{"id":112727,"date":"2024-01-06T21:10:22","date_gmt":"2024-01-06T19:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin"},"modified":"2024-01-06T21:10:22","modified_gmt":"2024-01-06T19:10:22","slug":"orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","title":{"rendered":"Orange Espa\u00f1a a fost spart din cauza faptului c\u0103 parola utilizatorului admin din contul RIPE NCC era ripeadmin","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Orange Espa\u00f1a, al doilea cel mai mare operator mobil din Spania, a \u00eent\u00e2mpinat o avarie grav\u0103 miercuri, dup\u0103 ce o parte necunoscut\u0103 a ob\u021binut acces la contul de gestionare a tabelului global de rutare cu o \u201eparol\u0103 absurd de slab\u0103\u201d. \u00cencep\u00e2nd cu ora 9:28 UTC, o persoan\u0103 sub pseudonimul Snow a intrat \u00een contul Orange de la RIPE NCC, folosind parola ripeadmin. RIPE NCC se ocup\u0103 cu gestionarea \u0219i distribuirea adreselor IP \u0219i deserveste 75 de \u021b\u0103ri din Europa, Orientul Mijlociu \u0219i Asia Central\u0103.<\/p>\n

Snow a ad\u0103ugat ini\u021bial noi ROA-uri (Autoriz\u0103ri de Origine a Rutelor) \u00een tabelul global de rutare, care ini\u021bial nu au provocat \u00eentreruperi. Cu toate acestea, ulterior, Snow a ad\u0103ugat ROA-uri cu \u201esurse false\u201d, ceea ce a dus la o reducere semnificativ\u0103 a rutelor valide pentru Orange, ceea ce, la r\u00e2ndul s\u0103u, a dus la o \u00eentrerupere a serviciului. Problema a fost agravat\u0103 de utilizarea sistemului RPKI (Infrastructura Public\u0103 de Chei Resurs\u0103), destinat prevenirii intercept\u0103rii neautorizate a rutelor, ceea ce a f\u0103cut efectiv re\u021beaua Orange nefunc\u021bional\u0103.<\/p>\n

Compania Hudson Rock a descoperit datele de acces disponibile pentru v\u00e2nzare \u00een magazine online, care au fost furate prin malware instalat pe computerele Orange din septembrie. Cercet\u0103torii au mai observat mii de alte date de acces care protejeaz\u0103 conturile RIPE disponibile \u00een aceste pie\u021be.<\/p>\n

Acest incident subliniaz\u0103 fragilitatea sistemului BGP \u0219i scoate \u00een eviden\u021b\u0103 problemele grave de securitate din Orange. Utilizarea unei parole slabe \u0219i lipsa autentific\u0103rii multifactoriale, precum \u0219i malware-ul instalat pe computerul angajatului care a r\u0103mas neobservat timp de patru luni, sunt gre\u0219eli \u00eensemnate care nu ar fi trebuit s\u0103 se \u00eent\u00e2mple \u00eentr-o organiza\u021bie cu o amploare precum Orange. Cercet\u0103torii sper\u0103 c\u0103 acest incident va fi un semnal de alarm\u0103 pentru al\u021bi furnizori de servicii \u0219i \u00eei va \u00eencuraja s\u0103 \u00eembun\u0103t\u0103\u021beasc\u0103 m\u0103surile de securitate.<\/p>\n

Sursa: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e «\u0441\u043c\u0435\u0445\u043e\u0442\u0432\u043e\u0440\u043d\u043e \u0441\u043b\u0430\u0431\u043e\u0433\u043e» \u043f\u0430\u0440\u043e\u043b\u044f. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 9:28 UTC, \u043b\u0438\u0446\u043e \u043f\u043e\u0434 \u043d\u0438\u043a\u043e\u043c Snow \u0432\u043e\u0448\u043b\u043e \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c Orange \u0432 RIPE NCC, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u043e\u043b\u044c ripeadmin. RIPE NCC […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112727","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Orange Espa\u00f1a a fost hackuit din cauza parolei utilizatorului admin din contul RIPE NCC, care era ripeadmin | ProHoster","description":"Orange Espa\u00f1a, al doilea cel mai mare operator de telefonie mobil\u0103 din Spania, s-a confruntat miercuri cu o defec\u021biune grav\u0103 dup\u0103 ce o entitate necunoscut\u0103 a ob\u021binut acces la contul de gestionare a tabelului global de rutare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Orange Espa\u00f1a \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f admin \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 RIPE NCC \u0431\u044b\u043b ripeadmin | ProHoster","og:description":"Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-06T19:10:22+00:00","article:modified_time":"2024-01-06T19:10:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112727"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112727\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112727"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112727"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}