June 22, 2017

Chilichonse Chimene Muyenera Kudziwa Zokhudza SS7 Hack Attack ndi Njira Zotsutsana

Sistimu Yolumikizira Nambala 7 (SS7) ndi gulu la ma protocol olumikizirana pafoni. Amadziwikanso kuti CCS7 (Common Channel Signalling System 7) kapena CCIS7 ( Common Channel Interoffice Signalling 7) , ndi malo olumikizirana mafoni padziko lonse lapansi. Mu 1975, ma protocol ena adapangidwa kuti alumikize netiweki imodzi yam'manja ku netiweki ina yam'manja kuti asinthane chidziwitso chofunikira potumiza mafoni ndi mauthenga pakati pawo, kukhazikitsa ndikuwononga mafoni ambiri padziko lonse lapansi a Public Switched Telephone Network (PSTN) ndipo izi ndi zomwe zimatchedwa SS7.

Chilichonse Chimene Muyenera Kudziwa Zokhudza SS7 Attack1

Kodi SS7 imachita chiyani?

  • Njira zoyimbira ndi mauthenga pakati pa netiweki zosiyanasiyana.
  • Short Mauthenga Service (SMS)
  • Kuchokera Kuzizindikiro Kwabandi
  • Ntchito Zosintha Zambiri
  • Kusintha kuchokera ku Cell Tower kupita ku ina.
  • Imaletsa madontho oyimbira popanda kuchepa kwamtundu.
  • Amalola ogwiritsa ntchito kuyendayenda wina akamayenda kwina.
  • Kutanthauzira Manambala
  • Kuthana Nambala Kwapafupi
  • Kulipiriratu

SS7 imagwiritsidwa ntchito m'makampani ochulukitsa pafupifupi 800 padziko lonse lapansi. Amathandizira Mabanki kutsimikizira kukhalapo kwa foni yamakasitomala mdziko linalake kuti avomereze zochitika zawo ndikupewa zachinyengo.

Kuwonetsedwa kwa SS7 Attack

Nkhani zachitetezo ku SS7 zidapezeka koyamba ndi ofufuza ndikuwonetsa ku Chaos Communication Congress Hacker Conference, 2014 ku Hamburg ndipo zidawonekera pomwe Nohl adawonetsa kuyang'anira kwakanthawi kwa congressman ku California kuchokera ku Berlin kwa mphindi 60 za CBS. Nkhaniyo idapemphedwa kuti komiti yoyang'anira ifufuze za chiopsezo.

Kufooka kwamapangidwe a SS7 kumatengera mwayi kwa owabera potero kuwapangitsa kuti abise deta, kukhala owerenga, kutsatira komwe kuli wogwiritsa ntchito ndikusokoneza meseji ya wosuta. Zowonongekazo zikuwululidwa pokhapokha ma netiweki atayamba kupereka mwayi wachitatu ku SS7 Design yomwe idadalira kwathunthu kukhulupirika ngati malonda. Kugwirizana ndi Maboma Aboma kumapereka njira yoti State Surveillance ndi kuwonekera kwakukulu kwa kapangidwe kake kogwiritsa ntchito netiweki kumathandizira kufikira kwa mabungwe m'maiko ena komanso onyoza. Ndi anthu ochepa okha omwe amati mabungwe azamalamulo ngati NSA akugwiritsa ntchito njira ya SS7 pazomwe amachita.

Pogwiritsa ntchito zida zapaintaneti, ngakhale nzika zimatha kutsata wovutitsidwayo mosavuta powononga ndalama zochepa ngati $ 300 ndikupeza zidziwitso kuchokera pa intaneti.

Chilichonse Chimene Muyenera Kudziwa Zokhudza SS7 Attack.

Zotsatirapo:

Aliyense amene ali ndi foni yam'manja atha kuzunzidwa. Kusuntha kwa ogwiritsa ntchito ma foni am'manja kumatha kupezeka pafupifupi kulikonse padziko lapansi ndipo ali ndi mwayi wopambana pafupifupi 70%. Ndiko kuwukira kwapakatikati pamalumikizidwe am'manja omwe amagwiritsa ntchito kutsimikizika pama protocol olumikizirana omwe amayenda pamwamba pa SS7 ngakhale pomwe ma netiweki akugwiritsa ntchito kubisa kwapamwamba. Zili ngati khomo lakumaso kwanyumba yanu latetezedwa koma khomo lakumbuyo ndilotseguka. Ziwopsezazi zikudetsa nkhawa potsegula khomo la zochitika zowunikira anthu ambiri. Chiwonongekochi chimasokoneza chinsinsi cha makasitomala mabiliyoni padziko lonse lapansi. Omwe ali ndi mphamvu atha kukhala pachiwopsezo chachikulu chowopsezedwa.

Kodi ndi maulamuliro ati omwe owononga adzapeza?

Akakhala ndi mwayi wogwiritsa ntchito SS7, wowononga amatha kukhala ndi chidziwitso chofananira ndikutolera ngati ntchito zachitetezo pogwiritsa ntchito njira yomwe imagwiritsidwa ntchito ndi omwe akukuthandizani kuti azithandizira anthu nthawi zonse ndi deta.

Atha:

  • Patsogolo Kuyimbira poyera
  • Werengani Mauthenga
  • Mverani Kuyimba Kwama foni
  • Tsatani Malo Ogwiritsa Ntchito
  • Kusokoneza kudziwika kwa ozunzidwa omwe amagwiritsa ntchito mawonekedwe ake.
  • Kutsegulira kwa njira ziwiri zachitetezo chotsimikizira.

Osewera amatha kupeza zambiri za omwe adalembetsa.

Ma stingray ndi zida zofala zowunikira zomwe zimathandiza pakuphwanya mafoni, kutumiza mameseji abodza, kukhazikitsa pulogalamu yaumbanda pafoni ndikutsata malo omwe wovutikirayo ali.

Njira Zotengedwa & TKutengedwa

Mobile Association Operators 'Trade Association, GSMA, yakhazikitsa ntchito zingapo zowunikira kulowererapo kulikonse kapena kuzunza kwa ma sign sign mu netiweki.

Makontrakitala achitetezo agwiritsidwa ntchito ndi ma netiweki komanso Mr. Karsten Nohl, wofufuza zachitetezo ku Germany yemwe adawonetsa cholakwacho kwa ola limodzi mu 1 kuti athe kusanthula dongosolo la SS2014 ndikuletsa kufikira kosaloledwa.

Chida chotchedwa SnoopSnitch chinapangidwa kuti chichenjeze pamene kuukira kwina kwa SS7 kukuchitika ndikupeza IMSI Catchers ngati alipo.

M'malo mwa SMS zachikhalidwe, anthu akuyenera kugwiritsa ntchito bwino maimelo obisika monga WhatsApp kapena iMessage ndipo mafoni omwewo akuyenera kupangidwa pogwiritsa ntchito mawu pa IP ngati FaceTime mu iPhones.

Kubisa kwa Mapeto Kumalimbikitsa kuti muchepetse zoopsa.

Makampani ambiri akufuna kusintha SS7 protocol ndi Diameter, njira yotetezeka kwambiri komabe, ogwiritsa ntchito mafoni ali pachiwopsezo chobedwa chifukwa chakumbuyo komwe kumagwirizana ndi SS7.

Ponena za wolemba 

Chaitanya


{"imelo": "Imelo adilesi ndi yosavomerezeka", "url": "Adilesi ya webusayiti ndi yosavomerezeka", "yofunika": "Malo ofunikira akusowa"}