{"id":121455,"date":"2025-01-23T15:46:01","date_gmt":"2025-01-23T13:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard"},"modified":"2026-02-04T17:53:52","modified_gmt":"2026-02-04T15:53:52","slug":"iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","title":{"rendered":"\u00dato\u010dn\u00edci mohli vymeni\u0165 DNS server MasterCard kv\u00f4li preklepu v nastaveniach","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edk ze spole\u010dnosti Seralys odhalil mo\u017enost podvrhnout DNS server pro dom\u00e9nu mastercard.com, kter\u00e1 je pou\u017e\u00edv\u00e1na v infrastruktu\u0159e platebn\u00edho syst\u00e9mu MasterCard. V nastaven\u00edch dom\u00e9ny mastercard.com byla od \u010dervna 2020 p\u0159\u00edtomna tiskov\u00e1 chyba \u2014 v seznamu DNS server\u016f, kter\u00e9 obsluhuj\u00ed dom\u00e9nu, byl m\u00edsto hostitele \u201ea22-65.akam.net\u201c (DNS slu\u017eba Akamai) uveden hostitel \u201ea22-65.akam.ne\u201c. Ko\u0159enov\u00e1 dom\u00e9na \u201e.ne\u201c je p\u0159id\u011blena Nigeru a dom\u00e9na \u201eakam.ne\u201c se stala dostupnou k prodeji. <\/p>\n

Tak\u017ee, b\u011bhem \u010dty\u0159 a p\u016fl let kdokoli mohl k\u00fapi\u0165 dom\u00e9nu<\/a> \u201eakam.ne\u201c, vytvo\u0159it hostitele \u201ea22-65.akam.ne\u201c, nasadit na n\u011bm DNS server, zalo\u017eit vlastn\u00ed variantu DNS z\u00f3ny mastercard.com a p\u0159esm\u011brovat jak\u00fdkoli subdom\u00e9n mastercard.com na sv\u016fj server. DNSSEC pro mastercard.com nebyl pou\u017eit. Vzhledem k tomu, \u017ee tiskov\u00e1 chyba byla provedena v n\u00e1zvu jednoho z p\u011bti DNS server\u016f, v p\u0159\u00edpad\u011b \u00fasp\u011b\u0161n\u00e9ho \u00fatoku bylo mo\u017en\u00e9 z\u00edskat kontrolu alespo\u0148 nad 1\/5 provozu. Dosah by bylo mo\u017en\u00e9 zv\u00fd\u0161it nastaven\u00edm vysok\u00e9ho TTL (Time To Live) pro podvr\u017eenou z\u00f3nu, co\u017e by vedlo k del\u0161\u00ed dob\u011b uchov\u00e1v\u00e1n\u00ed z\u00e1znam\u016f v cache ve\u0159ejn\u00fdch resolver\u016f, nap\u0159\u00edklad t\u011bch, kter\u00e9 podporuj\u00ed spole\u010dnosti Cloudflare (1.1.1.1) a Google (8.8.8.8).

\"\u00dato\u010dn\u00edci<\/center> <\/p>\n

Krom\u011b odposlouch\u00e1v\u00e1n\u00ed provozu st\u00e1vaj\u00edc\u00edch hostitel\u016f bylo mo\u017en\u00e9 prov\u00e9st m\u00e9n\u011b znateln\u00fd \u00fatok a vyu\u017e\u00edt p\u016fvodn\u011b neexistuj\u00edc\u00ed subdom\u00e9nu pro phishing, nap\u0159\u00edklad zalo\u017eit hostitele \u201eredemtion.mastercard.com\u201c a pou\u017e\u00edt ho ve spamu m\u00edsto legitimn\u00edho vstupn\u00edho bodu \u201eredemption.mastercard.com\u201c. Krom\u011b jin\u00e9ho, pokud by n\u011bkdo m\u011bl kontrolu nad jedn\u00edm z DNS server\u016f obsluhuj\u00edc\u00edch dom\u00e9nu mastercard.com, mohl by z\u00edskat TLS certifik\u00e1t<\/a> v slu\u017eb\u00e1ch, kter\u00e9 umo\u017e\u0148uj\u00ed ov\u011b\u0159en\u00ed vlastnictv\u00ed dom\u00e9ny p\u0159es Web nebo DNS, jako je Let\u2019s Encrypt. Mezi mo\u017en\u00fdmi sc\u00e9n\u00e1\u0159i \u00fatok\u016f se tak\u00e9 zmi\u0148uje vytvo\u0159en\u00ed podvr\u017een\u00e9ho po\u0161tovn\u00edho serveru pro odposlech korespondence z emailu jm\u00e9no@mastercard.com a organizace odposlechu autentifika\u010dn\u00edch dat z po\u010d\u00edta\u010d\u016f zam\u011bstnanc\u016f pou\u017e\u00edvaj\u00edc\u00edch Windows. <\/p>\n

V\u00fdskumn\u00edk, ktor\u00fd odhalil probl\u00e9my, k\u00fapil dom\u00e9nu «akam.ne» za 300 dol\u00e1rov a spustil na nej DNS sniffer na hodnotenie objemu prev\u00e1dzky. Anal\u00fdza z\u00edskan\u00fdch po\u017eiadaviek uk\u00e1zala, \u017ee pr\u00edpad MasterCard nie je jedin\u00fd a existuj\u00fa \u010fal\u0161ie dom\u00e9nov\u00e9 z\u00f3ny, v zozname DNS serverov ktor\u00fdch je uveden\u00fd hos\u0165 «akam.ne» namiesto «akam.net». Navy\u0161e bolo zisten\u00e9, \u017ee od roku 2015 do roku 2018 bola dom\u00e9na «akam.ne» zaregistrovan\u00e1 a pravdepodobne sa pou\u017e\u00edvala na vykon\u00e1vanie \u00fatokov. Predpoklad o \u00fatokoch bol u\u010dinen\u00fd, preto\u017ee b\u00fdval\u00fd vlastn\u00edk «akam.ne» tie\u017e zaregistroval dom\u00e9nu «awsdns-06.ne», ktor\u00e1 je \u0161t\u00fdlizovan\u00e1 ako DNS server «awsdns-06.net». Nefunk\u010dnos\u0165 jedn\u00e9ho z DNS serverov s preklepom v n\u00e1zve m\u00f4\u017ee dlho zost\u00e1va\u0165 bez pov\u0161imnutia administr\u00e1tormi, preto\u017ee odolnos\u0165 vo\u010di poruch\u00e1m je zabezpe\u010den\u00e1 v\u010faka uvedeniu viacer\u00fdch DNS serverov. <\/p>\n

Spolo\u010dnos\u0165 MasterCard najprv ignorovala spr\u00e1vu o probl\u00e9me, ale po tom, \u010do sa s \u0148ou skontaktoval novin\u00e1r Brian Krebs, priznala a opravila chybu, uv\u00e1dzaj\u00fac, \u017ee chyba nepredstavovala hrozbu pre infra\u0161trukt\u00faru. N\u00e1sledne, prostredn\u00edctvom slu\u017eby Bugcrowd, ktor\u00e1 umo\u017e\u0148uje z\u00edska\u0165 odmeny za odhalen\u00e9 zranite\u013enosti, bolo v\u00fdskumn\u00edkovi preposlan\u00e9 po\u017eiadavku od spolo\u010dnosti MasterCard na odstr\u00e1nenie zverejnenej pozn\u00e1mky o incidente. <\/p>\n

V odpovedi v\u00fdskumn\u00edk uviedol, \u017ee hoci m\u00e1 \u00fa\u010det v slu\u017ebe Bugcrowd, \u017eiadne \u017eiadosti o odmenu neposlal a priamo informoval spolo\u010dnos\u0165 MasterCard o probl\u00e9me. Pozn\u00e1mka bola publikovan\u00e1, aby pritiahla pozornos\u0165 k probl\u00e9mu po tom, \u010do spolo\u010dnosti MasterCard u\u017e ni\u010d nehrozilo a dom\u00e9na «akam.ne» patrila v\u00fdskumn\u00edkovi. Nakoniec spolo\u010dnos\u0165 MasterCard nielen\u017ee nekompenzovala 300 dol\u00e1rov vynalo\u017een\u00fdch na dom\u00e9nu, ale ani slovne nepo\u010fakovala v\u00fdskumn\u00edkovi. <\/p>\n

Pokia\u013e ide o tvrdenie, \u017ee chyba nesp\u00f4sobila \u017eiadne dodato\u010dn\u00e9 rizik\u00e1, v\u00fdskumn\u00edk predlo\u017eil \u0161tatistiku prijat\u00fdch DNS-po\u017eiadaviek, v ktorej figurovali dom\u00e9ny *.az.mastercard.com, ukazuj\u00face na pracovn\u00e9 komponenty infra\u0161trukt\u00fary MasterCard umiestnen\u00e9 v cloudovej slu\u017ebe Microsoft Azure. Kompromit\u00e1cia podobn\u00fdch komponentov sa zjavne ukazovala ako kritick\u00e1 hrozba pre bezpe\u010dnos\u0165.

\"\u00dato\u010dn\u00edci<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard. \u0412 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b mastercard.com \u0441 \u0438\u044e\u043d\u044f 2020 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0430 — \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0437\u043e\u043d\u0443 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u0445\u043e\u0441\u0442\u0430 «a22-65.akam.net» (DNS-\u0441\u043b\u0443\u0436\u0431\u0430 Akamai) \u0431\u044b\u043b \u0443\u043a\u0430\u0437\u0430\u043d \u0445\u043e\u0441\u0442 «a22-65.akam.ne». \u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u0437\u043e\u043d\u0430 «.ne» \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0437\u0430 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439 \u041d\u0438\u0433\u0435\u0440 \u0438 \u0434\u043e\u043c\u0435\u043d «akam.ne» \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":121456,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121455","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kv\u00f4li preklepu v nastaveniach mohli \u00fato\u010dn\u00edci zmeni\u0165 DNS server MasterCard | ProHoster","description":"V\u00fdskumn\u00edk v oblasti bezpe\u010dnosti zo spolo\u010dnosti Seralys odhalil mo\u017enos\u0165 podvodu s DNS-serverom pre dom\u00e9nu mastercard.com, ktor\u00e1 sa pou\u017e\u00edva v infra\u0161trukt\u00fare platobn\u00e9ho syst\u00e9mu MasterCard.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437-\u0437\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 MasterCard | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-23T13:46:03+00:00","article:modified_time":"2026-02-04T15:53:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121455","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:56:19","updated":"2026-02-08 21:04:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/121455","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=121455"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/121455\/revisions"}],"predecessor-version":[{"id":158134,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/121455\/revisions\/158134"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/121456"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=121455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=121455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=121455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}