{"id":121455,"date":"2025-01-23T15:46:01","date_gmt":"2025-01-23T13:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard"},"modified":"2026-02-04T17:53:52","modified_gmt":"2026-02-04T15:53:52","slug":"iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","title":{"rendered":"T\u00fchi\u00fclesande t\u00f5ttu r\u00fcndajad said vahetada DNS-serverit MasterCard.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Seralysest p\u00e4rit turvaekspert leidis, et mastercard.com domeeni DNS-serverit on v\u00f5imalik vahetada, mida kasutatakse MasterCardi makses\u00fcsteemi infrastruktuuris. Domeenitsooni mastercard.com seadetes on alates juunist 2020 olnud tr\u00fckiviga \u2014 DNS-serverite loendis oli hosti asemel «a22-65.akam.net» (Akamai DNS-teenus) m\u00e4rgitud vale host «a22-65.akam.ne». Juuredomeen «.ne» on registreeritud Nigeri vabariigile ja domeen «akam.ne» osutus m\u00fc\u00fcgiks saadavaks. <\/p>\n

Seega, nelja ja poole aasta jooksul v\u00f5is iga\u00fchel seda teha domeen osta<\/a> «akam.ne», luua host «a22-65.akam.ne», k\u00e4ivitada DNS-server ning luua enda variant DNS-zonest mastercard.com, suunates iga mastercard.com aladomeeni oma serverisse. DNSSEC-i ei kasutatud mastercard.com jaoks. Kuna tr\u00fckiviga on tehtud \u00fche viiest DNS-serverist, siis v\u00f5imaliku r\u00fcnnaku korral oleks olnud v\u00f5imalik saada kontroll v\u00e4hemalt 1\/5 liiklusest. Katvust oleks v\u00f5imalik suurendada, m\u00e4\u00e4rates vale tsoonile suure TTL (Time To Live), mis tooks kaasa registreeringute pikema hoidmise vahem\u00e4lu avalikes lahendustes, n\u00e4iteks Cloudflare'i (1.1.1.1) ja Google'i (8.8.8.8) poolt toetatavates.

\"T\u00fchi\u00fclesande<\/center> <\/p>\n

Lisaks olemasolevate hostide liikluse interceptimisele oleks olnud v\u00f5imalik l\u00e4bi viia v\u00e4hem m\u00e4rgatav r\u00fcnnak ja kasutada esialgu puuduvat aladomeeni pahatahtliku tegevuse korraldamiseks, n\u00e4iteks k\u00e4ivitada host «redemtion.mastercard.com» ja kasutada seda r\u00e4mpspostis asemel legitiimse sissep\u00e4\u00e4su jaoks «redemption.mastercard.com». Lisaks selle, kontrollides \u00fchte DNS-serveritest, mis teenindavad domeeni mastercard.com, oleks olnud v\u00f5imalik saada TLS-sertifikaat<\/a> juurdep\u00e4\u00e4s kohtades, mis v\u00f5imaldavad domeeni omandi\u00f5iguse kontrollimist l\u00e4bi Webi v\u00f5i DNS-i, n\u00e4iteks Let's Encrypt. R\u00fcnnakute v\u00f5imalikeks stsenaariumideks mainitakse ka vale postiserveri loomist, et interceptida kirjavahetust e-posti aadressiga nimi@mastercard.com ja andmete autentimise interceptimiseks t\u00f6\u00f6tajate arvutitest, kes kasutavad Windowsi. <\/p>\n

Probleemi avastanud ekspert ostis domeeni «akam.ne» 300 dollari eest ja k\u00e4ivitas sellel DNS-snifferi, et hinnata liikluse mahtu. Saadud p\u00e4ringute anal\u00fc\u00fcs n\u00e4itas, et MasterCardi juhtum ei olnud ainus ja et on olemas ka teisi domeenitsoone, mille DNS-serverite loendis oli host «akam.ne» asemel «akam.net». Veelgi enam, avastati, et aastatel 2015\u20132018 oli domeen «akam.ne» registreeritud ja t\u00f5en\u00e4oliselt kasutatud r\u00fcnnakute l\u00e4biviimiseks. Eeldus r\u00fcnnakute kohta tuleneb sellest, et endine omanik «akam.ne» registreeris ka domeeni «awsdns-06.ne», mis on stiliseeritud DNS-serveri «awsdns-06.net» j\u00e4rgi. \u00dche DNS-serveri mittefunktsionaalsus vale nime t\u00f5ttu v\u00f5ib j\u00e4\u00e4da administraatorite poolt pikaks ajaks m\u00e4rkamatuks, kuna usaldusv\u00e4\u00e4rsust tagatakse mitme DNS-serveri m\u00e4\u00e4ramise kaudu. <\/p>\n

MasterCard tunnustas ja parandab vea, kui ajakirjanik Brian Krebs temaga \u00fchendust v\u00f5ttis, kuigi algselt nad probleemist ignoreerisid, v\u00e4ites, et viga ei kujutanud endast ohtu infrastruktuurile. P\u00e4rast seda esitati uurijale l\u00e4bi Bugcrowdi, mis v\u00f5imaldab avastatud haavatavuste eest tasu saada, n\u00f5udmine MasterCardilt, et ta eemaldaks avaldatud teate juhtumist. <\/p>\n

Vastuseks teatas ekspert, et kuigi tal on Bugcrowd teenuses konto, ei ole ta esitanud mingeid preemiate taotlemisi, vaid teavitas otseselt MasterCardi ettev\u00f5tet probleemist. Teade avaldati, et juhtida t\u00e4helepanu probleemile p\u00e4rast seda, kui MasterCardi ettev\u00f5ttele enam ohtu ei olnud ja domeen «akam.ne» kuulus uurijale. L\u00f5puks ei kompenseerinud MasterCard mitte ainult 300 dollarit, mis kulus domeeni ostmiseks, vaid ei \u00f6elnud isegi t\u00e4nus\u00f5nu uurijale. <\/p>\n

Mis puutub v\u00e4itesse, et viga ei tekitanud t\u00e4iendavaid riske, esitas uurija saadud DNS-p\u00e4ringute statistika, kus figureerivad domeenid *.az.mastercard.com, viidates MasterCardi infrastruktuuri t\u00f6\u00f6tavatele komponentidele, mis asuvad Microsoft Azure'i pilveteenus. Taoliste komponentide kompromiteerimine esindas ilmselt kriitilist turvariski.

\"T\u00fchi\u00fclesande<\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard. \u0412 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b mastercard.com \u0441 \u0438\u044e\u043d\u044f 2020 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0430 — \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0437\u043e\u043d\u0443 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u0445\u043e\u0441\u0442\u0430 «a22-65.akam.net» (DNS-\u0441\u043b\u0443\u0436\u0431\u0430 Akamai) \u0431\u044b\u043b \u0443\u043a\u0430\u0437\u0430\u043d \u0445\u043e\u0441\u0442 «a22-65.akam.ne». \u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u0437\u043e\u043d\u0430 «.ne» \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0437\u0430 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439 \u041d\u0438\u0433\u0435\u0440 \u0438 \u0434\u043e\u043c\u0435\u043d «akam.ne» \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":121456,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121455","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tr\u00fckivea t\u00f5ttu seadistustes said r\u00fcndajad asendada MasterCardi DNS-serverit | ProHoster","description":"Seralysi ettev\u00f5tte turvaekspert tuvastas, et mastercard.com domeeni DNS-serverit oli v\u00f5imalik asendada, mida kasutati MasterCard makses\u00fcsteemi infrastruktuuris. Mastercard.com domeeni seadistustes oli alates juunist 2020 esinenud tr\u00fckiviga - DNS-serverite nimekirjas oli host \"a22-65.akam.net\" (Akamai DNS-teenus) asemel m\u00e4rgitud host \"a22-65.akam.ne\". Juuredomeen \"ne\" kuulub Nigeri Vabariigile ja domeen \"akam.ne\" oli","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437-\u0437\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 MasterCard | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard. \u0412 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b mastercard.com \u0441 \u0438\u044e\u043d\u044f 2020 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0430 - \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0437\u043e\u043d\u0443 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u0445\u043e\u0441\u0442\u0430 "a22-65.akam.net" (DNS-\u0441\u043b\u0443\u0436\u0431\u0430 Akamai) \u0431\u044b\u043b \u0443\u043a\u0430\u0437\u0430\u043d \u0445\u043e\u0441\u0442 "a22-65.akam.ne". \u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u0437\u043e\u043d\u0430 ".ne" \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0437\u0430 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439 \u041d\u0438\u0433\u0435\u0440 \u0438 \u0434\u043e\u043c\u0435\u043d "akam.ne" \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-23T13:46:03+00:00","article:modified_time":"2026-02-04T15:53:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121455","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:56:19","updated":"2026-02-08 21:04:47"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121455","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=121455"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121455\/revisions"}],"predecessor-version":[{"id":158134,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121455\/revisions\/158134"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/121456"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=121455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=121455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=121455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}