{"id":112725,"date":"2024-01-06T15:10:27","date_gmt":"2024-01-06T13:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne"},"modified":"2024-01-06T15:10:27","modified_gmt":"2024-01-06T13:10:28","slug":"komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","title":{"rendered":"Kompromitimi i llogaris\u00eb shkaktoi d\u00ebshtimin e BGP-routing t\u00eb Orange Espagne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompromitimi i llogaris\u00eb administratorit \u00e7oi n\u00eb nj\u00eb nd\u00ebrprerje prej pothuajse kat\u00ebr or\u00ebsh t\u00eb operatorit t\u00eb dyt\u00eb m\u00eb t\u00eb madh t\u00eb komunikimeve n\u00eb Spanj\u00eb, Orange Espagne, i cili sh\u00ebrben 11 milion abonent\u00ebve. P\u00ebr t\u00eb aksesuar nd\u00ebrfaqen e regjistruesit RIPE NCC n\u00eb Orange Espagne u p\u00ebrdor nj\u00eb fjal\u00ebkalim parashikues \"ripeadmin\" dhe nuk ishte aktivizuar autenticiteti me dy faktor\u00eb. <\/p>\n

Fjal\u00ebkalimi p\u00ebr RIPE u kap gjat\u00eb sulmit ndaj sistemit t\u00eb nj\u00eb prej punonj\u00ebsve nga malware dhe q\u00eb nga shtatori ka qen\u00eb n\u00eb bazat e fjal\u00ebkalimeve t\u00eb komprometuar n\u00eb tregun e zi. N\u00ebnvizohet se p\u00ebrve\u00e7 llogaris\u00eb s\u00eb Orange Espagne, n\u00eb k\u00ebto baza jan\u00eb prezente edhe mij\u00ebra llogari t\u00eb tjera p\u00ebr tu lidhur me access.ripe.net, t\u00eb cilat potencialisht mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb kryer sulme t\u00eb ngjashme. <\/p>\n

Incidenti mbeti i paditur deri m\u00eb 2 janar, kur nj\u00eb vandali hyri n\u00eb nd\u00ebrfaqen web t\u00eb RIPE NCC dhe b\u00ebri ndryshime n\u00eb konfigurimin e BGP-s\u00eb dhe RPKI (Resource Public Key Infrastructure), duke b\u00ebr\u00eb q\u00eb p\u00ebr pothuajse kat\u00ebr or\u00eb t\u00eb prisheshin rregullat e routing-ut p\u00ebr gati gjysm\u00ebn e trafikut t\u00eb operatorit t\u00eb komunikacionit. Veprimet e sulmuesve b\u00ebn\u00eb q\u00eb teknologjia RPKI, e cila ka p\u00ebr q\u00ebllim t\u00eb mbroj\u00eb njoftimet BGP nga falsifikimi, t\u00eb p\u00ebrdorej p\u00ebr t\u00eb bllokuar njoftimet legjitime. <\/p>\n

Sulmuesi krijoi disa regjistrime t\u00eb reja RPKI ROA (Route Origin Authorization), midis t\u00eb cilave ishin regjistrime q\u00eb lidhnin blloqe t\u00eb m\u00ebdha adresash t\u00eb Orange Espagne me nj\u00eb sistem autonom t\u00eb huaj, gj\u00eb q\u00eb \u00e7oi n\u00eb bllokimin e njoftimeve t\u00eb sakta BGP nga ky sistem autonom n\u00eb router-at e shum\u00eb operator\u00ebve t\u00eb rrug\u00ebve. N\u00eb p\u00ebrfundim, numri i rrug\u00ebve BGP t\u00eb lidhura me Orange Espagne u ul nga 9200 n\u00eb 7400, dhe trafiku ra gati dyfish.

\"Kompromitimi<\/center> <\/p>\n

RPKI (Resource Public Key Infrastructure) p\u00ebrdoret p\u00ebr autorizimin e njoftimeve BGP dhe lejon t\u00eb p\u00ebrcaktohet n\u00ebse njoftimi BGP vjen nga pronari i rrjetit apo jo. Me p\u00ebrdorimin e RPKI p\u00ebr sistemet autonome dhe IP-adresat<\/a> njoftohet nj\u00eb zinxhir besimi nga IANA te regjistruesit rajonal\u00eb (RIRs), m\u00eb pas te ofruesit (LIR) dhe konsumator\u00ebt fundor\u00eb, i cili lejon pal\u00ebt e treta t\u00eb sigurohen se operacioni me burimin \u00ebsht\u00eb kryer nga pronari i tij. Pa p\u00ebrdorimin e autorizimit, \u00e7do operator mund t\u00eb shpall\u00eb nj\u00eb n\u00ebnshtres\u00eb me informacione false p\u00ebr gjat\u00ebsin\u00eb e rrug\u00ebs dhe t\u00eb filloj\u00eb kalimin e nj\u00eb pjese t\u00eb trafikut nga sisteme t\u00eb tjera q\u00eb nuk zbatojn\u00eb filtrimin e shpalljeve.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0447\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u0447\u0430\u0441\u043e\u0432\u043e\u043c\u0443 \u0441\u0431\u043e\u044e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 Orange Espagne, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e 11 \u043c\u043b\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u0414\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 RIPE NCC \u0432 Orange Espagne \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c «ripeadmin» \u0438 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u041f\u0430\u0440\u043e\u043b\u044c \u043a RIPE \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u0432 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":112726,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kompromitimi i llogaris\u00eb \u00e7oi n\u00eb nj\u00eb nd\u00ebrprerje t\u00eb BGP-routing t\u00eb Orange Espagne | ProHoster","description":"Kompromitimi i llogaris\u00eb s\u00eb administratorit \u00e7oi n\u00eb nj\u00eb nd\u00ebrprerje gati kat\u00ebr or\u00ebshe n\u00eb funksionimin e operatorit t\u00eb dyt\u00eb m\u00eb t\u00eb madh t\u00eb komunikimit n\u00eb Spanj\u00eb, Orange Espagne, i cili sh\u00ebrben 11 milion abonent\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0441\u0431\u043e\u044e BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 Orange Espagne | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0447\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u0447\u0430\u0441\u043e\u0432\u043e\u043c\u0443 \u0441\u0431\u043e\u044e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 Orange Espagne, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e 11 \u043c\u043b\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-06T13:10:28+00:00","article:modified_time":"2024-01-06T13:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112725","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:40:12","updated":"2026-02-08 20:40:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112725"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112725\/revisions"}],"predecessor-version":[{"id":158009,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112725\/revisions\/158009"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/112726"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}