{"id":3551,"date":"2021-12-10T15:57:06","date_gmt":"2021-12-10T14:57:06","guid":{"rendered":"https:\/\/sajberinfo.com\/2022\/11\/21\/text-92\/"},"modified":"2022-12-04T13:14:39","modified_gmt":"2022-12-04T12:14:39","slug":"dark-iot-botnet-napada-tp-link-rutere","status":"publish","type":"post","link":"https:\/\/sajberinfo.com\/en\/2021\/12\/10\/dark-iot-botnet-napada-tp-link-rutere\/","title":{"rendered":"Dark.IoT botnet napada TP-Link rutere"},"content":{"rendered":"

<\/p>\n

Iako je Mirai <\/em>mre\u017ea uga\u0161ena, dostupnost njenog k\u00f4da omogu\u0107ava pojavu novih botnet mre\u017ea. Tako napada\u010d poznat pod imenom Manga<\/em>, Dark Mirai <\/em>i Dark.IoT<\/em> zloupotreblljava nea\u017eurirane\u00a0 TP-Link<\/em> rutere dodavaju\u0107i ih u svoju mre\u017eu. Radi se o ranjivosti CVE-2021-41653<\/a><\/em> koju je otkrio sigurnosni istra\u017eiva\u010d Matek Kamill\u00f3 <\/a><\/em>po\u010detkom novembara. Konkretno, radi se o veoma popularnim ure\u0111ajima <\/span>TP-Link TL-WR840N EU V5<\/em> iz 2017. godine. <\/span><\/span><\/span><\/p>\n

\"TP-Link

Photo by Manik Roy<\/em><\/a> on Unsplash<\/em><\/a><\/p><\/div>\n

Iz sigurnosne kompanije Fortinet<\/em><\/a> ka\u017eu da napada\u010d najvjerovatnije koristi podrazumjevanu fabri\u010dku lozinku ure\u0111aja i ranjivost koju je otkrio Matek Kamill\u00f3<\/em> kako bi dobili kontrolu na\u00a0 nea\u017euriranim\u00a0 TP-Link TL-WR840N<\/em> ruterima. Ovo napada\u010du daje mogu\u0107nost da da pokrene denial of service<\/em> (DDoS<\/em>) ili da vr\u0161i preusmjeravanje zlonamjernog saobra\u0107aja preko ure\u0111aja nad kojim ima kontrolu. Kako bi korisnici osigurali svoje ure\u0111aje od raznih dostupnih varijanti Mirai botnet<\/em> napada, u ovoj i sli\u010dnim situacijama, potrebno je:<\/span><\/span><\/p>\n

– Izvr\u0161iti a\u017euriranje ranjivih ure\u0111aja\u00a0<\/i>na zadnju verziju firmware<\/em>;<\/i><\/span><\/span><\/p>\n

– Promijeniti inicijalnu prijavu na ure\u0111aj i postaviti jaku lozinku sa 20 i vi\u0161e karaktera;<\/span><\/span><\/p>\n

– Redovno provjeriti pode\u0161avanja DNS<\/em> servera na ruteru;<\/span><\/span><\/p>\n

– Provjeriti i aktivirati firewall<\/em> koji je \u010desto isklju\u010den na ku\u0107nim verzijama ure\u0111aja;<\/span><\/span><\/p>\n

– Isklju\u010diti sve opcije daljinskog pristupa ure\u0111aju;<\/span><\/span><\/p>\n

– Onemogu\u0107iti UPnP<\/em> i WPS<\/em>, ako se ne koriste;<\/span><\/span><\/p>\n

– Ako je ruter previ\u0161e star i nije vi\u0161e podr\u017ean od strane proizvo\u0111a\u010da, zamjeniti ga novim.<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Iako je Mirai mre\u017ea uga\u0161ena, dostupnost njenog k\u00f4da omogu\u0107ava pojavu novih botnet mre\u017ea. Tako napada\u010d poznat pod imenom Manga, Dark Mirai i Dark.IoT zloupotreblljava nea\u017eurirane\u00a0 TP-Link rutere dodavaju\u0107i ih u svoju mre\u017eu. Radi se...<\/p>","protected":false},"author":1,"featured_media":3643,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[113,162,163,63,93,161,126],"class_list":["post-3551","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hronike","tag-botnet","tag-firewall","tag-iot","tag-lozinka","tag-malware","tag-router","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/posts\/3551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/comments?post=3551"}],"version-history":[{"count":0,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/posts\/3551\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/media\/3643"}],"wp:attachment":[{"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/media?parent=3551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/categories?post=3551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sajberinfo.com\/en\/wp-json\/wp\/v2\/tags?post=3551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}