{"id":269990,"date":"2024-01-09T02:39:57","date_gmt":"2024-01-09T07:39:57","guid":{"rendered":"https:\/\/sftarticles.wpenginepowered.com\/es\/?p=323809"},"modified":"2025-07-01T17:15:56","modified_gmt":"2025-07-02T00:15:56","slug":"this-is-how-a-ridiculous-password-managed-to-bring-down-orange","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/this-is-how-a-ridiculous-password-managed-to-bring-down-orange\/","title":{"rendered":"This is how a &#8220;ridiculous&#8221; password managed to bring down Orange"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Did you notice something strange in early December with your Internet connection? Was it your provider Orange? If you felt that way, we confirm that it wasn&#8217;t just your imagination. On December 5th, the <strong>Orange <\/strong>network &#8220;shut down&#8221; and left thousands of customers worldwide without connection. The worst part was the cause: a &#8220;<strong>ridiculously weak<\/strong>&#8221; password.<\/p>\n\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" alt=\"Norton 360 Deluxe\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-m\/p\/47179d9e-96d2-11e6-aa34-00163ec9f5fa\/1653347346\/norton-antivirus-download-Norton-360-Deluxe.jpg\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Norton 360 Deluxe<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/norton-antivirus.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">DOWNLOAD<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/norton-antivirus.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">A hacker managed to access the <strong>RIPE<\/strong> account of <strong>Orange<\/strong>, which manages which networks distribute Internet traffic in much of the world. It was user <strong>@Ms_Snow_Owo<\/strong> who claimed responsibility for the attack through her <strong>X<\/strong> profile.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/orange_es?ref_src=twsrc%5Etfw\">@orange_es<\/a> Meow meow meow! I have fixed your RIPE admin account security. Message me to get the new credentials :^) <a href=\"https:\/\/t.co\/NKFFDWb0Ec\">pic.twitter.com\/NKFFDWb0Ec<\/a><\/p>&mdash; Snow ?\ufe0f\u200d\u26a7\ufe0f (@Ms_Snow_OwO) <a href=\"https:\/\/twitter.com\/Ms_Snow_OwO\/status\/1742357282917109928?ref_src=twsrc%5Etfw\">January 3, 2024<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The truth is that the hacker didn&#8217;t find much resistance to enter: <strong>an excessively weak password<\/strong> was the cause of accessing the RIPE account being much easier than expected. Among the main recommendations we find when configuring a password, we see that it should be long, alternate between uppercase and lowercase letters, not refer to specific names, and include symbols and numbers. <strong>The password set by Orange practically did not meet any of these requirements.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And what password did they use? The following: <strong>ripeadmin<\/strong>. The security company <a href=\"https:\/\/www.infostealers.com\/article\/infostealer-infection-of-an-orange-employee-results-in-bgp-disruptions\/\" target=\"_blank\" rel=\"noopener nofollow\" title=\"Hudson Rock \">Hudson Rock <\/a>stated that the password was obtained through malware that stole information, which had been installed on an Orange computer since last September. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the weakness of the password was not enough, the attack also showed that <strong>two-step authentication<\/strong> (F2A) was not enabled. On the other hand, <strong>RIPE<\/strong> conducted an investigation into the incident and restored the Orange account. In view of the events, RIPE advised its users to <strong>&#8220;update their passwords&#8221;<\/strong> and <strong>&#8220;enable two-step authentication&#8221;<\/strong>.<\/p>\n\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" alt=\"Norton 360 Deluxe\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-icon-m\/p\/47179d9e-96d2-11e6-aa34-00163ec9f5fa\/1653347346\/norton-antivirus-download-Norton-360-Deluxe.jpg\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Norton 360 Deluxe<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/norton-antivirus.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">DOWNLOAD<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/norton-antivirus.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>On December 5th, the Orange network &#8220;shut down,&#8221; leaving thousands of customers worldwide without connection. The worst part was the cause: a &#8220;ridiculously weak&#8221; password.<\/p>\n","protected":false},"author":9211,"featured_media":269993,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":1},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-269990","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/269990","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9211"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=269990"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/269990\/revisions"}],"predecessor-version":[{"id":315349,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/269990\/revisions\/315349"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/269993"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=269990"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=269990"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=269990"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=269990"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=269990"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=269990"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}