{"id":55778,"date":"2020-01-28T00:00:00","date_gmt":"2020-01-27T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel"},"modified":"2020-02-18T14:03:55","modified_gmt":"2020-02-18T11:03:55","slug":"kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","title":{"rendered":"Kompania p\u00ebr mbrojtjen nga DDoS vet\u00eb ka nisur sulme DDoS, pranoi themeluesi i saj","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Kompania
\nDerisa n\u00eb vitin 2016 vDos u b\u00eb sh\u00ebrbimi m\u00eb popullor n\u00eb bot\u00eb p\u00ebr porosin\u00eb e sulmeve DDoS<\/i><\/p>\n

N\u00ebse i besojm\u00eb teorive t\u00eb konspiracionit, at\u00ebher\u00eb kompanit\u00eb antivirus po p\u00ebrhapin vet\u00eb viruset, nd\u00ebrsa sh\u00ebrbimet e mbrojtjes nga DDoS vet\u00eb i nd\u00ebrmarrin k\u00ebto sulme. Sigurisht, k\u00ebto jan\u00eb shpikje\u2026 apo jo?<\/p>\n

M\u00eb 16 janar 2020, Gjykata Federale e Qarkut t\u00eb New Jersey e shpalli fajtor<\/a><\/noindex> 22-vje\u00e7arin Tucker Preston, banor i qytetit Macon, shteti Georgia, p\u00ebr nj\u00eb nga akuzat, konkretisht \"d\u00ebmtimi i kompjuter\u00ebve t\u00eb mbrojtur p\u00ebrmes transferimit t\u00eb nj\u00eb programi, kodi ose urdhri\". Tucker \u00ebsht\u00eb bashk\u00eb-themelues i kompanis\u00eb BackConnect Security LLC, e cila ofronte mbrojtje nga sulmet DDoS. Nd\u00ebrmarr\u00ebsi i ri nuk arriti t\u00eb p\u00ebrmbaj\u00eb turbullimin p\u00ebr t'u hakmarr\u00eb ndaj klient\u00ebve t\u00eb pap\u00ebrshtatsh\u00ebm.
\n<\/a><\/noindex>
\nHistoria e trishtuar e Tucker Preston filloi n\u00eb vitin 2014, kur nj\u00eb haker adoleshent bashk\u00eb me mikun e tij Marshal Webb themeluan kompanin\u00eb BackConnect Security LLC, nga e cila m\u00eb von\u00eb u ndan\u00eb BackConnect, Inc. N\u00eb muajin shtator t\u00eb vitit 2016, kjo firm\u00eb u shfaq<\/a><\/noindex> gjat\u00eb operacionit p\u00ebr mbylljen e sh\u00ebrbimit vDos, q\u00eb at\u00ebher\u00eb konsiderohej si sh\u00ebrbimi m\u00eb popullor n\u00eb bot\u00eb p\u00ebr porositjen e sulmeve DDoS. Kompania BackConnect at\u00ebher\u00eb supozohej se ishte vet\u00eb n\u00ebn sulm p\u00ebrmes vDos \u2014 dhe kreu nj\u00eb \"kontrattack\" t\u00eb pazakont\u00eb, duke kapur 255 adresa IP t\u00eb armikut. BGP-p\u00ebrmbylljes<\/a><\/noindex> (BGP hijacking). Kryerja e nj\u00eb sulmi t\u00eb till\u00eb p\u00ebr t\u00eb mbrojtur interesat e saj shkaktoi mendime t\u00eb kund\u00ebrta n\u00eb komunitetin e siguris\u00eb inforamatike. Shum\u00eb mendonin se BackConnect kishte kaluar kufirin e lejuar.<\/p>\n

BGP-p\u00ebrmbyllja e thjesht\u00eb kryhet p\u00ebrmes njoftimit t\u00eb nj\u00eb prefiksi t\u00eb huaj si i tij. Uplinks\/pirat\u00eb e pranojn\u00eb at\u00eb, dhe ai fillon t\u00eb shp\u00ebrndahet n\u00eb Rrjet. P\u00ebr shembull, n\u00eb vitin 2017, supozohet se si rezultat i nj\u00eb gabimi n\u00eb softuerin \"Rostelecom\" (AS12389) filloi t\u00eb njoftoj\u00eb prefikset<\/a><\/noindex> Mastercard (AS26380), Visa dhe disa organizata t\u00eb tjera financiare. M\u00eb pak m\u00eb shum\u00eb k\u00ebshtu funksionoi kompania BackConnect, kur eksproprihoi adresat IP nga hosti bullgar Verdina.net.<\/p>\n

Drejtori ekzekutiv i BackConnect, Bryant Townsend, m\u00eb pas justifikohej<\/a><\/noindex> n\u00eb d\u00ebrges\u00ebn NANOG p\u00ebr operator\u00ebt e rrjetit. Ai tha se zgjidhja p\u00ebr t\u00eb sulmuar hap\u00ebsir\u00ebn adresore t\u00eb armikut nuk ishte e leht\u00eb, por ata jan\u00eb gati t\u00eb marrin p\u00ebrgjegj\u00ebsin\u00eb p\u00ebr veprimin e tyre: \u00abMegjith\u00ebse kishim mund\u00ebsin\u00eb t\u00eb fshehim veprimet tona, ndiheshim se do t\u00eb ishte e gabuar. Kam kaluar shum\u00eb koh\u00eb duke reflektuar mbi k\u00ebt\u00eb vendim dhe se si mund t\u00eb ndikonte negativisht n\u00eb kompanin\u00eb dhe n\u00eb mua n\u00eb syt\u00eb e disa njer\u00ebzve, por n\u00eb fund e mb\u00ebshteta at\u00eb\u00bb.<\/p>\n

Si\u00e7 doli, BackConnect nuk \u00ebsht\u00eb hera e par\u00eb q\u00eb aplikon BGP hijacking, dhe kompania ka n\u00eb t\u00eb v\u00ebrtet\u00eb nj\u00eb histori t\u00eb err\u00ebt. Sidoqoft\u00eb, duhet t\u00eb theksohet se BGP hijacking nuk p\u00ebrdoret gjithmon\u00eb p\u00ebr q\u00ebllime t\u00eb keqija. Brian Krebs raporton<\/a><\/noindex>, tha se p\u00ebr t'u mbrojtur nga DDoS, ai p\u00ebrdor sh\u00ebrbimet e kompanis\u00eb Prolexic Communications (tani pjes\u00eb e Akamai Technologies). Ajo shpiku m\u00ebnyr\u00ebn se si t\u00eb p\u00ebrdor\u00eb BGP hijack p\u00ebr t\u00eb mbrojtur nga sulmet DDoS.<\/p>\n

N\u00ebse nj\u00eb viktim\u00eb e sulmit DDoS k\u00ebrkon ndihm\u00eb nga Prolexic, ajo transferon adresat IP t\u00eb klientit te vetja, \u00e7ka i lejon asaj t\u00eb analizoj\u00eb dhe filtroj\u00eb trafikun e ardhsh\u00ebm.<\/p>\n

Since BackConnect provided DDoS protection services, an analysis was conducted to determine which BGP hijacks could be considered legitimate in the interest of its clients and which appeared suspicious. This analysis takes into account the duration of hijacking foreign addresses, the extent to which the foreign prefix was advertised as its own, whether there is a confirmed agreement with the client, etc. The table shows that some actions by BackConnect look very suspicious.<\/p>\n

\"Kompania<\/a><\/noindex><\/p>\n

It seems that someone among the victims has sued BackConnect. In the testimonies of Preston (pdf)<\/a><\/noindex> the name of the company recognized by the court as the victim is not mentioned. The victim is referred to in the document as Victim 1<\/i>.<\/p>\n

As mentioned above, the investigation into BackConnect's activities began after the vDos service was hacked. At that time the names of<\/a><\/noindex> the service's administrators became known, as well as the vDos database, including its registered users and records of clients who paid vDos for conducting DDoS attacks.<\/p>\n

K\u00ebto regjistra tregojn\u00eb se nj\u00eb nga llogarit\u00eb n\u00eb sitin vDos \u00ebsht\u00eb e hapur me adresa elektronike t\u00eb lidhura me nj\u00eb domen q\u00eb \u00ebsht\u00eb regjistruar n\u00eb em\u00ebr t\u00eb Takerc Prestone. Kjo llogari ka iniciuar sulme ndaj nj\u00eb numri t\u00eb madh objektivash, duke p\u00ebrfshir\u00eb shum\u00eb sulme ndaj rrjeteve t\u00eb p\u00ebrkategorizuara Fondit p\u00ebr Lirin\u00eb e Softuerit<\/a><\/noindex> (FSF).<\/p>\n

N\u00eb vitin 2016, nj\u00eb ish-administrator i FSF-s\u00eb tha se organizata jofitimprur\u00ebse n\u00eb nj\u00eb moment kishte shqyrtuar mund\u00ebsin\u00eb e bashk\u00ebpunimit me BackConnect, dhe sulmet filluan gati menj\u00ebher\u00eb pasi FSF tha se do t\u00eb k\u00ebrkonte nj\u00eb kompani tjet\u00ebr p\u00ebr mbrojtjen nga DDoS.<\/p>\n

Sipas deklarat\u00ebs<\/a><\/noindex> Ministria e Drejt\u00ebsis\u00eb e Shteteve t\u00eb Bashkuara, p\u00ebr k\u00ebt\u00eb pik\u00eb akuze, Takerc Prestone i rrezikon nga 10 vite burg dhe nj\u00eb gjob\u00eb deri n\u00eb 250,000 dollar\u00eb, q\u00eb \u00ebsht\u00eb dyfishi i fitimit total ose humbjes nga krimi. Ndihma do t\u00eb jepet m\u00eb 7 maj 2020.<\/p>\n

\nGlobalSign ofron zgjidhje PKI t\u00eb shkall\u00ebzueshme p\u00ebr organizata t\u00eb \u00e7do madh\u00ebsie. \"Kompania<\/a><\/noindex>
\nM\u00eb shum\u00eb: +7 (499) 678 2210, sales-ru@globalsign.com.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a 2016 \u0433\u043e\u0434\u0443 vDos \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432 \u043c\u0438\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u043a\u0430\u0437\u0430 DDoS-\u0430\u0442\u0430\u043a \u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0438\u044f\u043c \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u0430, \u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0430\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0438\u0440\u0443\u0441\u044b, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0441\u0430\u043c\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u044d\u0442\u043e \u0432\u044b\u0434\u0443\u043c\u043a\u0438\u2026 \u0438\u043b\u0438 \u043d\u0435\u0442? 16 \u044f\u043d\u0432\u0430\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043a\u0440\u0443\u0436\u043d\u043e\u0439 \u0441\u0443\u0434 \u041d\u044c\u044e-\u0414\u0436\u0435\u0440\u0441\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0432\u0438\u043d\u043e\u0432\u043d\u044b\u043c 22-\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u0422\u0430\u043a\u0435\u0440\u0430 \u041f\u0440\u0435\u0441\u0442\u043e\u043d\u0430 (Tucker Preston), \u0436\u0438\u0442\u0435\u043b\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u041c\u0435\u0439\u043a\u043e\u043d\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55778","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kompania e mbrojtjes nga DDoS pranon se ka nisur vet\u00eb sulme DDoS, pranoi themeluesi i saj | ProHoster","description":"Deri n\u00eb vitin 2016, vDos \u00ebsht\u00eb b\u00ebr\u00eb sh\u00ebrbimi m\u00eb i njohur n\u00eb bot\u00eb p\u00ebr porositjen e sulmeve DDoS. N\u00ebse besoni teorit\u00eb e konspiracionit, at\u00ebher\u00eb kompjutrat antivirus\u00eb vet\u00eb shp\u00ebrndajn\u00eb viruset, dhe sh\u00ebrbimet e mbrojtjes nga sulmet DDoS vet\u00eb i inicojn\u00eb k\u00ebto sulme. Sigurisht, k\u00ebto jan\u00eb shpikje... ose ndoshta jo? M\u00eb 16 janar 2020, Gjykata Federale e Qarkut t\u00eb New Jersey e shpalli fajtor 22-vje\u00e7arin Tucker Preston, banor i qytetit Meykon.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 DDoS \u0441\u0430\u043c\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 DDoS-\u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0435\u0451 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c | ProHoster","og:description":"\u041a 2016 \u0433\u043e\u0434\u0443 vDos \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432 \u043c\u0438\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u043a\u0430\u0437\u0430 DDoS-\u0430\u0442\u0430\u043a \u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0438\u044f\u043c \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u0430, \u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0430\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0438\u0440\u0443\u0441\u044b, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0441\u0430\u043c\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u044d\u0442\u043e \u0432\u044b\u0434\u0443\u043c\u043a\u0438\u2026 \u0438\u043b\u0438 \u043d\u0435\u0442? 16 \u044f\u043d\u0432\u0430\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043a\u0440\u0443\u0436\u043d\u043e\u0439 \u0441\u0443\u0434 \u041d\u044c\u044e-\u0414\u0436\u0435\u0440\u0441\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0432\u0438\u043d\u043e\u0432\u043d\u044b\u043c 22-\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u0422\u0430\u043a\u0435\u0440\u0430 \u041f\u0440\u0435\u0441\u0442\u043e\u043d\u0430 (Tucker Preston), \u0436\u0438\u0442\u0435\u043b\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u041c\u0435\u0439\u043a\u043e\u043d\u0430,","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-27T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55778","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:02:37","updated":"2022-09-28 16:22:21"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55778"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55778\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}