{"id":7748,"date":"2023-05-11T13:59:33","date_gmt":"2023-05-11T13:59:33","guid":{"rendered":"https:\/\/texnokun.uz\/?p=7748"},"modified":"2023-06-16T14:07:13","modified_gmt":"2023-06-16T14:07:13","slug":"dragos-axborot-xavfsizligi-kompaniyasi-xakerlik-hujumi-haqida-xabar-berdi","status":"publish","type":"post","link":"https:\/\/texnokun.uz\/?p=7748","title":{"rendered":"Dragos Axborot Xavfsizligi kompaniyasi xakerlik hujumi haqida xabar berdi"},"content":{"rendered":"\n

Dragos, sanoat kiberxavfsizlik kompaniyasi, ma’lum bo’lgan xakerlik guruhi to’lov dasturini joylashtirish uchun uning mudofaasini buzishga va ichki tarmog’iga kirishga harakat qilganini aytdi.<\/p>\n\n\n\n

Mutaxassislarning ta\u2019kidlashicha, hujumchilar kompaniya tarmog\u2018iga kira olmagan, biroq ular SharePoint bulutli xizmati va kompaniyaning shartnomalarni boshqarish tizimidan foydalanish imkoniyatiga ega bo\u2018lishgan.<\/p>\n\n\n\n

\n

\u201c2023-yilning 8-mayida ma\u02bclum bo\u02bblgan kiberjinoyatchilar guruhi Dragos’ga to\u02bblov dasturi hujumini amalga oshirishga urindi, biroq muvaffaqiyatsizlikka uchradi. Hech qanday Dragos tizimi, jumladan Dragos platformasi bilan bog’liq bo’lgan tizimlar xakerlik hujumiga uchramagan, deyiladi kompaniya bayonotida.<\/em><\/p>\n\n\n\n

” Jinoiy guruh yangi savdo xodimining shaxsiy elektron pochta manzilini buzish orqali (u boshlangan sanadan oldin) kirish huquqiga ega bo’lgan va keyin [jinoyatchilar] ushbu shaxsiy ma’lumotlardan Dragos xodimi sifatida o’zini namoyon qilish uchun foydalangan va ular nomidan birinchi qadamlarni bajarishgan<\/em>.”<\/p>\n<\/blockquote>\n\n\n\n

Xabarlarga ko’ra, SharePoint buzib tashlanganidan so’ng, tajovuzkorlar “Ommaviy ma’lumotlar”ni yuklab olishgan va faqat mijozlar uchun mavjud bo’lgan 25 ta hisobotga kirish huquqiga ega bo’lishgan.<\/p>\n\n\n\n

Xodimning akkauntiga kirish imkoniga ega bo\u2018lgan tajovuzkorlar 16 soat davomida bir nechta Dragos tizimlariga kirishga harakat qilishgan lekin RBAC qoidalariga ko\u2018ra muvaffaqiyatsizlikka uchragan. Ular orasida: xabar almashish tizimi, yordamchi stol, moliyaviy tizim, takliflar so’rovi tizimi, xodimlarni rag’batlantirish tizimi va marketing tizimlari bor.<\/p>\n\n\n\n

Kompaniyaning ichki tarmog’iga kira olmay, hujum boshlanganidan 11 kun o’tgach, hujumchilar Dragos rahbarlariga tovlamachilik xatini yuborishdi. Ushbu xabar 5 soatdan keyin o’qilgan, chunki u ish soatlaridan keyin yuborilgan.<\/p>\n\n\n\n

Tovlama xabarini o’qib bo’lgach, besh daqiqada, Dragos hisobni o’chirib tashlaydi, barcha faol seanslarni bekor qildi va tajovuzkorlarning kompaniya resurslariga kirishini blokladi.<\/font><\/font><\/p>\n\n\n\n

\n
\"\"<\/figure>\n<\/figure>\n\n\n\n

Hodisa xronologiyasi<\/p>\n\n\n\n

\n

\u201cIshonchimiz komilki, bizning ko’p qatlamli xavfsizlik nazoratimiz tajovuzkorlarga o’zlarining asosiy maqsadi bo’lgan to’lov dasturini ishga tushirishdan to’sqinlik qildi. Ular shuningdek, yo’nalishni to’g’ri yo’naltira olmadilar,doimiy kirishni o’rnatmadilar yoki infratuzilmaga biron bir o’zgartirish kiritmadilar”-deydi kompaniya rahbari.<\/em><\/p>\n\n\n\n

\u201cHodisa oqibatlari bilan shug\u2018ullangan tashqi firma va Dragos tahlilchilari hodisa to\u2018xtatilgan deb hisoblasa-da, tergov davom etmoqda. O\u02bbg\u02bbirlangan ma\u02bclumotlar ommaga e\u02bclon qilinishi mumkin, chunki biz tovlamachilarga pul to\u02bblamaslikka qaror qildik\u201d.<\/em><\/p>\n<\/blockquote>\n\n\n\n

Bleeping Computer<\/mark> qayd etishicha, Dragos tomonidan murosa ko\u2018rsatkichlari qatorida sanab o\u2018tilgan IP-manzillardan biri (144.202.42[.]216) avvalroq ransomware<\/mark> tomonidan buzilgan tizimlarga masofadan kirish uchun ishlatiladigan SystemBC va Cobalt Strike zararli dasturlarini joylashtirish bilan bog\u2018langan.<\/p>\n\n\n\n

Equinix tadqiqotchilari nashrga SystemBC’dan Conti, ViceSociety, BlackCat, Quantum, Zeppelin va Play kabi ko\u2018plab to\u2018lov dasturlari guruhlari tomonidan foydalanilgan, shuning uchun Dragosga hujum ortida kim turganini aytish qiyin. Xususan, mutaxassislar ushbu IP-manzil so’nggi BlackBasta hujumlarida ishlatilganligini ham ta’kidladilar.<\/p>\n\n\n\n

Foydalanilgan manba: ”Dragos Axborot Xavfsizligi kompaniyasi xakehttps:\/\/texnokun.uz\/wp-admin\/post.php?post=7748&action=editrlik hujumi haqida xabar berdi”<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Mutaxassislarning ta\u2019kidlashicha, hujumchilar kompaniya tarmog\u2018iga kira olmagan, biroq ular SharePoint bulutli xizmati va kompaniyaning shartnomalarni boshqarish tizimidan foydalanish imkoniyatiga ega bo\u2018lishgan.<\/p>\n","protected":false},"author":18,"featured_media":8071,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[92],"tags":[311,312],"class_list":["post-7748","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-yangiliklar","tag-dragos","tag-xakerlik-hujumi"],"_links":{"self":[{"href":"https:\/\/texnokun.uz\/index.php?rest_route=\/wp\/v2\/posts\/7748","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/texnokun.uz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/texnokun.uz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/texnokun.uz\/index.php?rest_route=\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/texnokun.uz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7748"}],"version-history":[{"count":8,"href":"https:\/\/texnokun.uz\/index.php?rest_route=\/wp\/v2\/posts\/7748\/revisions"}],"predecessor-version":[{"id":8632,"href":"https:\/\/texnokun.uz\/index.php?rest_route=\/wp\/v2\/posts\/7748\/revisions\/8632"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/texnokun.uz\/index.php?rest_route=\/wp\/v2\/media\/8071"}],"wp:attachment":[{"href":"https:\/\/texnokun.uz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7748"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/texnokun.uz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7748"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/texnokun.uz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7748"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}