{"id":38524,"date":"2019-10-31T22:24:17","date_gmt":"2019-10-31T19:24:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blagodarya-dvuhfaktornoj-autentifikatsii-ya-lishilsya-vseh-vlozhennyh-deneg-i-3-let-raboty\/"},"modified":"2019-10-31T22:24:17","modified_gmt":"2019-10-31T19:24:17","slug":"blagodarya-dvuhfaktornoj-autentifikatsii-ya-lishilsya-vseh-vlozhennyh-deneg-i-3-let-raboty","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/blagodarya-dvuhfaktornoj-autentifikatsii-ya-lishilsya-vseh-vlozhennyh-deneg-i-3-let-raboty","title":{"rendered":"Kahefaasilise autentimise t\u00f5ttu kaotasin k\u00f5ik investeeritud rahad ja kolme aasta t\u00f6\u00f6.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Postitus sellest, kuidas Yandex.Mail teenusega seotud telefon aitas mul varastada minu loodud veebiv\u00e4ljaande domeeni "Pankade T\u00e4na<\/a><\/noindex>". Tahan m\u00e4rkida, et sellesse v\u00e4ljaandesse olen investeerinud k\u00f5ik oma s\u00e4\u00e4stud, hinge ja 3 aastat vaeva.
\n<\/a><\/noindex>
\nK\u00f5ik algas veel t\u00e4na, 25. september 2019. Ajal 15:50 sain mina (domeeni administraator) MTS-ilt s\u00f5numi: keegi k\u00e4ivitas minu SIM-kaardi vahetamise:<\/p>\n

\"Kahefaasilise
\n
\nSee t\u00e4hendab, et keegi v\u00e4ljastas minu SIM-kaardi uue. Kuidas see \u00f5nnestus \u2014 j\u00e4\u00e4b suureks k\u00fcsimuseks, mille suuname MTS-ile.<\/p>\n

Loomulikult kontrollisin ma esimesena, kas see SMS ei tulnud petjatelt. Kontrollides SMS-is n\u00e4idatud numbrit, sain aru, et number on \u00f5ige, seega on probleem t\u00f5sine. Juba minuti jooksul hakkasin proovima MTS-i klienditeenindusega \u00fchendust saada. MTS-i telefonimen\u00fc\u00fc l\u00e4bimise \u201eseiklus\u201c, mille tulemuseks on operaatoriga r\u00e4\u00e4kimine, v\u00e4\u00e4rib eraldi lugu. \u00dctlen l\u00fchidalt, et minu jaoks v\u00f5ttis \u201einimese\u201c juurde p\u00e4\u00e4semine aega umbes 7 minutit.<\/p>\n

Kahjuks ei olnud suhtlus pikk, umbes 20 sekundi p\u00e4rast katkestas k\u00f5ne. T\u00f5en\u00e4oliselt aktiveeris pettur sel hetkel SIM-kaardi, kuna ma ei suutnud oma numbrilt enam k\u00f5ne teha, minu SIM-kaart muutus mitteaktiivseks. Teiselt numbrilt \u00f5nnestus mul MTS-i klienditeenindusse helistada, mille tulemusena blokeeriti number (mis oli seotud meiliga).<\/p>\n

Aga oli juba hilja. Kurjategijal oli juurdep\u00e4\u00e4s Yandexi e-posti aadressile, millega oli registreeritud domeeninime registri isiklik konto.<\/p>\n

Muide, e-postile oli aktiveeritud kahefaktoriline autentimine, kuid just telefoninumbri seotuse t\u00f5ttu toimus selle domeeni \u201ekaaperdamine\u201c. Kui mu e-post ei oleks olnud seotud telefoninumbriga, ei oleks pettur suutnud minu parooli taastada.<\/p>\n

Juba siis suutis pettur saada juurdep\u00e4\u00e4su domeeninime registri isiklikule kontole (reg.ru) ja kolis domeeni teise kontole. Kuna domeen oli rahvusvahelises .NET piirkonnas, ei olnud domeeni \u00fclekandmine \u00fchelt kontolt teisele keeruline.<\/p>\n

Praeguseks hetkeks t\u00f6\u00f6tab meie v\u00e4ljaande veebisait ja t\u00e4na oleme isegi suutnud k\u00e4ivitada vastava post<\/a><\/noindex>. Aga ma usun, et juba homme, kui DNS-serverid uuenevad, kaob mu laev, mida olen ehitanud kolm aastat, silmapiiri taha.<\/p>\n

Loodan, et k\u00f5ik mu kirjad Yandexisse, Reg.Russe, taotlused MTS-ile ning ka politseisse (t\u00e4na ei j\u00f5udnud avaldust esitada, aga homme kindlasti teen seda) toovad tulemusi.<\/p>\n

Me ei ole kunagi poliitikaga tegelenud ega tellitud materjale kirjutanud. Kuid selline saatus tabas ka meie kodulehte.<\/p>\n

Lootuses paremat, veebiv\u00e4ljaande \u00abPangad T\u00e4na\u00bb kaasomanik.<\/p>\n

UPD 26. sept 15:00.
\nPika ankeedi t\u00e4itmisel on juurdep\u00e4\u00e4s Yandexi postkastile taastatud. Politseisse on koostatud avaldus. Saatsin skaneeritud dokumendid Reg.Ru tugiteenusele.<\/p>\n

UPD 26. sept 17:00.
\nOn juhtunud suur ime! Reg.Ru tagastas mu DNS (domeen ei ole veel tagasi saadud). Ja peagi saavad mu kasutajad minu kodulehele. Tundub, et petis lootis, et kuni uurimised k\u00e4ivad, liitub mu domeen tema omaga (ma ei hakka tema domeeni siinkohal avalikustama, usun, et te saate selle ise kergesti teada). Ta seadistas 301 suunamise k\u00f5ikidelt minu lehtedelt tema domeeni lehtedele.<\/p>\n

Meie DNS-i muudatused toimusid t\u00e4na hommikul kell 3. Ja juba kell 9 hommikul hakkas rohkem kui pool meie lugejatest suunama petturlikule domeenile. K\u00fclastatavuse d\u00fcnaamika:<\/p>\n

\"Kahefaasilise
\n
\nUPD 28 sept 19-00.<\/p>\n

Praegu on toimunud teatud positiivsed muutused. Hetkel ei hakka ma nendest detailselt r\u00e4\u00e4kima, kuid arvan, et esmasp\u00e4evast alustame t\u00f6\u00f6d. Kui k\u00f5ik on l\u00f5pule viidud, teen kindlasti p\u00f5hjaliku postituse k\u00f5igi etappidega! Ait\u00e4h n\u00f5u ja toetuse eest!
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0441\u0442 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u042f\u043d\u0434\u0435\u043a\u0441.\u041f\u043e\u0447\u0442\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d, \u043f\u043e\u043c\u043e\u0433 \u0443\u0433\u043d\u0430\u0442\u044c \u0434\u043e\u043c\u0435\u043d \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0438\u0437\u0434\u0430\u043d\u0438\u044f "\u0411\u0430\u043d\u043a\u0438 \u0421\u0435\u0433\u043e\u0434\u043d\u044f". \u041e\u0442\u043c\u0435\u0447\u0443, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e \u0438\u0437\u0434\u0430\u043d\u0438\u0435 \u044f \u0432\u043b\u043e\u0436\u0438\u043b \u0432\u0441\u0435 \u0441\u0432\u043e\u0438 \u043d\u0430\u043a\u043e\u043f\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043d\u044c\u0433\u0438, \u0434\u0443\u0448\u0443 \u0438 3 \u0433\u043e\u0434\u0430 \u043a\u0440\u043e\u043f\u043e\u0442\u043b\u0438\u0432\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b. \u041d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435 \u043f\u043e\u043a\u0430 \u0435\u0449\u0451 \u0441\u0435\u0433\u043e\u0434\u043d\u044f, 25 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430. \u0412 15:50 \u044f (\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0434\u043e\u043c\u0435\u043d\u0430), \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38524","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kaksikautentimise t\u00f5ttu kaotasin k\u00f5ik investeeritud rahad ja 3 aastat t\u00f6\u00f6d | ProHoster","description":"Postitus sellest, kuidas Yandex.Mail teenuse konto k\u00fclge seotud telefon aitas varastada domeeni, mille ma l\u00f5in, nimega \"Pangad T\u00e4na\". Tahan m\u00e4rkida, et sellesse v\u00e4ljaandesse investeerisin k\u00f5ik oma s\u00e4\u00e4stud, hinge ja 3 aastat p\u00f5hjalikku t\u00f6\u00f6d. K\u00f5ik algas veel t\u00e4na, 25. septembril 2019. Kell 15:50 sain (domeeni administraator) telefonile s\u00f5numi","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/blagodarya-dvuhfaktornoj-autentifikatsii-ya-lishilsya-vseh-vlozhennyh-deneg-i-3-let-raboty","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u044f \u043b\u0438\u0448\u0438\u043b\u0441\u044f \u0432\u0441\u0435\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0434\u0435\u043d\u0435\u0433 \u0438 3 \u043b\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u044b | ProHoster","og:description":"\u041f\u043e\u0441\u0442 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u042f\u043d\u0434\u0435\u043a\u0441.\u041f\u043e\u0447\u0442\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d, \u043f\u043e\u043c\u043e\u0433 \u0443\u0433\u043d\u0430\u0442\u044c \u0434\u043e\u043c\u0435\u043d \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0438\u0437\u0434\u0430\u043d\u0438\u044f "\u0411\u0430\u043d\u043a\u0438 \u0421\u0435\u0433\u043e\u0434\u043d\u044f". \u041e\u0442\u043c\u0435\u0447\u0443, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e \u0438\u0437\u0434\u0430\u043d\u0438\u0435 \u044f \u0432\u043b\u043e\u0436\u0438\u043b \u0432\u0441\u0435 \u0441\u0432\u043e\u0438 \u043d\u0430\u043a\u043e\u043f\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043d\u044c\u0433\u0438, \u0434\u0443\u0448\u0443 \u0438 3 \u0433\u043e\u0434\u0430 \u043a\u0440\u043e\u043f\u043e\u0442\u043b\u0438\u0432\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b. \u041d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435 \u043f\u043e\u043a\u0430 \u0435\u0449\u0451 \u0441\u0435\u0433\u043e\u0434\u043d\u044f, 25 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2019 \u0433\u043e\u0434\u0430. \u0412 15:50 \u044f (\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0434\u043e\u043c\u0435\u043d\u0430), \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0442","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/blagodarya-dvuhfaktornoj-autentifikatsii-ya-lishilsya-vseh-vlozhennyh-deneg-i-3-let-raboty","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:17+00:00","article:modified_time":"2019-10-31T19:24:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38524","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:22:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:07:40","updated":"2026-01-23 22:22:33"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38524"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38524\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}