{"id":53591,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat"},"modified":"2020-02-18T14:01:31","modified_gmt":"2020-02-18T11:01:31","slug":"kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","title":{"rendered":"Kuidas kurjategijad saavad lugeda teie vestlusi Telegramis. Ja kuidas neid selleks takistada","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Kuidas<\/p>\n

2019. aasta l\u00f5pus p\u00f6\u00f6rdusid Group-IB k\u00fcberkuritegude uurimise osakonda mitmed Venemaa ettev\u00f5tjad, kes seisid silmitsi probleemiga, et tundmatud isikud p\u00e4\u00e4sesid ligi nende vestlusele messengeri Telegram. S\u00fcndmused toimusid iOS- ja Android-seadmetes, olenemata sellest, kelle mobiilsideoperaatori klient olid kannatanud.<\/p>\n

R\u00fcnnak algas sellega, et messengeri Telegram kasutajale saadeti s\u00f5num teenuskanalilt Telegram (see on ametlik messengeri kanal sinise kontrollm\u00e4rgiga) koos kinnituskoodiga, mida kasutaja ei olnud k\u00fcsinud. P\u00e4rast seda sai ohver oma nutitelefonile SMS-i aktivatsioonikoodiga \u2014 ja praktiliselt kohe p\u00e4rast seda j\u00f5udis teenuskanalisse Telegram teatamine, et kontole p\u00e4\u00e4seti ligi uuest seadmest.<\/a><\/noindex><\/p>\n

\"Kuidas <\/p>\n

K\u00f5igil juhtudel, millest Group-IB-l on teavet, p\u00e4\u00e4sesid kurjategijad teise konto juurde mobiilse interneti kaudu (t\u00f5en\u00e4oliselt kasutati \u00fchekordseid SIM-kaarte), ja r\u00fcndajate IP-aadress asus enamasti Samarast. <\/p>\n

Ligip\u00e4\u00e4s tellimisel <\/h3>\n

\nGroup-IB arvutite kriminaalistikauuringute labori uuring, kuhu viidi kannatanu elektroonilised seadmed, n\u00e4itas, et seadmed ei olnud nakatunud nuhkvara v\u00f5i pangatroojani, kasutajakontod ei olnud h\u00e4kitud, SIM-kaardi asendamist ei toimunud. K\u00f5igil juhtudel said kurjategijad p\u00e4\u00e4su ohvri messengeri juurde, kasutades sisestamisel saadud SMS-koodide kaudu, kui nad p\u00e4\u00e4sesid kontole uuest seadmest. <\/p>\n

See protseduur n\u00e4eb v\u00e4lja selline: messengeri aktiveerimisel uues seadmes saadab Telegram koodi k\u00f5ikidele kasutaja seadmetele ja seej\u00e4rel (soovi korral) saadetakse SMS-s\u00f5num telefonile. Teades seda, kurjategijad algatavad ise s\u00f5numi saatmise palvel SMS-koodi, p\u00fc\u00fcavad selle SMS-i kinni ja kasutavad saadud koodi messengeri edukaks autoriseerimiseks. <\/p>\n

Seega saavad r\u00fcndajad ebaseadusliku juurdep\u00e4\u00e4su k\u00f5ikidele aktiivsetele vestlustele, v\u00e4lja arvatud salajased vestlused, samuti neis vestlustes peetava kirjavahetuse ajaloole, sealhulgas failidele ja fotodele, mis on saadetud. Kui seaduslik Telegrami kasutaja avastab selle, saab ta koheselt l\u00f5petada r\u00fcndaja seansi. Ellu viidud kaitsemehhanismi t\u00f5ttu ei saa see toimuda vastupidiselt, r\u00fcndaja ei saa l\u00f5petada seadusliku kasutaja vanemaid seansse 24 tunni jooksul. Seet\u00f5ttu on oluline \u00f5igel ajal tuvastada k\u00f5rvaline seanss ja see l\u00f5petada, et mitte kaotada juurdep\u00e4\u00e4su kontole. Group-IB spetsialistid saatsid Telegrami meeskonnale teate oma uurimist\u00f6\u00f6st.<\/p>\n

Incidents are still being studied, and at this point, it has not been definitively established which specific scheme was used to bypass the SMS factor. Researchers have previously provided examples of SMS interception through attacks on SS7 or Diameter protocols used in mobile networks. Theoretically, such attacks could be carried out through the illegal use of special technical means or insider knowledge within mobile operators. In particular, hacker forums on the Darknet have fresh announcements with offers to hack various messengers, including Telegram. <\/p>\n

\"Kuidas<\/p>\n

\u201eSpetsialistid erinevates riikides, sealhulgas Venemaal, on korduvalt teatanud, et sotsiaalmeediat, mobiilipangandust ja messengereid saab h\u00e4kkida SS7 protokolli haavatavuste kaudu, kuid need on olnud \u00fcksikud sihtotstarbelised r\u00fcnnakud v\u00f5i eksperimentaalsed uuringud,\u201c kommenteerib Sergey Lupanin, Group-IB k\u00fcberkuritegevuse uurimise osakonna juht. \u201eUute intsidentide seerias, mida on juba rohkem kui 10, on ilmselge r\u00fcndajate soov muuta see teenimisviis regulaarseks. Selle v\u00e4ltimiseks on oluline t\u00f5sta isiklikku digitaalset h\u00fcgieeni: v\u00e4hemalt kasutada igal pool, kus v\u00f5imalik, kahefaktorilist autentimist ja lisada SMS-ile kohustuslik teine faktor, nagu on ette n\u00e4htud Telegramis.\u201c<\/p>\n

Kuidas end kaitsta?<\/h3>\n

\n 1. Telegramis on juba ellu viidud k\u00f5ik vajalikud k\u00fcberjulgeoleku v\u00f5imalused, mis v\u00e4hendavad r\u00fcndajate pingutusi nullini.
\n 2. iOS ja Android seadmetes tuleb Telegrami seadetes liikuda privaatsuse vahekaardile ja seadistada \"Pilveparool\" v\u00f5i \"Kahefaktoriline autentimine\". Detailne juhend selle valiku lubamiseks on esitatud messengeri ametlikul veebilehel: telegram.org\/blog\/sessions-and-2-step-verification<\/a><\/noindex> (https:\/\/telegram.org\/blog\/sessions-and-2-step-verification)<\/p>\n

\"Kuidas<\/p>\n

3. On oluline, et te ei seadistaks selle parooli taastamiseks e-posti aadressi, kuna tavaliselt tehakse e-posti parooli taastamine samuti SMSi kaudu. Samasuguste meetoditega on v\u00f5imalik suurendada konto kaitset ka WhatsAppis.<\/p>\n

\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u043d\u0446\u0435 2019 \u0433\u043e\u0434\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439 Group-IB \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a \u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435 \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0435 Telegram. \u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438 Android, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0442\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043a\u0430\u043a\u043e\u0433\u043e \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0439. \u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0430\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440 Telegram \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53591","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas saavad kurjategijad lugeda teie vestlusi Telegramis. Ja kuidas neid selles takistada | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0430\u0448\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 Telegram. \u0418 \u043a\u0430\u043a \u0438\u043c \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53591","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:01:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:22:49","updated":"2026-01-24 08:01:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/53591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=53591"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/53591\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=53591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=53591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=53591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}