{"id":653865,"date":"2024-02-13T14:12:21","date_gmt":"2024-02-13T13:12:21","guid":{"rendered":"https:\/\/www.hashtag.al\/?p=653865"},"modified":"2024-02-13T14:13:29","modified_gmt":"2024-02-13T13:13:29","slug":"autoriteti-per-sigurine-kibernetike-sulmi-ndaj-instat-nga-hakerat-iraniane-fshine-materiale-nga-6-kompjutere-te-dhenat-u-rikuperuan","status":"publish","type":"post","link":"https:\/\/www.hashtag.al\/index.php\/2024\/02\/13\/autoriteti-per-sigurine-kibernetike-sulmi-ndaj-instat-nga-hakerat-iraniane-fshine-materiale-nga-6-kompjutere-te-dhenat-u-rikuperuan\/","title":{"rendered":"Autoriteti p\u00ebr Sigurin\u00eb Kibernetike: Sulmi ndaj INSTAT nga hakerat iranian\u00eb, t\u00eb dh\u00ebnat u rikuperuan","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"\"<\/a><\/span><\/p>\n

Pas sulmit kibernetik ndaj INSTAT m\u00eb 1 shkurt, autoritetet thon\u00eb se fshihet grupi Homeland Justive, i sponsorizuar nga shteti iranian.<\/span><\/p>\n

Autoriteti p\u00ebr Sigurin\u00eb Kibernetike thot\u00eb se virusi preku 40 kompjuter\u00eb dhe fshiu materiale n\u00eb 6 prej tyre.<\/span><\/p>\n

Autoriteti p\u00ebr Sigurin\u00eb Kibernetike thot\u00eb se p\u00ebr neutralizimin e sulmit dhe identifikimin e tyre u bashk\u00ebpunua edhe me aleat\u00ebt nd\u00ebrkomb\u00ebtar\u00eb, pasi jan\u00eb identifikuar edhe tentativa sulmesh kibernetike n\u00eb infrastruktura kritike t\u00eb vendit.<\/span><\/p>\n

INSTAT thot\u00eb se nuk jan\u00eb prekur t\u00eb dh\u00ebnat e CENSIT pasi nuk jan\u00eb t\u00eb hedhura n\u00eb servera. INSTAT sqaron po ashtu se jan\u00eb prekur vet\u00ebm sistemet operative dhe \u00e7do e dh\u00ebn\u00eb \u00ebsht\u00eb rikuperuar.<\/span><\/p>\n

 <\/p>\n

Deklarata e plot\u00eb<\/span><\/p>\n

M\u00eb dat\u00eb 1 shkurt 2024, Instituti i Statistikave u p\u00ebrball me nj\u00eb sulm kibernetik q\u00eb synonte infrastruktur\u00ebn e tij teknologjike.<\/em><\/span><\/p>\n

N\u00eb momentin e par\u00eb q\u00eb AKCESK u vu n\u00eb dijeni t\u00eb sulmit, angazhoi menj\u00ebher\u00eb ekipin e Analiz\u00ebs s\u00eb Siguris\u00eb Kibernetike p\u00ebr t\u00eb ofruar ndihm\u00eb n\u00eb parandalimin dhe rim\u00ebk\u00ebmbjen e sistemeve t\u00eb k\u00ebsaj infrastrukture. N\u00eb bashk\u00ebpunim t\u00eb ngusht\u00eb me ekspert\u00ebt e INSTAT, AKCESK ka drejtuar procesin p\u00ebr disa dit\u00eb radhazi p\u00ebr t\u00eb zbardhur dhe neutralizuar sulmin.<\/em><\/span><\/p>\n

Pas ndihm\u00ebs s\u00eb AKCESK n\u00eb parandalimin e p\u00ebrshkall\u00ebzimit t\u00eb sulmit, ekspertet tan\u00eb b\u00ebn\u00eb nj\u00eb skanim total t\u00eb gjith\u00eb server\u00ebve p\u00ebr t\u00eb identifikuar k\u00ebrc\u00ebnime t\u00eb mundshme dhe p\u00ebr t\u00eb rivendosur t\u00eb dh\u00ebnat n\u00eb server\u00ebt e prekur. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, po punojm\u00eb edhe n\u00eb bashk\u00ebpunim me aleat\u00ebt nd\u00ebrkomb\u00ebtar\u00eb, t\u00eb cil\u00ebt kan\u00eb ofruar ndihm\u00eb p\u00ebr t\u00eb adresuar k\u00ebt\u00eb situat\u00eb t\u00eb nd\u00ebrlikuar.<\/em><\/span><\/p>\n

AKCESK ka koordinuar n\u00eb koh\u00eb reale pun\u00ebn me t\u00eb gjitha infrastrukturat e tjera kritike dhe t\u00eb r\u00ebnd\u00ebsishme t\u00eb vendit, duke monitoruar situat\u00ebn dhe duke shk\u00ebmbyer detaje nga sulmi. Si rezultat i k\u00ebtij bashk\u00ebpunimi t\u00eb gjithansh\u00ebm, \u00ebsht\u00eb arritur t\u00eb parandalohen sulme t\u00eb ngjashme n\u00eb infrastruktura kritike t\u00eb vendit, n\u00eb k\u00ebt\u00eb vazhd\u00eb sulmesh kibernetike.<\/em><\/span><\/p>\n

Nga analiza e zhvilluar deri tani, \u00ebsht\u00eb konfirmuar se sulmuesit p\u00ebrdor\u00ebn skedarin MEK-DDMC.exe p\u00ebr t\u00eb ekzekutuar nj\u00eb virus me p\u00ebrmbajtje keqdash\u00ebse. Ky sulm i njohur si \u00cbiper (Fshir\u00ebs) kishte si q\u00ebllim fshirjen e t\u00eb dh\u00ebnave t\u00eb sektorit Boot dhe prekjen e pajisjeve brenda Active Directory (AD).<\/em><\/span><\/p>\n

P\u00ebr hyrjen n\u00eb sistem mendohet se \u00ebsht\u00eb shfryt\u00ebzuar serveri Exchange p\u00ebr shkak t\u00eb nj\u00eb versioni t\u00eb pa p\u00ebrdit\u00ebsuar. Aktoret keqdash\u00ebs arrit\u00ebn t\u00eb tejkalonin privilegjet dhe t\u00eb merrnin kontrollin e sistemit Active Directory dhe \u201cData Protection Manager\u201d, duke shp\u00ebrndar\u00eb virusin tek pajisjet dhe serverat n\u00eb rrjet. Virusi i shp\u00ebrndar\u00eb ka infektuar 40 kompjuter\u00eb, nga ku ka fshir\u00eb 6 prej tyre. M\u00eb pas virusi ka b\u00ebr\u00eb fshirjen e serverit n\u00eb t\u00eb cilin kryheshin ekzekutimet e komandave. Pas k\u00ebsaj, aktor\u00ebt kan\u00eb humbur komunikimin me infrastruktur\u00ebn.<\/em><\/span><\/p>\n

Bazuar n\u00eb informacionin e disponuesh\u00ebm, aktor\u00ebt q\u00eb q\u00ebndrojn\u00eb pas k\u00ebtij sulmi kibernetik jan\u00eb identifikuar si \u201cHomeland Justice\u201d, nj\u00eb grup sulmi i sponsorizuar nga shteti iranian q\u00eb ka kryer tashm\u00eb sulme t\u00eb tjera n\u00eb t\u00eb kaluar\u00ebn.<\/em><\/span><\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Pas sulmit kibernetik ndaj INSTAT m\u00eb 1 shkurt, autoritetet thon\u00eb se fshihet grupi Homeland Justive, i sponsorizuar nga shteti iranian. Autoriteti p\u00ebr Sigurin\u00eb Kibernetike thot\u00eb se virusi preku 40 kompjuter\u00eb dhe fshiu materiale n\u00eb 6 prej tyre. Autoriteti p\u00ebr Sigurin\u00eb Kibernetike thot\u00eb se p\u00ebr neutralizimin e sulmit dhe identifikimin e tyre u bashk\u00ebpunua edhe me […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":30,"featured_media":653866,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[65],"tags":[],"class_list":["post-653865","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lajme"],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/posts\/653865","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/users\/30"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/comments?post=653865"}],"version-history":[{"count":0,"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/posts\/653865\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/media\/653866"}],"wp:attachment":[{"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/media?parent=653865"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/categories?post=653865"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hashtag.al\/index.php\/wp-json\/wp\/v2\/tags?post=653865"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}