{"id":112727,"date":"2024-01-06T21:10:22","date_gmt":"2024-01-06T19:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin"},"modified":"2024-01-06T21:10:22","modified_gmt":"2024-01-06T19:10:22","slug":"orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","title":{"rendered":"Orange Espa\u00f1a u thye p\u00ebr shkak se fjal\u00ebkalimi i p\u00ebrdoruesit admin t\u00eb llogaris\u00eb RIPE NCC ishte ripeadmin","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Orange Espa\u00f1a, \u043e\u043f\u0435\u0440\u0430tori i dyt\u00eb m\u00eb i madh celular n\u00eb Spanj\u00eb, p\u00ebrballej me nj\u00eb nd\u00ebrprerje t\u00eb r\u00ebnd\u00eb t\u00eb sh\u00ebrbimit t\u00eb m\u00ebrkur\u00ebn, pasi nj\u00eb pal\u00eb e panjohur fitoi qasje n\u00eb llogarin\u00eb p\u00ebr menaxhimin e tabel\u00ebs globale t\u00eb routing me nj\u00eb fjal\u00ebkalim \"t\u00eb \u00e7mendurisht t\u00eb dob\u00ebt\". Nga ora 9:28 UTC, nj\u00eb person i quajtur Snow hyri n\u00eb llogarin\u00eb e Orange n\u00eb RIPE NCC, duke p\u00ebrdorur fjal\u00ebkalimin ripeadmin. RIPE NCC \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr menaxhimin dhe shp\u00ebrndarjen e adresave IP dhe sh\u00ebrben p\u00ebr 75 vende n\u00eb Evrop\u00eb, Lindjen e Mesme dhe Azin\u00eb Qendrore.<\/p>\n
Snow fillimisht shtoi ROAs t\u00eb reja (Autorizimet e Origjin\u00ebs s\u00eb Rrug\u00ebve) n\u00eb tabel\u00ebn globale t\u00eb routing, t\u00eb cilat nuk shkaktuan fillimisht probleme. Megjithat\u00eb, m\u00eb pas Snow shtoi ROAs me \"burime t\u00eb rreme\", duke \u00e7uar n\u00eb nj\u00eb reduktim t\u00eb konsideruesh\u00ebm t\u00eb rrug\u00ebve t\u00eb vlefshme p\u00ebr Orange, \u00e7ka, nga ana e saj, shkaktoi nd\u00ebrprerjen e sh\u00ebrbimit. Problemi u p\u00ebrkeq\u00ebsua nga p\u00ebrdorimi i sistemit RPKI (Infrastruktura e \u00c7el\u00ebsit Publik t\u00eb Burimeve), e cila \u00ebsht\u00eb menduar p\u00ebr t\u00eb parandaluar kapjen e paligjshme t\u00eb rrug\u00ebve, duke e b\u00ebr\u00eb k\u00ebshtu rrjetin e Orange t\u00eb mos funksionoj\u00eb.<\/p>\n
Kompania Hudson Rock zbuloi t\u00eb dh\u00ebna p\u00ebr t'u shitur n\u00eb dyqanet online, t\u00eb cilat ishin vjedhur me an\u00eb t\u00eb malware-it t\u00eb instaluar n\u00eb kompjuterin e Orange q\u00eb nga shtatori. Hulumtuesit gjithashtu v\u00ebrejt\u00ebn mij\u00ebra t\u00eb dh\u00ebna t\u00eb tjera q\u00eb mbronin llogarit\u00eb RIPE, t\u00eb disponueshme n\u00eb tregje t\u00eb tilla.<\/p>\n
Ky incident nxjerr n\u00eb pah brisht\u00ebsin\u00eb e sistemit BGP dhe zbulojn\u00eb probleme serioze sigurie n\u00eb Orange. P\u00ebrdorimi i nj\u00eb fjal\u00ebkalimi t\u00eb dob\u00ebt dhe mungesa e verifikimit t\u00eb disa faktor\u00ebve, si dhe malware n\u00eb kompjuterin e punonj\u00ebsit, q\u00eb kishte mbetur i pap\u00ebrdorur p\u00ebr kat\u00ebr muaj, jan\u00eb d\u00ebshtime t\u00eb r\u00ebnd\u00ebsishme q\u00eb kurr\u00eb nuk duhej t\u00eb ndodhnin n\u00eb nj\u00eb organizat\u00eb me nj\u00eb shkall\u00eb veprimi si Orange. Hulumtuesit shpresojn\u00eb se ky incident do t\u00eb sh\u00ebrbej\u00eb si nj\u00eb sinjal alarmi p\u00ebr ofruesit e tjer\u00eb t\u00eb sh\u00ebrbimeve dhe do t'i nxis\u00eb ata t\u00eb forcojn\u00eb masat e siguris\u00eb.<\/p>\n