Haker\u00ebt iranian\u00eb t\u00eb grupit Handala arrit\u00ebn t\u00eb hakojn\u00eb adres\u00ebn personale t\u00eb emailit t\u00eb drejtorit t\u00eb FBI-s\u00eb, Kash Patel, duke publikuar online fotografi private dhe nj\u00eb pjes\u00eb prej mbi 300 emailesh. Ishte vet\u00eb FBI q\u00eb e konfirmoi t\u00eb premten e 27 marsit p\u00ebrmes z\u00ebdh\u00ebn\u00ebsit Ben Williamson, duke sqaruar se jan\u00eb \u201cmarr\u00eb t\u00eb gjitha masat e nevojshme p\u00ebr t\u00eb zbutur rreziqet e mundshme\u201d dhe se t\u00eb dh\u00ebnat e p\u00ebrfshira ishin \u201ct\u00eb natyr\u00ebs historike dhe nuk p\u00ebrmbanin informacione qeveritare\u201d.<\/p>\n
N\u00eb faqen e vet, grupi Handala Hack Team ka shkruar se Patel \u201cdo ta gjej\u00eb tani emrin e tij n\u00eb list\u00ebn e viktimave t\u00eb hakuara me sukses\u201d, duke bashk\u00ebngjitur fotografi ku ai shfaqet duke nuhatur dhe pir\u00eb puro, duke drejtuar nj\u00eb makin\u00eb t\u00eb vjet\u00ebr kabrio dhe duke b\u00ebr\u00eb selfie n\u00eb pasqyr\u00eb me nj\u00eb shishe rumi. Email-et e publikuara duket se p\u00ebrziejn\u00eb korrespondenc\u00eb personale dhe profesionale t\u00eb Patel, q\u00eb i p\u00ebrkasin periudh\u00ebs 2010\u20132019. Adresa Gmail e goditur p\u00ebrputhet me at\u00eb q\u00eb i \u00ebsht\u00eb atribuar m\u00eb her\u00ebt Patel n\u00eb shkelje t\u00eb tjera t\u00eb t\u00eb dh\u00ebnave, t\u00eb ruajtura nga kompania e inteligjenc\u00ebs n\u00eb \u201cdark web\u201d, District 4 Labs.<\/p>\n
Operacioni \u00ebsht\u00eb pjes\u00eb e nj\u00eb strategjie m\u00eb t\u00eb gjer\u00eb. Gil Messing, shef kabineti n\u00eb kompanin\u00eb izraelite t\u00eb siguris\u00eb kibernetike Check Point, e ka cil\u00ebsuar sulmin si pjes\u00eb t\u00eb nj\u00eb plani iranian p\u00ebr t\u00eb v\u00ebn\u00eb n\u00eb siklet zyrtar\u00ebt amerikan\u00eb dhe \u201cp\u00ebr t\u2019i b\u00ebr\u00eb t\u00eb ndihen t\u00eb cenuesh\u00ebm\u201d. Sipas tij, iranian\u00ebt \u201cpo p\u00ebrdorin gjith\u00e7ka q\u00eb kan\u00eb n\u00eb dispozicion\u201d.<\/p>\n
Nuk b\u00ebhet fjal\u00eb p\u00ebr nj\u00eb rast t\u00eb izoluar dhe as p\u00ebr nj\u00eb teknik\u00eb t\u00eb re. N\u00eb vitin 2016, haker\u00eb t\u00eb lidhur me Rusin\u00eb nd\u00ebrhyn\u00eb n\u00eb llogarin\u00eb Gmail t\u00eb John Podesta, drejtues i fushat\u00ebs s\u00eb Hillary Clinton, duke publikuar materialet n\u00eb WikiLeaks, n\u00eb nj\u00eb rast q\u00eb pati ndikim n\u00eb gar\u00ebn presidenciale me Donald Trump. Edhe m\u00eb her\u00ebt, n\u00eb vitin 2015, disa haker\u00eb adoleshent\u00eb dep\u00ebrtuan n\u00eb llogarin\u00eb personale AOL t\u00eb drejtorit t\u00eb at\u00ebhersh\u00ebm t\u00eb CIA-s, John Brennan, duke shp\u00ebrndar\u00eb t\u00eb dh\u00ebna mbi zyrtar\u00eb t\u00eb inteligjenc\u00ebs.<\/p>\n
Shkelje t\u00eb tilla, teknikisht jo shum\u00eb t\u00eb sofistikuara, por me ndikim t\u00eb madh mediatik, p\u00ebrputhen me vler\u00ebsimet e inteligjenc\u00ebs amerikane se Irani dhe aleat\u00ebt e tij mund t\u2019u p\u00ebrgjigjen sulmeve t\u00eb SHBA-s\u00eb dhe Izraelit me sulme kibernetike t\u00eb nivelit t\u00eb ul\u00ebt ndaj rrjeteve dixhitale amerikane.<\/p>\n
Kush \u00ebsht\u00eb Handala?<\/p>\n
Handala paraqitet si nj\u00eb grup haker\u00ebsh \u201cvigjilent\u00eb\u201d pro-palestinez\u00eb, por studiuesit per\u00ebndimor\u00eb e konsiderojn\u00eb si nj\u00eb nga grupet e shumta n\u00ebn t\u00eb cilat operojn\u00eb nj\u00ebsit\u00eb e inteligjenc\u00ebs kibernetike t\u00eb qeveris\u00eb iraniane, ve\u00e7an\u00ebrisht ato q\u00eb lidhen me Ministrin\u00eb e Inteligjenc\u00ebs dhe Siguris\u00eb (MOIS) dhe Gard\u00ebn Revolucionare Islamike (IRGC). Grupi \u00ebsht\u00eb aktiv t\u00eb pakt\u00ebn q\u00eb nga viti 2022, kur goditi qeverin\u00eb e Shqip\u00ebris\u00eb. Handala \u00ebsht\u00eb i lidhur me grupin iranian \u201cHomeland Justice\u201d, i cili ka marr\u00eb p\u00ebrsip\u00ebr sulmet ndaj Shqip\u00ebris\u00eb, p\u00ebrfshir\u00eb edhe sulmet e fundit ndaj faqes s\u00eb Kuvendit dhe Post\u00ebs Shqiptare.<\/p>\n
Grupi Handala, m\u00eb 11 mars goditi kompanin\u00eb amerikane t\u00eb teknologjis\u00eb mjek\u00ebsore Stryker me nj\u00eb sulm ransomware, q\u00eb sipas pretendimeve bllokoi rreth 80 mij\u00eb pajisje t\u00eb kompanis\u00eb dhe personale. N\u00eb deklarat\u00ebn e tyre, sulmi u cil\u00ebsua si \u201chakmarrje p\u00ebr sulmin brutal ndaj shkoll\u00ebs s\u00eb Minab\u201d. Stryker deklaroi se incidenti \u00ebsht\u00eb \u201cn\u00ebn kontroll\u201d dhe se nuk ka prova p\u00ebr akses n\u00eb sistemet e klient\u00ebve apo partner\u00ebve.<\/p>\n
T\u00eb enjten, Handala mori p\u00ebrgjegj\u00ebsin\u00eb edhe p\u00ebr publikimin e t\u00eb dh\u00ebnave personale t\u00eb dhjet\u00ebra punonj\u00ebsve t\u00eb Lockheed Martin q\u00eb sh\u00ebrbejn\u00eb n\u00eb Lindjen e Mesme; kompania konfirmoi se \u00ebsht\u00eb n\u00eb dijeni t\u00eb raportimeve.<\/p>\n
\u201cHandala\u201d dhe \u201cHomeland Justice\u201d ishin mes faqeve iraniane q\u00eb u godit\u00ebn nga SHBA dhe iu bllokuan domain-et m\u00eb 20 mars. Nj\u00ebra prej tyre, sipas njoftimit zyrtar, ishte p\u00ebrdorur n\u00eb kuad\u00ebr t\u00eb \u201cnj\u00eb p\u00ebrpjekjeje m\u00eb t\u00eb gjer\u00eb p\u00ebr t\u00eb frik\u00ebsuar dhe ngacmuar disident\u00ebt dhe gazetar\u00ebt iranian\u00eb q\u00eb jetojn\u00eb n\u00eb SHBA dhe jasht\u00eb saj\u201d. Nj\u00eb tjet\u00ebr publikonte k\u00ebrc\u00ebnime t\u00eb drejtp\u00ebrdrejta ndaj zyrtar\u00ebve amerikan\u00eb: \u201cDo t\u00eb ekzekutoheni s\u00eb shpejti dhe kemi ofruar nj\u00eb shp\u00ebrblim prej 250 mij\u00eb dollar\u00ebsh p\u00ebr agjent\u00ebt q\u00eb do t\u2019ju vrasin dhe do t\u2019ju presin kok\u00ebn\u201d.<\/p>\n
Teknikat e p\u00ebrdorura<\/p>\n
Metoda e operimit t\u00eb Handala-s ndjek modelin klasik t\u00eb inxhinieris\u00eb sociale: objektivat, gazetar\u00eb, disident\u00eb, aktivist\u00eb, zyrtar\u00eb, kontaktohen me email-e t\u00eb personalizuara, t\u00eb nd\u00ebrtuara sipas zakoneve dhe informacionit t\u00eb disponuesh\u00ebm p\u00ebr secil\u00ebn viktim\u00eb. Ata q\u00eb bien pre e mashtrimit nxiten t\u00eb ndajn\u00eb kode aksesi dhe kredenciale. Malware-i maskohet si aplikacione t\u00eb zakonshme p\u00ebr sistemet Windows. Pasi pajisja komprometohet, nj\u00eb bot n\u00eb Telegram krijon lidhje n\u00eb distanc\u00eb me sulmuesit dhe nxjerr t\u00eb dh\u00ebna si dokumente, \u201cscreenshot\u201d-e dhe, n\u00eb disa raste, edhe regjistrime audio dhe video nga sesione n\u00eb Zoom.<\/p>","protected":false},"excerpt":{"rendered":"
Haker\u00ebt iranian\u00eb t\u00eb grupit Handala arrit\u00ebn t\u00eb hakojn\u00eb adres\u00ebn personale t\u00eb emailit t\u00eb drejtorit t\u00eb FBI-s\u00eb, Kash Patel, duke publikuar online fotografi private dhe nj\u00eb pjes\u00eb prej mbi 300 emailesh. Ishte vet\u00eb FBI q\u00eb e konfirmoi t\u00eb premten e 27 marsit p\u00ebrmes z\u00ebdh\u00ebn\u00ebsit Ben Williamson, duke sqaruar se jan\u00eb \u201cmarr\u00eb t\u00eb gjitha masat e nevojshme […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-78520","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/posts\/78520","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/comments?post=78520"}],"version-history":[{"count":0,"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/posts\/78520\/revisions"}],"wp:attachment":[{"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/media?parent=78520"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/categories?post=78520"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/tags?post=78520"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}