{"id":457,"date":"2024-04-28T07:21:28","date_gmt":"2024-04-28T04:21:28","guid":{"rendered":"https:\/\/sms-txt.net\/?p=457"},"modified":"2024-09-05T12:46:56","modified_gmt":"2024-09-05T09:46:56","slug":"priklad-utoku-ss7","status":"publish","type":"post","link":"https:\/\/sms-txt.net\/sk\/ss7-sms\/priklad-utoku-ss7\/","title":{"rendered":"Pr\u00edklad \u00fatoku SS7"},"content":{"rendered":"<p>\u00datoky zameran\u00e9 na odopretie slu\u017eby sa uk\u00e1zali ako nie odli\u0161n\u00e9, pri\u010dom len 7,8 percenta tohto druhu \u00fatoku sa v s\u00fa\u010dasnosti st\u00e1va siln\u00fdm. Dokonca aj syst\u00e9m InsertSubscriberData bol vyu\u017eit\u00fd, av\u0161ak 99 percent spr\u00e1v zostalo cyklick\u00fdch - teda ur\u010dite boli zo siete oper\u00e1tora zamietnut\u00e9. N\u00e1v\u0161tevn\u00edci a filtrovanie mali zna\u010dn\u00fd vplyv na v\u00fdsledok -\u017ee podiel \u017eiadost\u00ed z t\u00fdchto siet\u00ed bol kr\u00e1t men\u0161\u00ed ako u ostatn\u00fdch, av\u0161ak nebolo mo\u017en\u00e9 zosta\u0165 chr\u00e1nen\u00fd pred \u00fatokmi. Odmietnutie slu\u017eby by teraz bolo hrozbou zariaden\u00ed IoT. Teraz nie s\u00fa s komunika\u010dn\u00fdmi sie\u0165ami prepojen\u00e9 len spotrebite\u013esk\u00e9 zariadenia, ale aj komponenty mestskej infra\u0161trukt\u00fary, s\u00fa\u010dasn\u00e9 podniky, energetika, doprava a \u010fal\u0161ie podniky.<\/p>\n<p>Ke\u010f\u017ee sme u\u017e povedali, \u017ee \u00fato\u010dn\u00edk m\u00f4\u017ee spusti\u0165 \u00fatok na pr\u00edstupnos\u0165 \u00fa\u010dastn\u00edka tak, \u017ee komunik\u00e1ciu nemo\u017eno o\u017eivi\u0165 ani bez kontaktovania podpory, pri\u010dom \u010das be\u017ene presahuje tri hodiny.<\/p>\n<p>&nbsp;<\/p>\n<h1>Pr\u00edklad \u00fatoku SS7:<\/h1>\n<p>&nbsp;<\/p>\n<p>Ako u\u017e bolo spomenut\u00e9, samotn\u00e9 vykon\u00e1vanie bezpe\u010dnostn\u00fdch opatren\u00ed bez pou\u017eitia sp\u00f4sobu zabezpe\u010denia nesta\u010d\u00ed na to, aby sa zabr\u00e1nilo v\u0161etk\u00fdm \u00fatokom vyu\u017e\u00edvaj\u00facim zranite\u013enosti, za ktor\u00fdmi stoja faktory spo\u010d\u00edvaj\u00face v architekt\u00fare siet\u00ed SS7. Pozrime sa na jeden pr\u00edpad. \u00datok sa zmenil na priebeh krokov, ktor\u00e9 postup detekcie \u00fatoku dok\u00e1zal zjednoti\u0165 do s\u00e9rie, ktor\u00e1 je hodnovern\u00e1, hoci bezpe\u010dnostn\u00e9 techniky zanedbali pochopenie pr\u00edkazov. Na za\u010diatku \u00fato\u010dn\u00edci zanechali prosperuj\u00face \u00fasilie n\u00e1js\u0165 \u00fa\u010dastn\u00edcke IMSI. Po z\u00edskan\u00ed inform\u00e1ci\u00ed na z\u00edskanie aktiv\u00edt sa sna\u017eili n\u00e1js\u0165 \u00fa\u010dastn\u00edka. Tento bod tohto \u00fatoku sa zr\u00fatil. \u00dato\u010dn\u00edci poslali pet\u00edciu z\u00e1pisu \u00fa\u010dastn\u00edka do siete. Pet\u00edcia bola potvrden\u00e1 sie\u0165ou oper\u00e1tora. Mohli zachyti\u0165 prich\u00e1dzaj\u00face telef\u00f3nne hovory a SMS \u00fa\u010dastn\u00edka, to bol ich cie\u013e. Pre\u010do nesk\u00famame jednotliv\u00e9 opatrenia podrobnej\u0161ie?<\/p>\n<p>Postup detekcie nebezpe\u010denstva a odpovede PT TAD rozpoznal spr\u00e1vy SendRoutingInfoForSM doru\u010den\u00e9 na vonkaj\u0161\u00ed server do niektor\u00e9ho \u00fa\u010dastn\u00edka dom\u00e1cej siete svojho oper\u00e1tora. Komunik\u00e1cie boli tie\u017e vyhl\u00e1sen\u00e9 za pochybn\u00e9, \u010do nie je prekvapuj\u00face, zatia\u013e \u010do v pr\u00edpade platn\u00fdch akci\u00ed, preto\u017ee tieto neboli tesne nasledovan\u00e9 prostredn\u00edctvom SMS. Prostriedky snahy pozorne sledovali ka\u017ed\u00fd materi\u00e1l na \u00fatok na sie\u0165 prostredn\u00edctvom ProvideSubscriberInfo, ktor\u00fd bol touto sie\u0165ou zablokovan\u00fd. Dokonca sa technikou PT TAD zistilo, \u017ee zmes SendRoutingInfoForSM spolu s ProvideSubscriberInfo \u00fato\u010d\u00ed pomocou obdobia len jednej 2 min\u00faty, \u010do znamen\u00e1, \u017ee n\u00e1jdenie \u00fa\u010dastn\u00edka je dokon\u010den\u00e9.<\/p>\n<p>&nbsp;<\/p>\n<h2>Z\u00e1ver:<\/h2>\n<p>Ako m\u00f4\u017eeme \u013eahko vidie\u0165, mnoh\u00ed mobiln\u00ed oper\u00e1tori chr\u00e1nia svoju mar\u017eu SS7 rekonfigur\u00e1ciou sie\u0165ov\u00fdch dod\u00e1vok a pou\u017eit\u00edm prostriedkov na smerovanie SMS pre dom\u00e1cnosti. Toto naozaj m\u00f4\u017ee by\u0165 prostriedok na odolanie \u00fatokom SS7, av\u0161ak na ochranu siete to mo\u017eno nesta\u010d\u00ed. Na\u0161a \u0161t\u00fadia a tie\u017e bezpe\u010dnostn\u00e1 vy\u0161etrovacia klinika ukazuje, \u017ee existuj\u00fa \u0161ance na \u00fatoky SS7, ktor\u00e9 tento druh bezpe\u010dnostnej mechaniky vynech\u00e1vaj\u00fa. Okrem toho s\u00fa \u00fatoky trochu skryt\u00e9 a \u0165a\u017eko sa od mlad\u00e9ho obdobia odha\u013euj\u00fa. To je d\u00f4vod, pre\u010do sa domnievame, \u017ee mobiln\u00ed oper\u00e1tori sa musia podie\u013ea\u0165 na bezpe\u010dnostnom sledovan\u00ed vonkaj\u0161\u00edch vz\u0165ahov SS7 podporovanom z\u00e1kladom vystavenia, ktor\u00fd je aktu\u00e1lny.<\/p>","protected":false},"excerpt":{"rendered":"<p>\u00datoky zameran\u00e9 na odopretie slu\u017eby sa uk\u00e1zali ako nie odli\u0161n\u00e9, pri\u010dom len 7,8 percenta tohto druhu \u00fatoku sa v s\u00fa\u010dasnosti st\u00e1va siln\u00fdm. Dokonca aj syst\u00e9m InsertSubscriberData bol vyu\u017eit\u00fd, av\u0161ak 99 percent spr\u00e1v zostalo cyklick\u00fdch - teda ur\u010dite boli zo siete oper\u00e1tora zamietnut\u00e9. N\u00e1v\u0161tevn\u00edci a filtrovanie mali zna\u010dn\u00fd vplyv na...<\/p>","protected":false},"author":1,"featured_media":1736,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[69,1],"tags":[],"class_list":["post-457","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sms-intercept","category-ss7-sms"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.7 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Attack example of SS7<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sms-txt.net\/sk\/ss7-sms\/priklad-utoku-ss7\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Attack example of SS7\" \/>\n<meta property=\"og:description\" content=\"Attacks targeted toward denial of service proved perhaps not different, together with just 7.8 percentage of this kind of attack currently becoming powerful. Even the InsertSubscriberData system was utilized, however, 99 percent of the messages stayed cyclical &#8211;that they certainly were dismissed from the operator network. Visitors and filtering had a Considerable Impact on the...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sms-txt.net\/sk\/ss7-sms\/priklad-utoku-ss7\/\" \/>\n<meta property=\"og:site_name\" content=\"SS7 Hacking\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-28T04:21:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-05T09:46:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sms-txt.net\/wp-content\/uploads\/2020\/07\/Attack-example-of-SS7.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"900\" \/>\n\t<meta property=\"og:image:height\" content=\"507\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"ss7\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ss7\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/\"},\"author\":{\"name\":\"ss7\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#\\\/schema\\\/person\\\/fa482bf9132db58e46bb9c9df2d73be0\"},\"headline\":\"Attack example of SS7\",\"datePublished\":\"2024-04-28T04:21:28+00:00\",\"dateModified\":\"2024-09-05T09:46:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/\"},\"wordCount\":513,\"publisher\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sms-txt.net\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/Attack-example-of-SS7.jpg\",\"articleSection\":[\"SMS Intercept\",\"SS7\"],\"inLanguage\":\"sk-SK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/\",\"url\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/\",\"name\":\"Attack example of SS7\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sms-txt.net\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/Attack-example-of-SS7.jpg\",\"datePublished\":\"2024-04-28T04:21:28+00:00\",\"dateModified\":\"2024-09-05T09:46:56+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/#breadcrumb\"},\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sms-txt.net\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/Attack-example-of-SS7.jpg\",\"contentUrl\":\"https:\\\/\\\/sms-txt.net\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/Attack-example-of-SS7.jpg\",\"width\":900,\"height\":507},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/ss7-sms\\\/attack-example-of-ss7\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sms-txt.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Attack example of SS7\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#website\",\"url\":\"https:\\\/\\\/sms-txt.net\\\/\",\"name\":\"SS7 Hacking\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sms-txt.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sk-SK\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#organization\",\"name\":\"SS7\",\"url\":\"https:\\\/\\\/sms-txt.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/yellow-jaguar-454368.hostingersite.com\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/logo.jpg\",\"contentUrl\":\"https:\\\/\\\/yellow-jaguar-454368.hostingersite.com\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/logo.jpg\",\"width\":866,\"height\":680,\"caption\":\"SS7\"},\"image\":{\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sms-txt.net\\\/#\\\/schema\\\/person\\\/fa482bf9132db58e46bb9c9df2d73be0\",\"name\":\"ss7\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Pr\u00edklad \u00fatoku SS7","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sms-txt.net\/sk\/ss7-sms\/priklad-utoku-ss7\/","og_locale":"sk_SK","og_type":"article","og_title":"Attack example of SS7","og_description":"Attacks targeted toward denial of service proved perhaps not different, together with just 7.8 percentage of this kind of attack currently becoming powerful. Even the InsertSubscriberData system was utilized, however, 99 percent of the messages stayed cyclical &#8211;that they certainly were dismissed from the operator network. Visitors and filtering had a Considerable Impact on the...","og_url":"https:\/\/sms-txt.net\/sk\/ss7-sms\/priklad-utoku-ss7\/","og_site_name":"SS7 Hacking","article_published_time":"2024-04-28T04:21:28+00:00","article_modified_time":"2024-09-05T09:46:56+00:00","og_image":[{"width":900,"height":507,"url":"https:\/\/sms-txt.net\/wp-content\/uploads\/2020\/07\/Attack-example-of-SS7.jpg","type":"image\/jpeg"}],"author":"ss7","twitter_card":"summary_large_image","twitter_misc":{"Written by":"ss7","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/#article","isPartOf":{"@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/"},"author":{"name":"ss7","@id":"https:\/\/sms-txt.net\/#\/schema\/person\/fa482bf9132db58e46bb9c9df2d73be0"},"headline":"Attack example of SS7","datePublished":"2024-04-28T04:21:28+00:00","dateModified":"2024-09-05T09:46:56+00:00","mainEntityOfPage":{"@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/"},"wordCount":513,"publisher":{"@id":"https:\/\/sms-txt.net\/#organization"},"image":{"@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/#primaryimage"},"thumbnailUrl":"https:\/\/sms-txt.net\/wp-content\/uploads\/2020\/07\/Attack-example-of-SS7.jpg","articleSection":["SMS Intercept","SS7"],"inLanguage":"sk-SK"},{"@type":"WebPage","@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/","url":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/","name":"Pr\u00edklad \u00fatoku SS7","isPartOf":{"@id":"https:\/\/sms-txt.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/#primaryimage"},"image":{"@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/#primaryimage"},"thumbnailUrl":"https:\/\/sms-txt.net\/wp-content\/uploads\/2020\/07\/Attack-example-of-SS7.jpg","datePublished":"2024-04-28T04:21:28+00:00","dateModified":"2024-09-05T09:46:56+00:00","breadcrumb":{"@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/"]}]},{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/#primaryimage","url":"https:\/\/sms-txt.net\/wp-content\/uploads\/2020\/07\/Attack-example-of-SS7.jpg","contentUrl":"https:\/\/sms-txt.net\/wp-content\/uploads\/2020\/07\/Attack-example-of-SS7.jpg","width":900,"height":507},{"@type":"BreadcrumbList","@id":"https:\/\/sms-txt.net\/ss7-sms\/attack-example-of-ss7\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sms-txt.net\/"},{"@type":"ListItem","position":2,"name":"Attack example of SS7"}]},{"@type":"WebSite","@id":"https:\/\/sms-txt.net\/#website","url":"https:\/\/sms-txt.net\/","name":"Hacking SS7","description":"","publisher":{"@id":"https:\/\/sms-txt.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sms-txt.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"},{"@type":"Organization","@id":"https:\/\/sms-txt.net\/#organization","name":"SS7","url":"https:\/\/sms-txt.net\/","logo":{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/sms-txt.net\/#\/schema\/logo\/image\/","url":"https:\/\/yellow-jaguar-454368.hostingersite.com\/wp-content\/uploads\/2020\/05\/logo.jpg","contentUrl":"https:\/\/yellow-jaguar-454368.hostingersite.com\/wp-content\/uploads\/2020\/05\/logo.jpg","width":866,"height":680,"caption":"SS7"},"image":{"@id":"https:\/\/sms-txt.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/sms-txt.net\/#\/schema\/person\/fa482bf9132db58e46bb9c9df2d73be0","name":"ss7"}]}},"_links":{"self":[{"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/posts\/457","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/comments?post=457"}],"version-history":[{"count":0,"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/posts\/457\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/media\/1736"}],"wp:attachment":[{"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/media?parent=457"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/categories?post=457"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sms-txt.net\/sk\/wp-json\/wp\/v2\/tags?post=457"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}