{"id":112727,"date":"2024-01-06T21:10:22","date_gmt":"2024-01-06T19:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin"},"modified":"2024-01-06T21:10:22","modified_gmt":"2024-01-06T19:10:22","slug":"orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","title":{"rendered":"Orange Espa\u00f1a je hakirana zbog toga \u0161to je korisni\u010dki password za admin ra\u010dun RIPE NCC bio ripeadmin","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Orange Espa\u00f1a, drugi po veli\u010dini mobilni operater u \u0160paniji, suo\u010dio se s ozbiljnim prekidom usluge u srijedu nakon \u0161to je nepoznata osoba pristupila ra\u010dunu za upravljanje globalnom tabelom usmjeravanja koriste\u0107i «smije\u0161no slab» lozinku. Po\u010dev\u0161i od 9:28 UTC, osoba pod nadimkom Snow prijavila se na Orangeov ra\u010dun u RIPE NCC, koriste\u0107i lozinku ripeadmin. RIPE NCC odgovoran je za upravljanje i raspodjelu IP adresa i opslu\u017euje 75 zemalja Europe, Bliskog Istoka i Centralne Azije.<\/p>\n

Snow je najprije dodao nove ROA-e (Route Origin Authorizations) u globalnu tabelu usmjeravanja, koje isprva nisu izazvale prekide. Me\u0111utim, kasnije je Snow dodao ROA-e s «la\u017enim izvorima», \u0161to je dovelo do zna\u010dajnog smanjenja va\u017ee\u0107ih ruta Orangea, \u0161to je zauzvrat uzrokovalo prekid usluge. Problem je dodatno pogor\u0161an kori\u0161tenjem sustava RPKI (Resource Public Key Infrastructure), namijenjenog sprje\u010davanju neovla\u0161tenog presretanja ruta, \u0161to je u\u010dinkovito u\u010dinilo mre\u017eu Orangea nefunkcionalnom.<\/p>\n

Tvrtka Hudson Rock je otkrila vjerodajnice na prodaju u online trgovinama, koje su ukradene zlonamjernim softverom instaliranim na ra\u010dunalu Orange od rujna. Istra\u017eiva\u010di su tako\u0111er primijetili tisu\u0107e drugih vjerodajnica koje \u0161tite RIPE ra\u010dune dostupne u takvim trgovinama.<\/p>\n

Ovaj incident nagla\u0161ava krhkost BGP sustava i otkriva ozbiljne sigurnosne probleme u Orange-u. Kori\u0161tenje slabog passworda i nedostatak vi\u0161efaktorske autentifikacije, kao i instalirani zlonamjerni softver na ra\u010dunalu zaposlenika koji je ostao neprimije\u0107en \u010detiri mjeseca, ozbiljni su propusti koji nikako nisu smjeli nastati u organizaciji takve veli\u010dine kao \u0161to je Orange. Istra\u017eiva\u010di se nadaju da \u0107e ovaj incident poslu\u017eiti kao alarm za druge pru\u017eatelje usluga i potaknuti ih da poja\u010daju sigurnosne mjere.<\/p>\n

Izvor: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e «\u0441\u043c\u0435\u0445\u043e\u0442\u0432\u043e\u0440\u043d\u043e \u0441\u043b\u0430\u0431\u043e\u0433\u043e» \u043f\u0430\u0440\u043e\u043b\u044f. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 9:28 UTC, \u043b\u0438\u0446\u043e \u043f\u043e\u0434 \u043d\u0438\u043a\u043e\u043c Snow \u0432\u043e\u0448\u043b\u043e \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c Orange \u0432 RIPE NCC, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u043e\u043b\u044c ripeadmin. RIPE NCC […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112727","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Orange Espa\u00f1a je hakiran zbog toga \u0161to je lozinka korisnika admin ra\u010duna RIPE NCC bila ripeadmin | ProHoster","description":"Orange Espa\u00f1a, drugi po veli\u010dini mobilni operater u \u0160paniji, suo\u010dio se s ozbiljnim padom usluga u srijedu nakon \u0161to je nepoznati subjekt stekao pristup ra\u010dunu za upravljanje globalnom tablicom usmjeravanja.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Orange Espa\u00f1a \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f admin \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 RIPE NCC \u0431\u044b\u043b ripeadmin | ProHoster","og:description":"Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-06T19:10:22+00:00","article:modified_time":"2024-01-06T19:10:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=112727"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112727\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=112727"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=112727"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=112727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}