{"id":157310,"date":"2024-05-17T17:50:00","date_gmt":"2024-05-17T14:50:00","guid":{"rendered":"https:\/\/podiji.karpat.in.ua\/?p=157310"},"modified":"2024-05-17T15:13:34","modified_gmt":"2024-05-17T12:13:34","slug":"orosz-hackerek-hatoltak-be-egy-europai-orszag-kulugyminiszteriumanak-rendszereibe","status":"publish","type":"post","link":"https:\/\/podiji.karpat.in.ua\/?p=157310&lang=hu","title":{"rendered":"Orosz hackerek hatoltak be egy eur\u00f3pai orsz\u00e1g k\u00fcl\u00fcgyminiszt\u00e9rium\u00e1nak rendszereibe"},"content":{"rendered":"\n

Az orosz, \u00e1llamilag t\u00e1mogatott Turla hackercsoport \u00e1llhat a Lunar nev\u0171 k\u00e1rtev\u0151 k\u00e9t v\u00e1ltozata m\u00f6g\u00f6tt, melyet egy eur\u00f3pai orsz\u00e1g korm\u00e1nyzati rendszerei ellen vetettek be az ESET kiberbiztons\u00e1gi v\u00e1llalat szerint.<\/strong><\/p>\n\n\n\n

K\u00e9t, eddig nem ismert h\u00e1ts\u00f3 ajt\u00f3t (backdoor) fedeztek fel az ESET kutat\u00f3i: a LunarWeb \u00e9s a LunarMail k\u00e1rtev\u0151ket egy eur\u00f3pai korm\u00e1ny diplom\u00e1ciai int\u00e9zm\u00e9nyeinek kompromitt\u00e1l\u00e1s\u00e1ra haszn\u00e1lt\u00e1k.<\/p>\n\n\n\n

Konkr\u00e9tan egy nem neves\u00edtett, k\u00f6zel-keleti diplom\u00e1ciai k\u00e9pviselettel rendelkez\u0151 eur\u00f3pai orsz\u00e1g k\u00fcl\u00fcgyminiszt\u00e9rium\u00e1ba hatoltak be vel\u00fck. Az ESET jelent\u00e9se szerint legal\u00e1bb 2020 \u00f3ta akt\u00edvak a k\u00e1rtev\u0151k.<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Jelenleg \u00fagy v\u00e9lik, a Turla nev\u0171, \u00e1llamilag t\u00e1mogatott orosz hackercsoporthoz kapcsolhat\u00f3k a k\u00e1rtev\u0151k, de ennek bizonyoss\u00e1ga jelenleg k\u00f6zepes.<\/p>\n\n\n\n

\u00cdgy telep\u00fclnek a k\u00e1rtev\u0151k<\/h2>\n\n\n\n

Az ESET nyom\u00e1n a Bleeping Computer azt \u00edrja, a t\u00e1mad\u00e1s vesz\u00e9lyes e-mailekkel indul, melyek csatolm\u00e1nya egy rosszindulat\u00fa makr\u00f3-k\u00f3dokat tartalmaz\u00f3 Word-dokumentum. Ezek telep\u00edtik a LunarMail k\u00e1rtev\u0151t a c\u00e9lpont rendszer\u00e9re.<\/p>\n\n\n\n

R\u00e1ad\u00e1sul az \u00e1lland\u00f3 jelenl\u00e9t kialak\u00edt\u00e1s\u00e1ra is gondol a k\u00e1rt\u00e9kony program, mert l\u00e9trehoz egy Outlook b\u0151v\u00edtm\u00e9nyt, ami a levelez\u0151 minden ind\u00edt\u00e1sakor aktiv\u00e1lja \u0151t.<\/p>\n\n\n\n

A LunarWeb egy f\u00e9lrekonfigur\u00e1lt h\u00e1l\u00f3zatmonitoroz\u00f3 eszk\u00f6z, a Zabbix r\u00e9v\u00e9n ker\u00fcl a c\u00e9lg\u00e9pekre. Mindk\u00e9t, a g\u00e9pre ker\u00fclt k\u00e1rtev\u0151 titkos\u00edt\u00e1s\u00e1t egy LunarLoader nev\u0171 eszk\u00f6z v\u00e9gzi el.<\/p>\n\n\n\n

Miut\u00e1n m\u0171k\u00f6dni kezdenek, a t\u00e1mad\u00f3k t\u00e1volr\u00f3l tudnak parancsokat k\u00fcldeni a megfert\u0151z\u00f6tt g\u00e9pre, \u00e9s ahhoz a h\u00e1l\u00f3zathoz is hozz\u00e1f\u00e9rhetnek, melyhez a fert\u0151z\u00f6tt g\u00e9p tartozik.<\/p>\n\n\n\n

A kutat\u00f3k szerint a k\u00e1rtev\u0151ket hossz\u00fa ideig fenn\u00e1ll\u00f3, titkos megfigyel\u00e9sre \u00e9s adatok ellop\u00e1s\u00e1ra hegyezt\u00e9k ki. \u00cdgy lehet ide\u00e1lis eszk\u00f6ze a korm\u00e1nyzati vagy diplom\u00e1ciai int\u00e9zm\u00e9nyek feletti ellen\u0151rz\u00e9snek.<\/p>\n\n\n\n

(hvg.hu)<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Az orosz, \u00e1llamilag t\u00e1mogatott Turla hackercsoport \u00e1llhat a Lunar nev\u0171 k\u00e1rtev\u0151 k\u00e9t v\u00e1ltozata m\u00f6g\u00f6tt, melyet egy eur\u00f3pai orsz\u00e1g korm\u00e1nyzati rendszerei ellen vetettek be az ESET kiberbiztons\u00e1gi v\u00e1llalat szerint.<\/p>\n","protected":false},"author":12,"featured_media":157315,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41,49,39],"tags":[455686,455685,41225,455683],"class_list":["post-157310","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cikkek","category-hirek","category-vilag","tag-eset","tag-lunar","tag-orosz-hackerek","tag-trula"],"_links":{"self":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/157310","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=157310"}],"version-history":[{"count":1,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/157310\/revisions"}],"predecessor-version":[{"id":157317,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/157310\/revisions\/157317"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/media\/157315"}],"wp:attachment":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=157310"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=157310"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=157310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}