{"id":112727,"date":"2024-01-06T21:10:22","date_gmt":"2024-01-06T19:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin"},"modified":"2024-01-06T21:10:22","modified_gmt":"2024-01-06T19:10:22","slug":"orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","title":{"rendered":"Orange Espa\u00f1a u hackua p\u00ebr shkak se fjal\u00ebkalimi i p\u00ebrdoruesit admin t\u00eb llogaris\u00eb RIPE NCC ishte ripeadmin","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Orange Espa\u00f1a, operatori i dyt\u00eb m\u00eb i madh i celular\u00ebve n\u00eb Spanj\u00eb, u p\u00ebrball me nj\u00eb nj\u00eb defekt t\u00eb r\u00ebnd\u00eb t\u00eb m\u00ebrkur\u00ebn, pasi nj\u00eb pal\u00eb e panjohur mori qasje n\u00eb llogarin\u00eb e menaxhimit t\u00eb tabel\u00ebs globale t\u00eb routing-ut duke p\u00ebrdorur nj\u00eb \u201efjal\u00ebkalim absurdisht t\u00eb dob\u00ebt\u201c. Duke filluar nga 9:28 UTC, nj\u00eb person me pseudonimin Snow hyri n\u00eb llogarin\u00eb e Orange n\u00eb RIPE NCC, duke p\u00ebrdorur fjal\u00ebkalimin ripeadmin. RIPE NCC \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr menaxhimin dhe shp\u00ebrndarjen e adresave IP dhe sh\u00ebrben p\u00ebr 75 vende n\u00eb Evrop\u00eb, Lindjen e Mesme dhe Azin\u00eb Qendrore.<\/p>\n
Snow fillimisht shtoi ROA t\u00eb reja (Autorizime p\u00ebr Origjin\u00ebn e Rrug\u00ebve) n\u00eb tabel\u00ebn globale t\u00eb routing-ut, q\u00eb fillimisht nuk shkaktuan defekte. Megjithat\u00eb m\u00eb von\u00eb, Snow shtoi ROA me \u201eburime false\u201c, q\u00eb \u00e7oi n\u00eb nj\u00eb reduktim t\u00eb konsideruesh\u00ebm t\u00eb rrug\u00ebve valide t\u00eb Orange, \u00e7ka, nga ana tjet\u00ebr, shkaktoi nj\u00eb nd\u00ebrprerje sh\u00ebrbimi. Problemi u p\u00ebrkeq\u00ebsua nga p\u00ebrdorimi i sistemit RPKI (Infrastruktura Publike e \u00c7el\u00ebsit t\u00eb Burimeve), e cila \u00ebsht\u00eb p\u00ebr t\u00eb parandaluar kapjen e paligjshme t\u00eb rrug\u00ebve, duke e b\u00ebr\u00eb faktikisht rrjetin e Orange t\u00eb pavlefsh\u00ebm.<\/p>\n
Kompania Hudson Rock zbuloi akredencialet p\u00ebr t'u shitur n\u00eb dyqanet online, t\u00eb cilat ishin vjedhur me ndihm\u00ebn e malware-it t\u00eb instaluar n\u00eb kompjuterin Orange q\u00eb nga n\u00ebntori. Hulumtuesit gjithashtu v\u00ebn\u00eb n\u00eb dukje mij\u00ebra akredenciale t\u00eb tjera q\u00eb mbrojn\u00eb llogarit\u00eb RIPE, t\u00eb disponueshme n\u00eb tregje t\u00eb tilla.<\/p>\n
Ky incident thekson brisht\u00ebsin\u00eb e sistemit BGP dhe zbulon probleme serioze sigurie n\u00eb Orange. P\u00ebrdorimi i nj\u00eb fjal\u00ebkalimi t\u00eb dob\u00ebt dhe mungesa e autentifikimit me shum\u00eb faktor\u00eb, p\u00ebrve\u00e7 malware-it t\u00eb instaluar n\u00eb kompjuterin e punonj\u00ebsit, i cili kishte mbetur i paduksh\u00ebm p\u00ebr kat\u00ebr muaj me radh\u00eb, jan\u00eb gabime serioze q\u00eb nuk duhej t\u00eb ndodhnin ndonj\u00ebher\u00eb n\u00eb nj\u00eb organizat\u00eb me nj\u00eb shkall\u00eb aktiviteti si Orange. Hulumtuesit shpresojn\u00eb q\u00eb ky incident t\u00eb sh\u00ebrbej\u00eb si nj\u00eb alarm p\u00ebr ofruesit e tjer\u00eb t\u00eb sh\u00ebrbimeve dhe t'i motivoj\u00eb ata t\u00eb forcojn\u00eb masat e siguris\u00eb.<\/p>\n