{"id":112727,"date":"2024-01-06T21:10:22","date_gmt":"2024-01-06T19:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin"},"modified":"2024-01-06T21:10:22","modified_gmt":"2024-01-06T19:10:22","slug":"orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","title":{"rendered":"Orange Espa\u00f1a zosta\u0142a w\u0142aman\u0105 z powodu s\u0142abego has\u0142a u\u017cytkownika admin konta RIPE NCC, kt\u00f3rym by\u0142o ripeadmin","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Orange Espa\u00f1a, drugi co do wielko\u015bci operator mobilny w Hiszpanii, napotka\u0142 powa\u017cn\u0105 awari\u0119 w \u015brod\u0119 po tym, jak nieznana strona uzyska\u0142a dost\u0119p do konta zarz\u0105dzaj\u0105cego globaln\u0105 tabel\u0105 routingu za pomoc\u0105 «absurdalnie s\u0142abego» has\u0142a. Pocz\u0105wszy od 9:28 UTC, osoba pos\u0142uguj\u0105ca si\u0119 pseudonimem Snow zalogowa\u0142a si\u0119 na konto Orange w RIPE NCC, u\u017cywaj\u0105c has\u0142a ripeadmin. RIPE NCC jest odpowiedzialna za zarz\u0105dzanie i dystrybucj\u0119 adres\u00f3w IP i obs\u0142uguje 75 kraj\u00f3w Europy, Bliskiego Wschodu i Azji \u015arodkowej.<\/p>\n

Na pocz\u0105tku Snow doda\u0142 nowe ROAs (Route Origin Authorizations) do globalnej tabeli routingu, kt\u00f3re pocz\u0105tkowo nie spowodowa\u0142y zak\u0142\u00f3ce\u0144. Jednak p\u00f3\u017aniej Snow doda\u0142 ROAs z «fa\u0142szywymi \u017ar\u00f3d\u0142ami», co doprowadzi\u0142o do znacznego zmniejszenia liczby wa\u017cnych tras Orange, co z kolei spowodowa\u0142o awari\u0119 us\u0142ug. Problem zaostrza\u0142o u\u017cycie systemu RPKI (Resource Public Key Infrastructure), kt\u00f3ry ma na celu zapobieganie nieautoryzowanemu przechwytywaniu tras, co skutecznie uczyni\u0142o sie\u0107 Orange niefunkcjonaln\u0105.<\/p>\n

Firma Hudson Rock odkry\u0142a dane logowania na sprzeda\u017c w sklepach internetowych, kt\u00f3re zosta\u0142y skradzione za pomoc\u0105 z\u0142o\u015bliwego oprogramowania zainstalowanego na komputerze Orange od wrze\u015bnia. Badacze zwr\u00f3cili r\u00f3wnie\u017c uwag\u0119 na tysi\u0105ce innych danych logowania zabezpieczaj\u0105cych konta RIPE, dost\u0119pnych na takich rynkach.<\/p>\n

Ten incydent podkre\u015bla krucho\u015b\u0107 systemu BGP i ujawnia powa\u017cne problemy z bezpiecze\u0144stwem w Orange. U\u017cycie s\u0142abego has\u0142a oraz brak uwierzytelniania wielosk\u0142adnikowego, a tak\u017ce z\u0142o\u015bliwe oprogramowanie na komputerze pracownika, kt\u00f3re pozostawa\u0142o niezauwa\u017cone przez cztery miesi\u0105ce, s\u0105 powa\u017cnymi b\u0142\u0119dami, kt\u00f3re nigdy nie powinny by\u0142y wyst\u0105pi\u0107 w organizacji o takim zasi\u0119gu jak Orange. Badacze maj\u0105 nadziej\u0119, \u017ce ten incydent b\u0119dzie ostrze\u017ceniem dla innych dostawc\u00f3w us\u0142ug i zach\u0119ci ich do wzmocnienia \u015brodk\u00f3w bezpiecze\u0144stwa.<\/p>\n

\u0179r\u00f3d\u0142o: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e «\u0441\u043c\u0435\u0445\u043e\u0442\u0432\u043e\u0440\u043d\u043e \u0441\u043b\u0430\u0431\u043e\u0433\u043e» \u043f\u0430\u0440\u043e\u043b\u044f. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 9:28 UTC, \u043b\u0438\u0446\u043e \u043f\u043e\u0434 \u043d\u0438\u043a\u043e\u043c Snow \u0432\u043e\u0448\u043b\u043e \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c Orange \u0432 RIPE NCC, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u043e\u043b\u044c ripeadmin. RIPE NCC […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112727","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Orange Espa\u00f1a zosta\u0142a zhakowana z powodu s\u0142abego has\u0142a u\u017cytkownika admin konta RIPE NCC, kt\u00f3re brzmia\u0142o ripeadmin | ProHoster","description":"Orange Espa\u00f1a, drugi co do wielko\u015bci operator telefonii kom\u00f3rkowej w Hiszpanii, napotka\u0142 powa\u017cn\u0105 awari\u0119 w \u015brod\u0119 po tym, jak nieznana osoba uzyska\u0142a dost\u0119p do konta do zarz\u0105dzania globaln\u0105 tablic\u0105 routingu.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Orange Espa\u00f1a \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f admin \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 RIPE NCC \u0431\u044b\u043b ripeadmin | ProHoster","og:description":"Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-06T19:10:22+00:00","article:modified_time":"2024-01-06T19:10:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/112727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=112727"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/112727\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=112727"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=112727"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=112727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}