{"id":55778,"date":"2020-01-28T00:00:00","date_gmt":"2020-01-27T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel"},"modified":"2020-02-18T14:03:55","modified_gmt":"2020-02-18T11:03:55","slug":"kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","title":{"rendered":"Tvrtka za za\u0161titu od DDoS-a sama je organizirala DDoS napade, priznao je njen osniva\u010d","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Tvrtka
\nDo 2016. godine, vDos je postao najpopularnija usluga za naru\u010divanje DDoS napada na svijetu.<\/i><\/p>\n

Ako je vjerovati teorijama zavjere, antivirusne kompanije same \u0161ire viruse, a usluge za\u0161tite od DDoS napada same iniciraju ove napade. Naravno, to su izmi\u0161ljotine... ili nisu?<\/p>\n

16. sije\u010dnja 2020. godine, Savezni okru\u017eni sud u New Jerseyju proglasio je krivim<\/a><\/noindex> 22-godi\u0161njeg Tuckera Prestona, stanovnika grada Macona, dr\u017eava Georgia, po jednoj od to\u010daka optu\u017enice, naime \"o\u0161te\u0107enje za\u0161ti\u0107enih ra\u010dunala prijenosom programa, koda ili naredbe\". Tucker je suosniva\u010d kompanije BackConnect Security LLC, koja je nudila za\u0161titu od DDoS napada. Mladi poduzetnik nije mogao odoljeti isku\u0161enju osvetiti se nepokornim klijentima.
\n<\/a><\/noindex>
\nTu\u017ena pri\u010da Tuckera Prestona po\u010dela je 2014. godine, kada je hacker-tinejd\u017eer zajedno sa svojim prijateljem Marshalom Webbom osnovao kompaniju BackConnect Security LLC, od koje se kasnije odvojila BackConnect, Inc. U rujnu 2016. godine ova tvrtka izdvojila se<\/a><\/noindex> tijekom operacije zatvaranja usluge vDos, koja je u to vrijeme bila najpopularnija usluga za naru\u010divanje DDoS napada na svijetu. Kompanija BackConnect tada je navodno sama bila pod napadom putem vDos \u2014 i provela neobi\u010dan \"protunapad\", preuzimaju\u0107i 255 IP adresa neprijatelja putem BGP presretanja<\/a><\/noindex> (BGP hijacking). Izvo\u0111enje takvog napada za za\u0161titu vlastitih interesa izazvalo je kontroverze u zajednici informati\u010dke sigurnosti. Mnogi su smatrali da je BackConnect pre\u0161la granicu dopu\u0161tenog.<\/p>\n

Jednostavno BGP presretanje odvija se putem ogla\u0161avanja tu\u0111eg prefiksa kao svog. Uplinkovi\/peerovi ga prihva\u0107aju i on po\u010dinje kru\u017eiti mre\u017eom. Na primjer, 2017. godine, navodno zbog gre\u0161ke u softveru, \"Rostelecom\" (AS12389) po\u010deo je ogla\u0161avati prefikse<\/a><\/noindex> Mastercard (AS26380), Visa i neke druge financijske organizacije. Otprilike tako je funkcionirala kompanija BackConnect, kada je eksproprirala IP adrese od bugarskog hosting provajdera Verdina.net.<\/p>\n

Izvr\u0161ni direktor BackConnecta, Bryant Townsend, kasnije pravdao se<\/a><\/noindex> u newsletteru NANOG za mre\u017ene operatore. Rekao je kako je odluka da napadnu adresni prostor neprijatelja bila te\u0161ka, ali su spremni preuzeti odgovornost za taj potez: \u201eIako smo imali mogu\u0107nost da sakrijemo svoje postupke, osje\u0107ali smo da bi to bilo pogre\u0161no. Proveo sam puno vremena razmi\u0161ljaju\u0107i o toj odluci i o tome kako bi mogla negativno utjecati na kompaniju i mene u o\u010dima nekih ljudi, ali na kraju sam je podr\u017eao.\u201d<\/p>\n

Kako se ispostavilo, BackConnect ne koristi BGP preusmjeravanje prvi put, a kompanija uop\u0107e ima mra\u010dnu povijest. Iako treba napomenuti da se BGP preusmjeravanje ne koristi uvijek zlonamjerno. Brian Krebs pi\u0161e<\/a><\/noindex>, da on osobno koristi usluge kompanije Prolexic Communications (sada dio Akamai Technologies) za za\u0161titu od DDoS-a. Upravo su oni izmislili na\u010din kako iskoristiti BGP presretanje za za\u0161titu od DDoS napada.<\/p>\n

Ako \u017ertva DDoS napada potra\u017ei pomo\u0107 od Prolexica, posljednji preusmjerava IP adrese klijenta na sebe, \u0161to joj omogu\u0107ava da analizira i filtrira dolazni promet.<\/p>\n

Budu\u0107i da je BackConnect pru\u017eao DDoS za\u0161titu, izvr\u0161ena je analiza koje BGP preusmjeravanja se mogu smatrati legitimnima u interesu njihovih klijenata, a koja izgledaju sumnjivo. Pri tome se uzima u obzir trajanje za\u010de\u0107a tu\u0111ih adresa, koliko se \u0161iroko najavljivao tu\u0111i prefiks kao svoj, postoje li potvr\u0111eni dogovori s klijentom itd. Iz tablice je vidljivo da neki postupci BackConnect izgledaju vrlo sumnjivo.<\/p>\n

\"Tvrtka<\/a><\/noindex><\/p>\n

Izgleda da je netko od \u017ertava tu\u017eio BackConnect. U priznanju Prestona (pdf)<\/a><\/noindex> nije navedeno ime kompanije koju je sud proglasio o\u0161te\u0107enom. \u017drtva u dokumentu se naziva kao Victim 1<\/i>.<\/p>\n

Kao \u0161to je spomenuto ranije, istraga aktivnosti BackConnect zapo\u010dela je nakon hakiranja usluge vDos. Tada su postala poznata imena<\/a><\/noindex> administratora usluge, kao i baza podataka vDos, uklju\u010duju\u0107i njezine registrirane korisnike i zapise o klijentima koji su pla\u0107ali vDos za izvo\u0111enje DDoS napada.<\/p>\n

Ovi zapisi su pokazali da je jedan od ra\u010duna na vDos stranici otvoren na adrese e-po\u0161te povezane s domenom koja je registrirana na ime Takera Prestona. Ovaj ra\u010dun je inicirao napade na veliki broj ciljeva, uklju\u010duju\u0107i brojne napade na mre\u017ee koje pripadaju Fond za slobodan softver<\/a><\/noindex> (FSF).<\/p>\n

Godine 2016. biv\u0161i administrator FSF-a rekao je da je neprofitna organizacija u jednom trenutku razmatrala suradnju s BackConnectom, a napadi su po\u010deli gotovo odmah nakon \u0161to je FSF rekao da \u0107e tra\u017eiti druge firme za za\u0161titu od DDoS-a.<\/p>\n

Prema izjavi<\/a><\/noindex> Ministarstva pravde SAD-a, za ovu to\u010dku optu\u017ebe Takera Prestona prijeti zatvorska kazna do 10 godina i nov\u010dana kazna do 250 000 USD, \u0161to je dvostruko vi\u0161e od ukupne dobiti ili gubitka od kaznenog djela. Presuda \u0107e biti izre\u010dena 7. svibnja 2020. godine.<\/p>\n

\nGlobalSign nudi skalabilna PKI rje\u0161enja za organizacije svake veli\u010dine. \"Tvrtka<\/a><\/noindex>
\nVi\u0161e informacija: +7 (499) 678 2210, sales-ru@globalsign.com.
\n
Izvor: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a 2016 \u0433\u043e\u0434\u0443 vDos \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432 \u043c\u0438\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u043a\u0430\u0437\u0430 DDoS-\u0430\u0442\u0430\u043a \u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0438\u044f\u043c \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u0430, \u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0430\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0438\u0440\u0443\u0441\u044b, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0441\u0430\u043c\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u044d\u0442\u043e \u0432\u044b\u0434\u0443\u043c\u043a\u0438\u2026 \u0438\u043b\u0438 \u043d\u0435\u0442? 16 \u044f\u043d\u0432\u0430\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043a\u0440\u0443\u0436\u043d\u043e\u0439 \u0441\u0443\u0434 \u041d\u044c\u044e-\u0414\u0436\u0435\u0440\u0441\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0432\u0438\u043d\u043e\u0432\u043d\u044b\u043c 22-\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u0422\u0430\u043a\u0435\u0440\u0430 \u041f\u0440\u0435\u0441\u0442\u043e\u043d\u0430 (Tucker Preston), \u0436\u0438\u0442\u0435\u043b\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u041c\u0435\u0439\u043a\u043e\u043d\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55778","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tvrtka za za\u0161titu od DDoS-a sama je pokretala DDoS napade, priznao je njezin osniva\u010d | ProHoster","description":"Do 2016. godine vDos.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 DDoS \u0441\u0430\u043c\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 DDoS-\u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0435\u0451 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c | ProHoster","og:description":"\u041a 2016 \u0433\u043e\u0434\u0443 vDos.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-27T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55778","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:02:37","updated":"2022-09-28 16:22:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/55778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=55778"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/55778\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=55778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=55778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=55778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}