Masiku angapo apitawo ine
Ndidzalemba nthawi yomweyo kuti chifukwa cha kukwanira kwa Dokotala ndi antchito a Near, chiwopsezocho chinali mofulumira (maola a 2 kuyambira nthawi ya chidziwitso usiku!) Kuchotsedwa ndipo mwinamwake kunalibe kutayikira kwa deta yaumwini ndi yachipatala. Mosiyana ndi zochitika za DOC +, kumene ndikudziwa motsimikiza kuti fayilo imodzi ya json yokhala ndi deta, 3.5 GB kukula kwake, inatha mu "dziko lotseguka", ndipo udindo wovomerezeka umawoneka motere: "Deta yaying'ono yapezeka poyera kwakanthawi, zomwe sizingabweretse zotsatira zoyipa kwa ogwira ntchito ndi ogwiritsa ntchito ntchito ya DOC +.".
Ndi ine, monga mwiniwake wa njira ya Telegraph "
Chofunikira cha chiwopsezo chinali chakuti, podziwa URL ndikukhala mu dongosolo pansi pa akaunti yanu, mukhoza kuwona deta ya odwala ena.
Kuti mulembetse akaunti yatsopano mudongosolo la Doctor Nearby, mumangofunika nambala yafoni yomwe SMS yotsimikizira imatumizidwa, kuti palibe amene angakhale ndi vuto lolowera muakaunti yake.
Wogwiritsa ntchitoyo atalowa muakaunti yake, amatha nthawi yomweyo, posintha ulalo wa adilesi ya msakatuli wake, kuwona malipoti omwe ali ndi chidziwitso cha odwala komanso matenda omwe ali ndi matenda.
Vuto lalikulu linali loti ntchitoyi imagwiritsa ntchito manambala mosalekeza ndipo imapanga kale ulalo kuchokera pamanambala awa:
https://[Π°Π΄ΡΠ΅Ρ ΡΠ°ΠΉΡΠ°]/β¦/β¦/40261/β¦
Choncho, kunali kokwanira kukhazikitsa chiwerengero chochepa chololedwa (7911) ndi chiwerengero chachikulu (42926 - panthawi ya chiwopsezo) kuwerengera chiwerengero chonse (35015) cha malipoti mu dongosolo komanso (ngati panali cholinga choipa) kutsitsa. onse ndi script yosavuta.
Zina mwa zomwe zilipo kuti muwonere zinali: dzina lathunthu la dokotala ndi wodwala, masiku obadwa kwa dokotala ndi wodwala, manambala a foni a dokotala ndi wodwala, jenda la dokotala ndi wodwala, ma adilesi a imelo a dokotala ndi wodwala, luso la dokotala. , tsiku la zokambirana, mtengo wa zokambirana komanso nthawi zina ngakhale matenda (monga ndemanga ku lipoti).
Kusatetezeka uku ndikofanana kwambiri ndi komwe kunaliko
Monga ndidanenera kuyambira pachiyambi, ogwira ntchito a Doctor Nearby adawonetsa ukatswiri weniweni ndipo ngakhale ndidawadziwitsa za chiwopsezo cha 23:00 (nthawi yaku Moscow), mwayi wopeza akaunti yanga udatsekedwa kwa aliyense, ndipo ndi 1: 00 (nthawi ya Moscow) kusatetezeka uku kwakonzedwa.
Sindingachitire mwina koma kukankhanso dipatimenti ya PR ya DOC + yomweyo (New Medicine LLC). Kulengeza "Deta yaying'ono idaperekedwa poyera kwakanthawi", amaiwala kuti tili ndi "zowongolera zolinga" zomwe tili nazo, zomwe ndi injini yofufuzira ya Shodan. Monga momwe tafotokozera m'mawu a nkhaniyi - malinga ndi Shodan, tsiku lokhazikitsidwa koyamba kwa seva ya ClickHouse pa DOC + IP adilesi: 15.02.2019/03/08 00:17.03.2019:09, tsiku lomaliza: 52/ 00/40 XNUMX:XNUMX:XNUMX. Kukula kwa database ndi pafupifupi XNUMX GB.
Panali zokonzekera 15 zonse:
15.02.2019 03:08:00
16.02.2019 07:29:00
24.02.2019 02:03:00
24.02.2019 02:50:00
25.02.2019 20:39:00
27.02.2019 07:37:00
02.03.2019 14:08:00
06.03.2019 22:30:00
08.03.2019 00:23:00
08.03.2019 14:07:00
09.03.2019 05:27:00
09.03.2019 22:08:00
13.03.2019 03:58:00
15.03.2019 08:45:00
17.03.2019 09:52:00
Kuchokera ku mawuwo zikuwoneka kuti kwakanthawi zangopitilira mwezi umodzi, koma kuchuluka kwa data izi ndi pafupifupi 40 gigabytes. Chabwino sindikudziwaβ¦
Koma tiyeni tibwerere ku "Dokotala Ali Pafupi."
Pakadali pano, paranoia yanga yaukadaulo imakhudzidwa ndi vuto limodzi lokha lomwe latsala - ndi kuyankha kwa seva mutha kudziwa kuchuluka kwa malipoti mudongosolo. Mukayesa kupeza lipoti kuchokera ku ulalo womwe supezeka (koma lipoti lokha likupezeka), seva imabwerera MWALETSEDWA, ndipo mukayesa kupeza lipoti lomwe kulibe, limabwerera SINAPEZEKE. Mwa kuyang'anira kuchuluka kwa malipoti mu dongosolo pakapita nthawi (kamodzi pa sabata, mwezi, ndi zina zotero), mukhoza kuwunika kuchuluka kwa ntchito ndi kuchuluka kwa ntchito zomwe zaperekedwa. Izi, ndithudi, sizikuphwanya deta yaumwini ya odwala ndi madokotala, koma zikhoza kukhala kuphwanya zinsinsi zamalonda za kampani.
Source: www.habr.com