<style id="elementor-post-11247">.elementor-11247 .elementor-element.elementor-element-2cc9cc5{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-11247 .elementor-element.elementor-element-2cc9cc5 .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-11247 .elementor-element.elementor-element-2cc9cc5 .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-11247 .elementor-element.elementor-element-6c08076{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-11247 .elementor-element.elementor-element-6c08076 .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-11247 .elementor-element.elementor-element-6c08076 .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-11247 .elementor-element.elementor-element-b23374c{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-11247 .elementor-element.elementor-element-b23374c .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-11247 .elementor-element.elementor-element-b23374c .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-11247 .elementor-element.elementor-element-7bd2a6d{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-11247 .elementor-element.elementor-element-7bd2a6d .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-11247 .elementor-element.elementor-element-7bd2a6d .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-11247 .elementor-element.elementor-element-6adea82{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-11247 .elementor-element.elementor-element-6adea82 .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-11247 .elementor-element.elementor-element-6adea82 .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-11247 .elementor-element.elementor-element-e525cc7{--divider-border-style:solid;--divider-color:#CCCCCC;--divider-border-width:1px;}.elementor-11247 .elementor-element.elementor-element-e525cc7 .elementor-divider-separator{width:50%;margin:0 auto;margin-center:0;}.elementor-11247 .elementor-element.elementor-element-e525cc7 .elementor-divider{text-align:center;padding-block-start:15px;padding-block-end:15px;}.elementor-11247 .elementor-element.elementor-element-29ab39b .elementor-author-box__avatar img{width:50px;height:50px;}body.rtl .elementor-11247 .elementor-element.elementor-element-29ab39b.elementor-author-box--layout-image-left .elementor-author-box__avatar,
					 body:not(.rtl) .elementor-11247 .elementor-element.elementor-element-29ab39b:not(.elementor-author-box--layout-image-above) .elementor-author-box__avatar{margin-right:15px;margin-left:0;}body:not(.rtl) .elementor-11247 .elementor-element.elementor-element-29ab39b.elementor-author-box--layout-image-right .elementor-author-box__avatar,
					 body.rtl .elementor-11247 .elementor-element.elementor-element-29ab39b:not(.elementor-author-box--layout-image-above) .elementor-author-box__avatar{margin-left:15px;margin-right:0;}.elementor-11247 .elementor-element.elementor-element-29ab39b.elementor-author-box--layout-image-above .elementor-author-box__avatar{margin-bottom:15px;}.elementor-11247 .elementor-element.elementor-element-29ab39b .elementor-author-box__name{font-size:16px;font-weight:900;}.elementor-11247 .elementor-element.elementor-element-29ab39b .elementor-author-box__bio{font-size:13px;}@media(max-width:767px){body.rtl .elementor-11247 .elementor-element.elementor-element-29ab39b.elementor-author-box--layout-image-left .elementor-author-box__avatar,
					 body:not(.rtl) .elementor-11247 .elementor-element.elementor-element-29ab39b:not(.elementor-author-box--layout-image-above) .elementor-author-box__avatar{margin-right:15px;margin-left:0;}body:not(.rtl) .elementor-11247 .elementor-element.elementor-element-29ab39b.elementor-author-box--layout-image-right .elementor-author-box__avatar,
					 body.rtl .elementor-11247 .elementor-element.elementor-element-29ab39b:not(.elementor-author-box--layout-image-above) .elementor-author-box__avatar{margin-left:15px;margin-right:0;}.elementor-11247 .elementor-element.elementor-element-29ab39b.elementor-author-box--layout-image-above .elementor-author-box__avatar{margin-bottom:15px;}}</style>{"id":11247,"date":"2024-11-11T15:30:04","date_gmt":"2024-11-11T14:30:04","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=11247"},"modified":"2025-08-18T13:16:10","modified_gmt":"2025-08-18T11:16:10","slug":"historia-hackeig-karspersky","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/ca\/historia-hackeo-karspersky\/","title":{"rendered":"La hist\u00f2ria de quan van hackejar un dels m\u00e9s grans"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"11247\" class=\"elementor elementor-11247\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-738f9ea elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"738f9ea\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a37e21e\" data-id=\"a37e21e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8bd062a elementor-widget elementor-widget-text-editor\" data-id=\"8bd062a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Kaspersky v&iacute;ctima de un APT (Advanced Persistan Threat), una campa&ntilde;a de <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/malware\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>malware<\/a> sofisticado persistente en el tiempo. Este caso, conocido como &ldquo;Operaci&oacute;n Triangulo&rdquo;, muestra que incluso los m&aacute;s grandes de la ciberseguridad son vulnerables.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2cc9cc5 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"2cc9cc5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8d03150 elementor-widget elementor-widget-text-editor\" data-id=\"8d03150\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>&ldquo;descubrieron que los infectaron&rdquo;&nbsp;<\/h2><p>Todo comenz&oacute; a principios de 2023, cuando los analistas de Kaspersky notaron algo extra&ntilde;o en los iPhones de algunos de sus empleados. A trav&eacute;s de un monitoreo rutinario de su red Wi-FI, detectaron patrones sospechosos de tr&aacute;fico de red en dispositivos corporativos de Apple que no encajaban con el uso esperado.<\/p><p>Varios de estos se conectaban a dominios destino que no eran comunes, encontrando un patr&oacute;n extra&ntilde;o. A medida que profundizaban en el an&aacute;lisis, comenzaron a descubrir indicios de un software malicioso en algunos iPhone. Lo sorprendente es que estos dispositivos no mostraban signos de infecci&oacute;n, como aplicaciones extra&ntilde;as o funcionamiento an&oacute;malo.<\/p><p>Para desentra&ntilde;ar el misterio, Kaspersky puso en marcha una investigaci&oacute;n exhaustiva, formando un equipo de ciberinvestigaci&oacute;n especializado en vulnerabilidades en dispositivos m&oacute;viles.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6c08076 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"6c08076\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-750dd8e elementor-widget elementor-widget-text-editor\" data-id=\"750dd8e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>&ldquo;no fue una tonter&iacute;a&rdquo;<\/h2><p>Estamos en frente ni mas ni menos que de un ataque de cuatro &ldquo;Zero-Day&rdquo;, cuatro vulnerabilidades de d&iacute;a cero en dispositivos Apple. Un &ldquo;Zero-Day&rdquo; es una <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> que nunca ha sido explotada antes o que no ha sido descubierta a&uacute;n, por ende, no ha sido parcheada.<\/p><p>Este tipo de vulnerabilidad en el mercado negro puede costar millones de euros y m&aacute;s siendo una RCE, &ldquo;Remote Code Execution&rdquo;, que su traducci&oacute;n es, ejecuci&oacute;n remota de comandos, una vulnerabilidad que puede ejecutar c&oacute;digo en el dispositivo destino, es decir controlarlo por completo sin ser descubierto. El &ldquo;<a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/exploit\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>exploit<\/a>&rdquo; inicial permit&iacute;a sin intervenci&oacute;n del usuario, tomar control del dispositivo y acceder a datos sensibles.<\/p><p>Ni siquiera hac&iacute;a falta abrir un enlace o descargar un archivo adjunto: el solo hecho de recibir un mensaje de iMessage activaba el &ldquo;exploit&rdquo;, esto se llama &ldquo;0-click&rdquo;. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b23374c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"b23374c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ec99b84 elementor-widget elementor-widget-text-editor\" data-id=\"ec99b84\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>&ldquo;Apple y su privacidad&rdquo;<\/h2><p>Como ya se sabe, Apple no pone nada f&aacute;cil el modificar o escanear sus dispositivos gracias a su <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/cifrado\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>cifrado<\/a>, as&iacute; que tuvieron que hacerlo de formas bastante elaboradas, como por ejemplo, al no poder hacer una copia del propio dispositivo bit a bit para ver lo que estaba ocurriendo, tuvieron que hacer &ldquo;backups&rdquo; de estos y analizarlos con un software llamado &ldquo;Mitmproxy&rdquo;, donde se instala una entidad certificadora para poder analizar el trafico cifrado de los iPhone en texto plano y as&iacute; descubrir los paquetes que se env&iacute;an a los dominios de los atacantes.<\/p><p>En los dispositivos encontraron logs de conexi&oacute;n de un proceso llamado &ldquo;Backupagent&rdquo;, un proceso nativo pero obsoleto de iPhone, que generaba conexi&oacute;n con los servidores de comando y control de los atacantes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7bd2a6d elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"7bd2a6d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29a641b elementor-widget elementor-widget-text-editor\" data-id=\"29a641b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>&ldquo;el ataque m&aacute;s sofisticado que he visto&rdquo;<\/h2><p>Los atacantes infectaban los dispositivos usando un script llamado &ldquo;Jsvalidator&rdquo;, realmente era un pdf, que usaba &ldquo;WebGL&rdquo; una API de renderizado en navegadores, para generar un tri&aacute;ngulo, y hacer &ldquo;Pixelhashing&rdquo;, obteniendo un &ldquo;hash&rdquo; de los pixeles ocupados de este triangulo para conocer as&iacute; la CPU y GPU del dispositivo y averiguar el modelo en el que estaban. Esto previamente desde &ldquo;casa del atacante&rdquo; tuvieron que hacer el mismo proceso en todos los modelos de iPhone posibles para, seg&uacute;n los pixeles del tri&aacute;ngulo generado en cada uno, crear una base de datos que relacionara cada hash de cada triangulo con cada modelo. De aqu&iacute; viene el nombre de operaci&oacute;n de triangulo.<\/p><p>Es decir, dibujando un tri&aacute;ngulo en segundo plano, pod&iacute;an conocer que modelo de dispositivo era infectado.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6adea82 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"6adea82\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9e2712d elementor-widget elementor-widget-text-editor\" data-id=\"9e2712d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>&ldquo;la respuesta estuvo a la altura&rdquo;<\/h2><p>Una vez desde Kaspersky sab&iacute;an esto, esperaban a que el tel&eacute;fono se infectara, y con el programa &ldquo;Mitmproxy&rdquo;, &ldquo;on the fly&rdquo;, es decir en el transcurso de las conexiones, con un <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/servidor\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>servidor<\/a> VPS en medio de estas conexiones, modificaban el script malicioso, para despu&eacute;s una vez realizado el proceso, este mismo servidor recibiera el archivo adjunto de vuelta, y as&iacute; poder analizarlo y conocer que contenido se estaba extrayendo.<\/p><p>&nbsp;<\/p><p>Pod&iacute;an extraer de todo de dentro del dispositivo, grabar el tel&eacute;fono, grabar audio, localizarlo, incluso descargar las bases de datos &ldquo;SQL LITE&rdquo; de todas las APPS, &hellip;<\/p><p>La operaci&oacute;n dur&oacute; seis meses, seis meses para descubrir la infecci&oacute;n y conocer el prop&oacute;sito. Esta fue reportada a Apple, que parchearon efectivamente las vulnerabilidades explotadas. Kaspersky reporto lo ocurrido, sin poder reconocer la identidad de los atacantes por el anonimato que ofrece &ldquo;Cloudflare&rdquo;, la plataforma de VPNs que utilizaron para los ataques para evitar ser descubiertos.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e525cc7 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"e525cc7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-af5e4ed elementor-widget elementor-widget-text-editor\" data-id=\"af5e4ed\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>&ldquo;nunca estamos del todo protegidos&rdquo;<\/h2><p>La historia del hackeo a Kaspersky es una lecci&oacute;n sobre la naturaleza cambiante de la ciberseguridad y la necesidad de prepararse para lo inesperado. En un mundo donde las vulnerabilidades <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/zero-day\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>zero-day<\/a> y los ataques dirigidos son cada vez m&aacute;s comunes, cada organizaci&oacute;n, sin importar su tama&ntilde;o o experiencia en seguridad, debe adoptar un enfoque de seguridad proactivo. Al final, este ataque demostr&oacute; que, en el campo de la ciberseguridad, nadie est&aacute; totalmente seguro, ni incluso las empresas m&aacute;s preparadas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29ab39b elementor-author-box--avatar-yes elementor-author-box--name-yes elementor-author-box--biography-yes elementor-author-box--link-no elementor-widget elementor-widget-author-box\" data-id=\"29ab39b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=300&amp;r=g\" alt=\"Picture of Jordi Sala\" loading=\"lazy\"\/>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<div>\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\tJordi Sala\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\tMarketing\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Kaspersky va ser v\u00edctima d&#039;un APT (Advanced Persistan Threat) el 2023, una campanya de codi malici\u00f3s sofisticat persistent en el temps. <\/p>","protected":false},"author":2,"featured_media":11249,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[39],"tags":[100,74,99],"class_list":["post-11247","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actualidad","tag-antivirus","tag-concienciacion","tag-kaspersky","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>La historia de cuando hackearon a uno de los m\u00e1s grandes - Infordisa \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Kaspersky fue v\u00edctima de un APT (Advanced Persistan Threat) en 2023, una campa\u00f1a de malware sofisticado persistente en el tiempo.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/historia-hackeig-karspersky\/\" \/>\n<meta property=\"og:locale\" content=\"ca_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"La historia de cuando hackearon a uno de los m\u00e1s grandes - Infordisa \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Kaspersky fue v\u00edctima de un APT (Advanced Persistan Threat) en 2023, una campa\u00f1a de malware sofisticado persistente en el tiempo.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/ca\/historia-hackeig-karspersky\/\" \/>\n<meta property=\"og:site_name\" content=\"Infordisa \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-11T14:30:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-18T11:16:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/kaspersky-infordisa.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/kaspersky-infordisa.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrit per\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Temps estimat de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minuts\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"La historia de cuando hackearon a uno de los m\u00e1s grandes\",\"datePublished\":\"2024-11-11T14:30:04+00:00\",\"dateModified\":\"2025-08-18T11:16:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/\"},\"wordCount\":871,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/kaspersky.jpg\",\"keywords\":[\"antivirus\",\"Concienciaci\u00f3n\",\"Kaspersky\"],\"articleSection\":[\"Actualidad\"],\"inLanguage\":\"ca\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/\",\"name\":\"La historia de cuando hackearon a uno de los m\u00e1s grandes - Infordisa \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/kaspersky.jpg\",\"datePublished\":\"2024-11-11T14:30:04+00:00\",\"dateModified\":\"2025-08-18T11:16:10+00:00\",\"description\":\"Kaspersky fue v\u00edctima de un APT (Advanced Persistan Threat) en 2023, una campa\u00f1a de malware sofisticado persistente en el tiempo.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/#breadcrumb\"},\"inLanguage\":\"ca\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/kaspersky.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/kaspersky.jpg\",\"width\":1200,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/historia-hackeo-karspersky\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"La historia de cuando hackearon a uno de los m\u00e1s grandes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"Infordisa \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ca\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"Infordisa \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"Infordisa \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/ca\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"La hist\u00f2ria de quan van piratejar un dels m\u00e9s grans - Infordisa \/ Security Operations Center","description":"Kaspersky va ser v\u00edctima d&#039;un APT (Advanced Persistan Threat) el 2023, una campanya de codi malici\u00f3s sofisticat persistent en el temps.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/ca\/historia-hackeig-karspersky\/","og_locale":"ca_ES","og_type":"article","og_title":"La historia de cuando hackearon a uno de los m\u00e1s grandes - Infordisa \/ Security Operations Center","og_description":"Kaspersky fue v\u00edctima de un APT (Advanced Persistan Threat) en 2023, una campa\u00f1a de malware sofisticado persistente en el tiempo.","og_url":"https:\/\/www.infordisa.com\/soc\/ca\/historia-hackeig-karspersky\/","og_site_name":"Infordisa \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2024-11-11T14:30:04+00:00","article_modified_time":"2025-08-18T11:16:10+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/kaspersky-infordisa.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/kaspersky-infordisa.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrit per":"Jordi Sala","Temps estimat de lectura":"4 minuts"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"La historia de cuando hackearon a uno de los m\u00e1s grandes","datePublished":"2024-11-11T14:30:04+00:00","dateModified":"2025-08-18T11:16:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/"},"wordCount":871,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/kaspersky.jpg","keywords":["antivirus","Concienciaci\u00f3n","Kaspersky"],"articleSection":["Actualidad"],"inLanguage":"ca"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/","url":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/","name":"La hist\u00f2ria de quan van piratejar un dels m\u00e9s grans - Infordisa \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/#primaryimage"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/kaspersky.jpg","datePublished":"2024-11-11T14:30:04+00:00","dateModified":"2025-08-18T11:16:10+00:00","description":"Kaspersky va ser v\u00edctima d&#039;un APT (Advanced Persistan Threat) el 2023, una campanya de codi malici\u00f3s sofisticat persistent en el temps.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/#breadcrumb"},"inLanguage":"ca","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/"]}]},{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/#primaryimage","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/kaspersky.jpg","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/kaspersky.jpg","width":1200,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/historia-hackeo-karspersky\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"La historia de cuando hackearon a uno de los m\u00e1s grandes"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"Infordisa \/ Security Operations Center","description":"Portal de Ciberseguretat","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ca"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"Infordisa \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"Infordisa \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"M\u00e0rqueting","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/ca\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/11247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/comments?post=11247"}],"version-history":[{"count":5,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/11247\/revisions"}],"predecessor-version":[{"id":11638,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/11247\/revisions\/11638"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/media\/11249"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/media?parent=11247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/categories?post=11247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/tags?post=11247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}