{"id":55586,"date":"2020-01-23T00:00:00","date_gmt":"2020-01-22T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/slozhno-uyazvimo-nedonastroeno-kiberugrozy-2020"},"modified":"2020-02-18T14:03:43","modified_gmt":"2020-02-18T11:03:43","slug":"slozhno-uyazvimo-nedonastroeno-kiberugrozy-2020","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/slozhno-uyazvimo-nedonastroeno-kiberugrozy-2020","title":{"rendered":"E v\u00ebshtir\u00eb, e ndjeshme, e pavendosur: k\u00ebrc\u00ebnimet kibernetike 2020","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"E
\n
\nTeknologjit po zhvillohen dhe komplikohet nga viti n\u00eb vit, dhe s\u00eb bashku me to, metodat e sulmeve po p\u00ebrmir\u00ebsohen. Realitetet moderne k\u00ebrkojn\u00eb aplikacione online, sh\u00ebrbime cloud dhe platforma p\u00ebr virtualizim, prandaj nuk \u00ebsht\u00eb m\u00eb e mundur t\u00eb fshihet pas nj\u00eb firewalle korporate dhe t\u00eb mos shikosh n\u00eb \"internetin e rreziksh\u00ebm\". T\u00eb gjitha k\u00ebto, p\u00ebrve\u00e7 shp\u00ebrndarjes s\u00eb IoT\/IIoT, zhvillimit t\u00eb fintech dhe rritjes s\u00eb popullaritetit t\u00eb pun\u00ebs n\u00eb distanc\u00eb, kan\u00eb ndryshuar n\u00eb m\u00ebnyr\u00eb t\u00eb pa njohur peizazhin e k\u00ebrc\u00ebnimeve. Le t\u00eb flasim p\u00ebr k\u00ebrc\u00ebnimet kibernetike q\u00eb na sjell 2020.<\/i>
\n<\/a><\/noindex><\/p>\n

Shfryt\u00ebzimi i dob\u00ebsive 0day do t\u00eb parakaloj\u00eb publikimin e patch-eve <\/h3>\n

\nSfidat e sistemit softuerik po rriten, k\u00ebshtu q\u00eb ato patjet\u00ebr p\u00ebrmbajn\u00eb defekte. Zhvilluesit l\u00ebshojn\u00eb rregullime, por p\u00ebr k\u00ebt\u00eb, problemi duhet s\u00eb pari t\u00eb identifikohet, duke shpenzuar koh\u00eb nga ekipet e ngjashme - po ata testues q\u00eb jan\u00eb t\u00eb detyruar t\u00eb kryejn\u00eb teste. Mir\u00ebpo, shum\u00eb ekipe p\u00ebrballen me nj\u00eb munges\u00eb t\u00eb katastrofshme kohe. Rezultati \u00ebsht\u00eb nj\u00eb l\u00ebshim i patch-it q\u00eb \u00ebsht\u00eb absuzivisht i gjat\u00eb, apo edhe nj\u00eb patch q\u00eb funksionon vet\u00ebm pjes\u00ebrisht. <\/p>\n

Patch-i i l\u00ebshuar n\u00eb vitin 2018 p\u00ebr dob\u00ebsin\u00eb 0day n\u00eb engine Microsoft Jet ka rezultuar i pap\u00ebrfunduar<\/a><\/noindex>, pra, nuk e ka eliminuar plot\u00ebsisht problemin.
\nN\u00eb vitin 2019, Cisco l\u00ebshoi patch-e p\u00ebr dob\u00ebsit\u00eb CVE-2019-1652 dhe CVE-2019-1653 n\u00eb firmuerat e router\u00ebve, t\u00eb cilat nuk e rregullonin gabimin<\/a><\/noindex>.
\nN\u00eb shtator 2019, studiuesit zbuluan nj\u00eb dob\u00ebsi 0day n\u00eb Dropbox p\u00ebr Windows dhe e njoftuan k\u00ebt\u00eb zhvilluesit<\/a><\/noindex>, megjithat\u00eb ata nuk e korrigjuan gabimin brenda 90 dit\u00ebve. <\/p>\n

Hackerat Blackhat dhe Whitehat p\u00ebrqendrohen n\u00eb k\u00ebrkimin e dob\u00ebsive, k\u00ebshtu q\u00eb mund\u00ebsia q\u00eb ata t\u00eb jen\u00eb t\u00eb par\u00ebt q\u00eb zbulojn\u00eb problemin \u00ebsht\u00eb shum\u00eb m\u00eb e madhe. Disa prej tyre p\u00ebrpiqen t\u00eb p\u00ebrfitojn\u00eb nga shp\u00ebrblimet n\u00eb programet e Bug Bounty, nd\u00ebrsa t\u00eb tjer\u00ebt ndjekin q\u00ebllime t\u00eb d\u00ebmshme konkrete. <\/p>\n

M\u00eb shum\u00eb sulme duke p\u00ebrdorur deepfakes<\/h3>\n

\nRrjetet neuronale dhe inteligjenca artificiale po zhvillohen duke krijuar mund\u00ebsi t\u00eb reja p\u00ebr mashtrim. Pas videove pornografike false me pjes\u00ebmarrjen e famshmeve, ndodh\u00ebn sulme konkrete me d\u00ebme t\u00eb konsiderueshme materiale. <\/p>\n

N\u00eb mars 2019,kriminel\u00ebt i vodh\u00ebn nj\u00eb kompanie energjetike 243 mij\u00eb dollar\u00eb p\u00ebrmes nj\u00eb telefonate<\/a><\/noindex>. \"Kryetari i kompanis\u00eb\" i dha udh\u00ebzime kryetarit t\u00eb deg\u00ebs p\u00ebr t\u00eb transferuar parat\u00eb te nj\u00eb kontraktues nga Hungaria. Z\u00ebri i CEO u falsifikua p\u00ebrmes inteligjenc\u00ebs artificiale. <\/i><\/p>\n

Duke marr\u00eb parasysh zhvillimin e shpejt\u00eb t\u00eb teknologjis\u00eb s\u00eb krijimit t\u00eb deepfakes, mund t\u00eb prisni q\u00eb kriminel\u00ebt kibernetik\u00eb t\u00eb integrojn\u00eb krijimin e audios dhe videove false n\u00eb sulmet BEC dhe skemat e mashtrimit me suport teknike p\u00ebr t\u00eb rritur besueshm\u00ebrin\u00eb e p\u00ebrdoruesve. <\/p>\n

Targeti kryesor p\u00ebr deepfakes do t\u00eb jen\u00eb menaxher\u00ebt e lart\u00eb, pasi regjistrimet e bisedave dhe fjalimeve t\u00eb tyre jan\u00eb n\u00eb dispozicion t\u00eb lir\u00eb. <\/p>\n

Sulmet ndaj bankave p\u00ebrmes fintech<\/h3>\n

\nMiratimi i direktiv\u00ebs europiane p\u00ebr sh\u00ebrbimet e pagesave PSD2 b\u00ebri t\u00eb mundur kryerjen e llojeve t\u00eb reja t\u00eb sulmeve ndaj bankave dhe klient\u00ebve t\u00eb tyre. K\u00ebto p\u00ebrfshijn\u00eb fushatat phishing kund\u00ebr p\u00ebrdoruesve t\u00eb aplikacioneve fintech, si dhe sulme DDoS ndaj fintech-startup-\u00ebve, dhe vjedhjen e t\u00eb dh\u00ebnave nga banka p\u00ebrmes API-t t\u00eb hapura. <\/p>\n

Sulme t\u00eb komplikuara p\u00ebrmes sh\u00ebrbimeve<\/h3>\n

\nKompani po ngushtojn\u00eb gjithnj\u00eb e m\u00eb shum\u00eb specializimin e tyre, duke i deleguar aktivitete t\u00eb pap\u00ebrshtatshme jasht\u00eb kompanis\u00eb. Punonj\u00ebsit e tyre zhvillojn\u00eb besim ndaj outsourcerave q\u00eb menaxhojn\u00eb kontabilitetin, ofrojn\u00eb suport teknik ose siguri. Si rezultat, p\u00ebr t\u00eb sulmuar nj\u00eb kompani, mjafton t\u00eb komprometosh nj\u00eb nga sh\u00ebrbimet dhe t\u00eb integroni kodin e d\u00ebmsh\u00ebm n\u00eb infrastruktur\u00ebn target. <\/p>\n

N\u00eb gusht 2019, hackerat hyn\u00eb n\u00eb infrastruktur\u00ebn e dy kompanive IT q\u00eb ofronin sh\u00ebrbime ruajtjeje dhe backup-i t\u00eb t\u00eb dh\u00ebnave, dhe p\u00ebrmes saj integruan malware t\u00eb ransomware n\u00eb disa qindra zyrave dentare n\u00eb territorin e SHBA. <\/a><\/noindex>
\nKompania IT q\u00eb sh\u00ebrben p\u00ebr Policin\u00eb e New Yorkut, shkaktoi nd\u00ebrprerjen e databaz\u00ebs s\u00eb fingerprint-\u00ebve p\u00ebr disa or\u00eb, duke e lidhur me rrjetin e policis\u00eb nj\u00eb mini-kompjuter t\u00eb infektuar Intel NUC.<\/a><\/noindex><\/i><\/p>\n

Duke qen\u00eb se zinxhir\u00ebt e furnizimit po b\u00ebhen gjithnj\u00eb e m\u00eb t\u00eb gjat\u00eb, po shtohen gjithashtu piketat e dob\u00ebta, dob\u00ebsive t\u00eb cilave mund t\u00eb shfryt\u00ebzohen p\u00ebr t\u00eb sulmuar objektivat m\u00eb t\u00eb m\u00ebdha.
\nNj\u00eb faktor tjet\u00ebr q\u00eb do t\u00eb leht\u00ebsoj\u00eb sulmet p\u00ebrmes zinjgjir\u00ebve t\u00eb furnizimit do t\u00eb jet\u00eb shp\u00ebrndarja masive e vendeve t\u00eb pun\u00ebs t\u00eb larg\u00ebta. Freelancer\u00ebt q\u00eb punojn\u00eb n\u00ebp\u00ebrmjet Wi-Fi publik ose nga sht\u00ebpia jan\u00eb nj\u00eb pre e leht\u00eb, duke pasur parasysh se ata mund t\u00eb nd\u00ebrveprojn\u00eb me disa kompani t\u00eb m\u00ebdha, k\u00ebshtu q\u00eb pajisjet e tyre t\u00eb komprometuar b\u00ebhen nj\u00eb platform\u00eb e p\u00ebrshtatshme p\u00ebr p\u00ebrgatitjen dhe realizimin e fazave t\u00eb ardhshme t\u00eb nj\u00eb sulmi kibernetik. <\/p>\n

P\u00ebrdorimi i gjer\u00eb i IoT\/IIoT p\u00ebr spiunazh dhe shantazh<\/h3>\n

\nRritja e shpejt\u00eb e numrit t\u00eb pajisjeve IoT, p\u00ebrfshir\u00eb televizor\u00eb inteligjent\u00eb, altoparlant\u00eb 't\u00eb zgjuar' dhe asistent\u00eb t\u00eb ndrysh\u00ebm zanor, s\u00eb bashku me numrin e madh t\u00eb dob\u00ebsive t\u00eb identifikuara n\u00eb to, do t\u00eb krijoj\u00eb shum\u00eb mund\u00ebsi p\u00ebr p\u00ebrdorimin e tyre t\u00eb paautorizuar.
\nKomprometimi i pajisjeve inteligjente dhe njohja e z\u00ebrit t\u00eb njer\u00ebzve me an\u00eb t\u00eb AI-s\u00eb mund\u00ebson identifikimin e objektit t\u00eb ndjekjes, duke e transformuar k\u00ebto pajisje n\u00eb nj\u00eb set p\u00ebr shantazh ose spiunazh korporativ. <\/p>\n

Nj\u00eb drejtim tjet\u00ebr ku do t\u00eb vazhdoj\u00eb p\u00ebrdorimi i pajisjeve IoT \u00ebsht\u00eb krijimi i bot-neteve p\u00ebr sh\u00ebrbime t\u00eb ndryshme kibernetike t\u00eb d\u00ebmshme: d\u00ebrgimi i spamit, anonimizimi dhe realizimi sulmeve DDoS<\/a><\/noindex>.
\nNumri i sulmeve ndaj objekteve t\u00eb infrastruktur\u00ebs kritike, t\u00eb pajisura me p\u00ebrb\u00ebr\u00ebs t\u00eb internetit industrial t\u00eb objekteve<\/a><\/noindex>do t\u00eb rritet. K\u00ebto mund t\u00eb ken\u00eb p\u00ebr q\u00ebllim, p\u00ebr shembull, shantazh p\u00ebr shp\u00ebrblim n\u00ebn k\u00ebrc\u00ebnimin e ndalimit t\u00eb funksionimit t\u00eb nj\u00eb kompanie. <\/p>\n

Sa m\u00eb shum\u00eb jet\u00ebra, aq m\u00eb shum\u00eb rreziqe<\/h3>\n

\nShk\u00ebputja masive e infrastruktur\u00ebs IT n\u00eb jet\u00ebt do t\u00eb \u00e7oj\u00eb n\u00eb shfaqjen e objekteve t\u00eb reja p\u00ebr sulme. Gabimet gjat\u00eb implementimit dhe konfigurimit t\u00eb server\u00ebve n\u00eb jet\u00ebs jan\u00eb shfryt\u00ebzuar me sukses nga kriminel\u00ebt. Numri i rrjedhjeve t\u00eb lidhura me konfigurimet e pasigurta t\u00eb DB-s\u00eb n\u00eb jet\u00ebs po rritet \u00e7do vit. <\/p>\n

n\u00eb tetor 2019, nj\u00eb server ElasticSearch u zbulua n\u00eb qasje t\u00eb hapur q\u00eb p\u00ebrmbante 4 miliard\u00eb regjistra me t\u00eb dh\u00ebna personale.<\/a><\/noindex>
\nN\u00eb fund t\u00eb n\u00ebntorit 2019 n\u00eb jet\u00ebn Microsoft Azure n\u00eb qasje t\u00eb hapur u gjet nj\u00eb baz\u00eb t\u00eb dh\u00ebnash t\u00eb kompanis\u00eb True Dialog, e cila p\u00ebrmbante pothuajse 1 miliard regjistrash<\/a><\/noindex>, t\u00eb cilat p\u00ebrmbanin emra t\u00eb plot\u00eb t\u00eb abonent\u00ebve, adresa elektronike dhe numra telefonik\u00eb, si dhe tekste t\u00eb mesazheve SMS. <\/i><\/p>\n

Rrjedhjet e t\u00eb dh\u00ebnave t\u00eb vendosura n\u00eb jet\u00ebsi jo vet\u00ebm q\u00eb do t\u00eb d\u00ebmtojn\u00eb reputacionin e kompanive, por do t\u00eb \u00e7onin gjithashtu n\u00eb kufizime dhe nd\u00ebshkime.<\/p>\n

Kufizimet e pamjaftueshme t\u00eb aksesit, menaxhimi i gabuar i lejes dhe neglizhenca n\u00eb mbajtjen e regjistrave jan\u00eb vet\u00ebm disa nga gabimet q\u00eb kompanit\u00eb do t\u00eb b\u00ebjn\u00eb gjat\u00eb konfigurimit t\u00eb rrjeteve t\u00eb tyre 'n\u00eb jet\u00ebs'. Me kalimin n\u00eb jet\u00ebsi, procesi do t\u00eb p\u00ebrfshij\u00eb gjithnj\u00eb e m\u00eb shum\u00eb ofrues sh\u00ebrbimesh t\u00eb tret\u00eb me kompetenc\u00eb t\u00eb ndryshme n\u00eb fush\u00ebn e siguris\u00eb, duke siguruar mund\u00ebsi shtes\u00eb p\u00ebr sulme. <\/p>\n

Pag\u00ebzim i problemeve t\u00eb virtualizimit<\/h3>\n

\nKontejnerizimi i sh\u00ebrbimeve leht\u00ebson zhvillimin, mb\u00ebshtetje dhe implementimin e softuerit, megjithat\u00eb nj\u00ebkoh\u00ebsisht krijon rreziqe t\u00eb tjera. Dob\u00ebsit\u00eb n\u00eb imazhet e njohura t\u00eb konteiner\u00ebve do t\u00eb jen\u00eb ende nj\u00eb problem p\u00ebr t\u00eb gjith\u00eb ata q\u00eb i p\u00ebrdorin. <\/p>\n

Kompani gjithashtu do t\u00eb p\u00ebrballen me dob\u00ebsi n\u00eb p\u00ebrb\u00ebr\u00ebsit e ndrysh\u00ebm t\u00eb arkitektur\u00ebs s\u00eb konteinerit, nga gabimet n\u00eb mjedisin ekzekutiv deri te orkestrator\u00ebt dhe mjediset e nd\u00ebrtimit. Kriminel\u00ebt do t\u00eb k\u00ebrkojn\u00eb dhe shfryt\u00ebzojn\u00eb \u00e7do pik\u00eb t\u00eb dob\u00ebt p\u00ebr t\u00eb komprometuar procesin DevOps. <\/p>\n

Nj\u00eb tjet\u00ebr tendenc\u00eb e lidhur me virtualizimin \u00ebsht\u00eb e lidhur me llogarit\u00eb pa server\u00eb. Sipas parashikimeve nga Gartner, n\u00eb vitin 2020 m\u00eb shum\u00eb se 20% e kompanive do t\u00eb p\u00ebrdorin k\u00ebt\u00eb teknologji<\/a><\/noindex>. K\u00ebto platforma ofrojn\u00eb zhvilluesve mund\u00ebsin\u00eb p\u00ebr t\u00eb ekzekutuar kod si nj\u00eb sh\u00ebrbim, duke i shp\u00ebtuar nga nevoja p\u00ebr t\u00eb paguar p\u00ebr t\u00eb gjith\u00eb server\u00ebt ose konteiner\u00ebt. Megjithat\u00eb, kalimi n\u00eb llogarit\u00eb pa server\u00eb nuk siguron imunitet ndaj problemeve t\u00eb siguris\u00eb. <\/p>\n

Pik\u00ebt e hyrjes p\u00ebr sulmet ndaj aplikacioneve pa server\u00eb do t\u00eb jen\u00eb bibliotekat e vjetruara dhe t\u00eb komprometuar dhe mjedisi i konfigurimit t\u00eb gabuar. Kriminel\u00ebt do t'i shfryt\u00ebzojn\u00eb ato p\u00ebr t\u00eb mbledhur informacione t\u00eb ndjeshme dhe p\u00ebr t\u00eb hyr\u00eb n\u00eb rrjetet e kompanive. <\/p>\n

Si t\u00eb p\u00ebrballesh me k\u00ebrc\u00ebnimet n\u00eb vitin 2020<\/h3>\n

\nDuke marr\u00eb parasysh kompleksitetin n\u00eb rritje t\u00eb ndikimeve kibernetike, kompanit\u00eb do t\u00eb duhet t\u00eb zgjasin bashk\u00ebpunimin me specialist\u00ebt e siguris\u00eb p\u00ebr t\u00eb zvog\u00ebluar rreziqet n\u00eb t\u00eb gjitha sektor\u00ebt e infrastruktur\u00ebs s\u00eb tyre. Kjo do t'u mund\u00ebsoj\u00eb mbrojt\u00ebsve dhe zhvilluesve t\u00eb marrin informacion t\u00eb m\u00ebtejsh\u00ebm dhe t\u00eb kontrollojn\u00eb m\u00eb mir\u00eb pajisjet e lidhura me rrjetin dhe t\u00eb eliminojn\u00eb dob\u00ebsit\u00eb e tyre. <\/p>\n

Peizazhi n\u00eb vazhdim\u00ebsi ndryshues i k\u00ebrc\u00ebnimeve do t\u00eb k\u00ebrkoj\u00eb shpalljen e mbrojtjes shum\u00ebnivel\u00ebshe, e cila bazohet n\u00eb mekanizma t\u00eb till\u00eb sigurie si: <\/p>\n