Futhi, amakhulu ezinkulungwane zezinkokhelo zezakhamizi emaphoyiseni omgwaqo kanye ne-FSSP zazisesidlangalaleni

Khumbula I wabhala kuHabre nasekhaya esiteshini seTelegramimininingwane yezinkokhelo ezivuna amaphoyisa omgwaqo kanye neFSSP yabasebenzisi besizindalwazi yatholakala kanjani esidlangalaleni paygibdd.rf, paygibdd.ru, gos-oplata.ru, fines.net и oplata-fssp.ru?

Futhi, amakhulu ezinkulungwane zezinkokhelo zezakhamizi emaphoyiseni omgwaqo kanye ne-FSSP zazisesidlangalaleni

Ungahleki nje, lokhu akulona ihlaya nhlobo - iseva efanayo enedatha evela ohlelweni olufanayo iphinde yavuleleka emhlabeni wonke.

Hhayi-ke, asihambe sithole...

Дисклеймер: вся информация ниже публикуется исключительно в образовательных целях. Автор не получал доступа к персональным данным третьих лиц и компаний. Информация взята либо из открытых источников, либо была предоставлена автору анонимными доброжелателями.

Okokuqala, ake ngikukhumbuze kancane ngokulandelana kwezenzakalo:

  • Ngo-April 12.04.2019, XNUMX (ebusuku), iseva ye-Elasticsearch yatholwa eyayingadingi ukuqinisekiswa ukuze ixhumeke.
  • Ngomhla ka-13.04.2019/XNUMX/XNUMX (ekuseni) isaziso sithunyelwe kubanikazi beseva.
  • Ngomhla ziyi-13.04.2019 kuMbasa, XNUMX (ntambama), iseva yasuswa “kuthuleke” ekufinyeleleni komphakathi.

Ngesikhathi sokuvalwa kweseva kokuqala, izinkomba ze-Elasticsearch zazibukeka kanje:

Futhi, amakhulu ezinkulungwane zezinkokhelo zezakhamizi emaphoyiseni omgwaqo kanye ne-FSSP zazisesidlangalaleni

Futhi manje ngomhla ka-21.05.2019/16/00 cishe ngo-XNUMX:XNUMX (isikhathi saseMoscow), iseva efanayo ye-Elasticsearch, enezinkomba ezifanayo (kanye nezintsha) ziphinde zivele esizindeni somphakathi:

Futhi, amakhulu ezinkulungwane zezinkokhelo zezakhamizi emaphoyiseni omgwaqo kanye ne-FSSP zazisesidlangalaleni

Angizange ngiwakholwe amehlo ami lapho ngiyibona (ngokushesha ngemva komdlalo ngo PHDays esihlokweni sokuthola imininingwane egciniwe evuliwe) esazisweni semeyili esivela kuwethu I-DeviceLock Data Breach Intelligence. Uma ngikhuluma iqiniso, umcabango wami wokuqala kwaba ukuthi lolu kwakuwuhlobo oluthile lwephutha lesistimu.

Kodwa-ke, cha, bekungelona iphutha futhi ngemuva kokuhlola yonke into ngesandla, ngo-01:25 ngoMeyi 22.05.2019, XNUMX, ngaphinda ngathumela isexwayiso emakhelini afanayo nasekuqaleni.

Kusukela ekuvaleni kokuqala, le seva iskenwe ngu-Shodan izikhathi ezingu-11 futhi kuze kube nguMeyi 21, i-Elasticsearch ivaliwe kuyo.

Ekuseni kuphela kwangomhla zingama-24.05.2019 kuMeyi, XNUMX, lolu phenyo lwe-Elastic lwanyamalala okwesibili ekufinyeleleni komphakathi. Ngalesi sikhathi, ama-indices akhule kakhulu:

Futhi, amakhulu ezinkulungwane zezinkokhelo zezakhamizi emaphoyiseni omgwaqo kanye ne-FSSP zazisesidlangalaleni

Futhi uma ubheka idatha (ulwazi olubalulekile kuphela oluqukethe idatha yomuntu siqu yezakhamizi) ezinkomba zenkathi kusukela ngoMeyi 1 kuya kuMeyi 22, isithombe simi kanje:

  • 127,525 okufakiwe ohlwini paygibdd
  • 49,627 okufakiwe ohlwini i-shtrafov-net
  • 162,282 okufakiwe ohlwini i-oplata-fssp
  • 220,201 okufakiwe ohlwini gosoplata

Idatha yesibonelo evela kunkomba gosoplata:

Futhi, amakhulu ezinkulungwane zezinkokhelo zezakhamizi emaphoyiseni omgwaqo kanye ne-FSSP zazisesidlangalaleni

Idatha yesibonelo evela kunkomba paygibdd:

Futhi, amakhulu ezinkulungwane zezinkokhelo zezakhamizi emaphoyiseni omgwaqo kanye ne-FSSP zazisesidlangalaleni

Hhayi-ke, uqweqwe lwekhekhe bekuyincwadi evela kwelinye lamakheli engithumele kuwo izaziso:

Sithole incwadi yakho mayelana ne-ElasticSearch evulekile - siyabonga ngolwazi, isizindalwazi sivaliwe. Umlawuli wesistimu ovule kabusha ukufinyelela uxoshiwe. Inkonzo yezomthetho ilungiselela nokuthumela eMnyangweni Wezangaphakathi WeRiphabhulikhi yaseTatarstan Isitatimende ngezimpawu zokuba khona ezenzweni zomphathi wesistimu wezakhi ngaphansi kwe-Articles 272 kanye ne-273 ye-Criminal Code of the Russian Federation.

Izindaba mayelana nokuvuza kolwazi kanye nabangaphakathi zingatholakala njalo esiteshini sami seTelegram "Ukuputshuka kolwazi»: https://t.me/dataleak.

Source: www.habr.com

Engeza amazwana