{"id":53591,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat"},"modified":"2020-02-18T14:01:31","modified_gmt":"2020-02-18T11:01:31","slug":"kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","title":{"rendered":"Si mund t\u00eb hakerat t\u00eb lexojn\u00eb bisedat tuaja n\u00eb Telegram. Dhe si mund ta parandaloni at\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Si<\/p>\n

N\u00eb fund t\u00eb vitit 2019, disa sip\u00ebrmarr\u00ebs rus\u00eb iu drejtuan departamentit t\u00eb hetimeve p\u00ebr krime kibernetike t\u00eb Group-IB p\u00ebr nj\u00eb problem me aksesin e paautorizuar t\u00eb panjohurve n\u00eb bisedat e tyre n\u00eb mesazherin Telegram. Incidentet ndodhnin n\u00eb pajisje iOS dhe Android, shpesh, pavar\u00ebsisht nga operatori federal celular q\u00eb p\u00ebrdorte viktima.<\/p>\n

Sulmi fillonte me nj\u00eb mesazh q\u00eb p\u00ebrdoruesi merrte n\u00eb mesazherin Telegram nga kanali sh\u00ebrbimit t\u00eb Telegram (ky \u00ebsht\u00eb kanali zyrtar i mesazhereve me vula verifikimi blu) me nj\u00eb kod konfirmimi q\u00eb p\u00ebrdoruesi nuk e kishte k\u00ebrkuar. Pas k\u00ebsaj, viktima merrte nj\u00eb SMS me kodin e aktivizimit \u2014 dhe pothuajse menj\u00ebher\u00eb, n\u00eb kanalin sh\u00ebrbimit t\u00eb Telegram, vinte nj\u00eb njoftim se llogaria ishte hyre me nj\u00eb pajisje t\u00eb re.<\/a><\/noindex><\/p>\n

\"Si <\/p>\n

N\u00eb t\u00eb gjitha rastet e njohura p\u00ebr Group-IB, sulmuesit hynin n\u00eb llogarin\u00eb e t\u00eb huajve p\u00ebrmes internetit celular (me gjas\u00eb, ishin p\u00ebrdorur karta SIM nj\u00ebp\u00ebrdorimshme), dhe adresa IP e sulmuesve n\u00eb shumic\u00ebn e rasteve ndodhej n\u00eb Samara. <\/p>\n

Aksesi sipas porosis\u00eb <\/h3>\n

\nHulumtimi i Laboratorit t\u00eb Kriminologjis\u00eb Kompjuterike t\u00eb Group-IB, ku u dor\u00ebzuan pajisjet elektronike t\u00eb viktimave, tregoi se teknologjia nuk ishte infektuar me ndonj\u00eb program keqdash\u00ebs spiun, ose trojan bankar, dhe llogarit\u00eb nuk ishin thyer, nuk ishte b\u00ebr\u00eb as nj\u00eb z\u00ebvend\u00ebsim i kartave SIM. N\u00eb t\u00eb gjitha rastet, sulmuesit fituan akses n\u00eb mesazherin e viktim\u00ebs p\u00ebrmes kodeve SMS q\u00eb merreshin kur hynin n\u00eb llogari me nj\u00eb pajisje t\u00eb re. <\/p>\n

Ky proces duket k\u00ebshtu: kur aktivizohet mesazheri n\u00eb nj\u00eb pajisje t\u00eb re, Telegram d\u00ebrgon nj\u00eb kod p\u00ebrmes kanalit sh\u00ebrbimit n\u00eb t\u00eb gjitha pajisjet e p\u00ebrdoruesit, dhe m\u00eb pas (n\u00eb k\u00ebrkes\u00eb) d\u00ebrgohet nj\u00eb mesazh SMS n\u00eb telefon. Duke e ditur k\u00ebt\u00eb, sulmuesit vet\u00eb inicirojn\u00eb k\u00ebrkes\u00ebn p\u00ebr d\u00ebrgimin e SMS nga mesazheri me kodin e aktivizimit, e kapin k\u00ebt\u00eb SMS dhe p\u00ebrdorin kodin e marr\u00eb p\u00ebr t\u00eb autorizar n\u00eb m\u00ebnyr\u00eb t\u00eb suksesshme n\u00eb mesazh\u00ebr. <\/p>\n

K\u00ebshtu, sulmuesit fitojn\u00eb qasje t\u00eb paligjshme n\u00eb t\u00eb gjitha bisedat aktuale, p\u00ebrve\u00e7 atyre sekrete, si dhe n\u00eb historin\u00eb e komunikimeve n\u00eb k\u00ebto biseda, duke p\u00ebrfshir\u00eb skedar\u00ebt dhe fotografit\u00eb q\u00eb jan\u00eb d\u00ebrguar aty. Pas zbulimit t\u00eb k\u00ebtij fakti, p\u00ebrdoruesi i ligjsh\u00ebm i Telegramit mund t\u00eb p\u00ebrfundoj\u00eb detyrimisht sesionin e agresor\u00ebve. Fal\u00eb mekanizmit t\u00eb mbrojtjes t\u00eb zbatuar, e kund\u00ebrta nuk mund t\u00eb ndodh\u00eb, agresori nuk mund t\u00eb p\u00ebrfundoj\u00eb sesionet m\u00eb t\u00eb vjetra t\u00eb p\u00ebrdoruesit real n\u00eb nj\u00eb periudh\u00eb prej 24 or\u00ebsh. Prandaj, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb zbulohet n\u00eb koh\u00eb nj\u00eb sesion i huaj dhe ta mbyllni at\u00eb, p\u00ebr t\u00eb mos humbur qasjen n\u00eb llogari. Specialist\u00ebt e Group-IB i d\u00ebrguan njoftim ekipit t\u00eb Telegramit mbi k\u00ebrkimin e tyre p\u00ebr situat\u00ebn.<\/p>\n

Studimi i incidenteve vazhdon, dhe deri m\u00eb tani nuk \u00ebsht\u00eb p\u00ebrcaktuar sakt\u00ebsisht se cila skem\u00eb \u00ebsht\u00eb p\u00ebrdorur p\u00ebr t\u00eb tejkaluar faktorin SMS. N\u00eb koh\u00eb t\u00eb ndryshme, studiuesit kan\u00eb treguar shembuj t\u00eb kapjes s\u00eb SMS-ve p\u00ebrmes sulmeve n\u00eb protokollet SS7 ose Diameter, t\u00eb cilat p\u00ebrdoren n\u00eb rrjetet celulare. Teorikisht, k\u00ebto sulme mund t\u00eb realizohen me p\u00ebrdorim t\u00eb paligjsh\u00ebm t\u00eb mjeteve teknike speciale ose nga brenda n\u00eb operator\u00ebt e telefonis\u00eb celulare. Konkretisht, n\u00eb forume haker\u00ebsh n\u00eb Darknet, ka shpallje t\u00eb reja me oferta p\u00ebr t\u00eb hakuar aplikacione t\u00eb ndryshme mesazher\u00ebsh, p\u00ebrfshir\u00eb edhe Telegramin. <\/p>\n

\"Si<\/p>\n

\"Specialist\u00ebt n\u00eb vende t\u00eb ndryshme, duke p\u00ebrfshir\u00eb edhe Rusin\u00eb, kan\u00eb deklaruar disa her\u00eb se rrjetet sociale, bankat mobile dhe mesazher\u00ebt mund t\u00eb haken p\u00ebrmes dob\u00ebsive n\u00eb protokollin SS7, megjith\u00ebse k\u00ebto ishin raste t\u00eb izoluara t\u00eb sulmeve t\u00eb q\u00ebllimshme ose k\u00ebrkimeve eksperimentale,\" komentoi Sergey Lupanin, drejtori i departamentit t\u00eb hetimeve p\u00ebr krimet kibernetike n\u00eb Group-IB, \"N\u00eb nj\u00eb seri incidenteve t\u00eb reja, t\u00eb cilat tashm\u00eb kapin m\u00eb shum\u00eb se 10, \u00ebsht\u00eb evidente d\u00ebshira e sulmuesve p\u00ebr ta b\u00ebr\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb t\u00eb fitimit t\u00eb zakonshme. P\u00ebr t\u00eb parandaluar q\u00eb kjo t\u00eb ndodh\u00eb, \u00ebsht\u00eb e nevojshme t\u00eb rritet niveli i vet\u00ebdijes digjitale: t\u00eb pakt\u00ebn t\u00eb p\u00ebrdoret autenticiteti i dyfisht\u00eb kudo q\u00eb \u00ebsht\u00eb e mundur dhe t\u00eb shtohet nj\u00eb faktor i dyt\u00eb i obliguesh\u00ebm p\u00ebr SMS, q\u00eb \u00ebsht\u00eb funksionalisht i p\u00ebrfshir\u00eb n\u00eb Telegramin e nj\u00ebjt\u00eb.\"<\/p>\n

Si t\u00eb mbrohemi?<\/h3>\n

\n 1. N\u00eb Telegram jan\u00eb zbatuar t\u00eb gjitha opsionet e nevojshme t\u00eb siguris\u00eb kibernetike, q\u00eb do t\u00eb neutralizojn\u00eb p\u00ebrpjekjet e sulmuesve.
\n 2. N\u00eb pajisjet iOS dhe Android p\u00ebr Telegram, duhen kaluar n\u00eb cil\u00ebsimet e Telegram-it, t\u00eb zgjidhet tabs 'Privat\u00ebsia' dhe t\u00eb caktohet 'Fjal\u00ebkalimi i cloud' ose 'Verifikimi n\u00eb dy hapa'. Nj\u00eb p\u00ebrshkrim t\u00eb detajuar p\u00ebr aktivizimin e k\u00ebsaj opcioni jepet n\u00eb udh\u00ebzimet n\u00eb faqen zyrtare t\u00eb aplikacionit: telegram.org\/blog\/sessions-and-2-step-verification<\/a><\/noindex> (https:\/\/telegram.org\/blog\/sessions-and-2-step-verification)<\/p>\n

\"Si<\/p>\n

3. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb mos caktoni nj\u00eb adres\u00eb emaili p\u00ebr rikuperimin e k\u00ebtij fjal\u00ebkalimi, pasi, n\u00eb p\u00ebrgjith\u00ebsi, rikuperimi i fjal\u00ebkalimit p\u00ebr emailin ndodh gjithashtu p\u00ebrmes SMS. N\u00eb t\u00eb nj\u00ebjt\u00ebn m\u00ebnyr\u00eb, mund t\u00eb rrisni mbrojtjen e llogaris\u00eb n\u00eb WhatsApp.<\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u043d\u0446\u0435 2019 \u0433\u043e\u0434\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439 Group-IB \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a \u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435 \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0435 Telegram. \u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438 Android, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0442\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043a\u0430\u043a\u043e\u0433\u043e \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0439. \u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0430\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440 Telegram \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53591","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Si mund t\u00eb lexojn\u00eb haker\u00ebt bisedat tuaja n\u00eb Telegram. Dhe si t'i pengoni ata n\u00eb k\u00ebt\u00eb | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0430\u0448\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 Telegram. \u0418 \u043a\u0430\u043a \u0438\u043c \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53591","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:01:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:22:49","updated":"2026-01-24 08:01:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53591"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53591\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}