{"id":3425,"date":"2026-04-21T08:13:47","date_gmt":"2026-04-21T06:13:47","guid":{"rendered":"https:\/\/kriptoblog.hu\/?p=3425"},"modified":"2026-07-11T17:47:05","modified_gmt":"2026-07-11T16:47:05","slug":"kraken-zsarolas-belso-hozzaferes-kockazat","status":"publish","type":"post","link":"https:\/\/kriptoblog.hu\/en\/kraken-zsarolas-belso-hozzaferes-kockazat\/","title":{"rendered":"Kraken zsarol\u00e1si k\u00eds\u00e9rlet: mi\u00e9rt a bels\u0151 hozz\u00e1f\u00e9r\u00e9s a legnagyobb kock\u00e1zat?"},"content":{"rendered":"<h2>In brief<\/h2>\n<p>A Kraken zsarol\u00e1si \u00fcgye nem az\u00e9rt fontos, mert klasszikus t\u0151zsdei hack t\u00f6rt\u00e9nt volna. A besz\u00e1mol\u00f3k szerint a helyzet l\u00e9nyege \u00e9ppen az ellenkez\u0151je: jogosult vagy f\u00e9ljogosult bels\u0151 hozz\u00e1f\u00e9r\u00e9sekkel \u00e9ltek vissza, k\u00f6r\u00fclbel\u00fcl 2 000 \u00fcgyf\u00e9l support-adat\u00e1t \u00e9rintve, mik\u00f6zben a t\u0151zsde szerint \u00fcgyf\u00e9lp\u00e9nzek nem ker\u00fcltek vesz\u00e9lybe.<\/p>\n<p>Ez a modern kriptobiztons\u00e1g egyik legfontosabb leck\u00e9je: a leggyeng\u00e9bb pont sokszor nem a blokkl\u00e1nc, hanem az emberi \u00e9s jogosults\u00e1gkezel\u00e9si r\u00e9teg.<\/p>\n<h2>Mi t\u00f6rt\u00e9nt?<\/h2>\n<p>A <a href=\"https:\/\/crypto.news\/kraken-refuses-ransom-after-internal-extortion-attempt-hits-2000-accounts\/\" target=\"_blank\" rel=\"noopener\">crypto.news besz\u00e1mol\u00f3ja<\/a> szerint a Kraken visszautas\u00edtotta a zsarol\u00e1si k\u00eds\u00e9rletet, miut\u00e1n helytelen bels\u0151 hozz\u00e1f\u00e9r\u00e9s \u00fcgyf\u00e9ladatokat \u00e9rintett. A c\u00e9g kommunik\u00e1ci\u00f3ja alapj\u00e1n nem rendszerszint\u0171 felt\u00f6r\u00e9sr\u0151l \u00e9s nem \u00fcgyf\u00e9lp\u00e9nz-veszt\u00e9sr\u0151l volt sz\u00f3.<\/p>\n<p>A <a href=\"https:\/\/www.tradingview.com\/news\/invezz%3A8e8c1c94e094b%3A0-kraken-faces-extortion-threat-2-000-accounts-hit-no-breach-reported\/\" target=\"_blank\" rel=\"noopener\">TradingView\/Invezz \u00f6sszefoglal\u00f3ja<\/a> is azt emeli ki, hogy a kock\u00e1zat ink\u00e1bb insider-jelleg\u0171 hozz\u00e1f\u00e9r\u00e9si vissza\u00e9l\u00e9sk\u00e9nt \u00e9rtelmezhet\u0151, nem klasszikus k\u00fcls\u0151 behatol\u00e1sk\u00e9nt.<\/p>\n<h2>Mi\u00e9rt nagyobb \u00fcgy ez, mint els\u0151re l\u00e1tszik?<\/h2>\n<p>A kriptot\u0151zsd\u00e9k \u00e9veken \u00e1t a forr\u00f3 t\u00e1rc\u00e1k, priv\u00e1t kulcsok \u00e9s infrastrukt\u00fara-hackek ellen v\u00e9dekeztek. Ezek tov\u00e1bbra is l\u00e9tez\u0151 kock\u00e1zatok, de a nagy platformok biztons\u00e1gi szintje sokat er\u0151s\u00f6d\u00f6tt. A t\u00e1mad\u00f3k ez\u00e9rt gyakran nem a legjobban v\u00e9dett rendszert t\u00e1madj\u00e1k, hanem a hozz\u00e1f\u00e9r\u00e9ssel rendelkez\u0151 embereket, alv\u00e1llalkoz\u00f3kat vagy support-folyamatokat.<\/p>\n<p>Ez a felhaszn\u00e1l\u00f3 oldal\u00e1r\u00f3l is fontos. Egy t\u0151zsdei fi\u00f3k v\u00e9delme nem \u00e1ll meg a 2FA-n\u00e1l. Figyelni kell a phishingre, az \u00fcgyf\u00e9lszolg\u00e1lati visszah\u00edv\u00e1sokra, a hamis support-\u00fczenetekre \u00e9s arra, hogy egy adatsziv\u00e1rg\u00e1s ut\u00e1n a t\u00e1mad\u00f3k gyakran sokkal szem\u00e9lyre szabottabb csal\u00e1sokkal t\u00e9rnek vissza.<\/p>\n<h2>A Kraken d\u00f6nt\u00e9se<\/h2>\n<p>A zsarol\u00e1s visszautas\u00edt\u00e1sa r\u00f6vid t\u00e1von kellemetlen kommunik\u00e1ci\u00f3s helyzet, de hossz\u00fa t\u00e1von fontos jelz\u00e9s: ha egy t\u0151zsde fizet, az \u00fczleti modellt adhat a hasonl\u00f3 t\u00e1mad\u00e1soknak. Ha nem fizet, akkor a bizony\u00edt\u00e9kgy\u0171jt\u00e9s, a jogi fell\u00e9p\u00e9s \u00e9s az \u00e9rintett \u00fcgyfelek \u00e9rtes\u00edt\u00e9se ker\u00fcl el\u0151t\u00e9rbe.<\/p>\n<p>A k\u00e9rd\u00e9s nem az, hogy l\u00e9tezik-e kock\u00e1zat. L\u00e9tezik. A k\u00e9rd\u00e9s az, hogy a platform k\u00e9pes-e gyorsan behat\u00e1rolni, kommunik\u00e1lni \u00e9s lez\u00e1rni.<\/p>\n<p>Nem p\u00e9nz\u00fcgyi tan\u00e1csad\u00e1s. Ez biztons\u00e1gi h\u00e1tt\u00e9relemz\u00e9s.<\/p>\n<h2>Sources<\/h2>\n<ul>\n<li><a href=\"https:\/\/crypto.news\/kraken-refuses-ransom-after-internal-extortion-attempt-hits-2000-accounts\/\" target=\"_blank\" rel=\"noopener\">crypto.news: Kraken refuses ransom<\/a><\/li>\n<li><a href=\"https:\/\/www.tradingview.com\/news\/invezz%3A8e8c1c94e094b%3A0-kraken-faces-extortion-threat-2-000-accounts-hit-no-breach-reported\/\" target=\"_blank\" rel=\"noopener\">TradingView\/Invezz: Kraken extortion threat<\/a><\/li>\n<li><a href=\"https:\/\/stocktwits.com\/news-articles\/markets\/cryptocurrency\/kraken-follows-coinbase-playbook-after-extortion-attempt\/cZJqIbwRIHY\" target=\"_blank\" rel=\"noopener\">Stocktwits: Kraken follows Coinbase playbook<\/a><\/li>\n<\/ul>\n<details>\n<summary>English version<\/summary>\n<h2>In Short<\/h2>\n<p>The Kraken case is important because it was not framed as a classic external exchange hack. Reports point to misuse of internal access affecting about 2,000 support-related customer records, with Kraken saying client funds were not at risk.<\/p>\n<p>The lesson is broader than Kraken: in crypto security, privileged access, contractors and support workflows can be as important as wallet infrastructure. Users should expect more personalized phishing attempts after any support-data exposure.<\/p>\n<p>This is security analysis, not financial advice.<\/p>\n<\/details>","protected":false},"excerpt":{"rendered":"<p>A Kraken incidense nem klasszikus k\u00fcls\u0151 hackk\u00e9nt \u00e9rdekes, hanem az\u00e9rt, mert megmutatja: a jogosult bels\u0151 hozz\u00e1f\u00e9r\u00e9s rossz kezekben legal\u00e1bb akkora kock\u00e1zat.<\/p>","protected":false},"author":1,"featured_media":4991,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[102,1,705,107],"tags":[339,911,127,873,853,823,5],"class_list":["post-3425","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-biztonsag","category-kereskedes","category-kripto-es-fintech","category-tenyfeltaras","tag-adatvedelem","tag-belso-hozzaferes","tag-biztonsag","tag-compliance","tag-kraken","tag-kriptoblog-hu","tag-tozsde"],"_links":{"self":[{"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/posts\/3425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/comments?post=3425"}],"version-history":[{"count":2,"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/posts\/3425\/revisions"}],"predecessor-version":[{"id":5064,"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/posts\/3425\/revisions\/5064"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/media\/4991"}],"wp:attachment":[{"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/media?parent=3425"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/categories?post=3425"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kriptoblog.hu\/en\/wp-json\/wp\/v2\/tags?post=3425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}