{"id":88098,"date":"2020-07-12T13:42:23","date_gmt":"2020-07-12T11:42:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/5-kiberatak-kotorye-legko-mozhno-bylo-predotvratit"},"modified":"2020-07-12T13:42:23","modified_gmt":"2020-07-12T11:42:23","slug":"5-kiberatak-kotorye-legko-mozhno-bylo-predotvratit","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-kiberatak-kotorye-legko-mozhno-bylo-predotvratit","title":{"rendered":"5 sulmeve kibernetike q\u00eb mund t\u00eb ishin leht\u00ebsisht t\u00eb parandaluara","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje, Habr! Sot duam t\u00eb flasim p\u00ebr sulmet e reja kibernetike q\u00eb jan\u00eb zbuluar s\u00eb fundmi nga qendrat tona analitike p\u00ebr mbrojtjen kibernetike. N\u00ebn k\u00ebt\u00eb artikull, do t\u00eb flasim p\u00ebr nj\u00eb humbje t\u00eb madhe t\u00eb t\u00eb dh\u00ebnave nga nj\u00eb prodhues \u00e7ipesh siliciumi, historin\u00eb p\u00ebr nd\u00ebrprerjen e rrjetit n\u00eb nj\u00eb qytet t\u00eb t\u00ebr\u00eb, pak rreth rrezikut nga njoftimet e Google, statistikat p\u00ebr thyerjet e sistemeve mjek\u00ebsore n\u00eb SHBA dhe nj\u00eb lidhje me kanalin Acronis n\u00eb YouTube.<\/p>\n

\"5<\/a><\/noindex>
\n<\/a><\/noindex>
\nP\u00ebrve\u00e7 mbrojtjes s\u00eb t\u00eb dh\u00ebnave tuaja, ne n\u00eb Acronis po ashtu merremi me monitorimin e k\u00ebrc\u00ebnimeve, zhvillojm\u00eb rregullime p\u00ebr vulnerabilitetet e reja dhe p\u00ebrgatisim rekomandime p\u00ebr sigurimin e mbrojtjes p\u00ebr sisteme t\u00eb ndryshme. P\u00ebr k\u00ebt\u00eb, s\u00eb fundmi u krijua nj\u00eb rrjet global qendrash sigurie, Acronis Cyber Protection Operations Centers (CPOCs). N\u00eb k\u00ebto qendra b\u00ebhet nj\u00eb analiz\u00eb e vazhdueshme e trafikut p\u00ebr t\u00eb zbuluar lloje t\u00eb reja softuer\u00ebsh t\u00eb d\u00ebmsh\u00ebm, viruse dhe kriptoshfryt\u00ebzimi. <\/p>\n

Sot duam t\u00eb flasim p\u00ebr rezultatet e pun\u00ebs s\u00eb CPOCs, t\u00eb cilat tani publikohen rregullisht n\u00eb kanalin Acronis n\u00eb YouTube. Ja pes\u00eb nga lajmet m\u00eb t\u00eb nxehta mbi incidentet q\u00eb mund t\u00eb ishin shmangur n\u00ebse do t\u00eb kishim t\u00eb pakt\u00ebn mbrojtje elementare nga Ransomware dhe phishing.<\/p>\n

Programi ransomware Black Kingdom ka m\u00ebsuar t\u00eb komprometoj\u00eb p\u00ebrdoruesit e Pulse VPN. <\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Ofruesi i VPN Pulse Secure, n\u00eb zgjidhjet e t\u00eb cilit mb\u00ebshtetet 80% e kompanive nga lista Fortune 500, ka r\u00ebn\u00eb pre e sulmeve nga familja e ransomware Black Kingdom. Ata shfryt\u00ebzojn\u00eb nj\u00eb vulnerabilitet n\u00eb sistemin q\u00eb lejon leximin e skedave dhe nxjerrjen e t\u00eb dh\u00ebnave t\u00eb llogarive. Pas k\u00ebsaj, emri i p\u00ebrdoruesit dhe fjal\u00ebkalimi t\u00eb vjedhur p\u00ebrdoren p\u00ebr t\u00eb hyr\u00eb n\u00eb rrjetin e komprometuar.<\/p>\n

Megjithat\u00eb, edhe pse Pulse Secure ka l\u00ebshuar nj\u00eb patch q\u00eb eliminon k\u00ebt\u00eb vulnerabilitet, kompanit\u00eb q\u00eb nuk e kan\u00eb instaluar ende p\u00ebrdit\u00ebsimin jan\u00eb n\u00eb rrezik t\u00eb rritur. <\/p>\n

Megjithat\u00eb, si\u00e7 tregojn\u00eb testet, zgjidhjet q\u00eb p\u00ebrdorin inteligjenc\u00ebn artificiale p\u00ebr t\u00eb p\u00ebrcaktuar k\u00ebrc\u00ebnimet, si Acronis Active Protection, nuk lejojn\u00eb q\u00eb Black Kingdom t\u00eb infektoj\u00eb kompjuter\u00ebt e p\u00ebrdoruesve t\u00eb fundit. Pra, n\u00ebse kompania ka nj\u00eb mbrojtje t\u00eb till\u00eb ose nj\u00eb sistem me nj\u00eb mekaniz\u00ebm t\u00eb nd\u00ebrtuar p\u00ebr kontrollin e p\u00ebrdit\u00ebsimeve (p.sh., Acronis Cyber Protect), mund t\u00eb mos shqet\u00ebsoheni p\u00ebr Black Kingdom.<\/p>\n

Sulmi Ransomware n\u00eb Knoxville shkaktoi nd\u00ebrprerjen e rrjetit.<\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

M\u00eb 12 qershor 2020, n\u00eb qytetin Knoxville (SHBA, shteti Tennessee) u krye nj\u00eb sulm masiv Ransomware, i cili \u00e7oi n\u00eb nd\u00ebrprerjen e rrjeteve kompjuterike. Megjithat\u00eb, organet e zbatimit t\u00eb ligjit humb\u00ebn mund\u00ebsin\u00eb p\u00ebr t\u00eb reaguar ndaj incidenteve, p\u00ebrve\u00e7 rasteve emergjente dhe k\u00ebrc\u00ebnimeve p\u00ebr jet\u00ebn e njer\u00ebzve. Edhe pas disa dit\u00ebsh q\u00eb nga p\u00ebrfundimi i sulmit, n\u00eb faqen e internetit t\u00eb qytetit ende ishte publikuar nj\u00eb njoftim se sh\u00ebrbimet online ishin t\u00eb pap\u00ebrmbajtura. <\/p>\n

Hetimi fillestar tregoi se sulmi ishte rezultat i nj\u00eb sulmi t\u00eb gjer\u00eb phishing-u me shp\u00ebrndarjen e email-eve false p\u00ebr punonj\u00ebsit e sh\u00ebrbimeve t\u00eb qytetit. N\u00eb k\u00ebt\u00eb rast, u p\u00ebrdor\u00ebn programe t\u00eb till\u00eb si Maze, DoppelPaymer ose NetWalker. Ashtu si n\u00eb shembullin e kaluar, n\u00ebse autoritetet qytetare do t\u00eb kishin p\u00ebrdorur mjete kund\u00ebr Ransomware, nj\u00eb sulm i till\u00eb nuk do t\u00eb kishte ndodhur, sepse sistemet e mbrojtjes me IA do t\u00eb ishin identifikuar menj\u00ebher\u00eb variantet e shifruar.<\/p>\n

MaxLinear raportoi p\u00ebr nj\u00eb sulm q\u00eb p\u00ebrdori Maze dhe p\u00ebr nj\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave.<\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Prodhuesi i sistemeve t\u00eb integruara n\u00eb nj\u00eb \u00e7ip, MaxLinear konfirmoi se rrjetet e kompanis\u00eb ishin sulmuar nga shifruese Maze. Rreth 1TB t\u00eb dh\u00ebnash u vodh\u00ebn, duke p\u00ebrfshir\u00eb t\u00eb dh\u00ebna personale dhe informacion financiar t\u00eb punonj\u00ebsve. Organizator\u00ebt e sulmit tashm\u00eb publikuan 10 GB nga k\u00ebto t\u00eb dh\u00ebna.<\/p>\n

Si pasoj\u00eb, MaxLinear u detyrua t\u00eb \u00e7aktivizoj\u00eb t\u00eb gjitha rrjetet e kompanis\u00eb, si dhe t\u00eb angazhoj\u00eb konsultant\u00eb p\u00ebr t\u00eb kryer hetimin. Duke marr\u00eb parasysh k\u00ebt\u00eb sulm, p\u00ebrs\u00ebrisim edhe nj\u00eb her\u00eb: Maze \u00ebsht\u00eb nj\u00eb variant i njohur dhe i mir\u00ebpranuar i programeve shifruese. N\u00ebse do t\u00eb kishin p\u00ebrdorur sisteme mbrojt\u00ebse kund\u00ebr Ransomware, MaxLinear do t\u00eb kishte kursyer shum\u00eb para dhe gjithashtu do t\u00eb kishte shmangur d\u00ebmin n\u00eb reputacionin e kompanis\u00eb.<\/p>\n

Programi keqb\u00ebr\u00ebse \"u p\u00ebrhap\" p\u00ebrmes njoftimeve false t\u00eb Google Alerts. <\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Kriminel\u00ebt filluan t\u00eb p\u00ebrdorin Google Alerts p\u00ebr t\u00eb shp\u00ebrndar\u00eb njoftime false p\u00ebr rrjedhjet e t\u00eb dh\u00ebnave. Si rezultat, duke marr\u00eb mesazhe shqet\u00ebsuese, p\u00ebrdoruesit e frik\u00ebsuar kalonin n\u00eb faqet e falsifikuara dhe shkarkonin programe keqb\u00ebr\u00ebse me shpres\u00ebn se do t\u00eb \"zgjidhnin problemin\".
\nNjoftimet keqb\u00ebr\u00ebse funksionojn\u00eb n\u00eb Chrome dhe Firefox. Megjithat\u00eb, sh\u00ebrbimet e filtrimit t\u00eb URL-ve, p\u00ebrfshir\u00eb sh\u00ebrbimin Acronis Cyber Protect, nuk lejuan p\u00ebrdoruesit n\u00eb rrjetet e mbrojtura t\u00eb kalojn\u00eb n\u00eb lidhjet e infektuara. <\/p>\n

Departamenti Amerikan i Sh\u00ebndet\u00ebsis\u00eb raportoi 393 shkelje t\u00eb k\u00ebrkesave p\u00ebr sigurin\u00eb HIPAA gjat\u00eb vitit t\u00eb kaluar<\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Departamenti i Sh\u00ebndet\u00ebsis\u00eb dhe Sh\u00ebrbimeve Njer\u00ebzore t\u00eb SHBA (Department of Health and Human Services \u2014 HHS) raportoi 393 rrjedhje t\u00eb informacionit t\u00eb ndjesh\u00ebm rreth sh\u00ebndetit t\u00eb pacient\u00ebve, t\u00eb cilat \u00e7uan n\u00eb shkelje t\u00eb k\u00ebrkesave t\u00eb Aktit p\u00ebr Transportin dhe P\u00ebrgjegjshm\u00ebrin\u00eb e Sigurimeve Sh\u00ebndet\u00ebsore (HIPAA) p\u00ebr periudh\u00ebn nga qershori i vitit 2019 deri n\u00eb qershor t\u00eb vitit 2020. Nga k\u00ebto, 142 incidente rezultuan nga sulme phishing n\u00eb District Medical Group dhe Marinette Wisconsin, nga t\u00eb cilat u rrjedh\u00ebn 10190 dhe 27137 skedar\u00eb mjek\u00ebsor\u00eb elektronik\u00eb p\u00ebrkat\u00ebsisht.<\/p>\n

Fatkeq\u00ebsisht, praktika ka treguar se edhe p\u00ebrdoruesit e trajnuar dhe t\u00eb p\u00ebrgatitur, t\u00eb cil\u00ebve u \u00ebsht\u00eb shpjeguar vazhdimisht mospranimi i klikimeve n\u00eb lidhje ose hapjes s\u00eb flet\u00ebve nga mesazhe t\u00eb dyshimta, mund t\u00eb b\u00ebhen viktima. Pa sisteme automatike p\u00ebr bllokimin e aktiviteteve t\u00eb dyshimta dhe filtrimin e URL-ve p\u00ebr t\u00eb parandaluar kalimin n\u00eb faqe t\u00eb falsifikuara, b\u00ebhet shum\u00eb e v\u00ebshtir\u00eb t\u00eb mbrohesh nga sulme p\u00ebrfundimtare, q\u00eb p\u00ebrdorin arsye shum\u00eb t\u00eb besueshme, kuti d\u00ebrgesash t\u00eb arsyeshme dhe nj\u00eb nivel t\u00eb lart\u00eb t\u00eb inxhinieris\u00eb sociale. <\/p>\n

N\u00ebse jeni t\u00eb interesuar p\u00ebr lajmet m\u00eb t\u00eb fundit mbi k\u00ebrc\u00ebnimet, mund t\u00eb regjistroheni n\u00eb kanalin Acronis n\u00eb YouTube, ku ne tregojm\u00eb rezultatet m\u00eb t\u00eb fundit t\u00eb monitorimit t\u00eb CPOC n\u00eb praktikisht koh\u00eb reale. Gjithashtu mund t\u00eb regjistroheni n\u00eb blogun ton\u00eb n\u00eb Habr.com, pasi ne do t\u00eb transmetojm\u00eb k\u00ebtu p\u00ebrdit\u00ebsime dhe rezultate t\u00eb studiove m\u00eb interesante.<\/p>\n

Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. Hyni<\/a><\/noindex>, ju lutem.<\/p>\n

A keni pranuar letra phishing shum\u00eb t\u00eb besueshme gjat\u00eb vitit t\u00eb kaluar?<\/h2>\n