{"id":88098,"date":"2020-07-12T13:42:23","date_gmt":"2020-07-12T11:42:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/5-kiberatak-kotorye-legko-mozhno-bylo-predotvratit"},"modified":"2020-07-12T13:42:23","modified_gmt":"2020-07-12T11:42:23","slug":"5-kiberatak-kotorye-legko-mozhno-bylo-predotvratit","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-kiberatak-kotorye-legko-mozhno-bylo-predotvratit","title":{"rendered":"5 sulme kibernetike q\u00eb leht\u00eb mund t\u00eb ishin parandaluar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje, Habr! Sot d\u00ebshirojm\u00eb t\u00eb flasim p\u00ebr sulmet e reja kibernetike, t\u00eb cilat jan\u00eb zbuluar s\u00eb fundmi nga qendrat tona analitike p\u00ebr mbrojtjen kibernetike. N\u00ebn k\u00ebt\u00eb titull, do t\u00eb flasim p\u00ebr nj\u00eb humbje t\u00eb madhe t\u00eb t\u00eb dh\u00ebnave nga prodhuesi i \u00e7ipeve silikoni, nj\u00eb histori p\u00ebr nd\u00ebrprerjen e rrjetit n\u00eb nj\u00eb qytet t\u00eb t\u00ebr\u00eb, pak mbi rrezikun e njoftimeve nga Google, statistika mbi thyerjet e sistemit sh\u00ebndet\u00ebsor n\u00eb Shtetet e Bashkuara dhe nj\u00eb lidhje me kanalin Acronis n\u00eb YouTube.<\/p>\n

\"5<\/a><\/noindex>
\n<\/a><\/noindex>
\nP\u00ebrve\u00e7 mbrojtjes s\u00eb t\u00eb dh\u00ebnave tuaja, ne n\u00eb Acronis gjithashtu merremi me monitorimin e k\u00ebrc\u00ebnimeve, zhvillimin e rregullimeve p\u00ebr dob\u00ebsit\u00eb e reja dhe p\u00ebrgatitjen e rekomandimeve p\u00ebr sigurimin e mbrojtjes p\u00ebr sisteme t\u00eb ndryshme. P\u00ebr k\u00ebt\u00eb q\u00ebllim, s\u00eb fundmi \u00ebsht\u00eb krijuar nj\u00eb rrjet global i qendrave t\u00eb siguris\u00eb Acronis Cyber Protection Operations Centers (CPOCs). N\u00eb k\u00ebto qendra b\u00ebhet nj\u00eb analiz\u00eb e vazhdueshme e trafikut p\u00ebr t\u00eb zbuluar lloje t\u00eb reja t\u00eb malware-it, virus\u00ebve dhe kriptominingut. <\/p>\n

Sot d\u00ebshirojm\u00eb t\u00eb flasim p\u00ebr rezultatet e pun\u00ebs s\u00eb CPOCs, t\u00eb cilat tani publikohen rregullisht n\u00eb kanalin Acronis n\u00eb YouTube. Ja pes\u00eb nga lajmet m\u00eb t\u00eb nxehta mbi incidentet q\u00eb do t\u00eb ishin parandaluar me nj\u00eb mbrojtje themelore kund\u00ebr Ransomware dhe phishing.<\/p>\n

Programi-ransomware Black Kingdom ka m\u00ebsuar t\u00eb komprometoj\u00eb p\u00ebrdoruesit e Pulse VPN <\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Prodhuesi i VPN-s\u00eb Pulse Secure, n\u00eb t\u00eb cil\u00ebn mb\u00ebshteten 80% e kompanive nga lista e Fortune 500, u b\u00eb viktim\u00eb e sulmeve nga ransomware t\u00eb familjes Black Kingdom. Ata p\u00ebrdorin nj\u00eb dob\u00ebsi n\u00eb sistem q\u00eb lejon leximin e nj\u00eb skedari dhe nxjerrjen e t\u00eb dh\u00ebnave t\u00eb llogaris\u00eb. Pas k\u00ebsaj, emri dhe fjal\u00ebkalimi i vjedhur p\u00ebrdoren p\u00ebr t\u00eb hyr\u00eb n\u00eb rrjetin e komprometuar.<\/p>\n

Megjith\u00ebse Pulse Secure ka l\u00ebshuar nj\u00eb patch q\u00eb adreson k\u00ebt\u00eb dob\u00ebsi, kompanit\u00eb q\u00eb nuk kan\u00eb instaluar ende p\u00ebrdit\u00ebsimin jan\u00eb n\u00eb nj\u00eb zon\u00eb t\u00eb rritur rreziku. <\/p>\n

Sidoqoft\u00eb, si\u00e7 treguan testet, zgjidhjet q\u00eb p\u00ebrdorin inteligjenc\u00ebn artificiale p\u00ebr t\u00eb identifikuar k\u00ebrc\u00ebnimet, si Acronis Active Protection, nuk lejojn\u00eb q\u00eb Black Kingdom t\u00eb infektoj\u00eb kompjuter\u00ebt e p\u00ebrdoruesve t\u00eb fundit. Pra, n\u00ebse n\u00eb kompani ka nj\u00eb mbrojtje t\u00eb till\u00eb ose nj\u00eb sistem me mekaniz\u00ebm t\u00eb integruar p\u00ebr kontrollin e p\u00ebrdit\u00ebsimeve (si Acronis Cyber Protect), nuk ka nevoj\u00eb t\u00eb shqet\u00ebsoheni p\u00ebr Black Kingdom.<\/p>\n

Sulmi Ransomware n\u00eb Knoxville \u00e7oi n\u00eb nd\u00ebrprerjen e rrjetit<\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

M\u00eb 12 Qershor 2020, mbi qytetin Knoxville (SHBA, shteti Tennessee) u krye nj\u00eb sulm masiv Ransomware, q\u00eb \u00e7oi n\u00eb nd\u00ebrprerjen e rrjetit kompjuterik. Madje, organet e drejt\u00ebsis\u00eb humb\u00ebn mund\u00ebsin\u00eb p\u00ebr t\u00eb reaguar ndaj incidenteve p\u00ebrve\u00e7 rasteve urgjente dhe k\u00ebrc\u00ebnimeve ndaj jet\u00ebs s\u00eb njer\u00ebzve. Edhe disa dit\u00eb pas p\u00ebrfundimit t\u00eb sulmit, n\u00eb faqen e qytetit ende ishte vendosur nj\u00eb njoftim q\u00eb sh\u00ebrbimet online ishin t\u00eb parealizueshme. <\/p>\n

Hetimi fillestar tregoi se sulmi ishte rezultat i nj\u00eb sulmi masiv phishing me shp\u00ebrndarjen e emaileve fallso p\u00ebr punonj\u00ebsit e sh\u00ebrbimeve t\u00eb qytetit. N\u00eb k\u00ebt\u00eb rast, u p\u00ebrdor\u00ebn ransomware si Maze, DoppelPaymer ose NetWalker. Si n\u00eb shembullin e m\u00ebparsh\u00ebm, n\u00ebse autoritetet qytetare do t\u00eb kishin p\u00ebrdorur mjete p\u00ebr t\u00eb parandaluar Ransomware, nj\u00eb sulm t\u00eb till\u00eb nuk do t\u00eb ishte realizuar, sepse sistemet mbrojt\u00ebse me AI do t\u00eb zinin menj\u00ebher\u00eb variantet e enkriptuesve t\u00eb p\u00ebrdorur.<\/p>\n

MaxLinear njoftoi p\u00ebr nj\u00eb sulm duke p\u00ebrdorur Maze dhe nj\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave<\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Prodhuesi i sistemeve t\u00eb integruara n\u00eb nj\u00eb \u00e7ip, MaxLinear, konfirmoi se rrjetet e kompanis\u00eb ishin sulmuar nga enkriptuesi Maze. Rreth 1TB t\u00eb dh\u00ebnash ishin vjedhur, p\u00ebrfshir\u00eb t\u00eb dh\u00ebna personale dhe informacion financiar t\u00eb punonj\u00ebsve. Organizator\u00ebt e sulmit tashm\u00eb kishin publikuar 10 GB nga k\u00ebto t\u00eb dh\u00ebna.<\/p>\n

Si rezultat, MaxLinear detyrohet t\u00eb \u00e7jerr\u00eb n\u00eb offline t\u00eb gjitha rrjetet e kompanis\u00eb dhe t\u00eb angazhoj\u00eb konsulent\u00eb p\u00ebr t\u00eb kryer hetimin. Nga shembulli i k\u00ebtij sulmi p\u00ebrs\u00ebrisim edhe nj\u00eb her\u00eb: Maze \u00ebsht\u00eb nj\u00eb variant i njohur dhe t\u00eb njohur t\u00eb programit enkriptues. N\u00ebse do t\u00eb ishin p\u00ebrdorur sistemet e mbrojtjes nga Ransomware, MaxLinear do t\u00eb kishte kursyer shum\u00eb para dhe do t\u00eb kishte shmangur d\u00ebmtimin e reputacionit t\u00eb kompanis\u00eb.<\/p>\n

Malware \u00abu infiltrua\u00bb p\u00ebrmes njoftimeve fallso t\u00eb Google <\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Haker\u00ebt filluan t\u00eb p\u00ebrdorin Google Alerts p\u00ebr t\u00eb shp\u00ebrndar\u00eb njoftime fallso rreth rrjedhjeve t\u00eb t\u00eb dh\u00ebnave. Si rezultat, duke marr\u00eb mesazhe alarmante, p\u00ebrdoruesit e shqet\u00ebsuar kalonin n\u00eb faqe t\u00eb rreme dhe shkarkonin malware n\u00eb shpres\u00eb p\u00ebr t\u00eb \"zgjidhur problemin\".
\nNjoftimet malware funksionojn\u00eb n\u00eb Chrome dhe Firefox. Sidoqoft\u00eb, sh\u00ebrbimet e filtrimit t\u00eb URL-ve, p\u00ebrfshir\u00eb sh\u00ebrbimin Acronis Cyber Protect, nuk lejuan q\u00eb p\u00ebrdoruesit n\u00eb rrjetet e mbrojtura t\u00eb kalonin n\u00eb lidhje t\u00eb infektuara. <\/p>\n

Departamenti Amerikan i Sh\u00ebndet\u00ebsis\u00eb njoftoi p\u00ebr 393 shkelje t\u00eb k\u00ebrkesave t\u00eb siguris\u00eb HIPAA gjat\u00eb vitit t\u00eb kaluar<\/h3>\n

\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Departamenti i Sh\u00ebndet\u00ebsis\u00eb s\u00eb SHBA (Department of Health and Human Services \u2014 HHS) raportoi 393 rrjedhje t\u00eb informacionit t\u00eb ndjesh\u00ebm mbi sh\u00ebndetin e pacient\u00ebve, t\u00eb cilat \u00e7uan n\u00eb shkelje t\u00eb k\u00ebrkesave t\u00eb Aktit p\u00ebr Portabilitetin dhe P\u00ebrgjegjshm\u00ebrin\u00eb e Sigurimeve Sh\u00ebndet\u00ebsore (HIPAA) nga qershori 2019 deri n\u00eb qershor 2020. Prej tyre, 142 incidente ishin rezultat i sulmeve phishing ndaj District Medical Group dhe Marinette Wisconsin, nga t\u00eb cilat rrjedh\u00ebn 10,190 dhe 27,137 karta t\u00eb elektronike t\u00eb mbajtjes s\u00eb sh\u00ebndetit, p\u00ebrkat\u00ebsisht.<\/p>\n

Fatkeq\u00ebsisht, praktika ka treguar se edhe p\u00ebrdoruesit e trajnuar dhe t\u00eb p\u00ebrgatitur, t\u00eb cil\u00ebve u \u00ebsht\u00eb shpjeguar shum\u00eb her\u00eb se nuk \u00ebsht\u00eb e pranueshme t\u00eb klikojn\u00eb n\u00eb lidhje ose hapin bashk\u00ebngjitje nga emailet e dyshimta, mund t\u00eb b\u00ebhen viktima. Pa sisteme automatike p\u00ebr bllokimin e aktiviteteve t\u00eb dyshimta dhe filtrimin e URL-ve p\u00ebr t\u00eb parandaluar kalimin n\u00eb faqe t\u00eb falsifikuara, \u00ebsht\u00eb shum\u00eb e v\u00ebshtir\u00eb t\u00eb mbrohemi nga sulmet e sofistikuara, t\u00eb cilat p\u00ebrdorin arsye mjaft t\u00eb suksesshme, kuti d\u00ebrgimi t\u00eb besueshme dhe nj\u00eb nivel shum\u00eb t\u00eb lart\u00eb t\u00eb inxhinieris\u00eb sociale. <\/p>\n

N\u00ebse jeni t\u00eb interesuar p\u00ebr lajmet mbi k\u00ebrc\u00ebnimet m\u00eb t\u00eb fundit, mund t\u00eb abonoheni n\u00eb kanalin Acronis n\u00eb YouTube, ku flasim p\u00ebr rezultatet m\u00eb t\u00eb fundit t\u00eb monitorimit CPOC n\u00eb praktik\u00eb n\u00eb koh\u00eb reale. Ju gjithashtu mund t\u00eb abonoheni n\u00eb blogun ton\u00eb n\u00eb Habr.com, sepse do t\u00eb transmetojm\u00eb k\u00ebtu p\u00ebrdit\u00ebsime dhe rezultate studiuesish m\u00eb interesante.<\/p>\n

Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. Hyni<\/a><\/noindex>, ju lutemi.<\/p>\n

A keni marr\u00eb emaile phishing shum\u00eb t\u00eb besueshme gjat\u00eb vitit t\u00eb kaluar?<\/h2>\n