{"id":104862,"date":"2022-08-16T21:36:39","date_gmt":"2022-08-16T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio"},"modified":"2022-08-16T21:36:39","modified_gmt":"2022-08-16T19:36:39","slug":"popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio","title":{"rendered":"Tentativa de captura de contas do Signal atrav\u00e9s da comprometimento do servi\u00e7o SMS Twilio","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Os desenvolvedores do mensageiro aberto Signal revelaram informa\u00e7\u00f5es sobre um ataque direcionado com o intuito de obter controle sobre as contas de alguns usu\u00e1rios. O ataque foi realizado atrav\u00e9s da invas\u00e3o do servi\u00e7o Twilio, usado pelo Signal para enviar mensagens SMS com c\u00f3digos de verifica\u00e7\u00e3o. A an\u00e1lise dos dados mostrou que a invas\u00e3o do Twilio pode ter afetado cerca de 1900 n\u00fameros de telefone de usu\u00e1rios do Signal, permitindo que os atacantes pudessem reter o n\u00famero de telefone em outro dispositivo, ap\u00f3s o que poderiam receber ou enviar mensagens para o n\u00famero de telefone vinculado (o acesso ao hist\u00f3rico de conversas anteriores, informa\u00e7\u00f5es do perfil e a lista de contatos n\u00e3o poderia ser obtido, pois tais informa\u00e7\u00f5es s\u00e3o armazenadas no dispositivo do usu\u00e1rio e n\u00e3o s\u00e3o transferidas para os servidores do Signal). <\/p>\n

Durante o intervalo de tempo entre a invas\u00e3o e o bloqueio pela Twilio da conta comprometida de um funcion\u00e1rio utilizada para o ataque, foi observada atividade relacionada ao registro de conta ou ao envio de um c\u00f3digo de verifica\u00e7\u00e3o por SMS nos 1900 n\u00fameros de telefone marcados. Com acesso \u00e0 interface de servi\u00e7o da Twilio, os atacantes mostraram interesse em tr\u00eas n\u00fameros espec\u00edficos de usu\u00e1rios do Signal, e pelo menos um dos telefones conseguiu ser vinculado ao dispositivo dos infratores, de acordo com uma reclama\u00e7\u00e3o recebida do propriet\u00e1rio da conta afetada. O Signal enviou notifica\u00e7\u00f5es por SMS sobre o incidente a todos os usu\u00e1rios que poderiam ter sido potencialmente afetados pelo ataque e desativou a vincula\u00e7\u00e3o de seus dispositivos. <\/p>\n

A invas\u00e3o do Twilio foi realizada utilizando m\u00e9todos de engenharia social, permitindo que os atacantes atra\u00edssem um dos funcion\u00e1rios da empresa para uma p\u00e1gina de phishing e obtivessem acesso \u00e0 sua conta no sistema de suporte ao cliente. Em particular, os invasores enviaram mensagens SMS aos funcion\u00e1rios da Twilio alertando sobre o vencimento da conta ou informando sobre altera\u00e7\u00f5es na programa\u00e7\u00e3o, \u00e0s quais foi anexado um link para uma p\u00e1gina falsa, estilizada para parecer com a interface de login \u00fanico dos servi\u00e7os da Twilio. De acordo com a Twilio, ao se conectar \u00e0 interface de suporte, os invasores conseguiram acessar dados relacionados a 125 usu\u00e1rios.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0430 Signal \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0410\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0437\u043b\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Twilio, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 Signal \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 SMS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0441 \u043a\u043e\u0434\u0430\u043c\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f. \u0410\u043d\u0430\u043b\u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c Twilio \u043c\u043e\u0433 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043e\u043a\u043e\u043b\u043e 1900 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Signal, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u043c\u0435\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u0440\u0435\u0433\u0438\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u043c\u0435\u0440\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104862","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tentativa de sequestro de contas do Signal atrav\u00e9s da comprometimento do servi\u00e7o de SMS Twilio | ProHoster","description":"Os desenvolvedores do mensageiro de c\u00f3digo aberto Signal revelaram informa\u00e7\u00f5es sobre um ataque direcionado para obter controle sobre as contas de alguns usu\u00e1rios.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u043f\u044b\u0442\u043a\u0430 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 Signal \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e SMS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 Twilio | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0430 Signal \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/popytka-zahvata-uchyotnyh-zapisej-signal-cherez-komprometacziyu-sms-servisa-twilio","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-08-16T19:36:39+00:00","article:modified_time":"2022-08-16T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104862","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-08-16 19:37:46","updated":"2022-09-28 09:18:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/104862","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=104862"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/104862\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=104862"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=104862"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=104862"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}