuna tr\u00fckiviga esines \u00fchel viiest DNS-serverist, oleks r\u00fcnnaku korral saanud kontrollida v\u00e4hemalt 1\/5 liiklusest. Katteala oleks olnud v\u00f5imalik suurendada, m\u00e4\u00e4rates vale tsoonile suure TTL-i (Time To Live), mis tooks endaga kaasa \u00fclialumise salvestuste pikema hoidmise jagatud resolverites, n\u00e4iteks Cloudflare\u2019i (1.1.1.1) ja Google\u2019i (8.8.8.8) poolt pakutud.

\"T\u00e4nu<\/center> <\/p>\n

Lisaks olemasolevate hostide liikluse pealtkuulamisele oleks olnud v\u00f5imalik l\u00e4bi viia v\u00e4hem m\u00e4rgatav r\u00fcnnak ja kasutada algselt puuduvat alamdomeeni kalastamise korraldamiseks, n\u00e4iteks luua host \u00abredemtion.mastercard.com\u00bb ja kasutada seda r\u00e4mpspostis koos legitiimse sisenemispunktiga \u00abredemption.mastercard.com\u00bb. Peale selle, omades kontrolli \u00fche DNS-serveri \u00fcle, mis teenindab domeeni mastercard.com, oleks saanud TLS-sertifikaat<\/a> teenustes, mis v\u00f5imaldavad domeeni omandi\u00f5iguse kontrollimist veebis v\u00f5i DNS kaudu, nagu Let's Encrypt. V\u00f5imalike r\u00fcndescenaaride seas mainitakse ka vale postiserveri loomist, et pealt kuulata kirja vahetust e-posti aadressilt nimi@mastercard.com ja autentimisandmete pealtkuulamise korraldamist t\u00f6\u00f6tajate arvutites, kes kasutavad Windowsi. <\/p>\n

Probleemid tuvastanud uurija ostis domeeni «akam.ne» hinnaga 300 dollarit ja k\u00e4ivitas sellele DNS-lukustaja, et hinnata liiklust. Saadud p\u00e4ringute anal\u00fc\u00fcs n\u00e4itas, et juhtum MasterCardiga ei ole ainus ning on olemas teisi domeenitsoone, mille DNS-serverite nimekirjas on host «akam.ne» asemel «akam.net». Lisaks selgus, et ajavahemikul 2015 kuni 2018 oli domeen «akam.ne» registreeritud ja t\u00f5en\u00e4oliselt kasutatud r\u00fcnnakute l\u00e4biviimiseks. R\u00fcnnakute oletus tugineb sellele, et endine omanik «akam.ne» registreeris ka domeeni «awsdns-06.ne», mis on stiilitud DNS-serveri «awsdns-06.net» sarnaseks. \u00dche DNS-serveri, mille nimel esines tr\u00fckiviga, mittet\u00f6\u00f6tamine v\u00f5ib administraatorite poolt pikka aega m\u00e4rkamatuks j\u00e4\u00e4da, kuna talitlush\u00e4irekindlus tagatakse mitme DNS-serveri n\u00e4itamise kaudu. <\/p>\n

MasterCardi ettev\u00f5te ignoreeris alguses probleemist teatamist, kuid p\u00e4rast seda, kui ajakirjanik Brian Krebs temaga \u00fchendust v\u00f5ttis, tunnustas ta viga ja parandas selle, \u00f6eldes, et viga ei kujutanud endast ohtu infrastruktuurile. Seej\u00e4rel suunati teadlasele Bugcrowdi teenuse kaudu, mis v\u00f5imaldab avastatud haavatavuste eest tasu saada, MasterCardi n\u00f5ue eemaldada avaldatud m\u00e4rkmed intsidentidest. <\/p>\n

Vastuseks \u00fctles uurija, et kuigi tal on konto Teenuses Bugcrowd, ei ole ta esitanud \u00fchtegi h\u00fcvitisetaotlust ja teavitas MasterCardi ettev\u00f5tet probleemist otse. Kirjandus avaldati t\u00e4helepanu juhtimiseks probleemile p\u00e4rast seda, kui MasterCardi ettev\u00f5ttele enam ei olnud ohtu ja domeen «akam.ne» kuulus uurijale. L\u00f5puks ei kompenseerinud MasterCard mitte ainult 300 dollarit, mis kulus domeeni ostmiseks, vaid ei t\u00e4nanud isegi uurijat s\u00f5nades. <\/p>\n

Mis puutub v\u00e4itesse, et viga ei loonud t\u00e4iendavaid riske, siis esitas teadlane saadud DNS-p\u00e4ringute statistika, milles esinevad domeenid *.az.mastercard.com, mis viitavad MasterCardi infrastruktuuri t\u00f6\u00f6tavatele komponentidele, mis asuvad Microsoft Azure'i pilveteenuses. Sarnaste komponentide kompromiteerimine kujutas ilmselt kriitilist ohtu turvalisusele.

\"T\u00e4nu<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard. \u0412 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b mastercard.com \u0441 \u0438\u044e\u043d\u044f 2020 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0430 — \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0437\u043e\u043d\u0443 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u0445\u043e\u0441\u0442\u0430 «a22-65.akam.net» (DNS-\u0441\u043b\u0443\u0436\u0431\u0430 Akamai) \u0431\u044b\u043b \u0443\u043a\u0430\u0437\u0430\u043d \u0445\u043e\u0441\u0442 «a22-65.akam.ne». \u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u0437\u043e\u043d\u0430 «.ne» \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0437\u0430 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439 \u041d\u0438\u0433\u0435\u0440 \u0438 \u0434\u043e\u043c\u0435\u043d «akam.ne» \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":121456,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121455","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u00e4nu vale kirjutamisele seadistustes v\u00f5isid r\u00fcndajad MasterCardi DNS-serverit valele seadistada | ProHoster","description":"Seralys'i turbeuurija tuvastas v\u00f5imaluse DNS-serveri vale seadistamiseks domeenil mastercard.com, mida kasutatakse MasterCardi makses\u00fcsteemi infrastruktuuris.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437-\u0437\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 MasterCard | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-23T13:46:03+00:00","article:modified_time":"2026-02-04T15:53:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121455","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:56:19","updated":"2026-02-08 21:04:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121455","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=121455"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121455\/revisions"}],"predecessor-version":[{"id":158134,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121455\/revisions\/158134"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/121456"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=121455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=121455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=121455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}