{"id":53591,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat"},"modified":"2020-02-18T14:01:31","modified_gmt":"2020-02-18T11:01:31","slug":"kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","title":{"rendered":"Cum pot atacatorii s\u0103 citeasc\u0103 coresponden\u021ba dvs. \u00een Telegram. \u0218i cum s\u0103 le \u00eempiedica\u021bi acest lucru","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Cum<\/p>\n

La sf\u00e2r\u0219itul anului 2019, la departamentul de investiga\u021bii al infrac\u021biunilor cibernetice Group-IB au apelat mai mul\u021bi antreprenori ru\u0219i care s-au confruntat cu problema accesului neautorizat al unor necunoscu\u021bi la coresponden\u021ba lor din aplica\u021bia de mesagerie Telegram. Incidentul s-a petrecut pe dispozitive iOS \u0219i Android, indiferent de operatorul de telefonie mobil\u0103 utilizat de victima incidentului.<\/p>\n

Atacul \u00eencepea printr-un mesaj trimis utilizatorului din aplica\u021bia Telegram de c\u0103tre un canal de servicii Telegram (acesta este canalul oficial al aplica\u021biei, marcat cu un semn de verificare albastru) care con\u021binea un cod de confirmare pe care utilizatorul nu l-a solicitat. Apoi, pe smartphone-ul victimei sosea un SMS cu un cod de activare \u2014 \u0219i aproape imediat dup\u0103, canalul de servicii Telegram primea o notificare c\u0103 \u00een cont s-a realizat un logare de pe un nou dispozitiv.<\/a><\/noindex><\/p>\n

\"Cum <\/p>\n

\u00cen toate cazurile cunoscute de Group-IB, infractorii au accesat contul altora prin intermediul internetului mobil (probabil, utiliz\u00e2nd cartela SIM unic\u0103), iar adresa IP a atacatorilor s-a aflat \u00een majoritatea cazurilor \u00een Samara. <\/p>\n

Acces pe comand\u0103 <\/h3>\n

\nInvestiga\u021bia Laboratoriei de Criminalistic\u0103 Informatic\u0103 Group-IB, unde au fost predate dispozitivele electronice ale victimelor, a ar\u0103tat c\u0103 tehnologia nu a fost infectat\u0103 cu software mali\u021bios sau troieni bancari, conturile nu au fost compromise, iar cartel\u0103 SIM nu a fost schimbat\u0103. \u00cen toate cazurile, infractorii au avut acces la aplica\u021bia de mesagerie a victimei prin intermediul codurilor SMS primite la autentificarea pe un nou dispozitiv. <\/p>\n

Aceast\u0103 procedur\u0103 func\u021bioneaz\u0103 astfel: la activarea aplica\u021biei pe un nou dispozitiv, Telegram trimite un cod prin canalul de servicii pe toate dispozitivele utilizatorului, iar apoi (la cerere) un SMS este trimis pe telefon. Cuno\u0219tin\u021bele infractorilor despre aceasta \u00eei fac s\u0103 ini\u021bieze cererea de trimitere a SMS-ului cu codul de activare din partea aplica\u021biei, intercept\u00e2nd acest SMS \u0219i folosind codul ob\u021binut pentru a se autentifica cu succes \u00een aplica\u021bie. <\/p>\n

Astfel, atacatorii ob\u021bin acces ilegal la toate chat-urile curente, cu excep\u021bia celor secrete, precum \u0219i la istoricul conversa\u021biilor din aceste chat-uri, inclusiv la fi\u0219ierele \u0219i fotografiile care au fost trimise \u00een ele. Descoperind acest lucru, utilizatorul legitim al Telegram poate for\u021ba \u00eenchiderea sesiunii atacatorului. Datorit\u0103 mecanismului de protec\u021bie implementat, acest lucru nu se poate \u00eent\u00e2mpla \u00een sens invers, atacatorul nu poate \u00eencheia sesiunile mai vechi ale utilizatorului real \u00een termen de 24 de ore. Prin urmare, este important s\u0103 se descopere la timp o sesiune str\u0103in\u0103 \u0219i s\u0103 se \u00eenchid\u0103, pentru a nu pierde accesul la cont. Speciali\u0219tii Group-IB au trimis o notificare echipei Telegram despre cercetarea lor.<\/p>\n

Studiul incidentelor continu\u0103 \u0219i, \u00een prezent, nu s-a stabilit cu exactitate ce schem\u0103 a fost utilizat\u0103 pentru a ocoli factorul SMS. De-a lungul timpului, cercet\u0103torii au prezentat exemple de interceptare a SMS-urilor prin atacuri asupra protocoalelor SS7 sau Diameter, utilizate \u00een re\u021belele mobile. Teoretic, astfel de atacuri pot fi implementate prin utilizarea ilegal\u0103 a unor echipamente tehnice speciale sau prin informa\u021bii privilegiate de la operatorii de telefonie mobil\u0103. \u00cen special, pe forumurile hackerilor din Darknet, exist\u0103 anun\u021buri recente cu oferte de hacking pentru diverse aplica\u021bii de mesagerie, inclusiv Telegram. <\/p>\n

\"Cum<\/p>\n

\u201eSpeciali\u0219tii din diferite \u021b\u0103ri, inclusiv din Rusia, au afirmat \u00een repetate r\u00e2nduri c\u0103 re\u021belele sociale, serviciile de banking mobil \u0219i aplica\u021biile de mesagerie pot fi compromise printr-o vulnerabilitate \u00een protocolul SS7, \u00eens\u0103 acestea au fost cazuri izolate de atacuri \u021bintite sau cercet\u0103ri experimentale\u201d, comenteaz\u0103 Serghei Lupanin, \u0219eful departamentului de investiga\u021bii ale criminalit\u0103\u021bii cibernetice la Group-IB. \u201e\u00cen seria de noi incidente, care au dep\u0103\u0219it deja 10, este evident c\u0103 atacatorii doresc s\u0103 transforme aceast\u0103 metod\u0103 de c\u00e2\u0219tig \u00eentr-un flux constant. Pentru a preveni acest lucru, este necesar s\u0103 ne \u00eembun\u0103t\u0103\u021bim nivelul de igien\u0103 digital\u0103: cel pu\u021bin s\u0103 folosim autentificarea cu doi factori ori de c\u00e2te ori este posibil \u0219i s\u0103 ad\u0103ug\u0103m un al doilea factor obligatoriu la SMS-uri, ceea ce este func\u021bional realizat \u00een acela\u0219i Telegram\u201d.<\/p>\n

Cum s\u0103 te protejezi?<\/h3>\n

\n 1. \u00cen Telegram sunt deja implementate toate op\u021biunile necesare de securitate cibernetic\u0103, care vor anula eforturile atacatorilor.
\n 2. Pe dispozitivele iOS \u0219i Android pentru Telegram, trebuie s\u0103 accesa\u021bi set\u0103rile Telegram, s\u0103 selecta\u021bi tab-ul \u201eConfiden\u021bialitate\u201d \u0219i s\u0103 asigna\u021bi \u201eParola cloudVerificarea \u00een dou\u0103 etape\u201d sau \u201eTwo step verification\u201d. O descriere detaliat\u0103 despre activarea acestei op\u021biuni este disponibil\u0103 \u00een instruc\u021biunile de pe site-ul oficial al aplica\u021biei de mesagerie: telegram.org\/blog\/sessions-and-2-step-verification<\/a><\/noindex> (https:\/\/telegram.org\/blog\/sessions-and-2-step-verification)<\/p>\n

\"Cum<\/p>\n

3. Este important s\u0103 nu seta\u021bi o adres\u0103 de email pentru resetarea acestei parole, deoarece, de obicei, recuperarea parolei pentru email se face \u0219i ea prin SMS. \u00cen mod similar, pute\u021bi spori protec\u021bia contului \u00een WhatsApp.<\/p>\n

\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center>
\n
Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u043d\u0446\u0435 2019 \u0433\u043e\u0434\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439 Group-IB \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a \u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435 \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0435 Telegram. \u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438 Android, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0442\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043a\u0430\u043a\u043e\u0433\u043e \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0439. \u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0430\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440 Telegram \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53591","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cum pot cititorii neautoriza\u021bi s\u0103 citeasc\u0103 conversa\u021biile dvs. \u00een Telegram. \u0218i cum s\u0103 le preveni\u021bi | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0430\u0448\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 Telegram. \u0418 \u043a\u0430\u043a \u0438\u043c \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53591","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:01:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:22:49","updated":"2026-01-24 08:01:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/53591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=53591"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/53591\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=53591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=53591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=53591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}