{"id":121455,"date":"2025-01-23T15:46:01","date_gmt":"2025-01-23T13:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard"},"modified":"2026-02-04T17:53:52","modified_gmt":"2026-02-04T15:53:52","slug":"iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","title":{"rendered":"Din cauza unei gre\u0219eli de tipar \u00een set\u0103rile DNS, atacatorii ar fi putut modifica serverul DNS al MasterCard.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un cercet\u0103tor \u00een securitate din compania Seralys a descoperit o vulnerabilitate \u00een care serverul DNS pentru domeniul mastercard.com, folosit \u00een infrastructura sistemului de pl\u0103\u021bi MasterCard, poate fi substituit. \u00cen set\u0103rile zonei de domeniu mastercard.com, din iunie 2020, a existat o eroare tipografic\u0103 \u2014 \u00een lista serverelor DNS care deservesc zona, \u00een loc de gazda \u201ea22-65.akam.net\u201d (serviciul DNS Akamai), a fost men\u021bionat\u0103 gazda \u201ea22-65.akam.ne\u201d. Zona r\u0103d\u0103cin\u0103 \u201e.ne\u201d este rezervat\u0103 pentru Republica Niger, iar domeniul \u201eakam.ne\u201d s-a dovedit a fi disponibil pentru v\u00e2nzare. <\/p>\n

Astfel, timp de patru ani \u0219i jum\u0103tate, oricine ar fi putut cump\u0103ra domeniul<\/a> \u201eakam.ne\u201d, crearea gazdei \u201ea22-65.akam.ne\u201d, desf\u0103\u0219urarea unui server DNS pe aceasta, crearea propriei variante a zonei DNS mastercard.com \u0219i redirec\u021bionarea oric\u0103rui subdomeniu mastercard.com c\u0103tre serverul s\u0103u. DNSSEC pentru mastercard.com nu a fost utilizat. Deoarece eroarea a fost f\u0103cut\u0103 \u00een numele uneia dintre cele cinci servere DNS, \u00een cazul unei atacuri reu\u0219ite, ar fi putut ob\u021bine controlul asupra cel pu\u021bin 1\/5 din trafic. Acoperirea poate fi extins\u0103 prin stabilirea unui TTL (Time To Live) mare pentru zona falsificat\u0103, ceea ce va duce la re\u021binerea mai \u00eendelungat\u0103 a \u00eenregistr\u0103rilor \u00een cache-urile resolverelor publice, de exemplu, cele sus\u021binute de companiile Cloudflare (1.1.1.1) \u0219i Google (8.8.8.8).

\"Din<\/center> <\/p>\n

\u00cen plus fa\u021b\u0103 de interceptarea traficului de la gazdele existente, s-ar fi putut desf\u0103\u0219ura un atac mai discret \u0219i s-ar fi putut folosi un subdomeniu ini\u021bial absent pentru a organiza phishing, de exemplu, crearea gazdei \u201eredemtion.mastercard.com\u201d \u0219i utilizarea acesteia \u00een spam \u00een locul punctului de intrare legitim \u201eredemption.mastercard.com\u201d. Printre altele, av\u00e2nd control asupra uneia dintre serverele DNS care deservesc domeniul mastercard.com, s-ar fi putut ob\u021bine certificatul TLS<\/a> \u00een serviciile care permit verificarea propriet\u0103\u021bii domeniului prin Web sau DNS, cum ar fi Let\u2019s Encrypt. Printre scenariile posibile de atac se men\u021bioneaz\u0103 \u0219i crearea unui server de email fals pentru interceptarea coresponden\u021bei cu emailul nume@mastercard.com \u0219i organizarea intercept\u0103rii datelor de autentificare de pe computerele angaja\u021bilor care folosesc Windows. <\/p>\n

Cercet\u0103torul care a identificat problemele a cump\u0103rat domeniul «akam.ne» pentru 300 de dolari \u0219i a lansat pe acesta un sniffer DNS pentru a evalua volumul de trafic. Analiza cererilor primite a ar\u0103tat c\u0103 cazul cu MasterCard nu este singular \u0219i exist\u0103 alte zone de domeniu \u00een lista serverelor DNS care indic\u0103 hostul «akam.ne» \u00een loc de «akam.net». Mai mult, s-a descoperit c\u0103 \u00eentre 2015 \u0219i 2018 domeniul «akam.ne» a fost \u00eenregistrat \u0219i, probabil, a fost folosit pentru atacuri. Presupunerea legat\u0103 de atacuri a fost formulat\u0103 deoarece fostul proprietar al «akam.ne» a \u00eenregistrat \u0219i domeniul «awsdns-06.ne», care este stilizat dup\u0103 serverul DNS «awsdns-06.net». Neoperabilitatea unuia dintre serverele DNS cu o gre\u0219eal\u0103 \u00een nume poate r\u0103m\u00e2ne nedetectat\u0103 de administratori timp \u00eendelungat, deoarece redundan\u021ba este asigurat\u0103 prin indicarea mai multor servere DNS. <\/p>\n

Compania MasterCard a ignorat ini\u021bial mesajul despre problem\u0103, dar dup\u0103 ce jurnalistul Brian Krebs s-a contactat cu aceast\u0103 problem\u0103, a recunoscut \u0219i a corectat eroarea, afirm\u00e2nd c\u0103 aceasta nu a reprezentat o amenin\u021bare pentru infrastructur\u0103. Ulterior, prin intermediul serviciului Bugcrowd, care ofer\u0103 recompense pentru vulnerabilit\u0103\u021bile descoperite, cercet\u0103torul a primit o solicitare de la MasterCard pentru eliminarea articolului publicat despre incident. <\/p>\n

Ca r\u0103spuns, cercet\u0103torul a afirmat c\u0103, de\u0219i are un cont pe serviciul Bugcrowd, nu a trimis cereri pentru recompense \u0219i a notificat direct compania MasterCard despre problem\u0103. Nota a fost publicat\u0103 pentru a atrage aten\u021bia asupra problemei dup\u0103 ce compania MasterCard nu mai era \u00een pericol, iar domeniul «akam.ne» apar\u021binea cercet\u0103torului. \u00cen final, compania MasterCard nu doar c\u0103 nu a compensat cei 300 de dolari cheltui\u021bi pe domeniu, dar nici m\u0103car nu l-a mul\u021bumit pe cercet\u0103tor. <\/p>\n

\u00cen ceea ce prive\u0219te afirma\u021bia c\u0103 eroarea nu crea riscuri suplimentare, cercet\u0103torul a prezentat statistici ale cererilor DNS primite, \u00een care figureaz\u0103 domeniile *.az.mastercard.com, indic\u00e2nd componentele func\u021bionale ale infrastructurii MasterCard, g\u0103zduite \u00een serviciul cloud Microsoft Azure. Compromiterea acestor componente p\u0103rea, evident, o amenin\u021bare critic\u0103 pentru securitate.

\"Din<\/center>
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard. \u0412 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b mastercard.com \u0441 \u0438\u044e\u043d\u044f 2020 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0430 — \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0437\u043e\u043d\u0443 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u0445\u043e\u0441\u0442\u0430 «a22-65.akam.net» (DNS-\u0441\u043b\u0443\u0436\u0431\u0430 Akamai) \u0431\u044b\u043b \u0443\u043a\u0430\u0437\u0430\u043d \u0445\u043e\u0441\u0442 «a22-65.akam.ne». \u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u0437\u043e\u043d\u0430 «.ne» \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0437\u0430 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439 \u041d\u0438\u0433\u0435\u0440 \u0438 \u0434\u043e\u043c\u0435\u043d «akam.ne» \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":121456,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121455","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Datorit\u0103 unei gre\u0219eli \u00een set\u0103ri, atacatorii ar fi putut \u00eenlocui serverul DNS MasterCard | ProHoster","description":"Un cercet\u0103tor \u00een securitate de la compania Seralys a identificat o vulnerabilitate ce permite substituirea serverului DNS pentru domeniul mastercard.com, utilizat \u00een infrastructura sistemului de plat\u0103 MasterCard.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437-\u0437\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 MasterCard | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-23T13:46:03+00:00","article:modified_time":"2026-02-04T15:53:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121455","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:56:19","updated":"2026-02-08 21:04:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/121455","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=121455"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/121455\/revisions"}],"predecessor-version":[{"id":158134,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/121455\/revisions\/158134"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/121456"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=121455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=121455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=121455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}