ื•ื•ื™ื“ืขืจ, ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ื‘ื™ืจื’ืขืจืก ืคึผื™ื™ืžืึทื ืฅ ืฆื• ื“ื™ ืคืึทืจืงืขืจ ืคึผืึธืœื™ืฆื™ื™ึท ืื•ืŸ ื“ื™ FSSP ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืคืขืœื“

ื’ืขื“ืขื ืง ืื™ืš ื’ืขืฉืจื™ื‘ืŸ ืื•ื™ืฃ Habrรฉ ืื•ืŸ ืื™ืŸ ืฉื˜ื•ื‘ ืื™ืŸ ื“ื™ ื˜ืขืœืขื’ืจืึทื ืงืึทื ืึทืœื•ื•ื™ ื“ืขื˜ืึทื™ืœืก ืคื•ืŸ ืคึผื™ื™ืžืึทื ืฅ ืื™ืŸ ื˜ื•ื™ื•ื•ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืคืึทืจืงืขืจ ืคึผืึธืœื™ืฆื™ื™ึท ืื•ืŸ ื“ื™ FSSP ืคื•ืŸ ืคึผืœืึทืฅ ื ื™ืฆืขืจืก ื’ืขื•ื•ืืจืŸ ืขืคื ื˜ืœืขืš ื‘ื ื™ืžืฆื paymentgibdd.rf, paygibdd.ru, gos-oplata.ru, fines.net ะธ oplata-fssp.ru?

ื•ื•ื™ื“ืขืจ, ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ื‘ื™ืจื’ืขืจืก ืคึผื™ื™ืžืึทื ืฅ ืฆื• ื“ื™ ืคืึทืจืงืขืจ ืคึผืึธืœื™ืฆื™ื™ึท ืื•ืŸ ื“ื™ FSSP ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืคืขืœื“

ื ืึธืจ ื˜ืึธืŸ ื ื™ื˜ ืœืึทื›ืŸ, ื“ืึธืก ืื™ื– ื ื™ืฉื˜ ืึท ื•ื•ื™ืฅ - ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืกืขืจื•ื•ืขืจ ืžื™ื˜ ื“ืึทื˜ืŸ ืคื•ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืกื™ืกื˜ืขื ื•ื•ื™ื“ืขืจ ืื™ื– ื’ืขื•ื•ืขืŸ ืึธืคืŸ ืคึฟืึทืจ ื“ื™ ื’ืื ืฆืข ื•ื•ืขืœื˜.

ื ื•, ืœืึธืžื™ืจ ื’ื™ื™ืŸ ื’ืขืคึฟื™ื ืขืŸ ื–ื™ืš ...

ะ”ะธัะบะปะตะนะผะตั€: ะฒัั ะธะฝั„ะพั€ะผะฐั†ะธั ะฝะธะถะต ะฟัƒะฑะปะธะบัƒะตั‚ัั ะธัะบะปัŽั‡ะธั‚ะตะปัŒะฝะพ ะฒ ะพะฑั€ะฐะทะพะฒะฐั‚ะตะปัŒะฝั‹ั… ั†ะตะปัั…. ะะฒั‚ะพั€ ะฝะต ะฟะพะปัƒั‡ะฐะป ะดะพัั‚ัƒะฟะฐ ะบ ะฟะตั€ัะพะฝะฐะปัŒะฝั‹ะผ ะดะฐะฝะฝั‹ะผ ั‚ั€ะตั‚ัŒะธั… ะปะธั† ะธ ะบะพะผะฟะฐะฝะธะน. ะ˜ะฝั„ะพั€ะผะฐั†ะธั ะฒะทัั‚ะฐ ะปะธะฑะพ ะธะท ะพั‚ะบั€ั‹ั‚ั‹ั… ะธัั‚ะพั‡ะฝะธะบะพะฒ, ะปะธะฑะพ ะฑั‹ะปะฐ ะฟั€ะตะดะพัั‚ะฐะฒะปะตะฝะฐ ะฐะฒั‚ะพั€ัƒ ะฐะฝะพะฝะธะผะฝั‹ะผะธ ะดะพะฑั€ะพะถะตะปะฐั‚ะตะปัะผะธ.

ืขืจืฉื˜ืขืจ, ืœืึธื–ืŸ ืžื™ืจ ื“ืขืจืžืึธื ืขืŸ ืื™ืจ ืึท ื‘ื™ืกืœ ื•ื•ืขื’ืŸ ื“ื™ ืงืจืึทื ืึทืœืึทื“ื–ืฉื™ ืคื•ืŸ ื’ืขืฉืขืขื ื™ืฉืŸ:

  • ืื•ื™ืฃ ืืคืจื™ืœ 12.04.2019, XNUMX (ื‘ื™ื™ ื ืึทื›ื˜), ืึทืŸ Elasticsearch ืกืขืจื•ื•ืขืจ ืื™ื– ื“ื™ืกืงืึทื•ื•ืขืจื“ ื•ื•ืึธืก ื”ืื˜ ื ื™ืฉื˜ ื“ืึทืจืคืŸ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ.
  • ืื•ื™ืฃ 13.04.2019/XNUMX/XNUMX (ืžืึธืจื’ืŸ) ืึท ืึธื ื–ืึธื’ ืื™ื– ื’ืขืฉื™ืงื˜ ืฆื• ื“ื™ ืกืขืจื•ื•ืขืจ ืึธื•ื ืขืจื–.
  • ืื•ื™ืฃ ืืคืจื™ืœ 13.04.2019, XNUMX (ืื™ืŸ ื“ื™ ื ืึธื›ืžื™ื˜ืึธื’), ื“ืขืจ ืกืขืจื•ื•ืขืจ ืื™ื– "ืฉื˜ื™ืœ" ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ ืคื•ืŸ ืฆื™ื‘ื•ืจ ืึทืงืกืขืก.

ืื™ืŸ ื“ืขืจ ืฆื™ื™ื˜ ืคื•ืŸ ื“ืขืจ ืขืจืฉื˜ืขืจ ืกืขืจื•ื•ืขืจ ืฉืึทื˜ื“ืึทื•ืŸ, ื“ื™ Elasticsearch ื™ื ื“ืขืงืกื™ื– ื’ืขืงื•ืงื˜ ื•ื•ื™ ื“ืึธืก:

ื•ื•ื™ื“ืขืจ, ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ื‘ื™ืจื’ืขืจืก ืคึผื™ื™ืžืึทื ืฅ ืฆื• ื“ื™ ืคืึทืจืงืขืจ ืคึผืึธืœื™ืฆื™ื™ึท ืื•ืŸ ื“ื™ FSSP ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืคืขืœื“

ืื•ืŸ ืื™ืฆื˜ ืื•ื™ืฃ 21.05.2019/16/00, ื•ื•ืขื’ืŸ XNUMX:XNUMX (ืžืึธืกืงื•ื•ืข ืฆื™ื™ื˜), ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ Elasticsearch ืกืขืจื•ื•ืขืจ, ืžื™ื˜ ื“ื™ ื–ืขืœื‘ืข (ืคึผืœื•ืก ื ื™ื™ึท) ื™ื ื“ืขืงืกื™ื– ื•ื•ื™ื“ืขืจ ืื•ื™ืก ืื™ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืคืขืœื“:

ื•ื•ื™ื“ืขืจ, ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ื‘ื™ืจื’ืขืจืก ืคึผื™ื™ืžืึทื ืฅ ืฆื• ื“ื™ ืคืึทืจืงืขืจ ืคึผืึธืœื™ืฆื™ื™ึท ืื•ืŸ ื“ื™ FSSP ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืคืขืœื“

ืื™ืš ืงืขืŸ ื ื™ืฉื˜ ื’ืœื•ื™ื‘ืŸ ืžื™ื™ืŸ ืื•ื™ื’ืŸ ื•ื•ืขืŸ ืื™ืš ื’ืขื–ืขืŸ ืขืก (ื’ืœื™ื™ืš ื ืึธืš ื“ื™ ืคืึธืจืฉื˜ืขืœื•ื ื’ ื‘ื™ื™ึท ืคื“ื™ื™ึทืก ืื•ื™ืฃ ื“ืขืจ ื˜ืขืžืข ืคื•ืŸ โ€‹โ€‹ื“ื™ื˜ืขืงื˜ื™ื ื’ ืขืคืขื ืขืŸ ื“ืึทื˜ืึทื‘ื™ื™ืกื™ื–) ืื™ืŸ ื“ื™ ืคึผืึธืกื˜ ืึธื ื–ืึธื’ ืคื•ืŸ ืื•ื ื“ื–ืขืจ DeviceLock Data Breach Intelligence. ืฆื• ื–ื™ื™ืŸ ืขืจืœืขืš, ืžื™ื™ืŸ ืขืจืฉื˜ืขืจ ื’ืขื“ืึทื ืง ืื™ื– ื’ืขื•ื•ืขืŸ ืึทื– ื“ืึธืก ืื™ื– ื’ืขื•ื•ืขืŸ ืึท ืžื™ืŸ ืคื•ืŸ ืกื™ืกื˜ืขื ื’ืœื™ื˜ืฉ.

ืึธื‘ืขืจ, ื ื™ื™ืŸ, ืขืก ืื™ื– ื ื™ืฉื˜ ืึท ื’ืœื™ื˜ืฉ ืื•ืŸ ื ืึธืš ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืึทืœืฅ ืžืึทื ื™ื•ืึทืœื™, ื‘ื™ื™ึท 01:25 ืื•ื™ืฃ ืžืื™ 22.05.2019, XNUMX, ืื™ืš ื•ื•ื™ื“ืขืจ ื’ืขืฉื™ืงื˜ ืึท ืคืœื™ื ืง ืฆื• ื“ื™ ื–ืขืœื‘ืข ืึทื“ืจืขืกืขืก ื•ื•ื™ ื“ื™ ืขืจืฉื˜ืขืจ ืžืึธืœ.

ื–ื™ื ื˜ ื“ืขืจ ืขืจืฉื˜ืขืจ ืงืœืึธื•ื–ืฉืขืจ, ื“ืขื ืกืขืจื•ื•ืขืจ ืื™ื– ืกืงืึทื ื“ ื“ื•ืจืš Shodan 11 ืžืืœ ืื•ืŸ ื‘ื™ื– 21 ืžืื™, Elasticsearch ืื™ื– ื’ืขื•ื•ืขืŸ ืคึฟืึทืจืžืึทื›ื˜ ืื•ื™ืฃ ืื™ื.

ื‘ืœื•ื™ื– ืื•ื™ืฃ ื“ืขื ืžืึธืจื’ืŸ ืคื•ืŸ 24.05.2019 ืžืื™ XNUMX, ื“ืขื Elasticsearch ืคืึทืจืฉื•ื•ื•ื ื“ืŸ ืคื•ืŸ ืฆื™ื‘ื•ืจ ืึทืงืกืขืก ืคึฟืึทืจ ื“ื™ ืฆื•ื•ื™ื™ื˜ ืžืึธืœ. ื‘ืขืฉืึทืก ื“ืขื ืฆื™ื™ึทื˜, ื“ื™ ื™ื ื“ื™ืกื™ื– ื”ืึธื‘ืŸ ื’ืขื•ื•ืืงืกืŸ ื‘ืื˜ื™ื™ื˜ื™ืง:

ื•ื•ื™ื“ืขืจ, ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ื‘ื™ืจื’ืขืจืก ืคึผื™ื™ืžืึทื ืฅ ืฆื• ื“ื™ ืคืึทืจืงืขืจ ืคึผืึธืœื™ืฆื™ื™ึท ืื•ืŸ ื“ื™ FSSP ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืคืขืœื“

ืื•ืŸ ืื•ื™ื‘ ืื™ืจ ืงื•ืง ืื™ืŸ ื“ื™ ื“ืึทื˜ืŸ (ื‘ืœื•ื™ื– ื‘ืึทื˜ื™ื™ื˜ื™ืง ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืžื™ื˜ ื“ื™ ืคืขืจื–ืขื ืœืขื›ืข ื“ืึทื˜ืŸ ืคื•ืŸ ื‘ื™ืจื’ืขืจืก) ืื™ืŸ ื“ื™ ื™ื ื“ืึทืกื™ื– ืคึฟืึทืจ ื“ื™ ืฆื™ื™ื˜ ืคื•ืŸ ืžืื™ 1-22 ืžืื™, ื“ื™ ื‘ื™ืœื“ ืื™ื– ื•ื•ื™ ื’ื™ื™ื˜:

  • 127,525 ืื™ื™ื ืกืŸ ืื™ืŸ ื“ืขื ืื™ื ื“ืขืงืก paygibdd
  • 49,627 ืื™ื™ื ืกืŸ ืื™ืŸ ื“ืขื ืื™ื ื“ืขืงืก ืฉื˜ืจืึทืคืึธื•ื•-ื ืขื˜
  • 162,282 ืื™ื™ื ืกืŸ ืื™ืŸ ื“ืขื ืื™ื ื“ืขืงืก oplata-fssp
  • 220,201 ืื™ื™ื ืกืŸ ืื™ืŸ ื“ืขื ืื™ื ื“ืขืงืก gosoplata

ื‘ื™ื™ึทืฉืคึผื™ืœ ื“ืึทื˜ืŸ ืคื•ืŸ ืื™ื ื“ืขืงืก gosoplata:

ื•ื•ื™ื“ืขืจ, ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ื‘ื™ืจื’ืขืจืก ืคึผื™ื™ืžืึทื ืฅ ืฆื• ื“ื™ ืคืึทืจืงืขืจ ืคึผืึธืœื™ืฆื™ื™ึท ืื•ืŸ ื“ื™ FSSP ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืคืขืœื“

ื‘ื™ื™ึทืฉืคึผื™ืœ ื“ืึทื˜ืŸ ืคื•ืŸ ืื™ื ื“ืขืงืก paygibdd:

ื•ื•ื™ื“ืขืจ, ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ื‘ื™ืจื’ืขืจืก ืคึผื™ื™ืžืึทื ืฅ ืฆื• ื“ื™ ืคืึทืจืงืขืจ ืคึผืึธืœื™ืฆื™ื™ึท ืื•ืŸ ื“ื™ FSSP ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืคืขืœื“

ื ื•, ื“ื™ ื™ื™ืกื™ื ื’ ืื•ื™ืฃ ื“ื™ ืฉื˜ื™ืงืœ ืื™ื– ื’ืขื•ื•ืขืŸ ืึท ื‘ืจื™ื•ื• ืคื•ืŸ ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ืึทื“ืจืขืกืขืก ืฆื• ื•ื•ืึธืก ืื™ืš ื’ืขืฉื™ืงื˜ ื ืึธื•ื˜ืึทืคืึทืงื™ื™ืฉืึทื ื–:

ืžื™ืจ ื‘ืืงื•ืžืขืŸ ื“ื™ื™ืŸ ื‘ืจื™ื•ื• ื•ื•ืขื’ืŸ ื“ื™ ืขืคืขื ืขืŸ ElasticSearch - ื“ืึทื ืงืขืŸ ืคึฟืึทืจ ื“ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข, ื“ื™ ื“ืึทื˜ืึทื‘ื™ื™ืก ืื™ื– ื’ืขื•ื•ืขืŸ ืคืืจืžืื›ื˜. ื“ืขืจ ืกื™ืกื˜ืขื ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ ื•ื•ืึธืก ืจื™ืึธื•ืคึผืึทื ื“ ืึทืงืกืขืก ืื™ื– ืคื™ื™ืขืจื“. ื“ืขืจ ืœืขื’ืึทืœ ื“ื™ื ืกื˜ ืื™ื– ืื•ื™ืš ืคึผืจื™ืคึผืขืจื™ื ื’ ืฆื• ืฉื™ืงืŸ ืฆื• ื“ืขืจ ืžื™ื ื™ืกื˜ืขืจื™ื•ื ืคื•ืŸ ืื™ื ืขืจืœืขื›ืขืจ ืึทืคืคืึทื™ืจืก ืคื•ืŸ ื“ืขืจ ืจืขืคื•ื‘ืœื™ืง ืคื•ืŸ ื˜ืึทื˜ืึทืจืกื˜ืึทืŸ ืึท ื“ืขืจืงืœืขืจื•ื ื’ ืื•ื™ืฃ ื“ื™ ืกื™ืžื ื™ื ืคื•ืŸ ื“ื™ ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืื™ืŸ ื“ื™ ืึทืงืฉืึทื ื– ืคื•ืŸ ื“ื™ ืกื™ืกื˜ืขื ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ ืคื•ืŸ ืขืœืขืžืขื ื˜ืŸ ืื•ื ื˜ืขืจ ืืจื˜ื™ืงืœืขืŸ 272 ืื•ืŸ 273 ืคื•ืŸ ื“ื™ ืงืจื™ืžื™ื ืึทืœ ืงืึธื•ื“ ืคื•ืŸ ื“ื™ ืจื•ืกื™ืฉืข ืคืขื“ืขืจื™ื™ืฉืึทืŸ.

ื ื™ื™ึทืขืก ื•ื•ืขื’ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืก ืื•ืŸ ื™ื ืกื™ื“ืขืจื– ืงืขื ืขืŸ ืฉื˜ืขื ื“ื™ืง ื–ื™ื™ืŸ ื’ืขืคึฟื•ื ืขืŸ ืื•ื™ืฃ ืžื™ื™ืŸ ื˜ืขืœืขื’ืจืึทื ืงืึทื ืึทืœ "ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืก' https://t.me/dataleak.

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’