{"id":286259,"date":"2026-09-03T09:26:08","date_gmt":"2026-09-03T09:26:08","guid":{"rendered":"https:\/\/www.europesays.com\/ro\/286259\/"},"modified":"2026-09-03T09:26:08","modified_gmt":"2026-09-03T09:26:08","slug":"romania-si-fbi-au-destructurat-un-botnet-activ-de-23-de-ani-peste-11-milioane-de-ip-uri-asociate-cu-reteaua","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ro\/286259\/","title":{"rendered":"Rom\u00e2nia \u0219i FBI au destructurat un botnet activ de 23 de ani. Peste 11 milioane de IP-uri, asociate cu re\u021beaua"},"content":{"rendered":"

Opera\u021biunea interna\u021bional\u0103 coordonat\u0103 de autorit\u0103\u021bile americane \u0219i sprijinit\u0103 de Europol a dus la neutralizarea infrastructurii Sality, unul dintre cele mai longevive botneturi, activ de peste dou\u0103 decenii. Rom\u00e2nia s-a num\u0103rat printre \u021b\u0103rile care au intervenit asupra infrastructurii re\u021belei, despre care Europol spune c\u0103 a fost asociat\u0103, de-a lungul timpului, cu peste 11 milioane de adrese IP unice \u0219i care, la apogeu, oferea acces la p\u00e2n\u0103 la un milion de calculatoare infectate.<\/p>\n

\"Rom\u00e2nia <\/p>\n

Rom\u00e2nia a participat la o opera\u021biune interna\u021bional\u0103 coordonat\u0103 de autorit\u0103\u021bile americane Foto: arhiv\u0103<\/p>\n

publicitate”); background-position: center center; background-repeat: no-repeat;”><\/p>\n

Rom\u00e2nia a participat la o opera\u021biune interna\u021bional\u0103 coordonat\u0103 de autorit\u0103\u021bile americane pentru destructurarea Sality, unul dintre cele mai longevive botneturi din lume. Re\u021beaua malware, activ\u0103 din 2003, a fost asociat\u0103 de-a lungul timpului cu peste 11 milioane de adrese IP unice \u0219i, la apogeu, le-a oferit operatorilor acces la p\u00e2n\u0103 la un milion de calculatoare infectate.<\/p>\n

Opera\u021biunea, desf\u0103\u0219urat\u0103 pe 31 august, a vizat infrastructura Sality din Statele Unite \u0219i Europa. La ac\u021biune au participat autorit\u0103\u021bi din Rom\u00e2nia, Bulgaria, Ungaria \u0219i SUA, cu sprijinul Europol \u0219i al companiilor de securitate cibernetic\u0103 CrowdStrike \u0219i Shadowserver Foundation.<\/p>\n

Sality, activ de peste dou\u0103 decenii <\/p>\n

Botnetul Sality a ap\u0103rut \u00een 2003 \u0219i a fost folosit pentru instalarea de programe malware pe calculatoare compromise. Dispozitivele infectate erau transformate \u00een \u201ebo\u021bi\u201d \u0219i integrate \u00eentr-o re\u021bea de tip peer-to-peer, prin care operatorii puteau transmite comenzi.<\/p>\n

Proprietarii calculatoarelor infectate nu \u0219tiau, de regul\u0103, c\u0103 dispozitivele lor fuseser\u0103 compromise. Infrastructura putea fi utilizat\u0103 pentru distribuirea de programe malware, furturi de criptomonede \u0219i atacuri cibernetice.<\/p>\n

Potrivit Europol, \u00een perioada de v\u00e2rf, Sality le oferea infractorilor acces la p\u00e2n\u0103 la un milion de dispozitive infectate. \u00cen total, peste 11 milioane de adrese IP unice au fost asociate infrastructurii botnetului.<\/p>\n

Cum au reu\u0219it autorit\u0103\u021bile s\u0103 blocheze re\u021beaua <\/p>\n

Sality avea o structur\u0103 de tip peer-to-peer, diferit\u0103 de botneturile controlate printr-un singur server central. Calculatoarele infectate comunicau direct \u00eentre ele, ceea ce f\u0103cea infrastructura mai rezistent\u0103 \u0219i mai dificil de eliminat.<\/p>\n

publicitate”); background-position: center center; background-repeat: no-repeat;”><\/p>\n

Pentru a o neutraliza, anchetatorii \u0219i partenerii priva\u021bi au folosit o tehnic\u0103 numit\u0103 \u201esinkholing\u201d. Comunica\u021biile calculatoarelor infectate au fost redirec\u021bionate c\u0103tre infrastructur\u0103 controlat\u0103 de autorit\u0103\u021bi, astfel \u00eenc\u00e2t dispozitivele compromise s\u0103 nu mai poat\u0103 comunica cu infrastructura criminal\u0103. Canalul prin care operatorii transmiteau comenzi a devenit astfel inutilizabil.<\/p>\n

\u00cen Statele Unite, Departamentul de Justi\u021bie, FBI \u0219i Defense Criminal Investigative Service au confiscat domenii asociate Sality. \u00cen Europa, autorit\u0103\u021bile din Rom\u00e2nia, Bulgaria \u0219i Ungaria au luat m\u0103suri \u00eempotriva altor domenii legate de botnet.<\/p>\n

O anchet\u0103 interna\u021bional\u0103 desf\u0103\u0219urat\u0103 pe parcursul mai multor ani <\/p>\n

Europol a sprijinit autorit\u0103\u021bile implicate \u00een identificarea \u0219i destructurarea infrastructurii Sality \u00eenc\u0103 din 2017. Cooperarea s-a intensificat \u00een perioada premerg\u0103toare opera\u021biunii din 31 august, c\u00e2nd autorit\u0103\u021bile \u0219i partenerii priva\u021bi au coordonat ac\u021biunile pentru a lovi simultan infrastructura din mai multe jurisdic\u021bii.<\/p>\n

Opera\u021biunea a reunit FBI, Departamentul de Justi\u021bie al SUA, Defense Criminal Investigative Service, Europol, autorit\u0103\u021bi din Rom\u00e2nia, Bulgaria \u0219i Ungaria, precum \u0219i speciali\u0219tii CrowdStrike \u0219i Shadowserver Foundation, potrivit TVRInfo.<\/a><\/p>\n

publicitate”); background-position: center center; background-repeat: no-repeat;”><\/p>\n

\\n const _iprc = performance.now();\\n\\u003C\/script>\\n\\n\\u003Cscript class=\\”optanon-category-C0004\\” type=\\”text\/plain\\”>\\nconsole.log(\\”*** cookieconsent done:\\”, Math.round(performance.now() – _iprc) \/ 1000);\\n gtag(‘event’, ‘cookieconsent’, {\\n name: ‘load’,\\n value: Math.round(performance.now() – _iprc) \/ 1000\\n });\\n\\u003C\/script>\\n\\u003C!– END PERFORMANCE COOKIE PRO –>\\n\\n{{#unless context.ads_disabled}}\\n\\n\\u003Cscript class=\\”optanon-category-C0004\\” type=\\”text\/plain\\” src=\\”\/\/a.teads.tv\/page\/99553\/tag\\” async=\\”true\\”>\\u003C\/script>\\n{{\/unless}}\\n\\n\\u003Cdiv data-ad=\\”adevarul.ro_728x90_sticky_display_bottom_adevarul_bottom_center_leaderboard\\” data-devices=\\”m:0,t:1,d:1\\” class=\\”demand-supply\\”>\\u003C\/div>\\n\\n{{#if context.content}}\\n\\n{{#unless context.ads_disabled}}\\n\\u003Cscript class=\\”optanon-category-C0004\\” type=\\”text\/plain\\” src=\\”https:\/\/cnt.trvdp.com\/js\/1544\/6545.js\\”>\\u003C\/script>\\n{{\/unless}}\\n\\n\\n{{\/if}}\\n\\n\\n”,”html_mobile”:”\\n\\n\\n\\u003C!– CHECK PERFORMANCE COOKIE PRO –>\\n\\u003Cscript>\\n const _iprc = performance.now();\\n\\u003C\/script>\\n\\n\\u003Cscript class=\\”optanon-category-C0004\\” type=\\”text\/plain\\”>\\nconsole.log(\\”*** cookieconsent done:\\”, Math.round(performance.now() – _iprc) \/ 1000);\\n gtag(‘event’, ‘cookieconsent’, {\\n name: ‘load’,\\n value: Math.round(performance.now() – _iprc) \/ 1000\\n });\\n\\u003C\/script>\\n\\u003C!– END PERFORMANCE COOKIE PRO –>\\n\\n{{#unless context.ads_disabled}}\\n\\n\\n\\u003Cscript\\n class=\\”optanon-category-C0004\\”\\n type=\\”text\/plain\\”\\n src=\\”\/\/a.teads.tv\/page\/99553\/tag\\”\\n async=\\”true\\”\\n>\\u003C\/script>\\n\\n{{\/unless}} \\n\\n\\u003Cdiv\\n data-ad=\\”adevarul.ro_sticky_mobile_bottom\\”\\n data-devices=\\”m:1,t:0,d:0\\”\\n class=\\”demand-supply\\”\\n>\\u003C\/div>\\n\\n{{#if context.content}} \\n\\n\\n{{#unless context.ads_disabled}}\\n\\u003Cscript class=\\”optanon-category-C0004\\” type=\\”text\/plain\\” src=\\”https:\/\/cnt.trvdp.com\/js\/1544\/6545.js\\”>\\u003C\/script>\\n{{\/unless}}\\n\\n{{\/if}}\\n\\n”},”updated_at”:”2025-11-01T11:31:21.462Z”},”AdPosition_head”:{„data”:{„custom_fields”:{},”for_desktop”:true,”for_mobile”:true,”html_desktop”:”\\u003Cmeta name=\\”profitshareid\\” content=\\”934cd37887433d585a2a227ef0576fcc\\” \/>\\n\\n\\n\\n{{#unless context.ads_disabled}}\\n\\n\\n{{#if context.content}}\\n\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/jsc.mgid.com\/site\/960965.js\\” async>\\u003C\/script>\\n\\n\\n\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\”>\\n (function () {\\n if (document.location.pathname.indexOf(„https:\/\/adevarul.ro\/ghid-de-cumparaturi”) === 0) {\\n return;\\n }\\n\\n const s = document.createElement(\\”script\\”);\\n s.src = \\”https:\/\/srv.divee.ai\/storage\/v1\/object\/public\/sdk\/divee.sdk.latest.js\\”;\\n s.setAttribute(\\”data-project-id\\”, \\”4428864e-2da6-4fef-a83c-c16c2dfe86d9\\”);\\n s.async = true;\\n document.head.appendChild(s);\\n })();\\n\\u003C\/script>\\n\\n\\n\\n\\n\\n{{\/if}}\\n\\n\\u003Cscript>\\n window.teads_analytics = window.teads_analytics || {};\\n window.teads_analytics.analytics_tag_id = \\”PUB_26459\\”;\\n window.teads_analytics.share = window.teads_analytics.share || function() {\\n ;(window.teads_analytics.shared_data = window.teads_analytics.shared_data || []).push(arguments)\\n };\\n\\u003C\/script>\\n\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/a.teads.tv\/analytics\/tag.js\\”>\\u003C\/script>\\n\\n\\n{{#unless context.features.nolivesupply}}\\n\\u003Cscript async data-cfasync=\\”false\\” type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/live.demand.supply\/up.js\\”>\\u003C\/script>\\n{{\/unless}}\\n\\n\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3345426167175409\\” crossorigin=\\”anonymous\\”>\\u003C\/script>\\n\\n \\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/terrific.live\/terrific-sdk.js\\” storeid=\\”iN6X0VPTDIicsVPKX6p0\\”>\\u003C\/script>\\n\\n{{\/unless}}\\n\\n\\u003Cstyle>\\n.google-adposition > div {\\n flex-grow: 1;\\n}\\n\\n.google-adposition:has(iframe) {\\n background-image: none !important;\\n}\\n\\n.menu-fixed .menu .headContainer .google-auto-placed {\\n display: none;\\n}\\n\\narticle header .title .google-auto-placed {\\n display: none;\\n}\\n\\n#onetrust-banner-sdk #onetrust-accept-btn-handler {\\n margin-bottom: 10px;\\n }\\n\\n #onetrust-banner-sdk #onetrust-reject-all-handler {\\n visibility: hidden;\\n }\\n\\n\\u003C\/style>\\n\\n \\u003C!– Facebook Pixel Code –>\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0002\\”>!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version=’2.0′;n.queue=[];t=b.createElement(e);t.async=!0;t.src=v;s=b.getElementsByTagName(e)[0];s.parentNode.insertBefore(t,s)}(window,document,’script’,’https:\/\/connect.facebook.net\/en_US\/fbevents.js’); fbq(‘init’, ‘1346397800155390’); fbq(‘track’, ‘PageView’);\\u003C\/script>\\u003Cnoscript> \\u003Cimg height=\\”1\\” width=\\”1\\” src=\\”https:\/\/www.facebook.com\/tr?id=1346397800155390&ev=PageView&noscript=1\\”\/>\\u003C\/noscript>\\u003C!– End Facebook Pixel Code –>\\n\\n\\u003C!– alternativeAds –>\\n”,”html_mobile”:”\\u003Cmeta name=\\”profitshareid\\” content=\\”934cd37887433d585a2a227ef0576fcc\\” \/>\\n\\n\\n{{#unless context.ads_disabled}}\\n\\n{{#if context.content}}\\n\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/jsc.mgid.com\/site\/960965.js\\” async>\\u003C\/script>\\n\\n\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\”>\\n (function () {\\n if (document.location.pathname.indexOf(„https:\/\/adevarul.ro\/ghid-de-cumparaturi”) === 0) {\\n return;\\n }\\n\\n const s = document.createElement(\\”script\\”);\\n s.src = \\”https:\/\/srv.divee.ai\/storage\/v1\/object\/public\/sdk\/divee.sdk.latest.js\\”;\\n s.setAttribute(\\”data-project-id\\”, \\”4428864e-2da6-4fef-a83c-c16c2dfe86d9\\”);\\n s.async = true;\\n document.head.appendChild(s);\\n })();\\n\\u003C\/script>\\n\\n{{\/if}}\\n\\n\\u003Cscript>\\n window.teads_analytics = window.teads_analytics || {};\\n window.teads_analytics.analytics_tag_id = \\”PUB_26459\\”;\\n window.teads_analytics.share = window.teads_analytics.share || function() {\\n ;(window.teads_analytics.shared_data = window.teads_analytics.shared_data || []).push(arguments)\\n };\\n\\u003C\/script>\\n\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/a.teads.tv\/analytics\/tag.js\\”>\\u003C\/script>\\n\\n{{#unless context.features.nolivesupply}}\\n\\u003Cscript async data-cfasync=\\”false\\” type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/live.demand.supply\/up.js\\”>\\u003C\/script>\\n{{\/unless}}\\n\\n\\u003Cscript type=\\”text\/plain\\” class=\\”optanon-category-C0004\\” src=\\”https:\/\/terrific.live\/terrific-sdk.js\\” storeid=\\”iN6X0VPTDIicsVPKX6p0\\”>\\u003C\/script>\\n\\n{{\/unless}}\\n\\u003Cstyle>\\n\\n.google-adposition:has(iframe) {\\n background-image: none !important;\\n}\\n\\n.menu-fixed .menu .headContainer .google-auto-placed {\\n display: none;\\n}\\n\\narticle header .title .google-auto-placed {\\n display: none;\\n}\\n\\n#onetrust-banner-sdk #onetrust-accept-btn-handler {\\n margin-bottom: 10px;\\n }\\n\\n #onetrust-banner-sdk #onetrust-reject-all-handler {\\n visibility: hidden;\\n }\\n\\u003C\/style>\\n”},”updated_at”:”2026-07-22T15:44:05.196Z”}},”last_changed”:”2026-09-03T08:55:50.357Z”,”page”:{„created_at”:”2026-09-01T11:41:23.049Z”,”created_by”:1,”custom_fields”:{},”domain”:”adevarul.ro”,”id”:99,”last_published_at”:”2026-09-01T11:41:24.572Z”,”name”:”Content layout (article)”,”published”:1,”s3_hash”:”a5e0764cf3bce051367545eab1538b4619e8ecb9″,”slug”:null,”title”:”Content layout”,”type”:”layout”,”updated_at”:”2022-07-21T08:27:20.732Z”,”version_id”:272},”path”:”\/stiri-interne\/evenimente\/romania-si-fbi-au-destructurat-un-botnet-activ-de-2553822.html”,”pathArray”:[„”,”stiri-interne”,”evenimente”,”romania-si-fbi-au-destructurat-un-botnet-activ-de-2553822.html”],”type”:”content”,”url”:”https:\/\/adevarul.ro\/stiri-interne\/evenimente\/romania-si-fbi-au-destructurat-un-botnet-activ-de-2553822.html”,”features”:{},”query”:{},”domain_config”:{„MISC”:{„logo”:{„width”:320,”height”:50}},”SYSTEM_TAGS”:[„noads”,”nocomments”,”sex”,”advert”,”advertorial”,”video”,”galerie”,”live”,”foto”,”exclusiv”,”analiza”,”interviu”,”reportaj”,”breaking news”],”default”:{„lang”:”ro”,”domain”:”adevarul.ro”,”alternateDomain”:”adevarul-ro.adh.reperio.news”,”friendlyName”:”Adev\u0103rul”,”logoURL”:”https:\/\/adevarul.ro\/favicon-144-precomposed.png”}},”client”:{„is_mobile”:false}}<\/p>\n","protected":false},"excerpt":{"rendered":"Opera\u021biunea interna\u021bional\u0103 coordonat\u0103 de autorit\u0103\u021bile americane \u0219i sprijinit\u0103 de Europol a dus la neutralizarea infrastructurii Sality, unul dintre…\n","protected":false},"author":2,"featured_media":286260,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[10],"tags":[78786,32,33,31,9392,2342,36,37,27,34,35,25,3501,41,40,38,39,78785,6134,26,28,29,30],"class_list":["post-286259","post","type-post","status-publish","format-standard","has-post-thumbnail","category-romania","tag-botnet","tag-breaking-news","tag-breakingnews","tag-cele-mai-populare-subiecte","tag-europol","tag-fbi","tag-featured-news","tag-featurednews","tag-headlines","tag-latest-news","tag-latestnews","tag-news","tag-politia-romana","tag-ro","tag-romana","tag-romania","tag-romanian","tag-sality","tag-securitate-cibernetica","tag-stiri","tag-titluri","tag-top-stories","tag-topstories"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@ro\/117206397262171434","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts\/286259","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/comments?post=286259"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts\/286259\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/media\/286260"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/media?parent=286259"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/categories?post=286259"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/tags?post=286259"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}