{"id":667497,"date":"2025-12-21T18:06:04","date_gmt":"2025-12-21T18:06:04","guid":{"rendered":"https:\/\/microscopemedia.com\/?p=667497"},"modified":"2025-12-21T18:06:04","modified_gmt":"2025-12-21T18:06:04","slug":"apele-romane-sub-asediu-cibernetic-peste-1-000-de-sisteme-compromise-intr-un-atac-ransomware","status":"publish","type":"post","link":"https:\/\/microscopemedia.com\/?p=667497","title":{"rendered":"Apele Rom\u00e2ne, sub asediu cibernetic: peste 1.000 de sisteme compromise \u00eentr-un atac ransomware"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/microscopemedia.com\/wp-content\/uploads\/2025\/12\/apele-romane-sub-asediu-cibernetic-peste-1-000-de-sisteme-compromise-intr-un-atac-ransomware.png\" class=\"ff-og-image-inserted\"><\/div>\n<p data-start=\"649\" data-end=\"1171\" id=\"p-0\">Administra\u021bia Na\u021bional\u0103 Apele Rom\u00e2ne se confrunt\u0103 cu un atac cibernetic masiv care a compromis aproximativ 1.000 de sisteme IT&amp;C, inclusiv servere de baze de date, aplica\u021bii GIS, servere de e-mail \u0219i Domain Name Servers (DNS). Incidentul a afectat 10 din cele 11 administra\u021bii bazinale de ap\u0103 din \u021bar\u0103, printre care Oradea, Cluj, Ia\u0219i, Siret \u0219i Buz\u0103u.<\/p>\n<p data-start=\"649\" data-end=\"1171\" id=\"p-1\">Directoratul Na\u021bional de Securitate Cibernetic\u0103 (DNSC) a fost notificat s\u00e2mb\u0103t\u0103 cu privire la atac, care implic\u0103 un <strong data-start=\"778\" data-end=\"792\">ransomware<\/strong> ce blocheaz\u0103 fi\u0219ierele prin criptarea acestora, utiliz\u00e2nd mecanismul legitim de criptare al Windows, <strong data-start=\"894\" data-end=\"907\">BitLocker<\/strong>, \u00een scop mali\u021bios. \u00cen prezent, atacatorii au transmis o not\u0103 de r\u0103scump\u0103rare.<\/p>\n<p id=\"p-3\"><span class=\"cf0\">\u201e<strong>La <\/strong><\/span><strong><span class=\"cf0\">acest<\/span><span class=\"cf0\"> moment a <\/span><span class=\"cf0\">fost<\/span> <span class=\"cf0\">transmis<\/span><span class=\"cf1\">\u0103<\/span><span class=\"cf1\"> o <\/span><span class=\"cf1\">not\u0103<\/span><span class=\"cf1\"> de <\/span><span class=\"cf1\">r\u0103scump\u0103rare<\/span><span class=\"cf1\"> din <\/span><span class=\"cf1\">partea<\/span> <span class=\"cf1\">atacatorilor<\/span><span class=\"cf1\">, care <\/span><span class=\"cf1\">solicit\u0103<\/span> <span class=\"cf1\">s\u0103<\/span><span class=\"cf1\"> fie <\/span><span class=\"cf1\">contacta\u021bi<\/span> <span class=\"cf2\">\u00eentr<\/span><span class=\"cf2\">-un termen de 7 <\/span><span class=\"cf2\">zile<\/span><\/strong><span class=\"cf2\"><strong>.<\/strong> <\/span><span class=\"cf2\">Reamintim<\/span> <span class=\"cf2\">c<\/span><span class=\"cf1\">\u0103<\/span> <span class=\"cf1\">politica<\/span> <span class=\"cf1\">\u0219i<\/span> <span class=\"cf1\">recomandarea<\/span> <span class=\"cf1\">strict\u0103<\/span><span class=\"cf1\"> din <\/span><span class=\"cf1\">partea<\/span><span class=\"cf1\"> DNSC <\/span><span class=\"cf1\">este<\/span><span class=\"cf1\"> ca <\/span><span class=\"cf1\">victimele<\/span> <span class=\"cf1\">atacurilor<\/span><span class=\"cf1\"> de tip ransomware <\/span><span class=\"cf1\">s\u0103<\/span><span class=\"cf1\"> nu <\/span><span class=\"cf1\">contacteze<\/span> <span class=\"cf1\">\u0219i<\/span> <span class=\"cf1\">s\u0103<\/span><span class=\"cf1\"> nu <\/span><span class=\"cf1\">negocieze<\/span><span class=\"cf1\"> cu <\/span><span class=\"cf1\">atacatorii<\/span> <span class=\"cf1\">cibernetici<\/span><span class=\"cf1\">, <\/span><span class=\"cf1\">pentru<\/span><span class=\"cf1\"> a nu se <\/span><span class=\"cf2\">\u00eencuraja<\/span> <span class=\"cf1\">\u0219i<\/span><span class=\"cf1\"> a nu se <\/span><span class=\"cf1\">finan\u021ba<\/span> <span class=\"cf1\">acest<\/span> <span class=\"cf1\">fenomen<\/span> <span class=\"cf1\">infrac\u021bional\u201d, potrivit comunicatului.<\/span><\/p>\n<p data-start=\"1173\" data-end=\"1495\" id=\"p-4\">De\u0219i incidentul a vizat infrastructura IT&amp;C, <strong data-start=\"1218\" data-end=\"1274\">tehnologiile opera\u021bionale (OT) nu au fost compromise<\/strong>, astfel c\u0103 func\u021bionarea uzual\u0103 a structurilor hidrotehnice continu\u0103 normal. Operarea construc\u021biilor hidrotehnice se face prin <strong data-start=\"1401\" data-end=\"1434\">dispecerate \u0219i personal local<\/strong>, folosind comunica\u021bii voce, iar acestea sunt \u00een siguran\u021b\u0103.<\/p>\n<p data-start=\"1497\" data-end=\"1774\" id=\"p-5\">Echipele tehnice din cadrul Administra\u021biei Na\u021bionale <a href=\"https:\/\/www.mediafax.ro\/social\/apele-romane-interventii-in-regim-de-urgenta-la-bazinul-de-apa-curata-voila-din-judetul-prahova-este-o-sursa-de-rezerva-esentiala-pentru-alimentarea-cu-apa-potabila-23661329\">Apele Rom\u00e2ne<\/a>, Centrului Na\u021bional Cyberint (CNC) din cadrul SRI, entit\u0103\u021bilor afectate \u0219i altor autorit\u0103\u021bi cu atribu\u021bii \u00een securitate cibernetic\u0103 sunt implicate <strong data-start=\"1709\" data-end=\"1771\">activ \u00een investigarea \u0219i limitarea impactului incidentului<\/strong>.<\/p>\n<p data-start=\"1776\" data-end=\"2330\" id=\"p-6\">Speciali\u0219tii au constatat c\u0103 atacatorii au folosit BitLocker pentru a bloca fi\u0219ierele pe sta\u021bii de lucru Windows, servere Windows Server \u0219i servere de aplica\u021bii GIS, demonstr\u00e2nd un <strong data-start=\"1957\" data-end=\"1989\">nivel ridicat de sofisticare<\/strong>. \u00cen urma evalu\u0103rii preliminare, s-a decis ca infrastructura Apei Rom\u00e2ne s\u0103 fie <strong data-start=\"2069\" data-end=\"2142\">integrat\u0103 \u00een sistemul na\u021bional de protec\u021bie cibernetic\u0103 operat de CNC<\/strong>, care protejeaz\u0103 infrastructurile IT&amp;C critice pentru securitatea na\u021bional\u0103. Aceasta va permite utilizarea tehnologiilor inteligente pentru prevenirea unor incidente similare \u00een viitor.<\/p>\n<p data-start=\"2332\" data-end=\"2762\" id=\"p-7\">Reprezentan\u021bii Administra\u021biei Na\u021bionale Apele Rom\u00e2ne au subliniat c\u0103 echipele IT&amp;C ale administra\u021biilor bazinale <strong data-start=\"2445\" data-end=\"2500\">nu trebuie s\u0103 fie contactate de public sau de ter\u021bi<\/strong>, pentru a se putea concentra pe restaurarea serviciilor informatice. \u00cen prezent, toate structurile hidrotehnice \u0219i dispeceratele func\u021bioneaz\u0103 cu normalitate, garant\u00e2nd <strong data-start=\"2669\" data-end=\"2759\">siguran\u021ba infrastructurii critice \u0219i continuitatea serviciilor de ap\u0103 \u0219i energie hidro<\/strong>.<\/p>\n<p data-start=\"2764\" data-end=\"3112\" id=\"p-8\">Acest atac cibernetic ridic\u0103 semne de \u00eentrebare asupra securit\u0103\u021bii infrastructurilor critice care <strong data-start=\"2862\" data-end=\"2938\">nu erau integrate anterior \u00een sistemul na\u021bional de protec\u021bie cibernetic\u0103<\/strong>. Oficialii DNSC \u0219i CNC subliniaz\u0103 c\u0103 astfel de incidente pot avea <strong data-start=\"3005\" data-end=\"3065\">consecin\u021be majore asupra func\u021bion\u0103rii serviciilor vitale<\/strong> dac\u0103 nu sunt gestionate prompt \u0219i coordonat.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Administra\u021bia Na\u021bional\u0103 Apele Rom\u00e2ne se confrunt\u0103 cu un atac cibernetic masiv care a compromis aproximativ 1.000 de sisteme IT&amp;C, inclusiv servere de baze de date, aplica\u021bii GIS, servere de e-mail &hellip; <a href=\"https:\/\/microscopemedia.com\/?p=667497\" class=\"more-link\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":667498,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"Default","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/posts\/667497"}],"collection":[{"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=667497"}],"version-history":[{"count":0,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/posts\/667497\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=\/wp\/v2\/media\/667498"}],"wp:attachment":[{"href":"https:\/\/microscopemedia.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=667497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=667497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microscopemedia.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=667497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}