Si par hasard vous avez r\u00e9cemment modifi\u00e9 le mot de passe de votre profil Instagram, celui-ci a peut-\u00eatre \u00e9t\u00e9 expos\u00e9 \u00e0 une attaque de pirate informatique pendant dix minutes. Selon l’expert en cybers\u00e9curit\u00e9 Lamax Muthiya, jusqu’\u00e0 r\u00e9cemment, le r\u00e9seau social pr\u00e9sentait une vuln\u00e9rabilit\u00e9 qui permettait \u00e0 une autre personne d’acc\u00e9der aux comptes via un processus tr\u00e8s simple.<\/p>\n
Cet expert en cybers\u00e9curit\u00e9 a d\u00e9couvert que lorsqu\u2019une personne demande un nouveau mot de passe Instagram, son profil reste largement non prot\u00e9g\u00e9 pendant dix minutes. Par co\u00efncidence, la dur\u00e9e de validit\u00e9 du message texte que le r\u00e9seau social lui-m\u00eame envoie au t\u00e9l\u00e9phone mobile de l’utilisateur. Le message comprend six chiffres n\u00e9cessaires pour v\u00e9rifier que la personne qui a demand\u00e9 un nouveau mot de passe est le propri\u00e9taire du compte.<\/p>\n
Mutiyah souhaitait d\u00e9couvrir s’il existait une vuln\u00e9rabilit\u00e9. Il a donc d\u00e9cid\u00e9 de lancer une \u00ab attaque par force brute \u00bb pendant toute la dur\u00e9e de validit\u00e9 du message. \u00a8R\u00e9aliser une attaque de force majeure est tr\u00e8s simple. Si un mot de passe est bas\u00e9 sur un code num\u00e9rique, il suffit de faire toutes les combinaisons possibles pour finir par trouver le bon et acc\u00e9der ainsi au r\u00e9seau social\u00a0\u00bb, explique-t-il.<\/p>\n
Pour mener \u00e0 bien cette attaque, Mutiyah a d\u00e9cid\u00e9 d’utiliser diff\u00e9rents serveurs dans le cloud qui lui permettraient d’utiliser les IP n\u00e9cessaires pour r\u00e9aliser les 200 000 combinaisons num\u00e9riques indispensables pour acc\u00e9der au compte. Et si vous utilisez une seule adresse, le compte sera bloqu\u00e9 apr\u00e8s quelques tentatives.<\/p>\n
On suppose que lors d\u2019attaques similaires \u00e0 celle-ci, si le code n\u2019est pas correct, le syst\u00e8me plante compl\u00e8tement ou temporairement. Cependant, le probl\u00e8me d’Instagram est qu’il compte comme erreurs celles qui proviennent de la m\u00eame adresse IP.<\/p>\n
Mutiyah a utilis\u00e9 jusqu’\u00e0 5 000 adresses IP diff\u00e9rentes pour mener \u00e0 bien l’attaque. Un proc\u00e9d\u00e9 assez simple et \u00e0 la port\u00e9e de toute personne ayant un minimum de connaissances en informatique. Bien que Mutiyah ait utilis\u00e9 des serveurs cloud, il existe d’autres moyens de pirater un compte pr\u00e9sentant cette vuln\u00e9rabilit\u00e9, par exemple en utilisant un r\u00e9seau botnet, qui est souvent utilis\u00e9 par les pirates pour envoyer en masse des messages de spam.<\/p>\n
Au lieu de profiter de ce qu\u2019il avait d\u00e9couvert, Mutiyah a choisi d\u2019informer Facebook, la soci\u00e9t\u00e9 propri\u00e9taire d\u2019Instagram, de l\u2019existence de cette faille. L’entreprise a d\u00e9cid\u00e9 d’agir et, par cons\u00e9quent, a d\u00e9cid\u00e9 de r\u00e9compenser l’expert en lui versant un paiement de 30 000 $.<\/p>\n","protected":false},"excerpt":{"rendered":"
Si par hasard vous avez r\u00e9cemment modifi\u00e9 le mot de passe de votre profil Instagram, celui-ci a peut-\u00eatre \u00e9t\u00e9 expos\u00e9 \u00e0 une attaque de pirate informatique pendant dix minutes. Selon l’expert en cybers\u00e9curit\u00e9 Lamax Muthiya, jusqu’\u00e0 r\u00e9cemment, le r\u00e9seau social pr\u00e9sentait une vuln\u00e9rabilit\u00e9 qui permettait \u00e0 une autre personne d’acc\u00e9der aux comptes via un processus […]<\/p>\n","protected":false},"author":2,"featured_media":6678,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","_thinkrank_schema_form_data":"","_thinkrank_selected_schema_type":"","_thinkrank_additional_schemas":"","_thinkrank_canonical_url":"","_thinkrank_og_title":"","_thinkrank_og_description":"","_thinkrank_og_image":"","_thinkrank_twitter_title":"","_thinkrank_twitter_description":"","_thinkrank_twitter_image":"","_thinkrank_imported_from":"","_thinkrank_focus_keywords":[],"_thinkrank_focus_keyword":"","_thinkrank_robots_meta_enabled":0,"_thinkrank_robots_meta":"","_thinkrank_advanced_robots_meta":"","_thinkrank_exclude_from_search":0,"_thinkrank_exclude_from_archives":0,"_thinkrank_primary_category":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[86,77,82],"tags":[83],"class_list":["post-27584","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-applications-fr","category-nouvelles-technologies-fr","category-reseaux-sociaux-fr","tag-reseaux-sociaux-fr"],"uagb_featured_image_src":{"full":["https:\/\/comunicagenia.com\/wp-content\/uploads\/2019\/08\/hacking-2964100_960_720.jpg",960,640,false],"thumbnail":["https:\/\/comunicagenia.com\/wp-content\/uploads\/2019\/08\/hacking-2964100_960_720-150x150.jpg",150,150,true],"medium":["https:\/\/comunicagenia.com\/wp-content\/uploads\/2019\/08\/hacking-2964100_960_720-300x200.jpg",300,200,true],"medium_large":["https:\/\/comunicagenia.com\/wp-content\/uploads\/2019\/08\/hacking-2964100_960_720-768x512.jpg",768,512,true],"large":["https:\/\/comunicagenia.com\/wp-content\/uploads\/2019\/08\/hacking-2964100_960_720.jpg",960,640,false],"1536x1536":["https:\/\/comunicagenia.com\/wp-content\/uploads\/2019\/08\/hacking-2964100_960_720.jpg",960,640,false],"2048x2048":["https:\/\/comunicagenia.com\/wp-content\/uploads\/2019\/08\/hacking-2964100_960_720.jpg",960,640,false]},"uagb_author_info":{"display_name":"comunicagenia","author_link":"https:\/\/comunicagenia.com\/fr\/blog\/author\/comunicagenia\/"},"uagb_comment_info":0,"uagb_excerpt":"Si par hasard vous avez r\u00e9cemment modifi\u00e9 le mot de passe de votre profil Instagram, celui-ci a peut-\u00eatre \u00e9t\u00e9 expos\u00e9 \u00e0 une attaque de pirate informatique pendant dix minutes. Selon l’expert en cybers\u00e9curit\u00e9 Lamax Muthiya, jusqu’\u00e0 r\u00e9cemment, le r\u00e9seau social pr\u00e9sentait une vuln\u00e9rabilit\u00e9 qui permettait \u00e0 une autre personne d’acc\u00e9der aux comptes via un processus\u2026","_links":{"self":[{"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/posts\/27584","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/comments?post=27584"}],"version-history":[{"count":0,"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/posts\/27584\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/media\/6678"}],"wp:attachment":[{"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/media?parent=27584"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/categories?post=27584"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/comunicagenia.com\/fr\/wp-json\/wp\/v2\/tags?post=27584"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}