{"id":112725,"date":"2024-01-06T15:10:27","date_gmt":"2024-01-06T13:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne"},"modified":"2024-01-06T15:10:27","modified_gmt":"2024-01-06T13:10:28","slug":"komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","title":{"rendered":"Kompromitimi i llogaris\u00eb \u00e7oi n\u00eb d\u00ebshtimin e BGP-routing t\u00eb Orange Espagne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompromitimi i llogaris\u00eb s\u00eb administratorit \u00e7oi n\u00eb nj\u00eb nd\u00ebrprerje prej pothuajse kat\u00ebr or\u00ebsh n\u00eb sh\u00ebrbimin e operatorit t\u00eb dyt\u00eb m\u00eb t\u00eb madh t\u00eb komunikimeve n\u00eb Spanj\u00eb, Orange Espagne, i cili sh\u00ebrben 11 milion abonent\u00ebve. P\u00ebr t\u00eb hyr\u00eb n\u00eb nd\u00ebrfaqen e regjistruesit RIPE NCC n\u00eb Orange Espagne u p\u00ebrdor nj\u00eb fjal\u00ebkalim t\u00eb parashikuesh\u00ebm «ripeadmin» dhe nuk ishte aktivizuar autentifikimi me dy faktor\u00eb. <\/p>\n

Fjal\u00ebkalimi p\u00ebr RIPE u kap gjat\u00eb nj\u00eb kompromitimi t\u00eb sistemit t\u00eb nj\u00eb prej punonj\u00ebsve nga malware dhe q\u00eb nga shtatori kishte qen\u00eb n\u00eb databazat e fjal\u00ebkalimeve t\u00eb kompromituara t\u00eb disponueshme n\u00eb tregun e zi. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb se p\u00ebrve\u00e7 llogaris\u00eb s\u00eb Orange Espagne, n\u00eb k\u00ebto databaza ka edhe mij\u00ebra llogari t\u00eb tjera p\u00ebr lidhjen me access.ripe.net, t\u00eb cilat potencialisht mund t\u00eb p\u00ebrdoren p\u00ebr sulme t\u00eb ngjashme. <\/p>\n

Incidentin mbeti i pa v\u00ebrejtur deri m\u00eb 2 janar, kur nj\u00eb vandal hyri n\u00eb nd\u00ebrfaqen web t\u00eb RIPE NCC dhe b\u00ebri ndryshime n\u00eb konfigurimin e BGP dhe RPKI (Infrastruktur\u00ebs Publike t\u00eb \u00c7el\u00ebsit Burimor), pas t\u00eb cilit p\u00ebr gati kat\u00ebr or\u00eb ishte prishur \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438za e rreth gjysm\u00ebs s\u00eb trafikut t\u00eb operatorit t\u00eb komunikimit. Veprimet e sulmuesve shkaktuan q\u00eb teknologjia RPKI, e cila \u00ebsht\u00eb designed p\u00ebr t\u00eb mbrojtur BGP-n\u00eb nga falsifikimi, t\u00eb vihet n\u00eb p\u00ebrdorim p\u00ebr bllokimin e njoftimeve legjitime. <\/p>\n

Sulmuesi krijoi disa regjistrime t\u00eb reja RPKI ROA (Autorizimi i Origjin\u00ebs s\u00eb Rrug\u00ebs), p\u00ebrfshir\u00eb regjistrime q\u00eb lidhin blloqe t\u00eb m\u00ebdha adresash t\u00eb Orange Espagne me nj\u00eb sistem autonom t\u00eb huaj, duke b\u00ebr\u00eb q\u00eb njoftimet korrekte BGP nga ky operator t\u00eb bllokoheshin n\u00eb routerat e shum\u00eb operator\u00ebve kryesor\u00eb. Si rezultat, numri i rrug\u00ebve BGP t\u00eb lidhura me Orange Espagne ra nga 9200 n\u00eb 7400, dhe trafiku u zvog\u00eblua gati n\u00eb gjysm\u00eb.

\"Kompromitimi<\/center> <\/p>\n

RPKI (Infrastruktura Publike e \u00c7el\u00ebsit Burimor) p\u00ebrdoret p\u00ebr autorizimin e njoftimeve BGP dhe lejon t\u00eb p\u00ebrcaktohet n\u00ebse njoftimi BGP buron nga pronari i rrjetit apo jo. Duke p\u00ebrdorur RPKI p\u00ebr sistemet autonome dhe IP-adresave<\/a> nd\u00ebrtohet nj\u00eb zinxhir besimi nga IANA te regjistruesit rajonal\u00eb (RIRs), pastaj te ofruesit (LIR) dhe tek konsumator\u00ebt p\u00ebrfundimtar\u00eb, q\u00eb u lejon pal\u00ebve t\u00eb treta t\u00eb verifikojn\u00eb se operacioni me burimin \u00ebsht\u00eb kryer nga pronari i tij. Pa p\u00ebrdorur autorizimin, \u00e7do operator mund t\u00eb shpall\u00eb n\u00ebnrrjet me informacion t\u00eb rrem\u00eb rreth gjat\u00ebsis\u00eb s\u00eb rrug\u00ebs dhe t\u00eb iniciroj\u00eb transit p\u00ebrmes tij nj\u00eb pjes\u00eb t\u00eb trafikut nga sisteme t\u00eb tjera q\u00eb nuk p\u00ebrdorin filtrimin e shpalljeve.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0447\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u0447\u0430\u0441\u043e\u0432\u043e\u043c\u0443 \u0441\u0431\u043e\u044e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 Orange Espagne, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e 11 \u043c\u043b\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u0414\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 RIPE NCC \u0432 Orange Espagne \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c «ripeadmin» \u0438 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u041f\u0430\u0440\u043e\u043b\u044c \u043a RIPE \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u0432 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":112726,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Komprometimi i llogaris\u00eb \u00e7oi n\u00eb d\u00ebshtimin e BGP-routing t\u00eb Orange Espagne | ProHoster","description":"Komprometimi i llogaris\u00eb s\u00eb administratorit \u00e7oi n\u00eb nj\u00eb nd\u00ebrprerje prej gati kat\u00ebr or\u00ebsh n\u00eb funksionimin e operatorit m\u00eb t\u00eb madh t\u00eb dyt\u00eb spanjoll, Orange Espagne, q\u00eb sh\u00ebrben 11 milion abone. P\u00ebr t\u00eb hyr\u00eb n\u00eb nd\u00ebrfaqen e regjistruesit RIPE NCC n\u00eb Orange Espagne u p\u00ebrdor nj\u00eb fjal\u00ebkalim parashikues \"ripeadmin\" dhe nuk ishte aktivizuar autentifikimi me dy faktor\u00eb. Fjal\u00ebkalimi p\u00ebr RIPE u kap gjat\u00eb d\u00ebshtimit t\u00eb sistemit t\u00eb nj\u00ebrit prej punonj\u00ebsve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0441\u0431\u043e\u044e BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 Orange Espagne | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043f\u043e\u0447\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u0447\u0430\u0441\u043e\u0432\u043e\u043c\u0443 \u0441\u0431\u043e\u044e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 Orange Espagne, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e 11 \u043c\u043b\u043d \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u0414\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 RIPE NCC \u0432 Orange Espagne \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c "ripeadmin" \u0438 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u041f\u0430\u0440\u043e\u043b\u044c \u043a RIPE \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u0432 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/komprometacziya-uchyotnoj-zapisi-privela-k-sboyu-bgp-marshrutizaczii-orange-espagne","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-06T13:10:28+00:00","article:modified_time":"2024-01-06T13:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112725","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:40:12","updated":"2026-02-08 20:40:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112725"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112725\/revisions"}],"predecessor-version":[{"id":158009,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112725\/revisions\/158009"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/112726"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}