{"id":91429,"date":"2020-08-13T13:42:00","date_gmt":"2020-08-13T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte"},"modified":"2020-08-13T13:42:00","modified_gmt":"2020-08-13T11:42:00","slug":"ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","title":{"rendered":"Sulmi ReVoLTE, i cili lejon kapjen e thirrjeve t\u00eb enkriptuara n\u00eb LTE","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup k\u00ebrkuesish nga Universiteti i Ruhrit n\u00eb Bochum (Gjermani) prezantoi nj\u00eb teknik\u00eb sulmi ReVoLTE<\/a><\/noindex> (PDF<\/a><\/noindex>), q\u00eb lejon kapjen e thirrjeve t\u00eb koduara n\u00eb rrjetet e celular\u00ebve 4G\/LTE q\u00eb p\u00ebrdorin teknologjin\u00eb VoLTE p\u00ebr t\u00eb transferuar trafikun e z\u00ebrit (Voice over LTE<\/a><\/noindex>).
\n.<\/p>\n

P\u00ebr t\u00eb mbrojtur thirrjet telefonike nga kapja n\u00eb VoLTE, p\u00ebrdoret enkriptimi i bazuar n\u00eb shkronj\u00ebn e rrjedh\u00ebs<\/a><\/noindex>. Specifikimi obligon q\u00eb p\u00ebr \u00e7do sesion t\u00eb gjenerohet nj\u00eb rrjedh\u00eb \u00e7el\u00ebsi unik, por si\u00e7 \u00ebsht\u00eb zbuluar nga k\u00ebrkuesit, 12 nga 15 stacione baz\u00eb t\u00eb testuara nuk p\u00ebrmbushin k\u00ebt\u00eb kusht dhe rip\u00ebrdorin t\u00eb nj\u00ebjt\u00ebn rrjedh\u00eb \u00e7el\u00ebsash p\u00ebr dy thirrje t\u00eb nj\u00ebpasnj\u00ebshme n\u00eb nj\u00eb kanale radioje ose p\u00ebrdorin metoda parashikuese p\u00ebr t\u00eb gjeneruar nj\u00eb sekuenc\u00eb t\u00eb re.<\/p>\n

Rip\u00ebrdorimi i rrjedh\u00ebs s\u00eb \u00e7el\u00ebsit lejon q\u00eb sulmuesi t\u00eb dekripton trafikun e regjistruar t\u00eb enkriptuar me bised\u00ebn. P\u00ebr t\u00eb realizuar dekripton e p\u00ebrmbajtjes s\u00eb thirrjes telefonike, sulmuesi s\u00eb pari kap dhe ruan trafikun radio t\u00eb enkriptuar mes viktim\u00ebs dhe stacionit baz\u00eb t\u00eb preksh\u00ebm. Pas p\u00ebrfundimit t\u00eb thirrjes, sulmuesi ri-th\u00ebrret viktim\u00ebn dhe p\u00ebrpiqet t\u00eb vazhdoj\u00eb bised\u00ebn sa m\u00eb gjat\u00eb t\u00eb jet\u00eb e mundur, duke mos e lejuar viktim\u00ebn t\u00eb shk\u00ebputet. Gjat\u00eb k\u00ebsaj bised\u00eb, p\u00ebrve\u00e7 regjistrimit t\u00eb trafikut radio t\u00eb enkriptuar, ruhet gjithashtu sinjali audio origjinal i pap\u00ebrcaktuar.<\/p>\n

P\u00ebr t\u00eb dekriptuar thirrjen e par\u00eb t\u00eb viktim\u00ebs, sulmuesi bazuar n\u00eb trafikun e enkriptuar t\u00eb kapur gjat\u00eb thirrjes s\u00eb dyt\u00eb dhe t\u00eb dh\u00ebnave audio origjinale t\u00eb regjistruara n\u00eb telefonin e sulmuesit, mund t\u00eb llogaris\u00eb vler\u00ebn e rrjedh\u00ebs s\u00eb \u00e7el\u00ebsit, e cila p\u00ebrcaktohet p\u00ebrmes operacionit XOR midis t\u00eb dh\u00ebnave t\u00eb hapura dhe t\u00eb enkriptuara. Duke qen\u00eb se rrjedha e \u00e7el\u00ebsit rip\u00ebrdoret, duke aplikuar rrjedh\u00ebn e \u00e7el\u00ebsit t\u00eb llogaritur p\u00ebr thirrjen e dyt\u00eb n\u00eb t\u00eb dh\u00ebnat e enkriptuara t\u00eb thirrjes s\u00eb par\u00eb, sulmuesi mund t\u00eb qasje n\u00eb p\u00ebrmbajtjen e saj origjinale. Sa m\u00eb gjat\u00eb t\u00eb ket\u00eb zgjatur biseda e dyt\u00eb e sulmuesit me viktim\u00ebn, aq m\u00eb shum\u00eb informacion mund t\u00eb dekodoj nga thirrja e par\u00eb. P\u00ebr shembull, n\u00ebse sulmuesi arriti t\u00eb zgjas\u00eb bised\u00ebn p\u00ebr 5 minuta, ai do t\u00eb mund t\u00eb dekriptoj\u00eb po ashtu edhe 5 minuta.<\/p>\n

P\u00ebr kapjen e trafikut t\u00eb enkriptuar n\u00eb ajrin e rrjeteve LTE, k\u00ebrkuesit p\u00ebrdor\u00ebn analizuesin e sinjalit AirScope<\/a><\/noindex>, dhe p\u00ebr t\u00eb marr\u00eb rrjedh\u00ebn e z\u00ebrit origjinal gjat\u00eb thirrjes, sulmuesit p\u00ebrdor\u00ebn smartphone Android, t\u00eb menaxhuar p\u00ebrmes ADB dhe SCAT<\/a><\/noindex>. Kostoja e pajisjeve t\u00eb nevojshme p\u00ebr realizimin e sulmit vler\u00ebsohet n\u00eb 7000 dollar\u00eb. <\/p>\n


\n
\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Prodhuesit e stacioneve baz\u00eb jan\u00eb njoftuar p\u00ebr problemin n\u00eb dhamin e kaluar, dhe shumica e tyre tashm\u00eb kan\u00eb publikuar patch-e p\u00ebr t\u00eb adresuar dob\u00ebsin\u00eb. Megjithat\u00eb, disa operator\u00eb mund t\u00eb ken\u00eb injoruar azhurnimet. P\u00ebr t\u00eb verifikuar ekspozimin ndaj problemit t\u00eb rrjeteve LTE dhe 5G, p\u00ebrgatitur<\/a><\/noindex> nj\u00eb aplikacion mobil i ve\u00e7ant\u00eb p\u00ebr platform\u00ebn Android 9 (p\u00ebr t\u00eb funksionuar k\u00ebrkohet akses root dhe nj\u00eb smartphone me \u00e7ip Qualcomm, si Xiaomi Mi A3, One Plus 6T dhe Xiaomi Mix 3 5G). P\u00ebrve\u00e7 p\u00ebrcaktimit t\u00eb ekzistenc\u00ebs s\u00eb dob\u00ebsis\u00eb, aplikacioni gjithashtu mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb kapur trafikun dhe p\u00ebr t\u00eb shqyrtuar mesazhet sh\u00ebrbyese. Trafigu i kapur ruhet n\u00eb formatin PCAP dhe mund t\u00eb d\u00ebrgohet n\u00eb serverin HTTP t\u00eb p\u00ebrcaktuar nga p\u00ebrdoruesi p\u00ebr analiz\u00eb t\u00eb m\u00ebtejshme me mjete tipike. <\/p>\n

\"Sulmi<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re­VoL­TE (PDF), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 4G\/LTE, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VoLTE (Voice over LTE). . \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432 VoLTE \u0434\u043b\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u0430. \u0421\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91430,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91429","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sulmi ReVoLTE, q\u00eb mund\u00ebson kapjen e thirrjeve t\u00eb koduara n\u00eb LTE | ProHoster","description":"Grupi i studiuesve nga Universiteti Ruhr n\u00eb Bochum (Gjermani) prezantoi teknik\u00ebn e sulmit Re\u00adVoL\u00adTE (","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 ReVoLTE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 LTE | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re\u00adVoL\u00adTE (","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-13T11:42:00+00:00","article:modified_time":"2020-08-13T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91429","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:26","updated":"2022-09-30 10:24:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=91429"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91429\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/91430"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=91429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=91429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=91429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}