{"id":35337,"date":"2019-10-31T22:03:44","date_gmt":"2019-10-31T19:03:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya\/"},"modified":"2019-10-31T22:03:44","modified_gmt":"2019-10-31T19:03:44","slug":"karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","title":{"rendered":"Kartimi dhe \u201ckutin\u00eb e zez\u00eb\u201d: si po thyejn\u00eb bankomatet sot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kutijt\u00eb metalik\u00eb q\u00eb q\u00ebndrojn\u00eb n\u00ebp\u00ebr rrug\u00ebt e qytetit me para nuk mund t\u00eb mos t\u00ebrheqin v\u00ebmendjen e atyre q\u00eb k\u00ebrkojn\u00eb fitim t\u00eb shpejt\u00eb. Dhe n\u00ebse m\u00eb par\u00eb shfryt\u00ebzimi i bankomat\u00ebve b\u00ebhej me metoda plot\u00ebsisht fizike, tani po p\u00ebrdoren truqe gjithnj\u00eb e m\u00eb artistike, t\u00eb lidhura me kompjuter\u00ebt. Tani m\u00eb i r\u00ebnd\u00ebsishmi \u00ebsht\u00eb \u201ckuti e zez\u00eb\u201d me nj\u00eb mikrokompjuter me nj\u00eb pllak\u00eb brenda. Ne do t\u00eb flasim n\u00eb k\u00ebt\u00eb artikull se si funksionon ai.<\/p>\n

<\/p>\n

\u2013 Evolucioni i kartimit t\u00eb bankomat\u00ebve<\/a><\/noindex>
\n\u2013 Njohja e par\u00eb me \u201ckutin\u00eb e zez\u00eb\u201d<\/a><\/noindex>
\n\u2013 Analiza e komunikimeve t\u00eb bankomat\u00ebve<\/a><\/noindex>
\n\u2013 Nga vijn\u00eb \u201ckutit\u00eb e zeza\u201d?<\/a><\/noindex>
\n\u2013 \u201cMij\u00ebra e fundit\u201d dhe qendra e falsifikuar e procesimit<\/a><\/noindex><\/p>\n

<\/p>\n

\"Kartimi<\/p>\n

<\/a><\/noindex><\/p>\n

Kryetari i Shoqat\u00ebs Nd\u00ebrkomb\u00ebtare t\u00eb Prodhuesve t\u00eb Bankomat\u00ebve (ATMIA) theksoi<\/a><\/noindex> \u201ckutit\u00eb e zeza\u201d si k\u00ebrc\u00ebnimin m\u00eb t\u00eb rreziksh\u00ebm p\u00ebr bankomatet.<\/em><\/p>\n

<\/p>\n

Nj\u00eb ATM tipik \u00ebsht\u00eb nj\u00eb kombinim i komponent\u00ebve elektromechanik\u00eb t\u00eb gatsh\u00ebm, t\u00eb vendosur n\u00eb nj\u00eb casing t\u00eb vet\u00ebm. Prodhuesit e ATM-ve nd\u00ebrtojn\u00eb krijesat e tyre me aparatin p\u00ebr l\u00ebshimin e banknotave, lexuesin e kartave dhe komponent\u00eb t\u00eb tjer\u00eb \u2013 t\u00eb zhvilluar tashm\u00eb nga furnizues t\u00eb jasht\u00ebm. Nj\u00eb lloj konstruktori LEGO p\u00ebr t\u00eb rritur. Komponent\u00ebt e gatsh\u00ebm vendosen n\u00eb casingun e ATM-s\u00eb, i cili zakonisht p\u00ebrb\u00ebhet nga dy ndarje: ndarja e sip\u00ebrme (\"zoni i sh\u00ebrbimit\") dhe ndarja e poshtme (seifi). T\u00eb gjith\u00eb komponent\u00ebt elektromechanik\u00eb jan\u00eb t\u00eb lidhur p\u00ebrmes porteve USB dhe COM me nj\u00eb bllok sistemik, i cili n\u00eb k\u00ebt\u00eb rast funksionon si host. N\u00eb modelet e vjetra t\u00eb ATM-ve, mund t\u00eb haset gjithashtu lidhjeje p\u00ebrmes autobusit SDC.<\/p>\n

\n<\/a><\/noindex><\/p>\n

Evolucioni i kart\u00ebs s\u00eb ATM-s\u00eb<\/h1>\n

<\/p>\n

ATM-t\u00eb me sasi t\u00eb m\u00ebdha brenda, t\u00ebrheqin gjithmon\u00eb kartelat drejt tyre. Fillimisht, kartelat shfryt\u00ebzuan vet\u00ebm dob\u00ebsit\u00eb fizike t\u00eb mbrojtjes s\u00eb ATM-ve \u2013 p\u00ebrdor\u00ebn skimmera dhe shimmera p\u00ebr t\u00eb vjedhur t\u00eb dh\u00ebna nga shirita magnetik\u00eb; pads t\u00eb rrem\u00eb PIN dhe kamera p\u00ebr t\u00eb par\u00eb kodet PIN; madje edhe ATM t\u00eb rrem\u00eb.<\/p>\n

<\/p>\n

M\u00eb pas, kur ATM-t\u00eb filluan t\u00eb pajisen me softuer t\u00eb unifikuar q\u00eb funksionon sipas standardeve t\u00eb nj\u00ebjta, si\u00e7 \u00ebsht\u00eb XFS (eXtensions for Financial Services), - karderat filluan t\u00eb sulmojn\u00eb ATM-t\u00eb me viruse kompjuterike.<\/p>\n

<\/p>\n

Nd\u00ebr ta jan\u00eb Trojan.Skimmer, Backdoor.Win32.Skimer, Ploutus, ATMii dhe shum\u00eb malware t\u00eb tjera t\u00eb em\u00ebruara dhe pa em\u00ebr, q\u00eb karderat i vendosin n\u00eb hostin e ATM-s\u00eb ose p\u00ebrmes nj\u00eb flash drive ngarkimi, ose p\u00ebrmes portit TCP t\u00eb menaxhimit t\u00eb larg\u00ebt.<\/p>\n

<\/p>\n

\"Kartimi
\nProcesi i infektimit t\u00eb ATM-s\u00eb<\/em><\/p>\n

<\/p>\n

Duke XFS-subsystem, malware can send commands to the cash dispensing device without authorization. It can also issue commands to the card reader: to read\/write the magnetic strip of a bank card and even extract the transaction history stored on the EMV card chip. The EPP (Encrypting PIN Pad; keypad me te enkriptim) is particularly noteworthy. It is commonly believed that the PIN entered on it cannot be intercepted. However, XFS allows the EPP pad to operate in two modes: 1) open mode (for entering various numerical parameters, such as the amount to be cashed); 2) secure mode (the EPP switches to this mode when entering the PIN code or encryption key is necessary). This particular feature of XFS allows a carder to carry out a MiTM attack: intercept the command to activate secure mode transmitted from the host to the EPP, and then inform the EPP PIN pad that to continue operating in open mode. In response to this message, the EPP sends keystrokes in plain text.<\/p>\n

<\/p>\n

\"Kartimi
\nParimi i funksionimit t\u00eb \"kutis\u00eb s\u00eb zez\u00eb\"<\/em><\/p>\n

<\/p>\n

N\u00eb vitet e fundit, sip\u00ebrmarrjen<\/a><\/noindex> Me Europa, viruset q\u00eb prekin ATM-t\u00eb kan\u00eb evoluar duksh\u00ebm. T\u00eb huajt tani nuk kan\u00eb nevoj\u00eb p\u00ebr akses fizik n\u00eb ATM p\u00ebr ta infektuar at\u00eb. Ata mund t\u00eb infektojn\u00eb ATM-t\u00eb p\u00ebrmes sulmeve t\u00eb larg\u00ebta n\u00eb rrjet, duke p\u00ebrdorur p\u00ebr k\u00ebt\u00eb q\u00ebllim rrjetin e kompanis\u00eb bankare. Sipas t\u00eb dh\u00ebnave<\/a><\/noindex> Grupi IB, n\u00eb vitin 2016, m\u00eb shum\u00eb se n\u00eb 10 vende t\u00eb Evrop\u00ebs, ATM-t\u00eb ishin t\u00eb ekspozuara ndaj sulmeve t\u00eb larg\u00ebta.<\/p>\n

<\/p>\n

\"Kartimi
\nSulmi ndaj ATM-s\u00eb p\u00ebrmes aksesit t\u00eb larg\u00ebt<\/em><\/p>\n

<\/p>\n

Antivirus\u00ebt, bllokimi i azhurnimit t\u00eb firmware-it, bllokimi i porteve USB dhe enkriptimi i disqeve t\u00eb forta \u2013 deri n\u00eb nj\u00eb far\u00eb shkalle mbrojn\u00eb ATM-n\u00eb nga sulmet virusale t\u00eb t\u00eb huajve. Por \u00e7far\u00eb ndodh n\u00ebse huaji nuk sulmon n\u00eb distanc\u00eb, por lidhet drejtp\u00ebrdrejt me periferin\u00eb (p\u00ebrmes RS232 ose USB) \u2013 me lexuesin e kart\u00ebs, pin-padin ose pajisjen e shp\u00ebrndarjes s\u00eb parave?<\/p>\n

\n<\/a><\/noindex><\/p>\n

Takimi i par\u00eb me 'kutin\u00eb e zez\u00eb'<\/h1>\n

<\/p>\n

Sot, t\u00eb huajt teknikisht t\u00eb kalitur vijn\u00eb pik\u00ebrisht k\u00ebshtu<\/a><\/noindex>, duke p\u00ebrdorin kutit\u00eb e zeza p\u00ebr t\u00eb vjedhur para nga ATM-t\u00eb, \u2013 mikrokompjuter\u00eb t\u00eb programuar specifikisht, si Raspberry Pi. Kutit\u00eb e zeza e zbrazin ATM-n\u00eb plot\u00ebsisht, n\u00eb nj\u00eb m\u00ebnyr\u00eb krejt magjike (sipas bankers). Carder-\u00ebt lidhin pajisjen e tyre magjike drejtp\u00ebrdrejt me pajisjen e shp\u00ebrndarjes s\u00eb notas; p\u00ebr t\u00eb nxjerr\u00eb t\u00eb gjitha parat\u00eb e disponueshme. Kjo sulm funksionon p\u00ebrtej t\u00eb gjitha mjeteve t\u00eb mbrojtjes software t\u00eb vendosur n\u00eb host-in e ATM-s\u00eb (antivirus\u00eb, kontrolli i integritetit, enkriptimi i plot\u00eb i diskut, etj.).<\/p>\n

<\/p>\n

\"Kartimi
\nKuti e zez\u00eb bazuar n\u00eb Raspberry Pi<\/em><\/p>\n

<\/p>\n

Prodhuesit m\u00eb t\u00eb m\u00ebdhenj t\u00eb ATM-ve dhe agjencit\u00eb qeveritare, p\u00ebrballur me disa realizime t\u00eb kutis\u00eb s\u00eb zez\u00eb, paralajm\u00ebrojn\u00eb<\/a><\/noindex>, se k\u00ebto kompjuter\u00eb t\u00eb zgjuar e detyrojn\u00eb ATM-n\u00eb t\u00eb nxjerr\u00eb t\u00eb gjitha parat\u00eb e disponueshme; 40 nota \u00e7do 20 sekonda. gjithashtu agjencit\u00eb paralajm\u00ebrojn\u00eb se carder-\u00ebt shpesh synojn\u00eb ATM-t\u00eb n\u00eb farmacia, qendra tregtare; dhe gjithashtu n\u00eb ATM-t\u00eb q\u00eb sh\u00ebrbejn\u00eb shofer\u00ebt \u201cn\u00eb l\u00ebvizje.\u201d<\/p>\n

<\/p>\n

Gjithashtu, p\u00ebr t\u00eb mos u dalluar para kamerave, kard\u00ebr\u00ebt m\u00eb t\u00eb kujdessh\u00ebm marrin ndihm\u00ebn e ndonj\u00eb partneri jo shum\u00eb t\u00eb \u00e7muar, nj\u00eb mule. Dhe p\u00ebr t\u00eb siguruar q\u00eb ai t\u00eb mos mund ta b\u00ebj\u00eb \"kutin\u00eb e zez\u00eb\" t\u00eb tij\u00ebn, p\u00ebrdorin skemin\u00eb e m\u00ebposhtme<\/a><\/noindex>. Heqin nga \"kutia e zez\u00eb\" funksionalitetin kryesor dhe e lidhin me nj\u00eb smartphone, t\u00eb cilin e p\u00ebrdorin si nj\u00eb kanal p\u00ebr t\u00eb transmetuar komandat n\u00eb distanc\u00eb n\u00eb \"kutin\u00eb e zez\u00eb\" t\u00eb reduktuar, p\u00ebrmes protokollit IP.<\/p>\n

<\/p>\n

\"Kartimi
\nModifikimi i \"kutis\u00eb s\u00eb zez\u00eb\", me aktivizim p\u00ebrmes qasjes s\u00eb larg\u00ebt<\/em><\/p>\n

<\/p>\n

Si t\u00eb duket nga ana e bankier\u00ebve? N\u00eb regjistrimet e kamerave t\u00eb sigurimit ndodhin di\u00e7ka si kjo: nj\u00eb person i caktuar \u00e7el kapakun e sip\u00ebrm (zon\u00ebn e sh\u00ebrbimit), lidh nj\u00eb \"kutin\u00eb magjike\" me bankomatin, mbyll kapakun e sip\u00ebrm dhe largohet. Pas pak koh\u00ebsh, disa persona, duksh\u00ebm klient\u00eb t\u00eb zakonsh\u00ebm, i afrohen bankomatit dhe t\u00ebrheqin shuma t\u00eb m\u00ebdha parash. Pastaj, karteri kthehet dhe nxjerr pajisjen e tij t\u00eb vog\u00ebl magjike nga bankomati. Zakonisht, fakti i sulmit mbi bankomatin me \"kutin\u00eb e zez\u00eb\" zbulonhet vet\u00ebm pas disa dit\u00ebsh: kur seif-i boshe dhe regjistri i t\u00ebrheqjeve t\u00eb gatshme nuk p\u00ebrputhen. Si rezultat, punonj\u00ebsve t\u00eb bank\u00ebs u mbetet vet\u00ebm t\u00eb k\u00ebrkojn\u00eb p\u00ebrgjigje<\/a><\/noindex>.<\/p>\n

\n<\/a><\/noindex><\/p>\n

Analiza e komunikimeve t\u00eb bankomatit<\/h1>\n

<\/p>\n

Si\u00e7 \u00ebsht\u00eb p\u00ebrmendur m\u00eb par\u00eb, nd\u00ebrveprimi midis nj\u00ebsis\u00eb centrale dhe pajisjeve periferike realizohet p\u00ebrmes USB, RS232 ose SDC. Kartela lidhet drejtp\u00ebrdrejt me portin e pajisjes periferike dhe i d\u00ebrgon asaj komanda - duke kaluar hostin. Kjo \u00ebsht\u00eb mjaft e thjesht\u00eb, sepse nd\u00ebrfaqet standarde nuk k\u00ebrkojn\u00eb ndonj\u00eb drejtues specifik. Dhe protokollet pronar\u00ebsh, me t\u00eb cilat periferia dhe hosti nd\u00ebrveprojn\u00eb, nuk k\u00ebrkojn\u00eb autorizim (pasi pajisja ndodhet brenda zon\u00ebs s\u00eb besuar); dhe k\u00ebshtu, k\u00ebto protokolle t\u00eb pambrojtura, me t\u00eb cilat periferia dhe hosti nd\u00ebrveprojn\u00eb - leht\u00ebsisht mund t\u00eb p\u00ebrgjohet dhe leht\u00ebsisht mund t\u00eb shqyrtohen p\u00ebr sulme t\u00eb riprodhimit.<\/p>\n

<\/p>\n

Pra ndaj, kartelat mund t\u00eb p\u00ebrdorin nj\u00eb analizues t\u00eb softuerit ose harduerit t\u00eb trafikut, duke e lidhur at\u00eb direkt n\u00eb portin e nj\u00eb pajisjeje periferike specifike (p\u00ebr shembull, n\u00eb leximin e kartelave) - p\u00ebr t\u00eb mbledhur t\u00eb dh\u00ebna q\u00eb transmetohen. Duke p\u00ebrdorur analizuesin e trafikut, karteli m\u00ebson t\u00eb gjitha detajet teknike t\u00eb funksionimit t\u00eb bankomatit, p\u00ebrfshir\u00eb funksionet e pa dokumentuara t\u00eb pajisjeve t\u00eb tij periferike (p\u00ebr shembull, funksioni i ndryshimit t\u00eb firmware-it t\u00eb pajisjes periferike). Si rezultat, karteli merr kontroll t\u00eb plot\u00eb mbi bankomatin. N\u00eb k\u00ebt\u00eb rast, zb Discoverhimi i pranis\u00eb s\u00eb analizuesit t\u00eb trafikut \u00ebsht\u00eb mjaft i v\u00ebshtir\u00eb. <\/p>\n

<\/p>\n

Kontrolli i drejtp\u00ebrdrejt\u00eb mbi pajisjen e shp\u00ebrndarjes s\u00eb banknotave n\u00ebnkupton se kasetat e bankomatit - mund t\u00eb shfryt\u00ebzohen pa ndonj\u00eb regjistrim n\u00eb log-et q\u00eb normalisht regjistrohen nga softi i instaluar n\u00eb host. P\u00ebr ata q\u00eb nuk jan\u00eb t\u00eb njohur me arkitektur\u00ebn e softuerit-harduerit t\u00eb bankomatit, kjo mund t\u00eb duket si magji.<\/p>\n

\n<\/a><\/noindex><\/p>\n

Nga vijn\u00eb 'kutit\u00eb e zeza'?<\/h1>\n

<\/p>\n

Furnizuesit e ATM-ve dhe n\u00ebnkontraktor\u00ebt zhvillojn\u00eb utilitar\u00eb p\u00ebr diagnostikimin e komponent\u00ebve t\u00eb pajisjeve t\u00eb ATM-ve, p\u00ebrfshir\u00eb mekanizmat elektro-mekanik\u00eb p\u00ebrgjegj\u00ebs p\u00ebr t\u00ebrheqjen e parave. Nd\u00ebr k\u00ebta utilitar\u00eb jan\u00eb: ATMDesk<\/a><\/noindex>, RapidFire ATM XFS<\/a><\/noindex>. M\u00eb posht\u00eb jan\u00eb paraqitur disa utilitar\u00eb t\u00eb tjer\u00eb p\u00ebr diagnostikim.<\/p>\n

<\/p>\n

\"Kartimi
\nP\u00ebrgjegj\u00ebsia e ATMDesk<\/em><\/p>\n

<\/p>\n

\"Kartimi
\nP\u00ebrgjegj\u00ebsia e RapidFire ATM XFS<\/em><\/p>\n

<\/p>\n

\"Kartimi
\nKarakteristikat krahasuese t\u00eb disa utilitar\u00ebve diagnostikues<\/em><\/p>\n

<\/p>\n

Qasja n\u00eb k\u00ebta utilitar\u00eb \u00ebsht\u00eb zakonisht e kufizuar nga tokenat e personalizuara dhe ato funksionojn\u00eb vet\u00ebm me der\u00ebn e kas\u00ebs s\u00eb ATM-s\u00eb t\u00eb hapur. Megjithat\u00eb, duke ndryshuar disa byte n\u00eb kodin binar t\u00eb utilitar\u00ebve, kapter\u00ebt mund<\/a><\/noindex> t\u00eb \"testojn\u00eb\" t\u00ebrheqjen e parave - duke anashkaluar kontrollin e parashikuar nga prodhuesi i utilitar\u00ebve. Kapter\u00ebt instalojn\u00eb k\u00ebta utilitar\u00eb t\u00eb modifikuar n\u00eb laptopin e tyre ose n\u00eb nj\u00eb mikrocomputator t\u00eb nj\u00ebansh\u00ebm, t\u00eb cil\u00ebt m\u00eb pas i lidhin drejtp\u00ebrdrejt me pajisjen e shp\u00ebrndarjes s\u00eb banknotave p\u00ebr t\u00ebrheqjen e parave pa autorizim.<\/p>\n

\n<\/a><\/noindex><\/p>\n

\"Mij\u00ebra t\u00eb fundit\" dhe qendra e falsifikuar e procesimit<\/h1>\n

<\/p>\n

Nd\u00ebrveprimi i drejtp\u00ebrdrejt\u00eb me pajisjet periferike, pa kontakt me hostin, \u00ebsht\u00eb vet\u00ebm nj\u00eb nga teknikat e efektshme t\u00eb cardinaling. Teknikat e tjera mb\u00ebshteten n\u00eb faktin se ne kemi nj\u00eb larmi t\u00eb gjer\u00eb nd\u00ebrfaqesh rrjeti, p\u00ebrmes t\u00eb cilave ATM-ja komunikon me bot\u00ebn e jashtme. Nga X.25 deri n\u00eb Ethernet dhe komunikimin celular. Shum\u00eb ATM mund t\u00eb identifikohen dhe lokalizohen p\u00ebrmes sh\u00ebrbimit Shodan (udh\u00ebzimi m\u00eb i shkurt\u00ebr p\u00ebr p\u00ebrdorimin e tij \u00ebsht\u00eb paraqitur k\u00ebtu<\/a><\/noindex>), \u2013 me nj\u00eb sulm t\u00eb m\u00ebvonsh\u00ebm, q\u00eb p\u00ebrdor nj\u00eb konfigurim t\u00eb ndjesh\u00ebm t\u00eb siguris\u00eb, lenien e administratorit dhe komunikimet e dob\u00ebta midis nj\u00ebsive t\u00eb ndryshme t\u00eb bank\u00ebs.<\/p>\n

<\/p>\n

\u00abKilometri i fundit\u00bb i lidhjes mes nj\u00eb automati bankar dhe nj\u00eb qendre procesimi ka nj\u00eb gam\u00eb t\u00eb gjer\u00eb teknologjish q\u00eb mund t\u00eb sh\u00ebrbejn\u00eb si pika hyr\u00ebse p\u00ebr autor\u00ebt e kartelave. Nd\u00ebrveprimi mund t\u00eb b\u00ebhet p\u00ebrmes nj\u00eb lidhjeje t\u00eb kablluar (linja telefonike ose Ethernet) ose nj\u00eb lidhjeje pa tela (Wi-Fi, lidhje celulare: CDMA, GSM, UMTS, LTE). Mekanizmat e siguris\u00eb mund t\u00eb p\u00ebrfshijn\u00eb: 1) mjete harduerike ose softuerike p\u00ebr mb\u00ebshtetje VPN (si standarde, t\u00eb integruara n\u00eb OS, ashtu edhe nga prodhues t\u00eb jasht\u00ebm); 2) SSL\/TLS (si specifike p\u00ebr nj\u00eb model t\u00eb caktuar automati bankar, ashtu edhe nga prodhues t\u00eb jasht\u00ebm); 3) enkriptim; 4) autentikimi i mesazheve.<\/p>\n

<\/p>\n

Megjithat\u00eb duket<\/a><\/noindex>, q\u00eb p\u00ebr bankat, teknologjit\u00eb e p\u00ebrmendura duken shum\u00eb t\u00eb komplikuara, dhe prandaj ato nuk lodhen p\u00ebr t'u angazhuar n\u00eb mbrojtjen speciale t\u00eb rrjetit; ose e realizojn\u00eb at\u00eb me gabime. N\u00eb rastin m\u00eb t\u00eb mir\u00eb, ATM-ja lidhet me nj\u00eb server VPN dhe tashm\u00eb brenda rrjetit privat \u2013 lidhet me qendr\u00ebn e p\u00ebrpunimit. P\u00ebr m\u00eb tep\u00ebr, edhe sikur bankat t\u00eb arrijn\u00eb t\u00eb realizojn\u00eb mekanizmat mbrojt\u00ebs t\u00eb p\u00ebrmendur m\u00eb sip\u00ebr, \u2013 kartelat tashm\u00eb kan\u00eb sulme efikase kund\u00ebr tyre. K\u00ebshtu, edhe n\u00ebse sigurimi p\u00ebrputhet me standardin PCI DSS, ATM-t\u00eb mbeten pran\u00eb rrezikut.<\/p>\n

<\/p>\n

Nj\u00eb nga k\u00ebrkesat kryesore t\u00eb PCI DSS: t\u00eb gjitha t\u00eb dh\u00ebnat e ndjeshme, kur d\u00ebrgohen p\u00ebrmes nj\u00eb rrjeti publik, duhet t\u00eb jen\u00eb t\u00eb koduara. Dhe n\u00eb fakt, ka rrjete q\u00eb jan\u00eb projektuar nga fillimi q\u00eb t\u00eb dh\u00ebnat t\u00eb jen\u00eb plot\u00ebsisht t\u00eb koduara! Prandaj, ka nj\u00eb tundim t\u00eb themi: \"Ne kemi t\u00eb dh\u00ebna t\u00eb koduara sepse p\u00ebrdorim Wi-Fi dhe GSM\". Megjithat\u00eb, shum\u00eb nga k\u00ebto rrjete nuk ofrojn\u00eb mbrojtje t\u00eb mjaftueshme. Rrjetet celulare t\u00eb t\u00eb gjitha brezave jan\u00eb piratuar p\u00ebr shum\u00eb koh\u00eb. P\u00ebrfundimisht dhe p\u00ebrher\u00eb. Dhe madje ka ofrues q\u00eb ofrojn\u00eb pajisje p\u00ebr kapjen e t\u00eb dh\u00ebnave q\u00eb kalojn\u00eb p\u00ebrmes tyre.<\/p>\n

<\/p>\n

Prandaj, nj\u00eb sulm MiTM i \"qendr\u00ebs s\u00eb procesimit t\u00eb rreme\" mund t\u00eb iniciohet n\u00eb nj\u00eb komunikim t\u00eb pasigurt, ose n\u00eb nj\u00eb rrjet \"privat\", ku \u00e7do ATM shpall veten te ATM-t\u00eb e tjera, q\u00eb do t\u00eb \u00e7oj\u00eb n\u00eb kontrollin e karterit mbi rrjedhat e t\u00eb dh\u00ebnave q\u00eb kalojn\u00eb midis ATM-s\u00eb dhe qendr\u00ebs s\u00eb procesimit.<\/p>\n

<\/p>\n

T\u00eb tilla sulme MiTM<\/a><\/noindex> potencialisht t\u00eb ekspozuar ndaj mij\u00ebra ATM-ve. N\u00eb rrug\u00ebn p\u00ebr n\u00eb qend\u00ebr t\u00eb v\u00ebrtet\u00eb t\u00eb procesimit \u2013 karderi fut kart\u00ebn e tij, t\u00eb falsifikuar. Kjo qend\u00ebr e falsifikuar e procesimit i jep ATM-s\u00eb urdhra p\u00ebr t\u00eb nxjerr\u00eb banknotat. Nd\u00ebrkoh\u00eb, karderi e konfiguron qendr\u00ebn e tij t\u00eb procesimit n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00ebrheqja e parave t\u00eb ndodhte pavar\u00ebsisht se cila kart\u00eb futet n\u00eb ATM \u2013 madje edhe n\u00ebse afati i saj ka skaduar ose ka nj\u00eb bilanc zero. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb q\u00eb qendra e falsifikuar e procesimit ta \u201cnjoh\u00eb\u201d at\u00eb. Si nj\u00eb qend\u00ebr t\u00eb falsifikuar procesimi mund t\u00eb jet\u00eb nj\u00eb prodhim artizanal ose nj\u00eb simulator i qendr\u00ebs s\u00eb procesimit, fillimisht i zhvilluar p\u00ebr t\u00eb rregulluar konfiguracionet e rrjetit (nj\u00eb tjet\u00ebr dhurat\u00eb nga \u201cprodhuesi\u201d p\u00ebr karderat).<\/p>\n

<\/p>\n

N\u00eb figur\u00ebn e ardhshme tregohet<\/a><\/noindex> dump i komandave p\u00ebr t\u00eb nxjerr\u00eb 40 banknota nga kaseta e kat\u00ebrt, \u2013 t\u00eb d\u00ebrguara nga qendra e falsifikuar e procesimit dhe t\u00eb ruajtura n\u00eb regjistrat e softuerit t\u00eb ATM-s\u00eb. Ato duken pothuajse si t\u00eb v\u00ebrteta.<\/p>\n

<\/p>\n

\"Kartimi
\nDump i komandave nga qendra e falsifikuar e procesimit<\/em><\/p>\n

Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u043e\u044f\u0449\u0438\u0435 \u043d\u0430 \u0443\u043b\u0438\u0446\u0430\u0445 \u0433\u043e\u0440\u043e\u0434\u0430 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0441 \u0434\u0435\u043d\u044c\u0433\u0430\u043c\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u043d\u0430\u0436\u0438\u0432\u044b. \u0418 \u0435\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0434\u043b\u044f \u043e\u043f\u0443\u0441\u0442\u043e\u0448\u0435\u043d\u0438\u044f \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0447\u0438\u0441\u0442\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0432 \u0445\u043e\u0434 \u0438\u0434\u0443\u0442 \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u0438\u0441\u043a\u0443\u0441\u043d\u044b\u0435 \u0442\u0440\u044e\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u2014 \u044d\u0442\u043e \u00ab\u0447\u0435\u0440\u043d\u044b\u0439 \u044f\u0449\u0438\u043a\u00bb \u0441 \u043e\u0434\u043d\u043e\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0438. \u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u043e\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35337","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kartimi dhe 'kutit\u00eb e zeza': si i hakin bankomatet sot | ProHoster","description":"Kutit\u00eb metalike me para q\u00eb q\u00ebndrojn\u00eb n\u00ebp\u00ebr rrug\u00ebt e qytetit t\u00ebrheqin padyshim v\u00ebmendjen e atyre q\u00eb k\u00ebrkojn\u00eb fitime t\u00eb shpejta. Dhe n\u00ebse m\u00eb par\u00eb metodat fizike ishin t\u00eb vetmet t\u00eb p\u00ebrdorura p\u00ebr t\u00eb zbrazur bankomatet, tani jan\u00eb n\u00eb p\u00ebrdorim trukte m\u00eb t\u00eb sofistikuara q\u00eb lidhen me kompjuter\u00ebt. Aktualisht, triku m\u00eb i njohur \u00ebsht\u00eb 'kutia e zez\u00eb' me nj\u00eb mikrokompjuter me nj\u00eb flet\u00eb brenda. Rreth m\u00ebnyr\u00ebs si ai","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u0440\u0434\u0438\u043d\u0433 \u0438 \u00ab\u0447\u0451\u0440\u043d\u044b\u0435 \u044f\u0449\u0438\u043a\u0438\u00bb: \u043a\u0430\u043a \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044e\u0442 \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f | ProHoster","og:description":"\u0421\u0442\u043e\u044f\u0449\u0438\u0435 \u043d\u0430 \u0443\u043b\u0438\u0446\u0430\u0445 \u0433\u043e\u0440\u043e\u0434\u0430 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0441 \u0434\u0435\u043d\u044c\u0433\u0430\u043c\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u043d\u0430\u0436\u0438\u0432\u044b. \u0418 \u0435\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0434\u043b\u044f \u043e\u043f\u0443\u0441\u0442\u043e\u0448\u0435\u043d\u0438\u044f \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0447\u0438\u0441\u0442\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0432 \u0445\u043e\u0434 \u0438\u0434\u0443\u0442 \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u0438\u0441\u043a\u0443\u0441\u043d\u044b\u0435 \u0442\u0440\u044e\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u2014 \u044d\u0442\u043e \u00ab\u0447\u0435\u0440\u043d\u044b\u0439 \u044f\u0449\u0438\u043a\u00bb \u0441 \u043e\u0434\u043d\u043e\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0438. \u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u043e\u043d","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:44+00:00","article:modified_time":"2019-10-31T19:03:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35337","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:22:35","updated":"2026-01-21 22:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=35337"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35337\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=35337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=35337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=35337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}