dodany: 22.07.2013 | tagi: , ,

Autor:

Atak na sieć OVH

29

Administratorzy firmy hostingowej OVH poinformowali o włamaniu do ich sieci. Chodzi konkretnie o sieć wewnętrzną w biurze w miejscowości Roubaix we Francji.

Po weryfikacji problemu pracownicy OVH zidentyfikowali włamywacza, któremu udało się uzyskać dostęp do konta e-mail jednego z administratorów systemów. Dzięki temu uzyskał także dostęp do wewnętrznego protokołu VPN innego pracownika. Następnie udało mu się uzyskać dostępy jednego z administratorów systemu, który jest odpowiedzialny za wewnętrzny backoffice.

Jak podaje OVH wewnętrzne zabezpieczenia opierały się na 2 poziomach weryfikacji:  geograficznym (obecność w biurze lub korzystanie z VPN-a) i haśle konkretnego użytkownika.

Firma oczywiście pojdęła wszystkie niezbędne kroki, tj. zresetowała hasła wszystkich pracowników, uruchomiono nowy VPN, wprowadzono ograniczenie dostępu do poczty tylko bezpośrednio z biura bądź za pomocą połączenia VPN. Zwiększono także poziom weryfikacji pracowników, którzy mają dostęp do kluczowych elementów systemu – poza własnym hasłem i IP źródłowym wprowadzono także osobisty sprzętowy generator tokenów.

Niestety włamywacze uzyskali dostęp do bazy danych klientów OVH z Europy. Przechwycone dane zawierają imię i nazwisko, adres, miejscowość, kraj, telefon/faks oraz zaszyfrowane hasło. To ostatnie na szczęście jest zaszyfrowane algorytmem SHA 512, aczkolwiek teoretycznie jest możliwe złamanie takiego zabezpieczenia. Firma zastrzega, że dane dotyczące płatności kartami kredytowymi nie zostały ujawnione, gdyż te nie są przechowywane w ich systemie.

Każdy klient otrzymał od firmy e-mail z informacją o incydencie wraz z zaleceniem zmiany hasła. Jeśli tak się nie stało, to powinniśmy bezzwłocznie sami tego dokonać. Firma też zgłosiła powyższe naruszenie od organów prawa.

 

 

Redaktor działu aktualności WebSecurity.pl. Pasjonat komputerów od czasów epoki "bezmyszkowej".

29 odpowiedzi na “Atak na sieć OVH”

  1. You want your vehicle to be safe in storage against fire, theft, building defects
    that can damage the vehicle, etc. Some cars have higher theft rates and that is also a factor
    in your coverage. It is rare, for example, to find a driver who qualifies for a discount because they have
    their homeowner’s insurance through the same company.

  2. avatar best love quotes napisał(a):

    buen dia acabo p enterarme de tu web-site b la verdad es que myself parece genial not any sabia environnant les mas individuality interesadas en estos temas, aqui tienes us nuevo lector qui seguira visitandote a diario.

  3. avatar cheap van insurance napisał(a):

    Thank you a bunch to get expressing this with all of us all you actually know that which you are conversing approximately! Book-marked. Please furthermore take a look at my personal web site Means). We might have a weblink industry long term contract among us

  4. avatar caravella napisał(a):

    It’s excellent a chance to create a few ideas for that longer term and it’s also a chance to be happy Everythingmaori.Com. We have check this out send and when I could truthfully I want to recommend you quite a few exciting elements or even guidance. You may publish following articles or blog posts with this content. I actually would like to find out more factors close to the idea!

  5. Thanks for any other great post. Where else may anybody get that kind of information in such an ideal approach of writing?
    I’ve a presentation next week, and I am at the look for such info.

  6. avatar expungement napisał(a):

    WOW just what I was searching for. Came here by searching
    for seobook.com

  7. avatar trulylovable.com napisał(a):

    Yes, because you are pushing it to the side you were on originally.
    In fact, if you look there, you have to read a complex number, write a
    complex number or you could have directly done it.
    Secondary file structures are those sets of files that are used.

  8. avatar Priscilla napisał(a):

    This is the perfect webpage for anybody who wants to find out about this
    topic. You understand a whole lot its almost tough to argue
    with you (not that I actually would want to…HaHa). You certainly put a
    fresh spin on a subject that has been discussed for ages.
    Excellent stuff, just great!

    my homepage :: dogs experience stress (Priscilla)

  9. avatar Toni napisał(a):

    Remember, in my own view, that these viruses, which
    package a double-strand DNA genome, much, much larger genome.
    Suppose it lies so and then go to macbook the center of that plane,
    what we have here is a global declaration. Andd if there is any minor or major leakage in the roof of
    the barrel and the flow are macbook again held together by disulfide bond,
    the heavy chain.

  10. I just could not get away from your website before implying that that I actually enjoyed Cars For Sale, Second Hand Cars, Cars For Sale, Used For Sale, Used Cars South Africa, Surf4Cars, Second Cars the normal facts individuals deliver with your targeted traffic? Is going to be again continually to look into cross-check fresh discussions

  11. When I initially left a comment I seem to have clicked the -Notify me when new comments are added- checkbox and from now
    on each time a comment is added I receive 4 emails with the same comment.
    There has to be an easy method you can remove me from that service?
    Thanks!

  12. Appreciate each alternate educational weblog. Where by more can I am getting that sort of info written in this type of suitable approach? I own a challenge that i am right now working in, so i are already with the consider this sort of data.. what is super-inclusive tours

  13. avatar content napisał(a):

    Techniques. Privileged us I uncovered your web site accidentally, and i’m shocked the key reason why this chance did not came to exist previously! We book-marked the idea.

  14. avatar cross rings napisał(a):

    Very nice write-up. I absolutely appreciate this website.
    Thanks!

  15. avatar steroidi anabolizzanti napisał(a):

    Integratore Bodybuilding Online Probolan 50, probolan 50 naturale per aumentare la massa muscolare e dimagrire.

  16. avatar Oro napisał(a):

    Yes! Finally something about Precio del Oro.

  17. avatar kids toys 2015 napisał(a):

    Everything is very open with a really clear clarification of the issues.
    It was really informative. Your website is very useful. Thanks for sharing!

  18. avatar frivgames napisał(a):

    I’m not certain the place you’re getting your info, however good topic.
    I must spend some time learning more or understanding more.
    Thanks for great information I was in search of this information for
    my mission.

  19. avatar bargains napisał(a):

    Simply wish to say your article is as surprising.

    The clarity for your put up is just spectacular and i could
    assume you’re knowledgeable in this subject. Well with your permission let me to take hold
    of your RSS feed to keep updated with drawing close post.
    Thanks a million and please carry on the gratifying
    work.

  20. avatar create your own shirts napisał(a):

    It’s wonderful that you are getting ideas from this article as well as from our dialogue
    made at this time.

  21. avatar Pf2Accurating.Com napisał(a):

    I have read so many articles concerning the blogger lovers but this paragraph is genuinely a nice article, keep it up.

  22. avatar look at this site napisał(a):

    There are many online jewelry companies, which will offer you certified diamond
    jewelry at unbelievable prices. There is some classic range of emerald jewelry available on the market
    today, including necklaces and rings. Chances are you wont be able to
    tell the difference and will be much cheaper than an over-priced platinum
    band.

  23. avatar car games napisał(a):

    Awesome post.

  24. Sehr gut geschriebener Beitrag! Ich sehe mir
    sehr gerne Serien über das Internet an. Vorallem liebe ich Amazon Prime Video.

  25. avatar todaayuda.com napisał(a):

    If some one needs expert view on the topic of running a blog afterward i
    suggest him/her to pay a visit this web site,
    Keep up the pleasant job.

  26. avatar General Poster napisał(a):

    Amazing! Its really awesome paragraph, I have got
    much clear idea on the topic of from this article.

  27. avatar texas napisał(a):

    Pretty portion of content. I simply stumbled upon your blog and in accession capital to say that I get in fact enjoyed account your weblog posts.
    Any way I’ll be subscribing on your feeds and even I fulfillment
    you access consistently quickly.

  28. avatar computer warranty napisał(a):

    I go to see every day some blogs and websites to read articles,
    but this website provides quality based articles.

  29. avatar Clarita napisał(a):

    My spouse аnd I stumbled over here diffferent website аnd tһought Imay as welⅼ check thinjgs out.
    I like whɑt I seе so now i am following yօu.
    Lⲟok forward tо checking oᥙt ʏour web pɑge repeatedly.

Dodaj komentarz

Twój adres email nie zostanie opublikowany. Pola, których wypełnienie jest wymagane, są oznaczone symbolem *