{"id":121455,"date":"2025-01-23T15:46:01","date_gmt":"2025-01-23T13:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard"},"modified":"2026-02-04T17:53:52","modified_gmt":"2026-02-04T15:53:52","slug":"iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","title":{"rendered":"P\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb konfigurim, sulmuesit mund t\u00eb z\u00ebvend\u00ebsonin serverin DNS t\u00eb MasterCard.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb hulumtues sigurie nga kompania Seralys identifikoi mund\u00ebsin\u00eb e z\u00ebvend\u00ebsimit t\u00eb serverit DNS p\u00ebr domenin mastercard.com, i cili p\u00ebrdoret n\u00eb infrastruktur\u00ebn e sistemit t\u00eb pagesave MasterCard. N\u00eb konfigurimet e zon\u00ebs domaini mastercard.com nga qershori 2020 kishte nj\u00eb gabim \u2014 n\u00eb list\u00ebn e server\u00ebve DNS q\u00eb sh\u00ebrbenin zon\u00ebn, n\u00eb vend t\u00eb hostit \u00aba22-65.akam.net\u00bb (sh\u00ebrbimi DNS Akamai) ishte treguar hosti \u00aba22-65.akam.ne\u00bb. Zona rr\u00ebnj\u00ebsore \u00ab.ne\u00bb \u00ebsht\u00eb e rezerva p\u00ebr Republik\u00ebn e Nigerit dhe domeni \u00abakam.ne\u00bb doli n\u00eb dispozicion p\u00ebr shitje. <\/p>\n

K\u00ebshtu, p\u00ebr kat\u00ebr vjet e gjysm\u00eb, \u00e7do kush mund t\u00eb blini nj\u00eb domen<\/a> Duke krijuar hostin \u00aba22-65.akam.ne\u00bb, hapja e nj\u00eb serveri DNS mbi t\u00eb, krijimi i nj\u00eb versioni t\u00eb DNS-zon\u00ebs mastercard.com dhe drejta e \u00e7do subdomeni mastercard.com n\u00eb serverin tuaj. DNSSEC p\u00ebr mastercard.com nuk u p\u00ebrdor. Meqen\u00ebse gabimi ishte b\u00ebr\u00eb n\u00eb emrin e nj\u00eb prej pes\u00eb server\u00ebve DNS, n\u00eb rastin e nj\u00eb sulmi t\u00eb suksessh\u00ebm, mund t\u00eb merrej kontrolli mbi t\u00eb pakt\u00ebn 1\/5 t\u00eb trafikut. P\u00ebrhapja mund t\u00eb rritet duke vendosur nj\u00eb TTL t\u00eb lart\u00eb (Koha e Jet\u00ebs), e cila do t\u00eb sillte q\u00eb t\u00eb mbaheshin m\u00eb gjat\u00eb regjistrimet n\u00eb cache t\u00eb rezolutor\u00ebve publik, p\u00ebr shembull ato t\u00eb mb\u00ebshtetura nga kompanit\u00eb Cloudflare (1.1.1.1) dhe Google (8.8.8.8).

\"P\u00ebr<\/center> <\/p>\n

P\u00ebrve\u00e7 kapjes s\u00eb trafikut t\u00eb hosteve ekzistues, mund t\u00eb realizohej nj\u00eb sulm m\u00eb pak i duksh\u00ebm duke p\u00ebrdorur nj\u00eb subdomen origjinalisht t\u00eb munguar p\u00ebr t\u00eb organizuar phishing, p\u00ebr shembull, duke krijuar hostin \u00abredemtion.mastercard.com\u00bb dhe duke e p\u00ebrdorur at\u00eb n\u00eb spam n\u00eb vend t\u00eb pik\u00ebs legjitime t\u00eb hyrjes \u00abredemption.mastercard.com\u00bb. P\u00ebrve\u00e7 k\u00ebsaj, duke pasur kontroll mbi nj\u00eb nga server\u00ebt DNS q\u00eb sh\u00ebrbejn\u00eb domenin mastercard.com, mund t\u00eb merrej certifikata TLS<\/a> n\u00eb sh\u00ebrbimet q\u00eb lejojn\u00eb verifikimin e pron\u00ebsis\u00eb s\u00eb domenit p\u00ebrmes Web ose DNS, si Let\u2019s Encrypt. Midis skenar\u00ebve t\u00eb mundsh\u00ebm t\u00eb sulmeve p\u00ebrmendet gjithashtu krijimi i nj\u00eb serveri t\u00eb d\u00ebrguar t\u00eb post\u00ebs p\u00ebr t\u00eb kapur korrespondenc\u00ebn nga email adresa ime@mastercard.com dhe organizimi i kapjes s\u00eb t\u00eb dh\u00ebnave t\u00eb autentifikimit nga kompjuter\u00ebt e punonj\u00ebsve q\u00eb p\u00ebrdorin Windows. <\/p>\n

Hulumtuesi q\u00eb identifikoi problemet bleu domenin \u00abakam.ne\u00bb p\u00ebr $300 dhe nisi mbi t\u00eb nj\u00eb DNS-sniffer p\u00ebr t\u00eb vler\u00ebsuar volumet e trafikut. Analiza e k\u00ebrkesave t\u00eb marra tregoi se rasti i MasterCard nuk \u00ebsht\u00eb i vetmi dhe ekzistojn\u00eb zona t\u00eb tjera domaini, n\u00eb list\u00ebn e server\u00ebve DNS t\u00eb t\u00eb cilave \u00ebsht\u00eb treguar hosti \u00abakam.ne\u00bb n\u00eb vend t\u00eb \u00abakam.net\u00bb. M\u00eb shum\u00eb, \u00ebsht\u00eb identifikuar se nga viti 2015 deri n\u00eb vitin 2018 domeni \u00abakam.ne\u00bb ishte regjistruar dhe, me gjas\u00eb, ishte p\u00ebrdorur p\u00ebr kryerjen e sulmeve. Supozohet se sulmet jan\u00eb b\u00ebr\u00eb, pasi pronari i m\u00ebparsh\u00ebm \u00abakam.ne\u00bb gjithashtu regjistroi domenin \u00abawsdns-06.ne\u00bb, i stilizuar si serveri DNS \u00abawsdns-06.net\u00bb. Mosfunksionaliteti i nj\u00eb nga server\u00ebt DNS me gabimin n\u00eb emrin e tij mund t\u00eb mbetet p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb i paduksh\u00ebm p\u00ebr administrator\u00ebt, pasi q\u00eb q\u00ebndrueshm\u00ebria sigurohet p\u00ebrmes tregimit t\u00eb disa server\u00ebve DNS. <\/p>\n

Kompania MasterCard fillimisht e injoroi njoftimin p\u00ebr problemin, por pasi u kontaktua nga gazetari Brian Krebs, e pranoi dhe e korrigjoi gabimin, duke deklaruar se gabimi nuk paraqiste rrezik p\u00ebr infrastruktur\u00ebn. Pas k\u00ebsaj, p\u00ebrmes sh\u00ebrbimit Bugcrowd, q\u00eb lejon marrjen e pagesave p\u00ebr zbulimin e dob\u00ebsive, k\u00ebrkuesi iu drejtua p\u00ebr t\u00eb fshir\u00eb njoftimin e publikuar p\u00ebr incidentin. <\/p>\n

N\u00eb p\u00ebrgjigje, hulumtuesi deklaroi se megjith\u00ebse ai ka nj\u00eb llogari n\u00eb sh\u00ebrbimin Bugcrowd, nuk ka d\u00ebrguar ndonj\u00eb aplikim p\u00ebr shp\u00ebrblime dhe kishte njoftuar drejtp\u00ebrdrejt kompanin\u00eb MasterCard p\u00ebr problemin. Sh\u00ebnimi u publikua p\u00ebr t\u00eb t\u00ebrhequr v\u00ebmendjen ndaj problemit pasi q\u00eb kompanis\u00eb MasterCard nuk i rrezikohej m\u00eb asgj\u00eb dhe domeni \u00abakam.ne\u00bb i p\u00ebrkiste hulumtuesit. Si p\u00ebrfundim, kompania MasterCard jo vet\u00ebm q\u00eb nuk e kompensoi $300 t\u00eb shpenzuar p\u00ebr domenin, por as e falenderoi hulumtuesin me fjal\u00eb. <\/p>\n

Sa i p\u00ebrket pretendimit se gabimi nuk krijonte rreziqe t\u00eb tjera, k\u00ebrkuesi paraqiti statistikat e k\u00ebrkesave DNS t\u00eb marra, ku p\u00ebrfshiheshin domenet *.az.mastercard.com, q\u00eb tregojn\u00eb komponent\u00ebt operativ\u00eb t\u00eb infrastruktur\u00ebs s\u00eb MasterCard, t\u00eb vendosur n\u00eb sh\u00ebrbimin e mjedisit Microsoft Azure. Komprometimi i komponent\u00ebve t\u00eb till\u00eb, duke gjykuar, p\u00ebrfaq\u00ebsonte nj\u00eb rrezik kritik p\u00ebr sigurin\u00eb.

\"P\u00ebr<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard. \u0412 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b mastercard.com \u0441 \u0438\u044e\u043d\u044f 2020 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0430 — \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0437\u043e\u043d\u0443 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u0445\u043e\u0441\u0442\u0430 «a22-65.akam.net» (DNS-\u0441\u043b\u0443\u0436\u0431\u0430 Akamai) \u0431\u044b\u043b \u0443\u043a\u0430\u0437\u0430\u043d \u0445\u043e\u0441\u0442 «a22-65.akam.ne». \u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u0437\u043e\u043d\u0430 «.ne» \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0437\u0430 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439 \u041d\u0438\u0433\u0435\u0440 \u0438 \u0434\u043e\u043c\u0435\u043d «akam.ne» \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":121456,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121455","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebr shkak t\u00eb gabimit n\u00eb konfigurime, sulmuesit mund t\u00eb ndryshonin serverin DNS t\u00eb MasterCard | ProHoster","description":"Nj\u00eb k\u00ebrkues sigurie nga kompania Seralys zbuloi mund\u00ebsin\u00eb e nd\u00ebrrimit t\u00eb serverit DNS p\u00ebr domenin mastercard.com, i p\u00ebrdorur n\u00eb infrastruktur\u00ebn e sistemit t\u00eb pagesave MasterCard. N\u00eb konfigurimet e zon\u00ebs s\u00eb domenit mastercard.com ka pasur nj\u00eb gabim - n\u00eb list\u00ebn e server\u00ebve q\u00eb sh\u00ebrbejn\u00eb zon\u00ebn ishte caktuar \"a22-65.akam.ne\" n\u00eb vend t\u00eb \"a22-65.akam.net\". Zona rr\u00ebnj\u00ebsore \".ne\" \u00ebsht\u00eb e rezervuar p\u00ebr Republik\u00ebn e Nigerit dhe domeni \"akam.ne\" u b\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437-\u0437\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 MasterCard | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard. \u0412 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b mastercard.com \u0441 \u0438\u044e\u043d\u044f 2020 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0430 - \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0437\u043e\u043d\u0443 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u0445\u043e\u0441\u0442\u0430 "a22-65.akam.net" (DNS-\u0441\u043b\u0443\u0436\u0431\u0430 Akamai) \u0431\u044b\u043b \u0443\u043a\u0430\u0437\u0430\u043d \u0445\u043e\u0441\u0442 "a22-65.akam.ne". \u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u0437\u043e\u043d\u0430 ".ne" \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0437\u0430 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439 \u041d\u0438\u0433\u0435\u0440 \u0438 \u0434\u043e\u043c\u0435\u043d "akam.ne" \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-23T13:46:03+00:00","article:modified_time":"2026-02-04T15:53:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121455","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:56:19","updated":"2026-02-08 21:04:47"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121455","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=121455"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121455\/revisions"}],"predecessor-version":[{"id":158134,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121455\/revisions\/158134"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/121456"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=121455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=121455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=121455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}