{"id":35337,"date":"2019-10-31T22:03:44","date_gmt":"2019-10-31T19:03:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya\/"},"modified":"2019-10-31T22:03:44","modified_gmt":"2019-10-31T19:03:44","slug":"karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","title":{"rendered":"Carding \u0219i \u201ecutii negre\u201d: cum sunt hackuite ATM-urile ast\u0103zi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cutii de metal pline de bani, aflate pe str\u0103zile ora\u0219ului, nu pot s\u0103 nu atrag\u0103 aten\u021bia celor care caut\u0103 c\u00e2\u0219tiguri rapide. Dac\u0103 \u00eenainte metodele fizice erau singurele folosite pentru a goli bancomatele, acum sunt utilizate tot mai multe trucuri ingenioase legate de computere. Cea mai relevant\u0103 metod\u0103 de acum este cutia neagr\u0103, echipat\u0103 cu un microcomputer pe un singur circuit. Despre cum func\u021bioneaz\u0103 aceast\u0103 metod\u0103 vom discuta \u00een acest articol.<\/p>\n

<\/p>\n

\u2013 Evolu\u021bia cardingului de bancomat<\/a><\/noindex>
\n\u2013 Prima \u00eent\u00e2lnire cu \u201ecutia neagr\u0103\u201d<\/a><\/noindex>
\n\u2013 Analiza comunica\u021biilor de bancomat<\/a><\/noindex>
\n\u2013 De unde provin \u201ecutiile negre\u201d?<\/a><\/noindex>
\n\u2013 \u201eUltima mil\u0103\u201d \u0219i centrul de procesare falsificat<\/a><\/noindex><\/p>\n

<\/p>\n

\"Carding<\/p>\n

<\/a><\/noindex><\/p>\n

Directorul asocia\u021biei interna\u021bionale a produc\u0103torilor de bancomate (ATMIA) a subliniat<\/a><\/noindex> \u201ecutiile negre\u201d ca fiind cea mai periculoas\u0103 amenin\u021bare pentru bancomate.<\/em><\/p>\n

<\/p>\n

Un bancomat tipic este un set de componente electromecanice deja realizate, aranjate \u00eentr-o singur\u0103 carcas\u0103. Produc\u0103torii de bancomate \u00ee\u0219i construiesc crea\u021biile dintr-un sistem de eliberare a bancnotelor, cititoare de carduri \u0219i alte componente, acestea fiind deja dezvoltate de furnizori externi. O adev\u0103rat\u0103 juc\u0103rie LEGO pentru adul\u021bi. Componentele gata realizate sunt integrate \u00een carcasa bancomatului, care de obicei const\u0103 din dou\u0103 sec\u021biuni: sec\u021biunea superioar\u0103 (\u201ecabin\u0103\u201d sau \u201ezon\u0103 de servicii\u201d) \u0219i sec\u021biunea inferioar\u0103 (seiful). Toate componentele electromecanice sunt conectate prin porturi USB \u0219i COM la unitatea central\u0103, care \u00een acest caz \u00eendepline\u0219te rolul de gazd\u0103. La modelele vechi de bancomate, se pot \u00eent\u00e2lni de asemenea conexiuni prin bus-ul SDC.<\/p>\n

\n<\/a><\/noindex><\/p>\n

Evolu\u021bia cardingului de bancomat<\/h1>\n

<\/p>\n

Bancomatele pline de sume enorme atrag \u00een mod constant carderii. La \u00eenceput, ace\u0219tia s-au profitau doar de deficien\u021bele fizice grosolane \u00een protec\u021bia bancomatelor \u2013 foloseau skimmere \u0219i shimmer-uri pentru a fura datele de pe benzi magnetice; pad-uri de PIN false \u0219i camere pentru a vizualiza codurile PIN; \u0219i chiar bancomate false.<\/p>\n

<\/p>\n

Apoi, c\u00e2nd bancomatele au \u00eenceput s\u0103 fie echipate cu software unificat, care func\u021bioneaz\u0103 conform unor standarde comune, precum XFS (eXtensions for Financial Services), carderii au \u00eenceput s\u0103 atace bancomatele cu viru\u0219i informatici.<\/p>\n

<\/p>\n

Printre ace\u0219tia se num\u0103r\u0103 Trojan.Skimmer, Backdoor.Win32.Skimer, Ploutus, ATMii \u0219i mul\u021bi al\u021bi malteri denumi\u021bi sau nenumiti, pe care carderii \u00eei instaleaz\u0103 pe gazda bancomatului fie printr-un USB de bootare, fie printr-un port TCP de control de la distan\u021b\u0103.<\/p>\n

<\/p>\n

\"Carding
\nProcesul de infectare a bancomatului<\/em><\/p>\n

<\/p>\n

Prin capturarea subsystemului XFS, malware-ul poate da comenzi dispozitivului de eliberare a bancnotelor, f\u0103r\u0103 autorizare. Sau poate da comenzi cititorului de carduri: citind\/scriind banda magnetic\u0103 a cardului bancar \u0219i chiar extr\u0103g\u00e2nd istoricul tranzac\u021biilor stocat pe chipul cardului EMV. O aten\u021bie deosebit\u0103 merit\u0103 EPP (Encrypting PIN Pad; tastatura criptat\u0103 pentru PIN). Se consider\u0103 c\u0103 PIN-ul introdus pe aceasta nu poate fi interceptat. Cu toate acestea, XFS permite utilizarea tastaturilor EPP \u00een dou\u0103 moduri: 1) modul deschis (pentru introducerea diferitelor parametrii numerici, cum ar fi suma care urmeaz\u0103 s\u0103 fie retras\u0103); 2) modul sigur (la care EPP trece atunci c\u00e2nd trebuie s\u0103 se introduc\u0103 PIN-ul sau cheia de criptare). Aceast\u0103 caracteristic\u0103 a XFS permite carderilor s\u0103 efectueze un atac MiTM: s\u0103 intercepteze comanda de activare a modului sigur, care este trimis\u0103 de gazd\u0103 la EPP, \u0219i apoi s\u0103 informeze tastatura EPP c\u0103 activitatea ar trebui s\u0103 continue \u00een modul deschis. Ca r\u0103spuns la acest mesaj, EPP trimite ap\u0103s\u0103rile de taste \u00een text deschis.<\/p>\n

<\/p>\n

\"Carding
\nPrincipiul de func\u021bionare al \u201ecutiei negre\u201d<\/em><\/p>\n

<\/p>\n

\u00cen ultimii ani, potrivit<\/a><\/noindex> Europol, malware-urile pentru bancomate au evoluat semnificativ. Carderii nu mai trebuie s\u0103 aib\u0103 acces fizic la bancomat pentru a-l infecta. Ei pot infecta bancomatele prin atacuri de re\u021bea la distan\u021b\u0103, folosind re\u021beaua corporativ\u0103 a b\u0103ncii. Potrivit<\/a><\/noindex> Group IB, \u00een 2016, a raportat c\u0103 \u00een mai mult de 10 \u021b\u0103ri din Europa, bancomatele au fost supuse atacurilor la distan\u021b\u0103.<\/p>\n

<\/p>\n

\"Carding
\nAtacul asupra bancomatului prin acces la distan\u021b\u0103<\/em><\/p>\n

<\/p>\n

Antivirusurile, blocarea actualiz\u0103rilor firmware, blocarea porturilor USB \u0219i criptarea hard disk-ului protejeaz\u0103, p\u00e2n\u0103 la un anumit punct, bancomatul \u00eempotriva atacurilor virale ale carderilor. Dar ce se \u00eent\u00e2mpl\u0103 dac\u0103 carderul nu atac\u0103 de la gazd\u0103, ci se conecteaz\u0103 direct la periferice (prin RS232 sau USB) \u2013 la cititorul de carduri, tastatura pentru PIN sau dispozitivul de eliberare a numerarului?<\/p>\n

\n<\/a><\/noindex><\/p>\n

Prima \u00eent\u00e2lnire cu \u201ecutia neagr\u0103\u201d<\/h1>\n

<\/p>\n

Ast\u0103zi, carderii tehnici procedez \u00een acest mod<\/a><\/noindex>, folosind a\u0219a-numitele \u201ecutii negre\u201d pentru a fura numerar din bancomate \u2013 microcomputere programate special, similare cu Raspberry Pi. \u201eCutii negre\u201d golesc bancomatele complet, \u00eentr-un mod magic (din perspectiva bancherilor). Carderii \u00ee\u0219i conecteaz\u0103 dispozitivul magic direct la aparatul de eliberare a bancnotelor pentru a extrage to\u021bi banii disponibili. Aceast\u0103 atac\u0103 ocole\u0219te toate m\u0103surile de securitate software implementate pe gazda bancomatului (antivirale, controlul integrit\u0103\u021bii, criptare complet\u0103 a discului etc.).<\/p>\n

<\/p>\n

\"Carding
\n\u201eCutia neagr\u0103\u201d bazat\u0103 pe Raspberry Pi<\/em><\/p>\n

<\/p>\n

Cei mai mari produc\u0103tori de bancomate \u0219i agen\u021biile guvernamentale de securitate, confrunt\u00e2ndu-se cu mai multe implement\u0103ri ale \u201ecutiei negre,\u201d avertizeaz\u0103<\/a><\/noindex>, c\u0103 aceste calculatoare ingenioase determin\u0103 bancomatele s\u0103 elibereze tot numerarul disponibil; c\u00e2te 40 de bancnote la fiecare 20 de secunde. De asemenea, agen\u021biile de securitate avertizeaz\u0103 c\u0103 carderii vizeaz\u0103 cel mai des bancomatele din farmacii, centre comerciale; \u0219i, de asemenea, bancomatele care deservesc \u0219oferii \u201e\u00een mi\u0219care.\u201d<\/p>\n

<\/p>\n

\u00cen plus, pentru a nu fi observa\u021bi de camere, cei mai pruden\u021bi carderi \u00ee\u0219i aduc \u00een ajutor un partener nu foarte valoros, un \u201emule.\u201d \u0218i pentru a preveni ca acesta s\u0103 \u00ee\u0219i \u00eensu\u0219easc\u0103 \u201ecutia neagr\u0103,\u201d folosesc urm\u0103toarea schem\u0103<\/a><\/noindex>. Elimin\u0103 func\u021bionalitatea cheie din \u201ecutia neagr\u0103\u201d \u0219i \u00eei conecteaz\u0103 un smartphone, pe care \u00eel folosesc ca canal pentru transmiterea la distan\u021b\u0103 a comenzilor c\u0103tre \u201ecutia neagr\u0103\u201d redus\u0103, prin protocolul IP.<\/p>\n

<\/p>\n

\"Carding
\nModificarea \u201ecutiei negre,\u201d cu activare prin acces de la distan\u021b\u0103<\/em><\/p>\n

<\/p>\n

Cum arat\u0103 acest lucru din perspectiva bancherilor? \u00cenregistr\u0103rile de la camerele de supraveghere arat\u0103 aproximativ urm\u0103toarele: o persoan\u0103 deschide compartimentul superior (zona de servicii), conecteaz\u0103 la bancomat \u201ecutia magic\u0103,\u201d \u00eenchide compartimentul superior \u0219i pleac\u0103. Dup\u0103 un timp, c\u00e2\u021biva oameni, aparent clien\u021bi obi\u0219nui\u021bi, se apropie de bancomat \u0219i retrag sume uria\u0219e de bani. Apoi carderul revine \u0219i extrage din bancomat chestionarul s\u0103u mic magic. De obicei, atacul bancomatului folosind \u201ecutia neagr\u0103\u201d este descoperit doar dup\u0103 c\u00e2teva zile: c\u00e2nd se constat\u0103 c\u0103 seiful este gol \u0219i jurnalul de retrageri nu se potrive\u0219te. Drept urmare, angaja\u021bii b\u0103ncii r\u0103m\u00e2n doar s\u0103 se \u00eentrebe ce s-a \u00eent\u00e2mplat.<\/a><\/noindex>.<\/p>\n

\n<\/a><\/noindex><\/p>\n

Analiza comunica\u021biilor bancomatului<\/h1>\n

<\/p>\n

A\u0219a cum s-a men\u021bionat mai sus, interac\u021biunea dintre unitatea central\u0103 \u0219i dispozitivele periferice se realizeaz\u0103 prin USB, RS232 sau SDC. Carderul se conecteaz\u0103 direct la portul dispozitivului periferic \u0219i \u00eei trimite comenzi \u2013 ocolind gazda. Este destul de simplu, deoarece interfe\u021bele standard nu necesit\u0103 drivere specifice. Iar protocoalele proprietare prin care periferia \u0219i gazda interac\u021bioneaz\u0103 nu necesit\u0103 autorizare (deoarece dispozitivul se afl\u0103 \u00een interiorul unei zone de \u00eencredere); \u0219i, prin urmare, aceste protocoale nesecurizate, prin care periferia \u0219i gazda interac\u021bioneaz\u0103, sunt u\u0219or de interceptat \u0219i u\u0219or vulnerabile la atacurile de reproducere.<\/p>\n

<\/p>\n

Prin urmare, carderii pot folosi un analizator de trafic software sau hardware, conect\u00e2ndu-l direct la portul unui dispozitiv periferic specific (de exemplu, la cititorul de carduri) \u2013 pentru a colecta datele transmise. Utiliz\u00e2nd analizatorul de trafic, carderul afl\u0103 toate detaliile tehnice ale func\u021bion\u0103rii bancomatului, inclusiv func\u021bii nedocumentate ale periferiei acestuia (de exemplu, func\u021bia de actualizare a firmware-ului dispozitivului periferic). Ca rezultat, carderul ob\u021bine control complet asupra bancomatului. \u00cen plus, detectarea prezen\u021bei analizatorului de trafic este destul de dificil\u0103. <\/p>\n

<\/p>\n

Controlul direct asupra dispozitivului de eliberare a bancnotelor \u00eenseamn\u0103 c\u0103 casetele bancomatului pot fi golite f\u0103r\u0103 a fi \u00eenregistrate \u00een jurnalele care \u00een mod normal sunt generate de software-ul desf\u0103\u0219urat pe gazd\u0103. Pentru cei care nu sunt familiariza\u021bi cu arhitectura hardware-software a bancomatului, acest lucru poate p\u0103rea cu adev\u0103rat magic.<\/p>\n

\n<\/a><\/noindex><\/p>\n

De unde provin \u201ecutiile negre\u201d?<\/h1>\n

<\/p>\n

Furnizorii de bancomate \u0219i subcontractorii dezvolt\u0103 unelte de depanare pentru diagnosticarea hardware-ului bancomatului, inclusiv a electro-mecanicii care se ocup\u0103 cu retragerea numerarului. Printre aceste unelte se num\u0103r\u0103: ATMDesk<\/a><\/noindex>, RapidFire ATM XFS<\/a><\/noindex>. \u00cen imaginea de mai jos sunt prezentate \u0219i alte astfel de unelte de diagnosticare.<\/p>\n

<\/p>\n

\"Carding
\nPanoul de control ATMDesk<\/em><\/p>\n

<\/p>\n

\"Carding
\nPanoul de control RapidFire ATM XFS<\/em><\/p>\n

<\/p>\n

\"Carding
\nSpecifica\u021biile comparative ale mai multor unelte de diagnosticare<\/em><\/p>\n

<\/p>\n

Accesul la astfel de unelte este \u00een mod normal restric\u021bionat prin token-uri personalizate; \u0219i func\u021bioneaz\u0103 doar atunci c\u00e2nd u\u0219a seifului bancomatului este deschis\u0103. Cu toate acestea, simpla \u00eenlocuire a c\u00e2torva bi\u021bi \u00een codul binar al uneltei permite carderilor pot<\/a><\/noindex> \u201eTesta\u021bi\u201d retragerea de numerar \u2013 ocolind verific\u0103rile prev\u0103zute de produc\u0103torul utilitarului. Carderii instaleaz\u0103 astfel de utilitare modificate pe laptopul sau microcomputerul lor cu plac\u0103 unic\u0103, pe care le conecteaz\u0103 direct la dispozitivul de emitere a bancnotelor, pentru a extrage neautorizat numerar.<\/p>\n

\n<\/a><\/noindex><\/p>\n

\u201eUltima mil\u0103\u201d \u0219i centrul de procesare fals<\/h1>\n

<\/p>\n

Interac\u021biunea direct\u0103 cu perifericul, f\u0103r\u0103 comunicare cu gazda \u2013 este doar una dintre metodele eficiente de carding. Alte metode se bazeaz\u0103 pe faptul c\u0103 avem o varietate larg\u0103 de interfe\u021be de re\u021bea prin care ATM-ul se leag\u0103 de lumea extern\u0103. De la X.25 la Ethernet \u0219i comunica\u021bii mobile. Multe bancomate pot fi identificate \u0219i localizate prin serviciul Shodan (instruc\u021biuni concise despre utilizarea acestuia sunt prezentate aici<\/a><\/noindex>), \u2013 cu un atac ulterior care profit\u0103 de o configura\u021bie de securitate vulnerabil\u0103, lene\u0219ia administratorului \u0219i comunica\u021biile slabe \u00eentre diferitele departamente ale b\u0103ncii.<\/p>\n

<\/p>\n

\u201eUltima mil\u0103\u201d de comunicare \u00eentre ATM \u0219i centrul de procesare este bogat\u0103 \u00een cele mai diverse tehnologii, care pot servi ca punct de intrare pentru carder. Interac\u021biunea poate avea loc printr-o modalitate de conectare prin fir (linie telefonic\u0103 sau Ethernet) sau wireless (Wi-Fi, comunica\u021bie mobil\u0103: CDMA, GSM, UMTS, LTE). Mecanismele de securitate pot include: 1) mijloace hardware sau software pentru suportul VPN (at\u00e2t cele standard, integrate \u00een OS, c\u00e2t \u0219i cele de la ter\u021bi); 2) SSL\/TLS (at\u00e2t specifice pentru un anumit model de ATM, c\u00e2t \u0219i de la ter\u021bi); 3) criptare; 4) autentificarea mesajelor.<\/p>\n

<\/p>\n

Cu toate acestea pare<\/a><\/noindex>, c\u0103 pentru b\u0103nci tehnologiile enumerate par foarte complexe, \u0219i de aceea nu se obosesc s\u0103 implementeze o protec\u021bie re\u021bea specific\u0103; sau o implementeaz\u0103 cu erori. \u00cen cel mai bun caz, ATM-ul se leag\u0103 de un server VPN, \u0219i deja \u00een re\u021beaua privat\u0103 \u2013 se conecteaz\u0103 la centrul de procesare. \u00cen plus, chiar dac\u0103 b\u0103ncile reu\u0219esc s\u0103 implementeze mecanismele de protec\u021bie men\u021bionate mai sus, carderul are deja atacuri eficiente \u00eempotriva lor. Astfel, chiar dac\u0103 securitatea corespunde standardului PCI DSS, bancomatele r\u0103m\u00e2n \u00een continuare vulnerabile.<\/p>\n

<\/p>\n

Una dintre cerin\u021bele de baz\u0103 ale PCI DSS: toate datele confiden\u021biale care sunt transmise printr-o re\u021bea public\u0103 trebuie s\u0103 fie criptate. \u0218i chiar avem re\u021bele care au fost proiectate ini\u021bial astfel \u00eenc\u00e2t datele s\u0103 fie complet criptate! De aceea, exist\u0103 tenta\u021bia de a spune: \u201eAvem date criptate deoarece folosim Wi-Fi \u0219i GSM\u201d. Cu toate acestea, multe dintre aceste re\u021bele nu ofer\u0103 o protec\u021bie suficient\u0103. Re\u021belele de telefonie mobil\u0103 de toate genera\u021biile au fost deja compromise. \u00cen mod definitiv \u0219i ireversibil. \u0218i exist\u0103 chiar furnizori care ofer\u0103 dispozitive pentru interceptarea datelor transmise prin acestea.<\/p>\n

<\/p>\n

Astfel, fie \u00een comunica\u021bii nesecurizate, fie \u00een re\u021bele \u201eprivate\u201d, unde fiecare bancomat transmite informa\u021bii despre sine c\u0103tre alte bancomate, poate fi ini\u021biat un atac MiTM \u201ecentru de procesare fals\u201d, care va duce la faptul c\u0103 atacatorul va controla fluxurile de date transmise \u00eentre bancomat \u0219i centrul de procesare.<\/p>\n

<\/p>\n

Astfel de atacuri MiTM<\/a><\/noindex> poten\u021bial afecteaz\u0103 mii de bancomate. Pe parcursul c\u0103ii c\u0103tre centrul de procesare autentic, atacatorul introduce centrul s\u0103u de procesare fals. Acest centru de procesare fals d\u0103 comenzi bancomatului pentru a elibera bancnote. \u00cen acest proces, atacatorul \u00ee\u0219i configureaz\u0103 centrul de procesare astfel \u00eenc\u00e2t eliberarea de numerar s\u0103 aib\u0103 loc indiferent de cardul care este introdus \u00een bancomat \u2013 chiar dac\u0103 este expirat sau are un sold zero. Important este ca centrul de procesare fals \u201es\u0103-l recunoasc\u0103\u201d. Ca centru de procesare fals poate fi fie o crea\u021bie artizanal\u0103, fie un simulator de centru de procesare, ini\u021bial dezvoltat pentru a testa set\u0103rile re\u021belei (\u00eenc\u0103 un cadou de la \u201eproduc\u0103tor\u201d \u2013 pentru atacatori).<\/p>\n

<\/p>\n

\u00cen imaginea urm\u0103toare a fost adus<\/a><\/noindex> dump-ul comenzilor pentru eliberarea a 40 de bancnote din a patra caset\u0103, trimise din centrul de procesare fals \u0219i stocate \u00een jurnalele software-ului ATM. Acestea arat\u0103 aproape ca autentice.<\/p>\n

<\/p>\n

\"Carding
\nDump-ul comenzilor centrului de procesare fals<\/em><\/p>\n

Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u043e\u044f\u0449\u0438\u0435 \u043d\u0430 \u0443\u043b\u0438\u0446\u0430\u0445 \u0433\u043e\u0440\u043e\u0434\u0430 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0441 \u0434\u0435\u043d\u044c\u0433\u0430\u043c\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u043d\u0430\u0436\u0438\u0432\u044b. \u0418 \u0435\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0434\u043b\u044f \u043e\u043f\u0443\u0441\u0442\u043e\u0448\u0435\u043d\u0438\u044f \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0447\u0438\u0441\u0442\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0432 \u0445\u043e\u0434 \u0438\u0434\u0443\u0442 \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u0438\u0441\u043a\u0443\u0441\u043d\u044b\u0435 \u0442\u0440\u044e\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u2014 \u044d\u0442\u043e \u00ab\u0447\u0435\u0440\u043d\u044b\u0439 \u044f\u0449\u0438\u043a\u00bb \u0441 \u043e\u0434\u043d\u043e\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0438. \u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u043e\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35337","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Carding \u0219i \u201ecutiile negre\u201d: cum sunt atacate bancomatele ast\u0103zi | ProHoster","description":"Cutii de metal cu bani care stau pe str\u0103zile ora\u0219ului nu pot dec\u00e2t s\u0103 atrag\u0103 aten\u021bia celor care caut\u0103 c\u00e2\u0219tiguri rapide.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u0440\u0434\u0438\u043d\u0433 \u0438 \u00ab\u0447\u0451\u0440\u043d\u044b\u0435 \u044f\u0449\u0438\u043a\u0438\u00bb: \u043a\u0430\u043a \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044e\u0442 \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f | ProHoster","og:description":"\u0421\u0442\u043e\u044f\u0449\u0438\u0435 \u043d\u0430 \u0443\u043b\u0438\u0446\u0430\u0445 \u0433\u043e\u0440\u043e\u0434\u0430 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0441 \u0434\u0435\u043d\u044c\u0433\u0430\u043c\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u043d\u0430\u0436\u0438\u0432\u044b.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:44+00:00","article:modified_time":"2019-10-31T19:03:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35337","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:22:35","updated":"2026-01-21 22:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=35337"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35337\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=35337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=35337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=35337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}