{"id":53591,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat"},"modified":"2020-02-18T14:01:31","modified_gmt":"2020-02-18T11:01:31","slug":"kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","title":{"rendered":"Si mund t\u00eb lexojn\u00eb kriminel\u00ebt bisedat tuaja n\u00eb Telegram. Dhe si mund t'ua parandalosh k\u00ebt\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Si<\/p>\n

N\u00eb fund t\u00eb vitit 2019, investitor\u00eb rus\u00eb iu drejtuan departamentit t\u00eb hetimit t\u00eb krimeve kibernetike n\u00eb Group-IB, duke u p\u00ebrballur me problemin e aksesit t\u00eb paautorizuar nga t\u00eb panjohur n\u00eb bisedat e tyre n\u00eb aplikacionin Telegram. Incidentet ndodhnin n\u00eb pajisje iOS dhe Android, pa marr\u00eb parasysh se cilin ofrues t\u00eb sh\u00ebrbimit celular kishte viktima.<\/p>\n

Sulmi fillonte me nj\u00eb mesazh n\u00eb Telegram, i d\u00ebrguar nga kanali sh\u00ebrbim i Telegram (kanali zyrtar me shenj\u00eb verifikimi blu) me nj\u00eb kod konfirmimi q\u00eb p\u00ebrdoruesi nuk e kishte k\u00ebrkuar. M\u00eb pas, n\u00eb telefonin e viktim\u00ebs arrinte nj\u00eb SMS me nj\u00eb kod aktivizimi dhe pothuajse menj\u00ebher\u00eb kanali sh\u00ebrbim n\u00eb Telegram merrte nj\u00eb njoftim se llogaria ishte aksesuar nga nj\u00eb pajisje e re.<\/a><\/noindex><\/p>\n

\"Si <\/p>\n

N\u00eb t\u00eb gjitha rastet q\u00eb jan\u00eb t\u00eb njohura p\u00ebr Group-IB, sulmuesit kan\u00eb hyr\u00eb n\u00eb llogarit\u00eb e t\u00eb tjer\u00ebve p\u00ebrmes internetit mobil (me sa duket, jan\u00eb p\u00ebrdorur kartela SIM t\u00eb nj\u00ebher\u00ebshme), nd\u00ebrsa adresa IP e sulmuesve n\u00eb shumic\u00ebn e rasteve ishte n\u00eb Samara. <\/p>\n

Akses n\u00eb porosi <\/h3>\n

\nHulumtimi i Laboratoris\u00eb s\u00eb Kriminalistik\u00ebs Kompjuterike n\u00eb Group-IB, ku u dor\u00ebzuan pajisjet elektronike t\u00eb viktimave, tregoi se pajisjet nuk ishin infektuar me ndonj\u00eb malware spiun apo trojan bankar, llogarit\u00eb nuk ishin thyer dhe nuk ishte b\u00ebr\u00eb nd\u00ebrrimi i kartel\u00ebs SIM. N\u00eb t\u00eb gjitha rastet, sulmuesit siguronin akses n\u00eb aplikacionin e viktim\u00ebs p\u00ebrmes kodave SMS q\u00eb merren gjat\u00eb hyrjes n\u00eb llogari nga nj\u00eb pajisje e re. <\/p>\n

Kjo procedur\u00eb duket si m\u00eb posht\u00eb: kur aktivizohet aplikacioni n\u00eb nj\u00eb pajisje t\u00eb re, Telegram d\u00ebrgon nj\u00eb kod p\u00ebrmes kanali sh\u00ebrbim n\u00eb t\u00eb gjitha pajisjet e p\u00ebrdoruesit, dhe m\u00eb pas (n\u00eb k\u00ebrkes\u00eb) d\u00ebrgohet nj\u00eb SMS n\u00eb telefon. Duke e ditur k\u00ebt\u00eb, sulmuesit vet\u00eb iniciuan k\u00ebrkes\u00ebn p\u00ebr d\u00ebrgimin e SMS nga aplikacioni me kodin e aktivizimit, i kapin k\u00ebt\u00eb SMS dhe p\u00ebrdorin kodin e marr\u00eb p\u00ebr autorizim t\u00eb suksessh\u00ebm n\u00eb aplikacion. <\/p>\n

N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, sulmuesit fitojn\u00eb akses t\u00eb paligjsh\u00ebm n\u00eb t\u00eb gjitha bisedat aktuale, p\u00ebrve\u00e7 atyre sekrete, si dhe n\u00eb historin\u00eb e bisedave n\u00eb k\u00ebto biseda, duke p\u00ebrfshir\u00eb skedar\u00ebt dhe fotografit\u00eb e d\u00ebrguara. Duke e zbuluar k\u00ebt\u00eb, p\u00ebrdoruesit e legjitim n\u00eb Telegram mund t\u00eb mbyllin sesi t\u00eb sulmuesve. Fal\u00eb mekanizmit t\u00eb aktivizuar t\u00eb mbrojtjes, nuk mund t\u00eb ndodh\u00eb e kund\u00ebrta; sulmuesi nuk mund t\u00eb mbyll\u00eb seancat m\u00eb t\u00eb vjetra t\u00eb p\u00ebrdoruesit t\u00eb v\u00ebrtet\u00eb brenda 24 or\u00ebve. Prandaj, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb zbuloni me koh\u00eb seancat e huaja dhe t'i mbyllni ato q\u00eb t\u00eb mos humbni aksesin n\u00eb llogari. Specialist\u00ebt e Group-IB kan\u00eb d\u00ebrguar nj\u00eb njoftim n\u00eb ekipin e Telegram p\u00ebr hulumtimin e situat\u00ebs.<\/p>\n

Studimi i incidenteve vazhdon dhe deri m\u00eb tani nuk \u00ebsht\u00eb p\u00ebrcaktuar sakt\u00ebsisht se cila skem\u00eb \u00ebsht\u00eb p\u00ebrdorur p\u00ebr t\u00eb anashkaluar faktorin SMS. N\u00eb koh\u00eb t\u00eb ndryshme, hulumtuesit kan\u00eb dh\u00ebn\u00eb shembuj t\u00eb kapjes s\u00eb SMS me sulme ndaj protokolleve SS7 ose Diameter, t\u00eb p\u00ebrdorura n\u00eb rrjetet mobile. Teoretikisht, sulme t\u00eb tilla mund t\u00eb realizohen me p\u00ebrdorim t\u00eb paligjsh\u00ebm t\u00eb mjeteve teknike speciale ose brenda operatoreve t\u00eb sh\u00ebrbimit celular. N\u00eb ve\u00e7anti, n\u00eb forumet haker\u00ebve n\u00eb Darknet, ka shpallje t\u00eb reja me oferta p\u00ebr thyerjen e aplikacioneve t\u00eb ndryshme, duke p\u00ebrfshir\u00eb Telegram. <\/p>\n

\"Si<\/p>\n

\u2018Specialist\u00ebt n\u00eb vende t\u00eb ndryshme, p\u00ebrfshir\u00eb dhe Rusin\u00eb, kan\u00eb deklaruar disa her\u00eb se rrjetet sociale, bankingu mobil dhe aplikacionet mund t\u00eb thyhen p\u00ebrmes dob\u00ebsive n\u00eb protokollin SS7, megjithat\u00eb k\u00ebto kan\u00eb qen\u00eb raste t\u00eb izoluar t\u00eb sulmeve t\u00eb q\u00ebllimshme ose hulumtime eksperimentale\u2019, komentoi Sergey Lupanin, shefi i departamentit t\u00eb hetimeve t\u00eb krimeve kibernetike n\u00eb Group-IB. \u2018N\u00eb nj\u00eb seri incidentesh t\u00eb reja, q\u00eb tani jan\u00eb m\u00eb shum\u00eb se 10, \u00ebsht\u00eb evidente d\u00ebshira e sulmuesve p\u00ebr ta b\u00ebr\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb fitimi nj\u00eb praktik\u00eb t\u00eb zakonshme. P\u00ebr t\u00eb parandaluar k\u00ebt\u00eb, \u00ebsht\u00eb e nevojshme t\u00eb rritet niveli yn\u00eb i higjien\u00ebs digjitale: t\u00eb pakt\u00ebn t\u00eb p\u00ebrdorusim verifikimin me dy faktor\u00eb n\u00eb \u00e7do vend ku \u00ebsht\u00eb e mundur dhe t\u00eb shtojm\u00eb nj\u00eb faktor t\u00eb dyt\u00eb t\u00eb detyruesh\u00ebm n\u00eb SMS, q\u00eb \u00ebsht\u00eb funksionalisht e nd\u00ebrtuar po n\u00eb Telegram\u2019.<\/p>\n

Si t\u00eb mbrohemi?<\/h3>\n

\n 1. \u00cbsht\u00eb implementuar tashm\u00eb n\u00eb Telegram t\u00eb gjitha opsionet e nevojshme p\u00ebr sigurin\u00eb kibernetike, q\u00eb do ta reduktojn\u00eb ndjesh\u00ebm p\u00ebrpjekjet e sulmuesve.
\n 2. N\u00eb pajisjet iOS dhe Android p\u00ebr Telegram, \u00ebsht\u00eb e nevojshme t\u00eb kaloni n\u00eb cil\u00ebsimet e Telegram, t\u00eb zgjidhni skedarin \u2018Privat\u00ebsia\u2019 dhe t\u00eb caktoni \u2018Kodin e re t\u00eb Gjendjes s\u00eb Dyanshm\u00eb\u2019 ose \u2018Verifikimin me dy hapa\u2019. P\u00ebrshkrimi i detajuar p\u00ebr aktivizimin e k\u00ebsaj mund\u00ebsie \u00ebsht\u00eb dh\u00ebn\u00eb n\u00eb udh\u00ebzimet n\u00eb faqen zyrtare t\u00eb aplikacionit: telegram.org\/blog\/sessions-and-2-step-verification<\/a><\/noindex> (https:\/\/telegram.org\/blog\/sessions-and-2-step-verification)<\/p>\n

\"Si<\/p>\n

3. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb mos vendosni nj\u00eb adres\u00eb e-maili p\u00ebr rikuperimin e k\u00ebtij passwordi, pasi, n\u00eb p\u00ebrgjith\u00ebsi, rikuperimi i passwordit t\u00eb e-mailit gjithashtu b\u00ebhet p\u00ebrmes SMS. Po ashtu, mund t\u00eb rritet mbrojtja e llogaris\u00eb n\u00eb WhatsApp.<\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u043d\u0446\u0435 2019 \u0433\u043e\u0434\u0430 \u0432 \u043e\u0442\u0434\u0435\u043b \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439 Group-IB \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a \u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435 \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0435 Telegram. \u0418\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438 Android, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0442\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043a\u0430\u043a\u043e\u0433\u043e \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0439. \u0410\u0442\u0430\u043a\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0430\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440 Telegram \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53591","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Si mund t\u00eb lexojn\u00eb sulmuesit korrespondenc\u00ebn tuaj n\u00eb Telegram. Dhe si t'ua pengoni at\u00eb | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0430\u0448\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u0432 Telegram. \u0418 \u043a\u0430\u043a \u0438\u043c \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u043c\u0435\u0448\u0430\u0442\u044c | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kak-zloumyshlenniki-mogut-chitat-vashu-perepisku-v-telegram-i-kak-im-v-etom-pomeshat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53591","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:01:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:22:49","updated":"2026-01-24 08:01:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53591"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53591\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}