{"id":54071,"date":"2019-12-17T00:00:00","date_gmt":"2019-12-16T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/chem-opasny-hakerskie-ataki-na-iot-ustrojstva-realnye-istorii"},"modified":"2020-02-18T14:02:02","modified_gmt":"2020-02-18T11:02:02","slug":"chem-opasny-hakerskie-ataki-na-iot-ustrojstva-realnye-istorii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chem-opasny-hakerskie-ataki-na-iot-ustrojstva-realnye-istorii","title":{"rendered":"Cilat jan\u00eb rreziqet e sulmeve kibernetike ndaj pajisjeve IoT: histori reale","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Infrastruktura e nj\u00eb metropoli modern nd\u00ebrtohet mbi pajisjet e internetit t\u00eb gj\u00ebrave: nga kamerat e siguris\u00eb n\u00eb rrug\u00eb deri te digat e m\u00ebdha dhe spitalet. Haker\u00ebt jan\u00eb n\u00eb gjendje t\u00eb b\u00ebjn\u00eb \u00e7do pajisje t\u00eb lidhur nj\u00eb bot dhe ta p\u00ebrdorin at\u00eb p\u00ebr t\u00eb kryer sulme DDoS.<\/p>\n

Motivacionet mund t\u00eb jen\u00eb shum\u00eb t\u00eb ndryshme: haker\u00ebt, p\u00ebr shembull, mund t\u00eb paguhen nga qeverit\u00eb ose korporatat, ose ndonj\u00ebher\u00eb jan\u00eb thjesht kriminel\u00eb q\u00eb duan t\u00eb arg\u00ebtohen dhe t\u00eb b\u00ebjn\u00eb para.<\/p>\n

N\u00eb Rusin\u00eb, ushtria na shqet\u00ebson gjithnj\u00eb e m\u00eb shum\u00eb p\u00ebr mund\u00ebsit\u00eb e sulmeve kibernetike ndaj \"objekteve t\u00eb infrastruktur\u00ebs kritike\" (pik\u00ebrisht p\u00ebr mbrojtjen nga kjo, s\u00eb paku formalisht, u miratua ligji p\u00ebr internetin sovran).<\/p>\n

\"Cilat
\n
\nMegjithat\u00eb, kjo nuk \u00ebsht\u00eb vet\u00ebm nj\u00eb frik\u00ebsim. Sipas t\u00eb dh\u00ebnave t\u00eb \"Kaspersky\", gjat\u00eb gjysm\u00ebs s\u00eb par\u00eb t\u00eb vitit 2019, haker\u00ebt sulmuan pajisjet e internetit t\u00eb gj\u00ebrave m\u00eb shum\u00eb se 100 milion her\u00eb \u2014 shpesh me ndihm\u00ebn e botneteve Mirai dhe Nyadrop. P\u00ebrve\u00e7 k\u00ebsaj, Rusia \u00ebsht\u00eb vet\u00ebm n\u00eb vendin e kat\u00ebrt p\u00ebr numrin e k\u00ebtyre sulmeve (pavar\u00ebsisht nga imazhi tmerrues i \"haker\u00ebve rus\u00eb\" t\u00eb krijuar nga shtypi per\u00ebndimor); n\u00eb tri vendet e para jan\u00eb Kina, Brazili dhe madje Egjipti. SHBA jan\u00eb vet\u00ebm n\u00eb vendin e pest\u00eb.
\n<\/a><\/noindex>
\nPra, a \u00ebsht\u00eb e mundur t\u00eb p\u00ebrballohen suksesesh k\u00ebto sulme? Le t\u00eb shqyrtojm\u00eb s\u00eb pari disa raste t\u00eb njohura t\u00eb k\u00ebtij lloji t\u00eb sulmeve p\u00ebr t\u00eb gjetur p\u00ebrgjigje p\u00ebr pyetjen se si mund t\u00eb sigurojm\u00eb pajisjet tuaja, t\u00eb pakt\u00ebn n\u00eb nj\u00eb nivel bazik.<\/p>\n

Diga e Bowman Avenue<\/h3>\n

\nDiga e Bowman Avenue ndodhet n\u00eb qytetin Rye Brook (shteti i Nju Jorkut) me nj\u00eb popullsi prej m\u00eb pak se 10,000 njer\u00ebz \u2014 ajo \u00ebsht\u00eb vet\u00ebm gjasht\u00eb metra e lart\u00eb dhe e gjer\u00eb nuk kalon pes\u00eb. N\u00eb vitin 2013, agjencit\u00eb e inteligjenc\u00ebs t\u00eb SHBA e zbuluan nj\u00eb virus n\u00eb sistemin informativ t\u00eb dig\u00ebs. At\u00ebher\u00eb haker\u00ebt nuk e p\u00ebrdor\u00ebn informacionin e vjedhur p\u00ebr t\u00eb ndaluar funksionimin e objektit (ndoshta p\u00ebr arsye se diga ishte shk\u00ebputur nga interneti p\u00ebr nj\u00eb koh\u00eb p\u00ebr pun\u00eb riparimi). <\/p>\n

Diga e Bowman Avenue \u00ebsht\u00eb e nevojshme p\u00ebr t\u00eb parandaluar p\u00ebrmbytjet e territorit p\u00ebrreth gjat\u00eb p\u00ebrmbytjeve. Dhe nuk mund t\u00eb kishte pasur ndonj\u00eb pasoj\u00eb shkat\u00ebrruese nga ndalimi i funksionimit t\u00eb dig\u00ebs \u2014 n\u00eb rastin m\u00eb t\u00eb keq, disa bodrumet e nd\u00ebrtesave posht\u00eb lumit do t\u00eb kishin q\u00ebn\u00eb t\u00eb mbushura me uj\u00eb, por kjo nuk mund t\u00eb quhej as p\u00ebrmbytje. <\/p>\n

\"Cilat
\n
\nKryetari i qytetit Paul Rosenberg sugjeroi at\u00ebher\u00eb se haker\u00ebt mund t\u00eb ken\u00eb ngat\u00ebrruar nd\u00ebrtimin me nj\u00eb tjet\u00ebr dig\u00eb t\u00eb madhe me t\u00eb nj\u00ebjtin em\u00ebr n\u00eb Oregon. Ajo p\u00ebrdoret p\u00ebr ujitjen e shum\u00eb fermave, dhe atje, defektet do t\u00eb kishin shkaktuar d\u00ebme serioze p\u00ebr banor\u00ebt vendas. <\/p>\n

\u00cbsht\u00eb e mundur q\u00eb haker\u00ebt thjesht ishin duke u st\u00ebrvitur n\u00eb nj\u00eb dig\u00eb t\u00eb vog\u00ebl, q\u00eb m\u00eb von\u00eb t\u00eb organizonin nj\u00eb sulm serioz ndaj nj\u00eb stacioni hidroelektrik t\u00eb madh ose \u00e7do elementi tjet\u00ebr t\u00eb sistemit energjetik t\u00eb SHBA-s\u00eb.<\/p>\n

Sulmi ndaj dig\u00ebs Bowman Avenue u pranuar si pjes\u00eb e nj\u00eb serie sulmesh ndaj sistemeve bankare, q\u00eb ishin kryer me sukses nga shtat\u00eb haker\u00eb iranian\u00eb gjat\u00eb nj\u00eb viti (sulme DDoS). Gjat\u00eb k\u00ebsaj kohe, funksionimi i 46 institucioneve financiare m\u00eb t\u00eb m\u00ebdha t\u00eb vendit u nd\u00ebrpre, dhe llogarit\u00eb bankare t\u00eb qindra mij\u00ebra klient\u00ebve u bllokuan. <\/p>\n

M\u00eb von\u00eb, akuzat p\u00ebr serin\u00eb e sulmeve nga haker\u00ebt ndaj bankave dhe dig\u00ebs Bowman Avenue u drejtuan ndaj iranianit Hamid Firouzi. U zbuluar se ai kishte p\u00ebrdorur metod\u00ebn \"Google-dorking\" p\u00ebr t\u00eb gjetur \"vrimat\" n\u00eb funksionimin e dig\u00ebs (m\u00eb pas, media lokale shp\u00ebrtheu me akuza ndaj korporat\u00ebs Google). Hamid Firouzi nuk ndodhej n\u00eb Territorin e SHBA-s\u00eb. Duke qen\u00eb se nuk ka ekzistuar nj\u00eb marr\u00ebveshje extradimi nga Irani n\u00eb SHBA, haker\u00ebt nuk mor\u00ebn ndonj\u00eb d\u00ebnim real. <\/p>\n

2. Transporti publik falas n\u00eb San Francisco<\/h3>\n

\nM\u00eb 25 n\u00ebntor 2016, t\u00eb gjitha terminalet elektronike t\u00eb shitjes s\u00eb bileta p\u00ebr transportin publik n\u00eb San Francisco shfaq\u00ebn mesazhin: \"Ju jeni hakuar, t\u00eb dh\u00ebnat tuaja jan\u00eb enkriptuar\". T\u00eb gjith\u00eb kompjuter\u00ebt n\u00eb Windows, q\u00eb i p\u00ebrkisnin Agjencis\u00eb s\u00eb Transportit t\u00eb Qytetit, gjithashtu ishin sulmuar. Softueri i d\u00ebmsh\u00ebm HDDCryptor (enkriptor q\u00eb sulmon regjistrimin kryesor t\u00eb ngarkesave t\u00eb kompjuterit Windows) arriti deri te kontrolluesi e domenit<\/a> i organizat\u00ebs.<\/p>\n

\"Cilat
\n
\nHDDCryptor enkripton dysqet e ngurta lokale dhe skedar\u00ebt rrjetor\u00eb duke p\u00ebrdorur \u00e7el\u00ebsa t\u00eb gjeneruar rast\u00ebsisht, dhe m\u00eb pas rishkruan MBR-t\u00eb e dysqeve t\u00eb ngurt\u00eb p\u00ebr t\u00eb parandaluar ngarkimin e duhur t\u00eb sistemeve. Pajisjet zakonisht infektohen p\u00ebr shkak t\u00eb veprimeve t\u00eb punonj\u00ebsve, q\u00eb hapin rast\u00ebsisht nj\u00eb skedar kap\u00ebs n\u00eb nj\u00eb email, dhe m\u00eb pas virusi p\u00ebrhapet n\u00eb rrjet.<\/p>\n

K\u00ebrc\u00ebnuesit i ofruan qeveris\u00eb lokale t\u00eb kontaktojn\u00eb me ta p\u00ebrmes post\u00ebs cryptom27@yandex.com (po, Yandex). Ata k\u00ebrkuan 100 bitcoin (ato koh\u00eb, rreth 73 mij\u00eb dollar\u00eb) p\u00ebr t\u00eb marr\u00eb \u00e7el\u00ebsin p\u00ebr dekriptimin e t\u00eb gjith\u00eb t\u00eb dh\u00ebnave. Haker\u00ebt gjithashtu ofruan t\u00eb dekriptojn\u00eb nj\u00eb makin\u00eb p\u00ebr nj\u00eb bitcoin, p\u00ebr t\u00eb d\u00ebshmuar se rikuperimi ishte i mundur. Megjithat\u00eb, qeveria ia doli t\u00eb p\u00ebrballoj\u00eb virusin vet\u00eb, e cila k\u00ebrkoi m\u00eb shum\u00eb se nj\u00eb dit\u00eb. Gjat\u00eb koh\u00ebs s\u00eb rikuperimit t\u00eb sistemit t\u00eb gjith\u00eb, udh\u00ebtimi n\u00eb metro u b\u00eb falas.<\/p>\n

\"Ne hap\u00ebm portat si nj\u00eb mas\u00eb paraprake p\u00ebr t\u00eb minimalizuar ndikimin e k\u00ebtij sulmi n\u00eb pasagjer\u00eb,\" shpjegoi z\u00ebdh\u00ebn\u00ebsi i bashkis\u00eb, Paul Rose. <\/p><\/blockquote>\n

Kriminel\u00ebt gjithashtu pretendojn\u00eb se ata kishin akses n\u00eb 30 GB dokumenteve t\u00eb brendshme t\u00eb Agjencis\u00eb s\u00eb Transportit t\u00eb Qytetit t\u00eb San Franciskos dhe premtonin t'i publikojn\u00eb ato n\u00eb internet, n\u00ebse nuk paguhej shp\u00ebrblimi brenda 24 or\u00ebsh. <\/p>\n

Ngjash\u00ebm, nj\u00eb vit m\u00eb par\u00eb, n\u00eb t\u00eb nj\u00ebjtin shtet, Qendra Mjek\u00ebsore Presbiteriane e Hollywoodit u sulmua. T\u00eb atij her\u00eb u paguan haker\u00ebve 17 mij\u00eb dollar\u00eb p\u00ebr t\u00eb rikuperuar qasjen n\u00eb sistemin kompjuterik t\u00eb spitalit. <\/p>\n

3. Sistemi i alarmit t\u00eb emergjenc\u00ebs n\u00eb Dallas<\/h3>\n

\nN\u00eb prill 2017, n\u00eb Dallas n\u00eb or\u00ebn 23:40 u aktivizuan 156 sirena emergjente p\u00ebr t\u00eb njoftuar popullat\u00ebn mbi situatat emergjente. Ato u ndaluan vet\u00ebm dy or\u00eb m\u00eb von\u00eb. Gjat\u00eb k\u00ebsaj kohe, sh\u00ebrbimi 911 mori mij\u00ebra thirrje shqet\u00ebsimi nga qytetar\u00ebt (p\u00ebr disa dit\u00eb para incidentit, tri tornadot e dob\u00ebta kishin kaluar p\u00ebrmes territorit t\u00eb Dallasit, duke shkat\u00ebrruar disa sht\u00ebpi). <\/p>\n

\"Cilat
\n
\nSistemi i njoftimit p\u00ebr situata emergjente u instalua n\u00eb Dallas n\u00eb vitin 2007; sirenat u vendos\u00ebn nga kompania Federal Signal. Autoritetet nuk than\u00eb detaje mbi funksionimin e sistemeve, por njoftuan se ai p\u00ebrdor \"sinjalet tonale\". K\u00ebto sinjale zakonisht transmetohen p\u00ebrmes sh\u00ebrbimit meteorologjik p\u00ebrmes Dual-Tone Multi-Frequency (DTMF) ose Audio Frequency Shift Keying (AFSK). K\u00ebto jan\u00eb komandat e koduara q\u00eb transmetoheshin n\u00eb frekuenc\u00ebn 700 MHz.<\/p>\n

Autoritetet e qytetit sugjeruan se agresor\u00ebt kan\u00eb regjistruar sinjalet audio q\u00eb jan\u00eb transmetuar gjat\u00eb testimit t\u00eb sistemit t\u00eb alarmit dhe m\u00eb pas i kan\u00eb riprodhuar ato (nj\u00eb sulm klasik i riprodhimit). P\u00ebr ta realizuar k\u00ebt\u00eb, hakerat kishin nevoj\u00eb vet\u00ebm t\u00eb blinin pajisje testuese p\u00ebr t\u00eb punuar me frekuenca radio, t\u00eb cilat mund t\u00eb blihen leht\u00ebsisht n\u00eb dyqane t\u00eb specializuara. <\/p>\n

Ekspert\u00ebt nga kompania k\u00ebrkimore Bastille theksuan se kryerja e nj\u00eb sulmi t\u00eb till\u00eb n\u00ebnkupton q\u00eb agresor\u00ebt kan\u00eb studiuar mir\u00eb funksionimin e alarmit emergjent t\u00eb qytetit, frekuencat, kodet. <\/p>\n

Kryetari i Dallasit p\u00ebr dit\u00ebn tjet\u00ebr b\u00ebri nj\u00eb deklarat\u00eb se hakerat do t\u00eb gjenden dhe sanksionohen, dhe t\u00eb gjitha sistemet e alarmit n\u00eb Teksas do t\u00eb modernizohen. Megjithat\u00eb, fajtor\u00ebt ende nuk jan\u00eb gjetur. <\/p>\n

***
\nKoncesioni i qyteteve inteligjente lidhet me rreziqe serioze. N\u00ebse sistemi i menaxhimit t\u00eb nj\u00eb metropole do t\u00eb hyj\u00eb n\u00eb duar t\u00eb gabuara, agresor\u00ebt do t\u00eb ken\u00eb qasje t\u00eb larg\u00ebt p\u00ebr t\u00eb kontroluar situatat rrugore dhe objektet strategjikisht t\u00eb r\u00ebnd\u00ebsishme t\u00eb qytetit. <\/p>\n

Rreziqet gjithashtu lidhen me vjedhjen e bazave t\u00eb t\u00eb dh\u00ebnave, t\u00eb cilat p\u00ebrfshijn\u00eb jo vet\u00ebm informacion mbi t\u00eb gjith\u00eb infrastruktur\u00ebn e qytetit, por edhe t\u00eb dh\u00ebnat personale t\u00eb banor\u00ebve. Nuk duhet harruar as konsumimi i tepruar i energjis\u00eb dhe mbingarkesa e rrjeteve \u2013 t\u00eb gjitha teknologjit\u00eb lidhen me kanale dhe nodet e komunikimit, p\u00ebrfshir\u00eb energjin\u00eb elektrike q\u00eb konsumojn\u00eb. <\/p><\/blockquote>\n

Niveli i shqet\u00ebsimit t\u00eb pronar\u00ebve t\u00eb pajisjeve IoT po tendoset drejt zeros.<\/h3>\n

\nN\u00eb vitin 2017, kompania Trustlook kreu nj\u00eb studim mbi nivelin e njohurive t\u00eb pronar\u00ebve t\u00eb pajisjeve IoT mbi sigurin\u00eb e tyre. Doli q\u00eb 35% e t\u00eb anketuarve nuk e ndryshojn\u00eb fjal\u00ebkalimin e vendosur n\u00eb m\u00ebnyr\u00eb default (fabrike) para se t\u00eb fillojn\u00eb t\u00eb p\u00ebrdorin pajisjen. Dhe mbi gjysma e p\u00ebrdoruesve nuk instalojn\u00eb asnj\u00eb softuer t\u00eb tret\u00eb p\u00ebr mbrojtje nga sulmet hakerike. 80% e pronar\u00ebve t\u00eb pajisjeve IoT nuk e kan\u00eb d\u00ebgjuar kurr\u00eb p\u00ebr ekzistenc\u00ebn e botnetit Mirai.<\/p>\n

\"Cilat
\n
\nMe zhvillimin e internetit t\u00eb gj\u00ebrave, numri i sulmeve kibernetike do t\u00eb rritet vet\u00ebm. Dhe derisa kompanit\u00eb t\u00eb blejn\u00eb pajisje \"inteligjente\", duke harruar rregullat elementare t\u00eb siguris\u00eb, kriminel\u00ebt kibernetik\u00eb po fitojn\u00eb gjithnj\u00eb e m\u00eb shum\u00eb mund\u00ebsi p\u00ebr t\u00eb p\u00ebrfituar nga p\u00ebrdoruesit e pap\u00ebrgjegjsh\u00ebm. P\u00ebr shembull, ata p\u00ebrdorin rrjetet e pajisjeve t\u00eb infektuara p\u00ebr t\u00eb kryer sulme DDoS ose si proxy.server\u00eb<\/a> p\u00ebr veprime t\u00eb tjera t\u00eb d\u00ebmshme. Dhe shumica e k\u00ebtyre incident\u00ebve t\u00eb pak\u00ebndsh\u00ebm mund t\u00eb parandalohet, n\u00ebse ndiqni rregulla t\u00eb thjeshta:<\/p>\n