{"id":34422,"date":"2019-10-31T21:58:15","date_gmt":"2019-10-31T18:58:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-neobhodimo-sdelat-chtoby-vashu-uchetnuyu-zapis-google-ne-ukrali\/"},"modified":"2019-10-31T21:58:15","modified_gmt":"2019-10-31T18:58:15","slug":"chto-neobhodimo-sdelat-chtoby-vashu-uchetnuyu-zapis-google-ne-ukrali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/chto-neobhodimo-sdelat-chtoby-vashu-uchetnuyu-zapis-google-ne-ukrali","title":{"rendered":"Ce trebuie s\u0103 face\u021bi pentru a v\u0103 proteja contul Google de furt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Ce
\n<\/p>\n

Compania Google a publicat o cercetare <\/a><\/noindex> \u201eC\u00e2t de eficient\u0103 este igiena de baz\u0103 a contului pentru prevenirea furti\u0219orului acestuia\u201d despre ceea ce poate face proprietarul contului pentru a-l proteja de atacuri. V\u0103 prezent\u0103m traducerea acestei cercet\u0103ri.
\nAdev\u0103rul este c\u0103 cea mai eficient\u0103 metod\u0103 utilizat\u0103 de Google nu a fost inclus\u0103 \u00een raport. A trebuit s\u0103 scriu eu \u00eensumi despre aceast\u0103 metod\u0103 la final.<\/p><\/blockquote>\n

\n\u00cen fiecare zi protej\u0103m utilizatorii de sute de mii de \u00eencerc\u0103ri de hacking ale conturilor. Majoritatea atacurilor<\/a><\/noindex> provine de la boturi automate cu acces la sisteme externe de spargere a parolelor, dar exist\u0103 \u0219i atacuri de phishing \u0219i atacuri \u021bintite. Anterior, am discutat despre doar cinci pa\u0219i simpli<\/a><\/noindex>, cum ar fi ad\u0103ugarea unui num\u0103r de telefon, care v\u0103 pot ajuta s\u0103 v\u0103 proteja\u021bi, dar acum dorim s\u0103 demonstr\u0103m acest lucru \u00een practic\u0103.
\n<\/a><\/noindex><\/p>\n

Un atac de phishing este o \u00eencercare de a \u00een\u0219ela utilizatorul astfel \u00eenc\u00e2t acesta s\u0103 transmit\u0103 voluntar informa\u021bii atacatorului, care vor fi utile \u00een procesul de hacking. De exemplu, prin copierea interfe\u021bei unei aplica\u021bii legitime.<\/p>\n

Atacurile cu ajutorul boturilor automate sunt \u00eencerc\u0103ri masive de hacking care nu sunt direc\u021bionate c\u0103tre utilizatori specifici. De obicei, sunt realizate cu ajutorul software-ului disponibil public \u0219i sunt accesibile chiar \u0219i hackerilor neantrena\u021bi. Atacatorii nu \u0219tiu nimic despre particularit\u0103\u021bile utilizatorilor specifici - ei pur \u0219i simplu ruleaz\u0103 programul \u0219i \u201eprind\u201d toate conturile prost protejate din jur.<\/p>\n

Atacurile \u021bintite sunt spargeri ale unor conturi specifice, \u00een care se adun\u0103 informa\u021bii suplimentare despre fiecare cont \u0219i proprietarul acestuia, pot exista \u00eencerc\u0103ri de interceptare \u0219i analiz\u0103 a traficului, precum \u0219i utilizarea unor instrumente de hacking mai sofisticate.<\/p>\n

(Not\u0103 a traduc\u0103torului)<\/p><\/blockquote>\n

\nNe-am unit cu cercet\u0103torii de la Universitatea din New York \u0219i Universitatea din California pentru a determina c\u00e2t de eficient\u0103 este igiena de baz\u0103 a conturilor \u00een prevenirea furtului acestora. <\/p>\n

Cercetarea anual\u0103 despre atacurile extinse<\/a><\/noindex> \u0219i \u021bintite<\/a><\/noindex> a fost prezentat\u0103 miercuri \u00eentr-o reuniune cu exper\u021bi, politicieni \u0219i utilizatori numit\u0103 The Web Conference<\/a><\/noindex>.
\nCercet\u0103rile noastre arat\u0103 c\u0103 ad\u0103ugarea simpl\u0103 a unui num\u0103r de telefon \u00een contul dumneavoastr\u0103 Google poate bloca p\u00e2n\u0103 la 100% din atacurile automate, 99% din atacurile de tip phishing la scar\u0103 larg\u0103 \u0219i 66% din atacurile \u021bintite, conform investiga\u021biei noastre.<\/p>\n

Protec\u021bie proactiv\u0103 automat\u0103 Google \u00eempotriva \u00absustragerii\u00bb contului<\/h3>\n

\nImplement\u0103m o protec\u021bie proactiv\u0103 automat\u0103 pentru a securiza mai bine to\u021bi utilizatorii no\u0219tri \u00eempotriva hacking-ului contului. Iat\u0103 cum func\u021bioneaz\u0103: dac\u0103 detect\u0103m o \u00eencercare suspect\u0103 de autentificare (de exemplu, dintr-o nou\u0103 loca\u021bie sau dispozitiv), v\u0103 vom cere dovezi suplimentare c\u0103 sunte\u021bi cu adev\u0103rat dumneavoastr\u0103. Aceast\u0103 confirmare poate consta \u00een verificarea accesului la un telefon de \u00eencredere sau r\u0103spunsul la o \u00eentrebare la care doar dumneavoastr\u0103 \u0219ti\u021bi r\u0103spunsul corect.<\/p>\n

Dac\u0103 v-a\u021bi conectat la telefonul dumneavoastr\u0103 sau a\u021bi furnizat un num\u0103r de telefon \u00een set\u0103rile contului, putem oferi acela\u0219i nivel de protec\u021bie ca \u00een cazul verific\u0103rii \u00een doi pa\u0219i. Am constatat c\u0103 codul SMS trimis pe num\u0103rul de telefon de recuperare a ajutat la blocarea 100% a boturilor automate, 96% a atacurilor de tip phishing la scar\u0103 larg\u0103 \u0219i 76% din atacurile \u021bintite. Cererile pe dispozitive pentru a confirma ac\u021biunea, care sunt o \u00eenlocuire mai sigur\u0103 a SMS-urilor, au ajutat la prevenirea a 100% din boturile automate, 99% din atacurile de tip phishing la scar\u0103 larg\u0103 \u0219i 90% din atacurile \u021bintite.<\/p>\n

\"Ce
\n
\nProtec\u021bia bazat\u0103 at\u00e2t pe de\u021binerea unor dispozitive specifice, c\u00e2t \u0219i pe cunoa\u0219terea unor fapte specifice ajut\u0103 la rezisten\u021ba \u00eempotriva boturilor automate, iar protec\u021bia bazat\u0103 pe de\u021binerea unor dispozitive specifice este pentru prevenirea phishing-ului \u0219i chiar a atacurilor \u021bintite.
\n<\/i>
\nDac\u0103 nu ave\u021bi configurat un num\u0103r de telefon \u00een contul dumneavoastr\u0103, putem apela la metode de protec\u021bie mai slabe, bazate pe cuno\u0219tin\u021be despre dumneavoastr\u0103, cum ar fi loca\u021bia ultimei autentific\u0103ri \u00een cont. Aceasta func\u021bioneaz\u0103 bine \u00eempotriva boturilor, dar nivelul de protec\u021bie \u00eempotriva phishing-ului poate sc\u0103dea p\u00e2n\u0103 la 10%, iar \u00eempotriva atacurilor \u021bintite, securitatea este practic inexistent\u0103. Acest lucru se \u00eent\u00e2mpl\u0103 deoarece paginile de phishing \u0219i atacatorii, \u00een cazul atacurilor \u021bintite, pot s\u0103 v\u0103 determine s\u0103 dezv\u0103lui\u021bi orice informa\u021bie suplimentar\u0103 pe care Google ar putea s\u0103 o cear\u0103 pentru verificare.<\/p>\n

Av\u00e2nd \u00een vedere avantajele acestei protec\u021bii, s-ar putea \u00eentreba de ce nu cerem utilizarea acesteia pentru fiecare conectare. R\u0103spunsul const\u0103 \u00een faptul c\u0103 acest lucru ar crea dificult\u0103\u021bi suplimentare pentru utilizatori (\u00een special pentru cei neexperimenta\u021bi \u2014 n. trad.<\/i>.) \u0219i ar cre\u0219te riscul de blocare a contului. \u00cen cadrul experimentului, s-a constatat c\u0103 38% dintre utilizatori nu aveau acces la telefonul lor \u00een momentul conect\u0103rii la cont. \u00cenc\u0103 34% dintre utilizatori nu au reu\u0219it s\u0103-\u0219i aminteasc\u0103 adresa de e-mail alternativ\u0103.<\/p>\n

Dac\u0103 a\u021bi pierdut accesul la telefonul dvs. sau nu pute\u021bi s\u0103 v\u0103 conecta\u021bi, pute\u021bi \u00eentotdeauna s\u0103 reveni\u021bi la un dispozitiv de \u00eencredere de pe care a\u021bi mai intrat anterior pentru a accesa contul dumneavoastr\u0103.<\/p>\n

Analiz\u0103m atacurile de tip \u201ehacking la comand\u0103\u201d<\/h3>\n

\nAcolo unde majoritatea solu\u021biilor automate de protec\u021bie blocheaz\u0103 cele mai multe boturi \u0219i atacuri de tip phishing, atacurile \u021bintite devin mai d\u0103un\u0103toare. \u00cen cadrul eforturilor noastre continue de monitorizare a amenin\u021b\u0103rilor de hacking<\/a><\/noindex>, descoperim constant noi grupuri criminale de \u201ehacking la comand\u0103\u201d care cer \u00een medie 750 de dolari pentru spargerea unui cont. Ace\u0219ti infractori se bazeaz\u0103 adesea pe e-mailuri de phishing care se dau drept membri ai familiei, colegi, func\u021bionari guvernamentali sau chiar Google. Dac\u0103 \u021binta nu cedeaz\u0103 la prima tentativ\u0103 de phishing, atacurile ulterioare continu\u0103 mai mult de o lun\u0103.<\/p>\n

\"Ce
\nUn exemplu de atac phishing de tip \u201eomul din mijloc\u201d, care verific\u0103 parola \u00een timp real. Dup\u0103 aceea, pe pagina de phishing li se solicit\u0103 victimelor s\u0103 introduc\u0103 codurile de autentificare SMS pentru a accesa contul victimei.<\/i><\/p>\n

Conform estim\u0103rilor noastre, doar unul dintr-un milion de utilizatori este expus unui risc at\u00e2t de mare. Infractorii nu vizeaz\u0103 persoane la \u00eent\u00e2mplare. De\u0219i studiile arat\u0103 c\u0103 protec\u021bia noastr\u0103 automat\u0103 poate ajuta la \u00eent\u00e2rzierea \u0219i chiar prevenirea a p\u00e2n\u0103 la 66% din atacurile \u021bintite pe care le-am analizat, recomand\u0103m \u00een continuare ca utilizatorii cu un nivel ridicat de risc s\u0103 se \u00eenscrie \u00een programul nostru de protec\u021bie suplimentar\u0103<\/a><\/noindex>. A\u0219a cum a fost observat \u00een timpul anchetei noastre, utilizatorii care utilizeaz\u0103 exclusiv chei de securitate (adic\u0103 \u2014 autentificarea cu doi pa\u0219i folosind codurile trimise utilizatorilor \u2014 nota traduc\u0103torului.<\/i>), au c\u0103zut victime ale phishingului \u021bintit.<\/p>\n

Investi\u021bi pu\u021bin timp \u00een protejarea contului dumneavoastr\u0103<\/h3>\n

\nFolosi\u021bi centuri de siguran\u021b\u0103 pentru a v\u0103 proteja via\u021ba \u0219i s\u0103n\u0103tatea \u00een timpul c\u0103l\u0103toriilor cu ma\u0219ina. \u0218i cu ajutorul celor cinci sfaturi<\/a><\/noindex> pute\u021bi asigura siguran\u021ba contului dumneavoastr\u0103.<\/p>\n

Dup\u0103 cum arat\u0103 cercet\u0103rile noastre, unul dintre cele mai simple lucruri pe care le pute\u021bi face pentru a v\u0103 proteja contul Google este s\u0103 v\u0103 seta\u021bi un num\u0103r de telefon. Pentru utilizatorii cu un nivel ridicat de risc, precum jurnali\u0219ti, activi\u0219ti comunitari, lideri de afaceri \u0219i echipe de campanii politice, programul nostru Advanced Protection<\/a><\/noindex> va ajuta la asigurarea celor mai \u00eenalte niveluri de securitate. Pute\u021bi, de asemenea, s\u0103 v\u0103 proteja\u021bi conturile de servicii ter\u021be (non-Google) de atacurile prin hacking, instal\u00e2nd extensia Chrome Password Checkup<\/a><\/noindex>.<\/p>\n

Este interesant c\u0103 Google nu urmeaz\u0103 sfaturile pe care le ofer\u0103 propriilor utilizatori. Google utilizeaz\u0103 tokenuri hardware<\/a><\/noindex> pentru autentificarea cu doi factori a mai mult de 85 000 de angaja\u021bi. Potrivit reprezentan\u021bilor companiei, de la \u00eenceputul utiliz\u0103rii tokenurilor hardware nu a fost raportat\u0103 nicio furt de cont. Comparativ cu cifrele prezentate \u00een acest raport, astfel se vede c\u0103 utilizarea tokenurilor<\/b> pentru autentificarea cu doi factori este singura metod\u0103 sigur\u0103 de protec\u021bie<\/b> at\u00e2t a conturilor, c\u00e2t \u0219i a informa\u021biilor (iar \u00een unele cazuri \u0219i a banilor).<\/p>\n

Pentru protec\u021bia conturilor Google se folosesc tokenuri create conform standardului FIDO U2F, de exemplu un astfel de<\/a><\/noindex>. Iar pentru autentificarea cu doi factori \u00een sistemele de operare Windows, Linux \u0219i MacOS se folosesc tokenuri criptografice<\/a><\/noindex>.<\/p>\n

(Not\u0103 a traduc\u0103torului)<\/p><\/blockquote>\n

Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u00ab\u041d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0433\u0438\u0433\u0438\u0435\u043d\u0430 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0435\u0451 \u043a\u0440\u0430\u0436\u0438\u00bb \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u0447\u0442\u043e\u0431\u044b \u0435\u0451 \u043d\u0435 \u0443\u043a\u0440\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u0432\u0430\u0448\u0435\u043c\u0443 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u044d\u0442\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u0440\u0430\u0432\u0434\u0430 \u0441\u0430\u043c\u044b\u0439 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0430\u043c\u043e\u0439 Google, \u0432 \u043e\u0442\u0447\u0435\u0442 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0438. \u041f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043c\u043d\u0435 \u0441\u0430\u043c\u043e\u043c\u0443 \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043e\u0431 \u044d\u0442\u043e\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u0435 \u0432 \u043a\u043e\u043d\u0446\u0435. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25934,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34422","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ce trebuie s\u0103 face\u021bi pentru ca contul dumneavoastr\u0103 Google s\u0103 nu fie furat | ProHoster","description":"Compania.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/chto-neobhodimo-sdelat-chtoby-vashu-uchetnuyu-zapis-google-ne-ukrali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0432\u0430\u0448\u0443 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c Google \u043d\u0435 \u0443\u043a\u0440\u0430\u043b\u0438 | ProHoster","og:description":"\u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/chto-neobhodimo-sdelat-chtoby-vashu-uchetnuyu-zapis-google-ne-ukrali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:58:15+00:00","article:modified_time":"2019-10-31T18:58:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34422","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 19:13:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:21:35","updated":"2026-01-21 19:13:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34422","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=34422"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34422\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/25934"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=34422"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=34422"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=34422"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}