{"id":121455,"date":"2025-01-23T15:46:01","date_gmt":"2025-01-23T13:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard"},"modified":"2026-02-04T17:53:52","modified_gmt":"2026-02-04T15:53:52","slug":"iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","title":{"rendered":"P\u00ebr shkak t\u00eb nj\u00eb gabimi shtypi n\u00eb cil\u00ebsime, sulmuesit mund t\u00eb z\u00ebvend\u00ebsonin serverin DNS t\u00eb MasterCard","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb k\u00ebrkues sigurie nga kompania Seralys identifikoi nj\u00eb mund\u00ebsi p\u00ebr t\u00eb ndryshuar serverin DNS p\u00ebr domenin mastercard.com, i p\u00ebrdorur n\u00eb infrastruktur\u00ebn e sistemit t\u00eb pagesave MasterCard. N\u00eb konfigurimin e zon\u00ebs domain t\u00eb mastercard.com, q\u00eb nga qershori i vitit 2020, kishte nj\u00eb gabim tipografik \u2014 n\u00eb list\u00ebn e server\u00ebve DNS q\u00eb sh\u00ebrbejn\u00eb zon\u00ebn, p\u00ebrve\u00e7 hostit \"a22-65.akam.net\" (sh\u00ebrbimi DNS Akamai) ishte specifikuar hosti \"a22-65.akam.ne\". Zona rr\u00ebnj\u00ebsore \".ne\" \u00ebsht\u00eb e siguruar p\u00ebr Republik\u00ebn e Nigerit dhe domeni \"akam.ne\" ishte b\u00ebr\u00eb i disponuesh\u00ebm p\u00ebr shitje. <\/p>\n

K\u00ebshtu, p\u00ebr kat\u00ebr vjet e gjysm\u00eb, \u00e7dokush mund t\u00eb blej\u00eb domainin<\/a> \"akam.ne\", krijoni nj\u00eb host \"a22-65.akam.ne\", vendosni nj\u00eb server DNS mbi t\u00eb, krijoni nj\u00eb version privat t\u00eb zon\u00ebs DNS mastercard.com dhe drejtoni \u00e7do subdomen mastercard.com n\u00eb serverin tuaj. DNSSEC p\u00ebr mastercard.com nuk ishte p\u00ebrdorur. Sepse gabimi ishte b\u00ebr\u00eb n\u00eb emrin e nj\u00ebrit nga pes\u00eb server\u00ebt DNS, n\u00eb rastin e nj\u00eb sulmi t\u00eb suksessh\u00ebm mund t\u00eb ishte marr\u00eb kontrolli mbi t\u00eb pakt\u00ebn 1\/5 e trafikut. Mbulimi mund t\u00eb rritet duke vendosur p\u00ebr zon\u00ebn e falsifikimit nj\u00eb TTL t\u00eb lart\u00eb (Koha p\u00ebr t\u00eb Jetuar), e cila do t\u00eb \u00e7onte n\u00eb ruajtjen m\u00eb t\u00eb gjat\u00eb t\u00eb regjistrimeve n\u00eb cache t\u00eb zgjidh\u00ebsve publik\u00eb, p\u00ebr shembull, t\u00eb mb\u00ebshtetur nga kompani si Cloudflare (1.1.1.1) dhe Google (8.8.8.8).

\"P\u00ebr<\/center> <\/p>\n

P\u00ebrve\u00e7 kapjes s\u00eb trafikut t\u00eb hosteve ekzistues, ishte e mundur t\u00eb b\u00ebhej nj\u00eb sulm m\u00eb pak i duksh\u00ebm dhe t\u00eb p\u00ebrdorej nj\u00eb subdomen t\u00eb munguar nga fillimi p\u00ebr t\u00eb organizuar phishing, p\u00ebr shembull, t\u00eb krijohej hosti \"redemtion.mastercard.com\" dhe t\u00eb p\u00ebrdorej n\u00eb spam n\u00eb vend t\u00eb pik\u00ebs legjitime t\u00eb hyrjes \"redemption.mastercard.com\". Nd\u00ebr t\u00eb tjera, duke pasur kontroll mbi nj\u00ebrin nga server\u00ebt DNS q\u00eb sh\u00ebrbejn\u00eb domenin mastercard.com, mund t\u00eb ishte marr\u00eb TLS-certifikat<\/a> n\u00eb sh\u00ebrbimet q\u00eb lejojn\u00eb verifikimin e pron\u00ebsis\u00eb s\u00eb domenit p\u00ebrmes Web ose DNS, si\u00e7 \u00ebsht\u00eb Let\u2019s Encrypt. Nd\u00ebr skenar\u00ebt e mundsh\u00ebm t\u00eb sulmeve p\u00ebrmendet gjithashtu krijimi i nj\u00eb serveri t\u00eb rrem\u00eb t\u00eb post\u00ebs p\u00ebr t\u00eb kapur korrespondenc\u00ebn me email adresa@mastercard.com dhe organizimi i kapjes s\u00eb t\u00eb dh\u00ebnave t\u00eb autentifikimit nga kompjuter\u00ebt e punonj\u00ebsve q\u00eb p\u00ebrdorin Windows. <\/p>\n

Hulumtuesi q\u00eb identifikoi problemet bleu domenein \u00abakam.ne\u00bb p\u00ebr $300 dhe nisi nj\u00eb DNS sniffer p\u00ebr t\u00eb vler\u00ebsuar volumin e trafikut. Analiza e pyetjeve t\u00eb marra tregoi se rasti me MasterCard nuk ishte i vetmi dhe ekzistonin zona t\u00eb tjera domainesh, n\u00eb list\u00ebn e server\u00ebve DNS t\u00eb cilave ishte e sh\u00ebnuar hosti \u00abakam.ne\u00bb n\u00eb vend t\u00eb \u00abakam.net\u00bb. M\u00eb tep\u00ebr, u zbulua se nga viti 2015 deri n\u00eb vitin 2018, domeni \u00abakam.ne\u00bb ishte regjistruar dhe, ndoshta, ishte p\u00ebrdorur p\u00ebr t\u00eb kryer sulme. Supozimi mbi sulmet u b\u00eb, pasi pronari i m\u00ebparsh\u00ebm i \u00abakam.ne\u00bb regjistroi gjithashtu domenin \u00abawsdns-06.ne\u00bb, i cili \u00ebsht\u00eb stilizuar si serveri DNS \u00abawsdns-06.net\u00bb. Mosfunksionaliteti i nj\u00eb nga server\u00ebve DNS me gabimin n\u00eb em\u00ebr mund t\u00eb mbetet p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb i pafiguruesh\u00ebm nga administrator\u00ebt, pasi q\u00eb q\u00ebndrueshm\u00ebria garanton p\u00ebrmes sh\u00ebnimin e disa server\u00ebve DNS. <\/p>\n

Kompania MasterCard fillimisht e injoroi mesazhin p\u00ebr problemin, por pasi u kontaktua nga gazetari Brian Krebs, e pranoi dhe e korrigjoi gabimin, duke deklaruar se gabimi nuk paraqiste nj\u00eb k\u00ebrc\u00ebnim p\u00ebr infrastruktur\u00ebn. Pas k\u00ebsaj, p\u00ebrmes sh\u00ebrbimit Bugcrowd, i cili lejon marrjen e shp\u00ebrblimeve p\u00ebr dob\u00ebsit\u00eb e zbuluara, hulumtuesi u drejtua p\u00ebr t\u00eb hequr njoftimin e publikuar p\u00ebr incidentin nga MasterCard. <\/p>\n

N\u00eb p\u00ebrgjigje, hulumtuesi tha se megjith\u00ebse ai kishte nj\u00eb llogari n\u00eb sh\u00ebrbimin Bugcrowd, nuk kishte d\u00ebrguar asnj\u00eb k\u00ebrkes\u00eb p\u00ebr shp\u00ebrblime, por e kishte njoftuar drejtp\u00ebrdrejt kompanin\u00eb MasterCard p\u00ebr problemin. Sh\u00ebnimi u publikua p\u00ebr t\u00eb t\u00ebrhequr v\u00ebmendjen ndaj problemit pasi asgj\u00eb nuk k\u00ebrc\u00ebnonte m\u00eb kompanin\u00eb MasterCard dhe domeni \u00abakam.ne\u00bb i p\u00ebrkiste hulumtuesit. N\u00eb fund, kompania MasterCard jo vet\u00ebm q\u00eb nuk e kompensoi $300 t\u00eb shpenzuara p\u00ebr domenin, por as nuk e fal\u00ebnderoi hulumtuesin me fjal\u00eb. <\/p>\n

Sa i p\u00ebrket deklarat\u00ebs se gabimi nuk krijonte rreziqe t\u00eb tjera, hulumtuesi paraqiti statistik\u00ebn e k\u00ebrkesave DNS t\u00eb marra, n\u00eb t\u00eb cilat p\u00ebrfshihen domainet *.az.mastercard.com, q\u00eb tregojn\u00eb p\u00ebr komponent\u00eb funksional\u00eb t\u00eb infrastruktur\u00ebs MasterCard, t\u00eb vendosur n\u00eb sh\u00ebrbimin n\u00eb rete Microsoft Azure. Komprometimi i komponent\u00ebve t\u00eb till\u00eb, duket se paraqiste nj\u00eb k\u00ebrc\u00ebnim kritik p\u00ebr sigurin\u00eb.

\"P\u00ebr<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard. \u0412 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u044b mastercard.com \u0441 \u0438\u044e\u043d\u044f 2020 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0430 — \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0437\u043e\u043d\u0443 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u0445\u043e\u0441\u0442\u0430 «a22-65.akam.net» (DNS-\u0441\u043b\u0443\u0436\u0431\u0430 Akamai) \u0431\u044b\u043b \u0443\u043a\u0430\u0437\u0430\u043d \u0445\u043e\u0441\u0442 «a22-65.akam.ne». \u041a\u043e\u0440\u043d\u0435\u0432\u0430\u044f \u0437\u043e\u043d\u0430 «.ne» \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0430 \u0437\u0430 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0439 \u041d\u0438\u0433\u0435\u0440 \u0438 \u0434\u043e\u043c\u0435\u043d «akam.ne» \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":121456,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121455","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb konfigurime, sulmuesit mund t\u00eb z\u00ebvend\u00ebsonin serverin DNS t\u00eb MasterCard | ProHoster","description":"Hulumtuesi i siguris\u00eb nga kompania Seralys zbuloi mund\u00ebsin\u00eb e z\u00ebvend\u00ebsimit t\u00eb serverit DNS p\u00ebr domenin mastercard.com, i p\u00ebrdorur n\u00eb infrastruktur\u00ebn e sistemit t\u00eb pagesave MasterCard.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0437-\u0437\u0430 \u043e\u043f\u0435\u0447\u0430\u0442\u043a\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440 MasterCard | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Seralys \u0432\u044b\u044f\u0432\u0438\u043b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043c\u0435\u043d\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 mastercard.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b MasterCard.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/iz-za-opechatki-v-nastrojkah-atakuyushhie-mogli-podmenit-dns-server-mastercard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-23T13:46:03+00:00","article:modified_time":"2026-02-04T15:53:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121455","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:56:19","updated":"2026-02-08 21:04:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121455","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=121455"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121455\/revisions"}],"predecessor-version":[{"id":158134,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121455\/revisions\/158134"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/121456"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=121455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=121455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=121455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}