{"id":92962,"date":"2022-08-18T15:20:00","date_gmt":"2022-08-18T12:20:00","guid":{"rendered":"https:\/\/podiji.karpat.in.ua\/?p=92962"},"modified":"2022-08-18T12:24:05","modified_gmt":"2022-08-18T09:24:05","slug":"kinai-hekkerek-titkos-orosz-katonai-adatokat-loptak","status":"publish","type":"post","link":"https:\/\/podiji.karpat.in.ua\/?p=92962&lang=hu","title":{"rendered":"K\u00ednai hekkerek titkos orosz katonai adatokat loptak"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Az \u00e9v elej\u00e9n v\u00e9grehajtott t\u00e1mad\u00e1sokkal t\u00f6bb tucat v\u00e1llalkoz\u00e1sba siker\u00fclt besziv\u00e1rogniuk, \u00e9s fontos katonai inform\u00e1ci\u00f3kat loptak el.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A m\u00e9g 2022 janu\u00e1rj\u00e1ban, k\u00f6zvetlen\u00fcl a h\u00e1bor\u00fa kirobban\u00e1sa el\u0151tt v\u00e9grehajtott akci\u00f3val sz\u00e1mos v\u00e1llalkoz\u00e1s v\u00e9delmi rendszer\u00e9t \u00e1tt\u00f6rt\u00e9k, s\u0151t, van, ahol teljesen elfoglalt\u00e1k az informatikai infrastrukt\u00far\u00e1t \u00e9s \u00e1tvett\u00e9k az ir\u00e1ny\u00edt\u00e1st a biztons\u00e1gi protokoll h\u00e1l\u00f3zata felett.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"577\" src=\"https:\/\/podiji.karpat.in.ua\/wp-content\/uploads\/2022\/08\/hacker-1024x577.jpg\" alt=\"\" class=\"wp-image-92963\" srcset=\"https:\/\/podiji.karpat.in.ua\/wp-content\/uploads\/2022\/08\/hacker-1024x577.jpg 1024w, https:\/\/podiji.karpat.in.ua\/wp-content\/uploads\/2022\/08\/hacker-300x169.jpg 300w, https:\/\/podiji.karpat.in.ua\/wp-content\/uploads\/2022\/08\/hacker-768x433.jpg 768w, https:\/\/podiji.karpat.in.ua\/wp-content\/uploads\/2022\/08\/hacker.jpg 1108w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">A c\u00e9l val\u00f3sz\u00edn\u0171leg sz\u00e1m\u00edt\u00f3g\u00e9pes k\u00e9mked\u00e9s volt, \u00e9s a TA428 k\u00ednai csoportnak tulajdon\u00edtj\u00e1k, amely kor\u00e1bban kelet-eur\u00f3pai \u00e9s \u00e1zsiai szervezetek ellen hajtott v\u00e9gre hasonl\u00f3 mer\u00e9nyleteket.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Az eg\u00e9sz adathal\u00e1sz e-mailekkel kezd\u0151d\u00f6tt: a t\u00e1mad\u00f3k kihaszn\u00e1lt\u00e1k a Microsoft Office kor\u00e1bbi verzi\u00f3in t\u00e1tong\u00f3 biztons\u00e1gi r\u00e9st, ami CVE-2017-11882 n\u00e9ven ismert (el\u0151sz\u00f6r 2017-ben \u00e9szlelt\u00e9k), \u00e9s tetsz\u0151leges k\u00f3d futtat\u00e1s\u00e1t teszi lehet\u0151v\u00e9 tov\u00e1bbi felhaszn\u00e1l\u00f3i beavatkoz\u00e1s n\u00e9lk\u00fcl.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A h\u00edr nem k\u00f6z\u00f6l konkr\u00e9t r\u00e9szleteket az okozott k\u00e1rok nagys\u00e1g\u00e1r\u00f3l, csak annyi biztos, hogy t\u00f6bb, katonai szektorban dolgoz\u00f3 ipari v\u00e1llalat volt a c\u00e9lpont.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A TA428 csoport t\u00f6bbl\u00e9pcs\u0151s t\u00e1mad\u00e1sa k\u00e1rt\u00e9kony, adathal\u00e1sz e-mailekkel kezd\u0151d\u00f6tt, majd ezek elterjesztett\u00e9k az adatlop\u00f3 \u00e9s k\u00e9mked\u0151 tr\u00f3jai v\u00edrust. Az e-mailek orosz sz\u00f6vegei t\u00f6k\u00e9letesek voltak, nem adtak okot gyan\u00fara, \u00e9s konkr\u00e9t, bizalmas adatokat (neveket \u00e9s szervezeti inform\u00e1ci\u00f3kat) tartalmaztak, amelyek k\u00edv\u00fcl\u00e1ll\u00f3k sz\u00e1m\u00e1ra \u00e1ltal\u00e1ban nem hozz\u00e1f\u00e9rhet\u0151k. Az els\u0151 t\u00e1mad\u00e1si hull\u00e1mban a k\u00fcl\u00f6nb\u00f6z\u0151 orsz\u00e1gokban elhelyezett szerverek inform\u00e1ci\u00f3it t\u00f6lt\u00f6tt\u00e9k fel egy m\u00e1sodlagos, K\u00edn\u00e1ban tal\u00e1lhat\u00f3 szerverre. Val\u00f3sz\u00edn\u0171leg ezeket a r\u00e9szleteket vagy ak\u00e1r a teljes e-mail-mint\u00e1kat a csoport kor\u00e1bban lophatta el m\u00e1s, a most megt\u00e1madott v\u00e1llalatokkal kapcsolatban \u00e1ll\u00f3 c\u00e9gekt\u0151l.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A besz\u00e1mol\u00f3 szerint az attak t\u00f6bb h\u00f3napon kereszt\u00fcl tarthatott, \u00edgy egyel\u0151re biztos inform\u00e1ci\u00f3k sincsenek az ellopott adatok mennyis\u00e9g\u00e9r\u0151l.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mihail Zaicev, orosz biztons\u00e1gi szak\u00e9rt\u0151 szerint olyan nagyszab\u00e1s\u00fa volt az akci\u00f3, hogy a hekkerek valami nagyon fontosat kereshettek a k\u00ednai vezet\u00e9s sz\u00e1m\u00e1ra, \u00e9s a t\u00e1mad\u00e1sok val\u00f3sz\u00edn\u0171leg sikerrel j\u00e1rtak.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Az \u00e9rintett c\u00e9gek nev\u00e9t nem hozt\u00e1k nyilv\u00e1noss\u00e1gra.<\/p>\n\n\n\n<p class=\"has-text-align-right wp-block-paragraph\"><strong><a href=\"https:\/\/index.hu\/techtud\/2022\/08\/18\/kinai-hekker-orosz-titkos-katonai-informaciok\/\" target=\"_blank\" rel=\"noreferrer noopener\">(index.hu)<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A m\u00e9g 2022 janu\u00e1rj\u00e1ban, k\u00f6zvetlen\u00fcl a h\u00e1bor\u00fa kirobban\u00e1sa el\u0151tt v\u00e9grehajtott akci\u00f3val sz\u00e1mos v\u00e1llalkoz\u00e1s v\u00e9delmi rendszer\u00e9t \u00e1tt\u00f6rt\u00e9k, s\u0151t, van, ahol teljesen elfoglalt\u00e1k az informatikai infrastrukt\u00far\u00e1t \u00e9s \u00e1tvett\u00e9k az ir\u00e1ny\u00edt\u00e1st a biztons\u00e1gi protokoll h\u00e1l\u00f3zata felett.<\/p>\n","protected":false},"author":12,"featured_media":92963,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41,11,39],"tags":[876,130027,130028],"class_list":["post-92962","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cikkek","category-kiemelt-tema","category-vilag","tag-hackertamadas","tag-kinai-hackerek","tag-orosz-katonai-adatok"],"_links":{"self":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/92962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=92962"}],"version-history":[{"count":1,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/92962\/revisions"}],"predecessor-version":[{"id":92964,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/92962\/revisions\/92964"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/media\/92963"}],"wp:attachment":[{"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=92962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=92962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/podiji.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=92962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}