{"id":35337,"date":"2019-10-31T22:03:44","date_gmt":"2019-10-31T19:03:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya\/"},"modified":"2019-10-31T22:03:44","modified_gmt":"2019-10-31T19:03:44","slug":"karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","title":{"rendered":"Carding dhe 'kutit\u00eb e zeza': si shp\u00ebrthehen ATM-t\u00eb sot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kutit\u00eb metalike q\u00eb q\u00ebndrojn\u00eb n\u00ebp\u00ebr rrug\u00ebt e qytetit me para, nuk mund t\u00eb mos t\u00ebrheqin v\u00ebmendjen e atyre q\u00eb k\u00ebrkojn\u00eb fitime t\u00eb shpejta. Dhe n\u00ebse m\u00eb par\u00eb, p\u00ebr t\u00eb zbrazur ATM-t\u00eb p\u00ebrdoren metoda t\u00eb thjeshta fizike, tani po p\u00ebrdoren truqe gjithnj\u00eb e m\u00eb t\u00eb sofistikuara t\u00eb lidhura me kompjuter\u00ebt. Aktualisht, metoda m\u00eb e njohur \u00ebsht\u00eb \"kuti e zez\u00eb\" me nj\u00eb mikrokompjuter nj\u00eb-pjes\u00ebsh brenda. Si funksionon ai, do t\u00eb diskutojm\u00eb n\u00eb k\u00ebt\u00eb artikull.<\/p>\n

<\/p>\n

\u2013 Evolucioni i kartelave t\u00eb ATM-ve<\/a><\/noindex>
\n\u2013 Njohja e par\u00eb me \"kutin\u00eb e zez\u00eb\"<\/a><\/noindex>
\n\u2013 Analiza e komunikimeve t\u00eb ATM-ve<\/a><\/noindex>
\n\u2013 Nga vjen \"kutia e zez\u00eb\"?<\/a><\/noindex>
\n\u2013 \"Mila e fundit\" dhe qendra procesuese e rreme<\/a><\/noindex><\/p>\n

<\/p>\n

\"Carding<\/p>\n

<\/a><\/noindex><\/p>\n

Kryetari i asociat\u00ebs nd\u00ebrkomb\u00ebtare t\u00eb prodhuesve t\u00eb ATM-ve (ATMIA) theksoi<\/a><\/noindex> \"kutia e zez\u00eb\" si k\u00ebrc\u00ebnimi m\u00eb i rreziksh\u00ebm p\u00ebr ATM-t\u00eb.<\/em><\/p>\n

<\/p>\n

Nj\u00eb ATM tipike \u00ebsht\u00eb nj\u00eb grup komponent\u00ebsh elektromechanik\u00eb t\u00eb gatsh\u00ebm, t\u00eb vendosur t\u00eb gjith\u00eb n\u00eb nj\u00eb trup nj\u00eblloj. Prodhuesit e ATM-ve nd\u00ebrtuan krijimet e tyre metalike nga nj\u00eb paisje q\u00eb l\u00ebshon bank\u00ebnotat, lexues kartash dhe komponent\u00eb t\u00eb tjer\u00eb - tashm\u00eb t\u00eb zhvilluar nga furnizues t\u00eb jasht\u00ebm. Nj\u00eb nd\u00ebrtues LEGO p\u00ebr t\u00eb rritur. Komponent\u00ebt e gatsh\u00ebm vendosen n\u00eb trupin e ATM-s\u00eb, i cili zakonisht p\u00ebrb\u00ebhet nga dy seksione: seksioni i sip\u00ebrm (\"dhoma\" ose \"zona e sh\u00ebrbimit\"), dhe seksioni i posht\u00ebm (kasaforta). T\u00eb gjith\u00eb komponent\u00ebt elektromechanik\u00eb lidhen p\u00ebrmes porteve USB dhe COM me nj\u00ebsin\u00eb qendrore, e cila n\u00eb k\u00ebt\u00eb rast \u00ebsht\u00eb host. N\u00eb modelet m\u00eb t\u00eb vjetra t\u00eb ATM-ve, gjithashtu mund t\u00eb gjenden lidhje p\u00ebrmes autobuzit SDC.<\/p>\n

\n<\/a><\/noindex><\/p>\n

Evolucioni i kartelave t\u00eb ATM-ve<\/h1>\n

<\/p>\n

ATM-t\u00eb me shuma t\u00eb m\u00ebdha brenda, patjet\u00ebr q\u00eb t\u00ebrheqin kartelat t\u00eb vijn\u00eb. Fillimisht, kartelat shfryt\u00ebzuan vet\u00ebm mang\u00ebsit\u00eb fizike t\u00eb mbrojtjes s\u00eb ATM-ve - p\u00ebrdoren skimmera dhe shimmers p\u00ebr t\u00eb vjedhur t\u00eb dh\u00ebnat nga brezat magnetik\u00eb; panele pin t\u00eb rreme dhe kamera p\u00ebr t\u00eb par\u00eb kodet PIN; dhe madje edhe ATM t\u00eb rreme.<\/p>\n

<\/p>\n

Pastaj, kur ATM-t\u00eb filluan t\u00eb pajisen me software t\u00eb unifikuar q\u00eb operonte sipas standardeve t\u00eb nj\u00ebjta, si\u00e7 \u00ebsht\u00eb XFS (eXtensions for Financial Services) - kartelat filluan t\u00eb sulmonin ATM-t\u00eb me viruse kompjuterike.<\/p>\n

<\/p>\n

Mes tyre, Trojan.Skimmer, Backdoor.Win32.Skimer, Ploutus, ATMii dhe shum\u00eb viruse t\u00eb tjera t\u00eb em\u00ebruara dhe pa em\u00ebr, q\u00eb kartelat i vendosin n\u00eb hostin e ATM-s\u00eb, ose p\u00ebrmes nj\u00eb flash drive t\u00eb boot-imit, ose p\u00ebrmes nj\u00eb porte TCP p\u00ebr kontroll t\u00eb larg\u00ebt.<\/p>\n

<\/p>\n

\"Carding
\nProcesi i infektimit t\u00eb nj\u00eb bankomati<\/em><\/p>\n

<\/p>\n

Duke kapur n\u00ebnt\u00eb-n\u00eb XFS, malware mund t\u00eb d\u00ebrgoj\u00eb komanda n\u00eb pajisjen e l\u00ebshimit t\u00eb banknotave, pa autorizim. Ose t\u00eb jap\u00eb komanda p\u00ebr lexuesin e kartave: t\u00eb lexoj\u00eb\/shkruaj\u00eb shiritin magnetik t\u00eb kart\u00ebs bankare dhe madje t\u00eb nxjerr\u00eb historin\u00eb e transaksioneve, e cila ruhet n\u00eb \u00e7ipin EMV t\u00eb kart\u00ebs. Nj\u00eb v\u00ebmendje t\u00eb ve\u00e7ant\u00eb meriton EPP (Encrypting PIN Pad; tastiera e kodit t\u00eb identifikimit t\u00eb enkriptuar). N\u00eb p\u00ebrgjith\u00ebsi, besohet se kodi i hyrjes n\u00eb t\u00eb nuk mund t\u00eb kapet. Megjithat\u00eb, XFS lejon p\u00ebrdorimin e EPP n\u00eb dy m\u00ebnyra: 1) m\u00ebnyra e hapur (p\u00ebr t\u00eb futur parametra t\u00eb ndrysh\u00ebm numerik\u00eb, si shuma q\u00eb duhet t\u00eb t\u00ebrhiqet); 2) m\u00ebnyra e sigurt (EPP kalon n\u00eb t\u00eb, kur duhet t\u00eb futet kodi i identifikimit ose \u00e7el\u00ebsi i enkriptimit). Kjo ve\u00e7ori e XFS i lejon karader\u00ebve t\u00eb realizojn\u00eb nj\u00eb sulm MiTM: t\u00eb kapin komand\u00ebn e aktivizimit t\u00eb m\u00ebnyr\u00ebs s\u00eb sigurt, e cila d\u00ebrgohet nga hosti n\u00eb EPP, dhe pastaj t'i tregojn\u00eb EPP-s\u00eb t\u00eb vazhdoj\u00eb pun\u00ebn n\u00eb m\u00ebnyr\u00eb t\u00eb hapur. N\u00eb p\u00ebrgjigje t\u00eb k\u00ebtij mesazhi, EPP d\u00ebrgon shtypjet e \u00e7el\u00ebsit, n\u00eb tekst t\u00eb hapur.<\/p>\n

<\/p>\n

\"Carding
\nParimi i veprimit t\u00eb 'kutis\u00eb s\u00eb zez\u00eb'<\/em><\/p>\n

<\/p>\n

N\u00eb vitet e fundit, sipas t\u00eb dh\u00ebnave<\/a><\/noindex> Europol, malware p\u00ebr bankomatet ka evoluar duksh\u00ebm. Karader\u00ebt tani nuk kan\u00eb nevoj\u00eb t\u00eb ken\u00eb akses fizik n\u00eb bankomat p\u00ebr ta infektuar at\u00eb. Ata mund t\u00eb infektuar bankomatet p\u00ebrmes sulmeve t\u00eb larg\u00ebta n\u00eb rrjet, duke p\u00ebrdorur p\u00ebr k\u00ebt\u00eb rrjetin korporativ t\u00eb bank\u00ebs. Sipas<\/a><\/noindex> Group IB, n\u00eb vitin 2016, n\u00eb m\u00eb shum\u00eb se 10 vende t\u00eb Evrop\u00ebs, bankomatet ishin t\u00eb ekspozuara ndaj sulmeve t\u00eb larg\u00ebta.<\/p>\n

<\/p>\n

\"Carding
\nSulmi ndaj bankomatit p\u00ebrmes aksesit t\u00eb larg\u00ebt<\/em><\/p>\n

<\/p>\n

Antiviruset, bllokimi i p\u00ebrdit\u00ebsimeve t\u00eb firmware-it, bllokimi i porteve USB dhe enkriptimi i hard disku - deri n\u00eb nj\u00ebfar\u00eb shkalle mbrojn\u00eb bankomatin nga sulmet virusale t\u00eb karader\u00ebve. Por \u00e7far\u00eb n\u00ebse karader\u00ebt nuk sulmojn\u00eb hostin, por lidhen direkt me periferin\u00eb (p\u00ebrmes RS232 ose USB) - me lexuesin e kartave, PIN-pad-in ose pajisjen e l\u00ebshimit t\u00eb paras\u00eb?<\/p>\n

\n<\/a><\/noindex><\/p>\n

Takimi i par\u00eb me 'kutin\u00eb e zez\u00eb'<\/h1>\n

<\/p>\n

Sot, karader\u00ebt e pajisura mir\u00eb e praktikojn\u00eb k\u00ebshtu<\/a><\/noindex>, duke p\u00ebrdorin t\u00eb ashtuquajturat \u00abkuti t\u00eb zeza\u00bb p\u00ebr t\u00eb vjedhur para nga ATM, - kompjuter\u00eb nj\u00ebqarku t\u00eb programuar specifikisht, t\u00eb ngjash\u00ebm me Raspberry Pi. \u00abKutia e zez\u00eb\u00bb e shfryt\u00ebzon plot\u00ebsisht ATM-t\u00eb, n\u00eb nj\u00eb m\u00ebnyr\u00eb magjike (sip\u00ebrmarr\u00ebsit bankar\u00eb do ta quajn\u00eb k\u00ebshtu). K\u00ebta karcer\u00eb lidhin pajisjen e tyre magjike drejtp\u00ebrdrejt me pajisjen e l\u00ebshimit t\u00eb bankave; p\u00ebr t\u00eb nxjerr\u00eb gjith\u00eb parat\u00eb e disponueshme. Ky sulm anashkalon t\u00eb gjitha masat mbrojt\u00ebse t\u00eb softuerit t\u00eb instaluara n\u00eb hostin e ATM-s\u00eb (antivirus\u00ebt, kontrolli i integritetit, enkriptimi i plot\u00eb i diskut etj.).<\/p>\n

<\/p>\n

\"Carding
\n\u00abKutia e zez\u00eb\u00bb bazuar n\u00eb Raspberry Pi<\/em><\/p>\n

<\/p>\n

Prodhuestit m\u00eb t\u00eb m\u00ebdhenj t\u00eb ATM-ve dhe agjencit\u00eb qeveritare, p\u00ebrball\u00eb disa realizimeve t\u00eb \u00abkutive t\u00eb zez\u00eb\u00bb, p\u00ebrgjith\u00ebsisht paralajm\u00ebrojn\u00eb<\/a><\/noindex>, se k\u00ebta kompjuter\u00eb t\u00eb zgjuar nxisin ATM-t\u00eb t\u00eb p\u00ebrmbushin t\u00eb gjith\u00eb parat\u00eb n\u00eb dispozicion; deri n\u00eb 40 nota \u00e7do 20 sekonda. P\u00ebr m\u00eb tep\u00ebr, agjencit\u00eb e siguris\u00eb paralajm\u00ebrojn\u00eb se karcer\u00ebt shpesh fokusohen n\u00eb ATM-t\u00eb n\u00eb farmaci, qendrat tregtare; si dhe n\u00eb ATM-t\u00eb q\u00eb sh\u00ebrbejn\u00eb automjetet \u00abn\u00eb rrug\u00eb\u00bb.<\/p>\n

<\/p>\n

N\u00eb k\u00ebt\u00eb kontekst, p\u00ebr t\u00eb shmangur v\u00ebmendjen para kamerave, karcer\u00ebt m\u00eb t\u00eb kujdessh\u00ebm marrin me vete nj\u00eb partner t\u00eb pa\u00e7muesh\u00ebm, nj\u00eb mushk\u00eb. Dhe q\u00eb ky i fundit t\u00eb mos mund t\u00eb vjedh\u00eb \u00abkutin\u00eb e zez\u00eb\u00bb, p\u00ebrdorin skem\u00ebn e m\u00ebposhtme<\/a><\/noindex>. Heqin funksionalitetin kryesor nga \u00abkutia e zez\u00eb\u00bb dhe i lidhin asaj nj\u00eb smartphone, t\u00eb cilin e p\u00ebrdorin si kanal p\u00ebr d\u00ebrgimin e komandave n\u00eb distanc\u00eb p\u00ebr \u00abkutin\u00eb e vog\u00ebl\u00bb t\u00eb reduktuar, p\u00ebrmes protokollit IP.<\/p>\n

<\/p>\n

\"Carding
\nModifikimi i \u00abkutis\u00eb s\u00eb zez\u00eb\u00bb, me aktivizim p\u00ebrmes aksesit t\u00eb larg\u00ebt<\/em><\/p>\n

<\/p>\n

Si duket kjo nga pik\u00ebpamja e bankier\u00ebve? N\u00eb regjistrimet e kamerave t\u00eb sigurimit ndodhin m\u00eb shum\u00eb ose pak e nj\u00ebjt\u00eb: nj\u00eb person i caktuar hap dhom\u00ebn e sip\u00ebrme (zon\u00ebn e sh\u00ebrbimit), lidh kutin\u00eb magjike me ATM-n\u00eb, mbyll dhom\u00ebn e sip\u00ebrme dhe largohet. Pas pak koh\u00ebsh, disa njer\u00ebz, q\u00eb duken si klient\u00eb t\u00eb zakonsh\u00ebm, qasen n\u00eb ATM dhe t\u00ebrheqin shuma t\u00eb m\u00ebdha parash. Pastaj karceri kthehet dhe nxjerr pajisjen e tij t\u00eb vog\u00ebl magjike nga ATM. Zakonisht, fakti i sulmit t\u00eb ATM-s\u00eb me \u00abkutin\u00eb e zez\u00eb\u00bb zbullohet vet\u00ebm pas disa dit\u00ebsh: kur kasaforta e zbraz\u00ebt dhe regjistri i t\u00ebrheqjeve t\u00eb parave - nuk p\u00ebrputhen. Si rezultat, stafi i bank\u00ebs mbetet vet\u00ebm t\u00eb kryq\u00ebzoj\u00eb duar.<\/a><\/noindex>.<\/p>\n

\n<\/a><\/noindex><\/p>\n

Analiza e komunikimeve t\u00eb ATM-ve<\/h1>\n

<\/p>\n

Ashtu si\u00e7 u p\u00ebrmend m\u00eb lart, nd\u00ebrveprimi midis bllokut sistemik dhe pajisjeve periferike realizohet p\u00ebrmes USB, RS232 ose SDC. Kart\u00ebr lidh direkt n\u00eb portin e pajisjes periferike dhe i d\u00ebrgon komandat \u2013 argjentin e hostit. Kjo \u00ebsht\u00eb mjaft e thjesht\u00eb, pasi interfeset standarde nuk k\u00ebrkojn\u00eb ndonj\u00eb shofer specifik. Protokollet pronar q\u00eb p\u00ebrdoren p\u00ebr nd\u00ebrveprimin midis periferive dhe hostit nuk k\u00ebrkojn\u00eb autorizim (sepse pajisja ndodhet brenda zon\u00ebs s\u00eb besuar); dhe p\u00ebr k\u00ebt\u00eb arsye k\u00ebto protokolle t\u00eb paprotectuara, me t\u00eb cilat p\u00ebrshtaten periferit\u00eb dhe hosti, leht\u00eb mund t\u00eb d\u00ebgjohen dhe leht\u00eb jan\u00eb subjekt sulmesh t\u00eb riprodhimit.<\/p>\n

<\/p>\n

K\u00ebshtu, kart\u00ebr mund t\u00eb p\u00ebrdorin nj\u00eb analizues softuerik ose harduerik t\u00eb trafikut, duke e lidhur at\u00eb direkt n\u00eb portin e nj\u00eb pajisjeje periferike t\u00eb caktuar (p\u00ebr shembull, n\u00eb leximin e kartave) \u2013 p\u00ebr t\u00eb mbledhur t\u00eb dh\u00ebnat q\u00eb transmetohen. Me ndihm\u00ebn e analizuesit t\u00eb trafikut, kart\u00ebr m\u00ebson t\u00eb gjitha holl\u00ebsit\u00eb teknike t\u00eb funksionimit t\u00eb ATM-s\u00eb, p\u00ebrfshir\u00eb funksionet e pa dokumentuara t\u00eb periferis\u00eb s\u00eb saj (p\u00ebr shembull, funksioni i ndryshimit t\u00eb versionit t\u00eb firmuerit t\u00eb pajisjes periferike). Si rezultat, kart\u00ebr fiton kontroll t\u00eb plot\u00eb mbi ATM-n\u00eb. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, zbulimi i pranis\u00eb s\u00eb analizuesit t\u00eb trafikut \u00ebsht\u00eb mjaft i v\u00ebshtir\u00eb. <\/p>\n

<\/p>\n

Kontrolli i drejtp\u00ebrdrejt\u00eb mbi pajisjen e shp\u00ebrndarjes s\u00eb banknotave do t\u00eb thot\u00eb se kasetat e ATM-s\u00eb mund t\u00eb shuhet pa asnj\u00eb regjistrim n\u00eb logjet, t\u00eb cilat normalisht regjistrohen nga softi i instaluar n\u00eb host. P\u00ebr ata q\u00eb nuk jan\u00eb t\u00eb njohur me arkitektur\u00ebn softuerike dhe harduerike t\u00eb ATM-s\u00eb, ky duket v\u00ebrtet si magji.<\/p>\n

\n<\/a><\/noindex><\/p>\n

Nga vijn\u00eb \"kutit\u00eb e zeza\"?<\/h1>\n

<\/p>\n

Furnizuesit e ATM-ve dhe n\u00ebnkontraktor\u00ebt zhvillojn\u00eb mjete diagnostike p\u00ebr diagnostikimin e harduerit t\u00eb ATM-s\u00eb, \u2013 p\u00ebrfshir\u00eb elektri-mekanikan\u00eb q\u00eb jan\u00eb p\u00ebrgjegj\u00ebs p\u00ebr t\u00ebrheqjen e parave. Midis k\u00ebtyre mjeteve: ATMDesk<\/a><\/noindex>, RapidFire ATM XFS<\/a><\/noindex>. N\u00eb figur\u00ebn m\u00eb posht\u00eb paraqiten disa nga k\u00ebto mjete diagnostike.<\/p>\n

<\/p>\n

\"Carding
\nPaneli i kontrollit t\u00eb ATMDesk<\/em><\/p>\n

<\/p>\n

\"Carding
\nPaneli i kontrollit t\u00eb RapidFire ATM XFS<\/em><\/p>\n

<\/p>\n

\"Carding
\nKarakteristikat krahasuese t\u00eb disa mjeteve diagnostike<\/em><\/p>\n

<\/p>\n

Qasja n\u00eb t\u00eb tilla mjete n\u00eb normalitet \u00ebsht\u00eb e kufizuar me token e personalizuara; dhe ato funksionojn\u00eb vet\u00ebm kur der\u00eb e kasafort\u00ebs s\u00eb bankomateve \u00ebsht\u00eb e hapur. Megjithat\u00eb, duke z\u00ebvend\u00ebsuar disa byte n\u00eb kodin binar t\u00eb mjeteve, karder\u00ebt mund<\/a><\/noindex> \"testojn\u00eb\" t\u00ebrheqjen e parave n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb kalojn\u00eb kontrollet e parashikuara nga prodhuesi i mjeteve. Karder\u00ebt instalojn\u00eb k\u00ebto mjete t\u00eb modifikuara n\u00eb laptop\u00ebt e tyre ose kompjuter\u00ebt mikrop\u00ebrgjith\u00ebs nj\u00ebpjes\u00ebsh, q\u00eb m\u00eb pas i lidhin drejtp\u00ebrdrejt me pajisjen e shp\u00ebrndarjes s\u00eb banknotave, p\u00ebr t\u00eb t\u00ebrhequr parat\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb paligjshme.<\/p>\n

\n<\/a><\/noindex><\/p>\n

\"Mili i fundit\" dhe qendra e procesimit t\u00eb falsifikuar<\/h1>\n

<\/p>\n

Interaksioni direkt me periferin\u00eb, pa komunikim me hostin \u2013 \u00ebsht\u00eb vet\u00ebm nj\u00eb nga teknikat efektive t\u00eb kardimit. Teknikat e tjera mb\u00ebshteten n\u00eb faktin se ne kemi nj\u00eb p\u00ebrzgjedhje t\u00eb gjer\u00eb t\u00eb nd\u00ebrfaqeve t\u00eb rrjetit, p\u00ebrmes t\u00eb cilave bankomati lidhet me bot\u00ebn e jashtme. Nga X.25 n\u00eb Ethernet dhe komunikimi celular. Shum\u00eb bankomate mund t\u00eb identifikohen dhe lokalizohen p\u00ebrmes sh\u00ebrbimit Shodan (instruksioni m\u00eb i p\u00ebrmbledhur p\u00ebr p\u00ebrdorimin e tij \u00ebsht\u00eb i paraqitur k\u00ebtu<\/a><\/noindex>), \u2013 me nj\u00eb sulm t\u00eb m\u00ebpassh\u00ebm q\u00eb p\u00ebrfiton nga konfigurimi i dob\u00ebt i siguris\u00eb, dembelizmi i administratorit dhe komunikimet e prekshme midis deg\u00ebve t\u00eb ndryshme t\u00eb bank\u00ebs.<\/p>\n

<\/p>\n

\"Mili i fundit\" i komunikimit midis bankomatit dhe qendr\u00ebs s\u00eb procesimit \u00ebsht\u00eb i pasur me teknologji t\u00eb ndryshme, t\u00eb cilat mund t\u00eb sh\u00ebrbejn\u00eb si pika hyrjeje p\u00ebr karderin. Nd\u00ebrveprimi mund t\u00eb realizohet n\u00ebp\u00ebrmjet m\u00ebnyr\u00ebs me tela (linja telefonike ose Ethernet) ose pa tela (Wi-Fi, komunikim celular: CDMA, GSM, UMTS, LTE). Mekanizmat e siguris\u00eb mund t\u00eb p\u00ebrfshijn\u00eb: 1) mjete harduerike ose software p\u00ebr mb\u00ebshtetje VPN (si ato standarde t\u00eb integruara n\u00eb sistemin operues, ashtu edhe ata nga prodhues t\u00eb tret\u00eb); 2) SSL\/TLS (si t\u00eb specifikuara p\u00ebr modelin e caktuar t\u00eb bankomatit, ashtu edhe nga prodhues t\u00eb tret\u00eb); 3) enkriptim; 4) autentifikimi i mesazheve.<\/p>\n

<\/p>\n

Megjithat\u00eb duket<\/a><\/noindex>, q\u00eb p\u00ebr bankat, teknologjit\u00eb e p\u00ebrmendura duken shum\u00eb t\u00eb nd\u00ebrlikuara, dhe p\u00ebr k\u00ebt\u00eb arsye ata nuk e ngarkojn\u00eb veten me mbrojtje speciale rrjeti; ose e realizojn\u00eb at\u00eb me gabime. N\u00eb rastin m\u00eb t\u00eb mir\u00eb, nj\u00eb bankomat lidhet me nj\u00eb server VPN, dhe brenda rrjetit privat \u2013 lidhet me qendr\u00ebn e procesimit. P\u00ebr m\u00eb tep\u00ebr, edhe n\u00ebse bankat arrijn\u00eb t\u00eb realizojn\u00eb mekanizmat mbrojt\u00ebs t\u00eb p\u00ebrmendur m\u00eb sip\u00ebr, \u2013 kartela ka sulme efikase kund\u00ebr tyre. Pra, edhe n\u00ebse siguria p\u00ebrputhet me standardin PCI DSS, bankomatet mbeten ende t\u00eb cenueshme.<\/p>\n

<\/p>\n

Nj\u00eb nga k\u00ebrkesat kryesore t\u00eb PCI DSS: t\u00eb gjitha t\u00eb dh\u00ebnat konfidenciale, kur ato transmetohen p\u00ebrmes nj\u00eb rrjeti publik, duhet t\u00eb jen\u00eb t\u00eb kriptuara. Dhe v\u00ebrtet kemi rrjete q\u00eb n\u00eb fillim jan\u00eb projektuar q\u00eb t\u00eb dh\u00ebnat t\u00eb jen\u00eb plot\u00ebsisht t\u00eb kriptuara! Prandaj ka tendenc\u00ebn t\u00eb thuhet: \u00abNe kemi t\u00eb dh\u00ebnat t\u00eb kriptuara, sepse p\u00ebrdorim Wi-Fi dhe GSM\u00bb. Megjithat\u00eb, shum\u00eb nga k\u00ebto rrjete nuk ofrojn\u00eb mbrojtje t\u00eb mjaftueshme. Rrjetet celulare t\u00eb t\u00eb gjitha brezave jan\u00eb thyer prej koh\u00ebsh. P\u00ebrs\u00ebri dhe p\u00ebrfundimisht. Dhe madje ka furnizues q\u00eb ofrojn\u00eb pajisje p\u00ebr kapjen e t\u00eb dh\u00ebnave q\u00eb kalojn\u00eb p\u00ebrmes tyre.<\/p>\n

<\/p>\n

Prandaj, ose n\u00eb komunikim t\u00eb pasigurt, ose n\u00eb nj\u00eb rrjet \u00abprivat\u00bb, ku \u00e7do bankomat shpall veten te bankomatet e tjera, mund t\u00eb iniciohet nj\u00eb sulm MiTM \u00abqendra e procesimit t\u00eb falsifikuar\u00bb, \u2013 e cila do t\u00eb \u00e7oj\u00eb n\u00eb faktin q\u00eb karteli do t\u00eb marr\u00eb kontrollin mbi rrjedhat e t\u00eb dh\u00ebnave q\u00eb transmetohen midis bankomatit dhe qendr\u00ebs s\u00eb procesimit.<\/p>\n

<\/p>\n

K\u00ebtyre sulmeve MiTM<\/a><\/noindex> potencialisht i n\u00ebnshtrohen mij\u00ebra bankomate. N\u00eb rrug\u00ebn drejt qendr\u00ebs s\u00eb v\u00ebrtet\u00eb t\u00eb procesimit \u2013 karteli fut qendr\u00ebn e tij t\u00eb falsifikuar. Kjo qend\u00ebr e falsifikuar e procesimit jep bankomatit urdhra p\u00ebr t\u00eb l\u00ebshuar nota. N\u00eb k\u00ebt\u00eb rast, karteli e konfiguron qendr\u00ebn e tij t\u00eb procesimit n\u00eb nj\u00eb m\u00ebnyr\u00eb q\u00eb l\u00ebshimi i parave t\u00eb ndodh\u00eb pavar\u00ebsisht se cila kart\u00eb futet n\u00eb bankomat \u2013 madje edhe n\u00ebse data e saj e skadenc\u00ebs ka kaluar, ose n\u00ebse ka nj\u00eb bilanc zero. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb q\u00eb qendra e falsifikuar e procesimit \u00abt\u00eb njoh\u00eb\u00bb at\u00eb. Si nj\u00eb qend\u00ebr e falsifikuar e procesimit mund t\u00eb jet\u00eb ose nj\u00eb produkt artizanal, ose nj\u00eb simulator i qendr\u00ebs s\u00eb procesimit, fillimisht i dizajnuar p\u00ebr t\u00eb ndihmuar konfigurimet e rrjetit (nj\u00eb tjet\u00ebr dhurat\u00eb nga \u00abprodhuesi\u00bb \u2013 p\u00ebr kartel\u00ebt).<\/p>\n

<\/p>\n

N\u00eb figurin\u00eb e ardhshme \u00ebsht\u00eb p\u00ebrshtatur<\/a><\/noindex> dumpi i komandave p\u00ebr dalje 40 banknotash nga kaseta e kat\u00ebrt, - t\u00eb d\u00ebrguara nga nj\u00eb qend\u00ebr procesimi t\u00eb falsifikuar dhe t\u00eb ruajtura n\u00eb regjistrat e software-it t\u00eb ATM. Ato duken pothuajse si t\u00eb v\u00ebrtetat.<\/p>\n

<\/p>\n

\"Carding
\nDumpi i komandave t\u00eb qendr\u00ebs s\u00eb procesimit t\u00eb falsifikuar<\/em><\/p>\n

Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u043e\u044f\u0449\u0438\u0435 \u043d\u0430 \u0443\u043b\u0438\u0446\u0430\u0445 \u0433\u043e\u0440\u043e\u0434\u0430 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0441 \u0434\u0435\u043d\u044c\u0433\u0430\u043c\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u043d\u0430\u0436\u0438\u0432\u044b. \u0418 \u0435\u0441\u043b\u0438 \u0440\u0430\u043d\u044c\u0448\u0435 \u0434\u043b\u044f \u043e\u043f\u0443\u0441\u0442\u043e\u0448\u0435\u043d\u0438\u044f \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0447\u0438\u0441\u0442\u043e \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u0432 \u0445\u043e\u0434 \u0438\u0434\u0443\u0442 \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u0438\u0441\u043a\u0443\u0441\u043d\u044b\u0435 \u0442\u0440\u044e\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u0437 \u043d\u0438\u0445 \u2014 \u044d\u0442\u043e \u00ab\u0447\u0435\u0440\u043d\u044b\u0439 \u044f\u0449\u0438\u043a\u00bb \u0441 \u043e\u0434\u043d\u043e\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0438. \u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u043e\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35337","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Carding dhe \"kutit\u00eb e zeza\": si i hakin bankomat\u00ebt sot | ProHoster","description":"Kutinat metalike me para q\u00eb q\u00ebndrojn\u00eb n\u00eb rrug\u00ebt e qytetit nuk mund t\u00eb mos t\u00ebrheqin v\u00ebmendjen e adhuruesve t\u00eb fitimeve t\u00eb shpejta.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u0440\u0434\u0438\u043d\u0433 \u0438 \u00ab\u0447\u0451\u0440\u043d\u044b\u0435 \u044f\u0449\u0438\u043a\u0438\u00bb: \u043a\u0430\u043a \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044e\u0442 \u0431\u0430\u043d\u043a\u043e\u043c\u0430\u0442\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f | ProHoster","og:description":"\u0421\u0442\u043e\u044f\u0449\u0438\u0435 \u043d\u0430 \u0443\u043b\u0438\u0446\u0430\u0445 \u0433\u043e\u0440\u043e\u0434\u0430 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0438 \u0441 \u0434\u0435\u043d\u044c\u0433\u0430\u043c\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u043d\u0430\u0436\u0438\u0432\u044b.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/karding-i-chyornye-yashhiki-kak-vzlamyvayut-bankomaty-segodnya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:44+00:00","article:modified_time":"2019-10-31T19:03:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35337","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:22:35","updated":"2026-01-21 22:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=35337"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35337\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=35337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=35337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=35337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}