Kumapeto kwa chaka cha 2019, mabizinesi angapo aku Russia adalumikizana ndi dipatimenti yofufuza za cybercrime ya Gulu-IB yomwe idakumana ndi vuto lofikira mosaloledwa ndi anthu osadziwika pamakalata awo mu messenger ya Telegraph. Zomwe zidachitika pazida za iOS ndi Android, mosasamala kanthu kuti wogwiritsa ntchito ma cell a federal yemwe adazunzidwayo anali kasitomala wake.
Kuwukiraku kudayamba pomwe wogwiritsa ntchito adalandira uthenga mu messenger wa Telegraph kuchokera ku njira ya Telegraph (iyi ndiye njira yovomerezeka ya mthengayo yokhala ndi cheke chotsimikizira buluu) yokhala ndi nambala yotsimikizira yomwe wosuta sanapemphe. Zitatha izi, SMS yokhala ndi nambala yotsegulira idatumizidwa ku foni yam'manja ya wozunzidwayo - ndipo nthawi yomweyo chidziwitso chidalandiridwa munjira ya Telegraph kuti akauntiyo idalowetsedwa kuchokera ku chipangizo chatsopano.
Nthawi zonse zomwe Gulu-IB ikudziwa, owukirawo adalowa muakaunti ya munthu wina kudzera pa intaneti yam'manja (mwina pogwiritsa ntchito ma SIM makadi otayika), ndipo adilesi ya IP ya omwe akuwukirayo nthawi zambiri inali ku Samara.
Kufikira popempha
Kafukufuku wopangidwa ndi Gulu-IB Computer Forensics Laboratory, komwe zida zamagetsi zomwe ozunzidwawo adasamutsidwa, zidawonetsa kuti zidazo sizinatengedwe ndi mapulogalamu aukazitape kapena Trojan banki, maakaunti sanagulidwe, ndipo SIM khadi sinalowe m'malo. Nthawi zonse, owukirawo adapeza mwayi kwa mesenjala wa wozunzidwayo pogwiritsa ntchito ma SMS omwe adalandilidwa polowa muakaunti kuchokera pa chipangizo chatsopano.
Njirayi ili motere: poyambitsa mthenga pa chipangizo chatsopano, Telegalamu imatumiza kachidindo kudzera panjira yothandizira pazida zonse za ogwiritsa ntchito, kenako (pakupempha) uthenga wa SMS umatumizidwa pafoni. Podziwa izi, owukirawo amayambitsa pempho loti mesenjala atumize SMS yokhala ndi nambala yotsegulira, alandire SMS iyi ndikugwiritsa ntchito nambala yomwe adalandira kuti alowe bwino kwa mesenjala.
Chifukwa chake, owukira amapeza mwayi wosaloledwa pazokambirana zonse zaposachedwa, kupatula zachinsinsi, komanso mbiri yakale yamakalata pamacheza awa, kuphatikiza mafayilo ndi zithunzi zomwe zidatumizidwa kwa iwo. Atazindikira izi, wogwiritsa ntchito Telegalamu yovomerezeka atha kuyimitsa gawo la wowukirayo mwamphamvu. Chifukwa cha njira yotetezera yomwe yakhazikitsidwa, zosiyana sizingachitike; wowukira sangathe kuletsa magawo akale a wogwiritsa ntchito weniweni mkati mwa maola 24. Chifukwa chake, ndikofunikira kuzindikira gawo lakunja munthawi yake ndikuthetsa kuti musataye mwayi wopeza akaunti yanu. Akatswiri a Gulu-IB adatumiza zidziwitso ku gulu la Telegraph za kafukufuku wawo wazomwe zikuchitika.
Kuphunzira kwa zochitikazo kukupitirizabe, ndipo pakadali pano sikunatsimikizidwe ndendende ndondomeko yomwe idagwiritsidwa ntchito kudutsa chinthu cha SMS. Nthawi zosiyanasiyana, ofufuza apereka zitsanzo za kulandidwa kwa SMS pogwiritsa ntchito ma protocol a SS7 kapena Diameter omwe amagwiritsidwa ntchito pamanetiweki am'manja. Mwamwayi, kuwukira kotereku kumatha kuchitika pogwiritsa ntchito njira zapadera zaukadaulo kapena chidziwitso chamkati kuchokera kwa ogwiritsa ntchito mafoni. Makamaka, pamabwalo a hackers pa Darknet pali zotsatsa zatsopano zokhala ndi mwayi wobera amithenga osiyanasiyana, kuphatikiza Telegraph.
"Akatswiri a m'mayiko osiyanasiyana, kuphatikizapo Russia, adanena mobwerezabwereza kuti malo ochezera a pa Intaneti, mabanki am'manja ndi amithenga apompopompo amatha kuthyoledwa pogwiritsa ntchito chiwopsezo cha SS7 protocol, koma izi zinali zochitika zapadera za kuukiridwa kapena kafukufuku woyesera," ndemanga Sergey Lupanin, mutu. wa dipatimenti yofufuza zaupandu wa pa intaneti ku Gulu-IB, "Pazochitika zatsopano zingapo, zomwe zilipo kale zopitilira 10, chikhumbo cha omwe akuukira kuti aike njira iyi yopezera ndalama panjira ndi chodziwikiratu. Kuti izi zisachitike, ndikofunikira kuti muwonjezere ukhondo wa digito: osachepera, gwiritsani ntchito kutsimikizika kwazinthu ziwiri ngati kuli kotheka, ndikuwonjezera chinthu chachiwiri chovomerezeka ku SMS, chomwe chimaphatikizidwanso mu Telegalamu yomweyo. β
Kodi mungadziteteze bwanji?
1. Telegalamu yakhazikitsa kale njira zonse zofunika pa cybersecurity zomwe zingachepetse zoyesayesa za owukira pachabe.
2. Pazida za iOS ndi Android za Telegalamu, muyenera kupita ku zoikamo za Telegalamu, sankhani tabu ya "Zazinsinsi" ndikugawira "chinsinsi chamtambo Masitepe awiri otsimikizira" kapena "Kutsimikizira masitepe awiri". Kufotokozera mwatsatanetsatane momwe mungapangire chisankhochi kwaperekedwa mu malangizo omwe ali patsamba lovomerezeka la messenger: (https://telegram.org/blog/sessions-and-2-step-verification)
3. Ndikofunika kuti musakhazikitse adilesi ya imelo kuti mubwezeretse mawu achinsinsiwa, chifukwa, monga lamulo, kuchira kwa achinsinsi a imelo kumachitikanso kudzera pa SMS. Momwemonso, mutha kuwonjezera chitetezo cha akaunti yanu ya WhatsApp.
Source: www.habr.com