Nj\u00eb m\u00ebnyr\u00eb e re mashtrimi digjital ka krijuar shqet\u00ebsim n\u00eb p\u00ebrdoruesit e kartave bankare. N\u00ebp\u00ebrmjet nj\u00eb pajisje POS pirate, e cila duket identike me lexuesit normal\u00eb t\u00eb kartave t\u00eb instaluara n\u00eb nj\u00ebsit\u00eb e biznesit, tentohet t\u00eb grabitet mbajt\u00ebsi i saj duke manipuluar pagesa t\u00eb paautorizuara prej tij, thjesht duke iu afruar \u00e7antave apo xhepave ku mbahen kartat. Mekanizmi i k\u00ebtij mashtrimi shfryt\u00ebzon mund\u00ebsin\u00eb q\u00eb kan\u00eb kartat bankare p\u00ebr t\u00eb kryer pagesa pa qen\u00eb nevoja q\u00eb p\u00ebrdoruesi ta vendos\u00eb kart\u00ebn n\u00eb POS dhe t\u00eb shtyp\u00eb PIN-in p\u00ebr t\u00eb autorizuar kryerjen e transaksionit.<\/p>\n
Nga MSc Roland Tashi, ekspert i \u00e7\u00ebshtjeve t\u00eb siguris\u00eb<\/strong><\/p>\n Ndryshe nga grabitjet n\u00eb ATM dhe mashtrimet e pagesave online p\u00ebr t\u00eb cilat ka informacion t\u00eb mjaftuesh\u00ebm lidhur me teknikat q\u00eb p\u00ebrdoren, fenomeni i ri q\u00eb po shfaqet k\u00ebrkon akoma analiz\u00eb dhe ekspertiz\u00eb p\u00ebr t\u00eb verifikuar m\u00ebnyr\u00ebn e p\u00ebrshtatjes, modifikimit t\u00eb POS-it \u201cgrabit\u00ebs\u201d p\u00ebr t\u00eb t\u00ebrhequr para n\u00eb m\u00ebnyr\u00eb t\u00eb paligjshme.<\/p>\n Dilema m\u00eb e madhe lidhet me nivelin e sofistikimit t\u00eb sistemit t\u00eb mashtrimit duke ngritur pyetjen n\u00ebse pajisja \u00ebsht\u00eb modifikuar nga ekspert\u00eb t\u00eb informatik\u00ebs apo funksionon fal\u00eb nj\u00eb aplikacioni jozyrtar t\u00eb instaluar n\u00eb nj\u00eb smartphone q\u00eb lejon manipulimin e terminalit.<\/p>\n Mekanizmi i funksionimit t\u00eb POS-it pirat ende nuk \u00ebsht\u00eb plot\u00ebsisht i qart\u00eb, nuk \u00ebsht\u00eb sakt\u00ebsuar n\u00ebse shuma q\u00eb do t\u00eb transferohet, grabitet, duhet t\u00eb vendoset manualisht apo terminali \u00ebsht\u00eb n\u00eb gjendje t\u00eb kryej\u00eb t\u00ebrheqje automatike.<\/p>\n N\u00eb nivel nd\u00ebrkomb\u00ebtar, raste t\u00eb dokumentuara vijn\u00eb nga Italia dhe Kanadaja, ku nga kjo e fundit nj\u00eb band\u00eb kriminale arriti t\u00eb p\u00ebrfitonte rimbursime t\u00eb rreme t\u00eb konsiderueshme duke p\u00ebrdorur terminale t\u00eb modifikuara.<\/p>\n Le t\u00eb ndalemi te grabitjet n\u00eb Itali, deri tani t\u00eb konstatuara n\u00eb dy qytete, t\u00eb cilat n\u00eb rast se konfirmohen nga specialist\u00ebt e fush\u00ebs do t\u00eb p\u00ebrb\u00ebjn\u00eb nj\u00eb evolucion, sofistikim t\u00eb mashtrimit n\u00ebp\u00ebrmjet modifikimit t\u00eb pajisjeve POS.<\/p>\n Nj\u00eb grabit\u00ebse me nj\u00eb POS t\u00eb fshehur n\u00eb \u00e7ant\u00eb, vidhte turist\u00ebt duke u afruar pran\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb \u201crast\u00ebsishme\u201d pa t\u00ebrhequr v\u00ebmendjen e tyre.<\/p>\n E ndaluar pas nj\u00eb vjedhje, n\u00eb \u00e7ant\u00ebn e saj u gjet nj\u00eb pajisje POS contactless aktive dhe plot\u00ebsisht funksionale. Jo nj\u00eb pajisje e zakonshme p\u00ebr pagesa, por nj\u00eb mjet teknologjik t\u00eb cilin e p\u00ebrdorte p\u00ebr t\u00eb t\u00ebrhequr para nga llogarit\u00eb bankare t\u00eb viktimave p\u00ebrmes mikrotransaksioneve. Sipas hetimeve, pajisja grabit\u00ebse p\u00ebrdorte teknologjin\u00eb NFC p\u00ebr t\u00eb kryer pagesa t\u00eb paautorizuara thjesht duke e afruar pran\u00eb \u00e7antave ose xhepave ku ndodheshin karta krediti apo debiti contactless.<\/p>\n Si funksionon nj\u00eb POS i piratuar dhe pse \u00ebsht\u00eb i rreziksh\u00ebm?<\/strong><\/p>\n Nj\u00eb POS contactless i instaluar n\u00eb nj\u00ebsit\u00eb e biznesit dhe kudo tjet\u00ebr, \u00ebsht\u00eb pajisje legale e autorizuar p\u00ebr kryerjen e pagesave nga nj\u00eb institucion financiar. Kjo pajisje p\u00ebrdoret nga bizneset e t\u00eb gjitha niveleve p\u00ebr t\u00eb pranuar pagesa t\u00eb shpejta edhe pa vendosur kodin e siguris\u00eb, si\u00e7 njihet ndryshe PIN, deri n\u00eb nj\u00eb limit t\u00eb paracaktuar. Ky instrument, i p\u00ebrdorur jasht\u00eb sistemit t\u00eb autorizuar, mund t\u00eb kthehet n\u00eb nj\u00eb instrument t\u00eb heshtur grabit\u00ebs. Pajisja mund t\u00eb konfigurohet paraprakisht p\u00ebr t\u00eb kryer transaksione minimale duke vendosur manualisht shum\u00ebn dhe duke aktivizuar leximin p\u00ebrmes NFC.<\/p>\n Duke e afruar pajisjen disa centimetra pran\u00eb nj\u00eb karte aktive, pagesa kryhet si t\u00eb ishte autorizuar nga administruesi i saj, proces q\u00eb ndodh brenda pak sekondash pa u v\u00ebn\u00eb re nga viktima. Transaksionet jan\u00eb reale, t\u00eb regjistruara dhe shpesh v\u00ebshtir\u00eb t\u00eb kontestohen n\u00ebse nuk kontrollohet rregullisht llogaria bankare. Vjedhja favorizohet duke p\u00ebrfituar nga distanca shum\u00eb e shkurt\u00ebr e nevojshme p\u00ebr komunikimin NFC.<\/p>\n POS-i pirat aktivizohet nd\u00ebrkoh\u00eb q\u00eb grabit\u00ebsi i afrohet viktim\u00ebs n\u00eb vende t\u00eb mbushura me njer\u00ebz, stacione, autobus\u00eb, qendra tregtare, etj. Mjafton nj\u00eb kontakt i af\u00ebrt p\u00ebr t\u00eb finalizuar transaksionin. Pajisja l\u00ebshon nj\u00eb sinjal t\u00eb leht\u00eb, q\u00eb zakonisht humbet mes zhurm\u00ebs s\u00eb ambientit p\u00ebrreth. N\u00eb shum\u00eb raste, viktima nuk merr asnj\u00eb njoftim n\u00eb koh\u00eb reale, sidomos n\u00ebse ka \u00e7aktivizuar njoftimet nga banka. Megjith\u00ebse procedura duket e thjesht\u00eb, vjedhja me nj\u00eb POS contactless nuk \u00ebsht\u00eb aq e leht\u00eb dhe pa v\u00ebshtir\u00ebsi. Pajisja k\u00ebrkon vendosjen e shum\u00ebs p\u00ebrpara leximit dhe ka nj\u00eb koh\u00eb shum\u00eb t\u00eb shkurt\u00ebr aktive.<\/p>\n P\u00ebr m\u00eb tep\u00ebr, distanca efektive e NFC \u00ebsht\u00eb vet\u00ebm 1-2 cm dhe prania e m\u00eb shum\u00eb kartave ose barrierave fizike (si portofol prej l\u00ebkure ose \u00e7anta t\u00eb mbyllura) mund ta pengojn\u00eb transaksionin. N\u00ebse dy karta NFC ndodhen pran\u00eb nj\u00ebra-tjetr\u00ebs, sinjali mund t\u00eb \u00e7orientohet dhe pagesa mund t\u00eb d\u00ebshtoj\u00eb. I r\u00ebnd\u00ebsish\u00ebm mbetet fakti se t\u00eb gjitha transaksionet jan\u00eb t\u00eb gjurmueshme, \u00e7do terminal lidhet me nj\u00eb llogari bankare e cila p\u00ebrmban t\u00eb dh\u00ebna fiskale dhe transaksione t\u00eb regjistruara, moment q\u00eb e rrezikon grabit\u00ebsin t\u00eb ark\u00ebtoj\u00eb parat\u00eb pa u zbuluar. Pagesat contactless kan\u00eb revolucionarizuar pagesat e p\u00ebrditshme duke i b\u00ebr\u00eb m\u00eb t\u00eb shpejta dhe m\u00eb t\u00eb lehta, por ky komoditet si\u00e7 duket ka filluar t\u00eb shoq\u00ebrohet nga rreziqe.<\/p>\n Kufijt\u00eb e pagesave pa PIN, t\u00eb menduara p\u00ebr leht\u00ebsi dhe shpejt\u00ebsi veprimi, jan\u00eb gjithashtu nj\u00eb dob\u00ebsi e mundshme p\u00ebr t\u2019u shfryt\u00ebzuar. Kartat NFC jan\u00eb shum\u00eb t\u00eb p\u00ebrhapura por jo t\u00eb gjith\u00eb p\u00ebrdoruesit kan\u00eb informacionin e mjaftuesh\u00ebm p\u00ebr ekspozimin q\u00eb ato kan\u00eb ndaj veprimeve mashtruese me q\u00ebllime p\u00ebrfitimi.<\/p>\n Duhet kuptuar gjithashtu se edhe pajisjet mobile si Google Pay apo Apple Pay, ndon\u00ebse m\u00eb t\u00eb sigurta p\u00ebr shkak t\u00eb mbrojtjeve digjitale, mund t\u00eb keqp\u00ebrdoren n\u00ebse nuk kan\u00eb konfigurime t\u00eb sigurta. Duke vler\u00ebsuar k\u00ebto situata, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme q\u00eb mbajt\u00ebsit dhe p\u00ebrdoruesit e kartave t\u00eb jen\u00eb t\u00eb mirinformuar p\u00ebr rreziqet, pa demonizuar teknologjin\u00eb si \u201cqenie\u201d me fuqi t\u00eb fsheht\u00eb q\u00eb ka n\u00eb dor\u00eb fatin e nj\u00eb njeriu, por duke njohur p\u00ebrpar\u00ebsit\u00eb, kufizimet dhe rrezikun q\u00eb vjen nga keqp\u00ebrdorimi i saj.<\/p>\n Si t\u00eb mbroheni?<\/strong><\/p>\n Ashtu si n\u00eb t\u00eb gjitha situatat q\u00eb lidhen me sigurin\u00eb njer\u00ebzore, mbetet n\u00eb fuqi postulati mbrojtja m\u00eb efektive \u00ebsht\u00eb parandalimi. P\u00ebrdorimi i nj\u00eb portofoli t\u00eb mbrojtur me teknologji RFID-blocker \u00ebsht\u00eb sot nj\u00eb investim i nevojsh\u00ebm.<\/p>\n K\u00ebto aksesor\u00eb mund t\u00eb bllokojn\u00eb sinjalin NFC duke penguar komunikimin mes kart\u00ebs dhe nj\u00eb pajisje t\u00eb jashtme.<\/p>\n Gjithashtu, ruajtja e kartave n\u00eb xhepa t\u00eb brendsh\u00ebm ose n\u00eb portofola t\u00eb fort\u00eb, t\u00eb mbajtur larg skajeve t\u00eb \u00e7ant\u00ebs apo t\u00eb shpin\u00ebs, redukton ndjesh\u00ebm rrezikun.<\/p>\n N\u00eb ambiente t\u00eb mbushura me njer\u00ebz, kujdesi ndaj atyre q\u00eb afrohen shum\u00eb \u00ebsht\u00eb nj\u00eb penges\u00eb efektive ndaj vjedhjeve.<\/p>\n P\u00ebr m\u00eb tep\u00ebr, mund t\u00eb k\u00ebrkoni nga banka juaj q\u00eb t\u00eb \u00e7aktivizoj\u00eb p\u00ebrkoh\u00ebsisht funksionin contactless ose t\u00eb ul\u00eb kufijt\u00eb e pagesave automatike pa PIN.<\/p>\n Si duhet t\u00eb veprojm\u00eb n\u00ebse dyshojm\u00eb p\u00ebr nj\u00eb mashtrim me pajisje contactless?<\/strong><\/p>\n Hapi i par\u00eb \u00ebsht\u00eb t\u00eb kontrollohen l\u00ebvizjet bankare, edhe nj\u00eb pages\u00eb e vog\u00ebl dhe e dyshimt\u00eb duhet t\u00eb krijoj\u00eb shqet\u00ebsim, duhet t\u00eb raportohet menj\u00ebher\u00eb n\u00eb bank\u00eb e cila duhet t\u00eb nis\u00eb procedurat verifikuese p\u00ebr kund\u00ebrshtim dhe bllokim t\u00eb kart\u00ebs. N\u00eb rastet e mashtrimeve t\u00eb konfirmuara, \u00ebsht\u00eb thelb\u00ebsore t\u00eb b\u00ebhet denoncimi pran\u00eb autoriteteve ligjzbatuese duke specifikuar t\u00eb gjitha detajet e transaksioneve. Kjo u lejon forcave t\u00eb rendit t\u00eb nd\u00ebrthurin t\u00eb dh\u00ebnat dhe t\u00eb gjurmojn\u00eb terminalet e p\u00ebrdorura p\u00ebr t\u00eb arritur te grabit\u00ebsi. \u00cbsht\u00eb shum\u00eb e r\u00ebnd\u00ebsishme t\u00eb jemi kontribuues ndaj \u00e7\u00ebshtjeve t\u00eb siguris\u00eb, pasi edhe nj\u00eb denoncim i vet\u00ebm, n\u00eb dukje i panevojsh\u00ebm, mund t\u00eb ndihmoj\u00eb n\u00eb zbardhjen e rrjeteve t\u00eb m\u00ebdha t\u00eb mashtrimit.<\/p>\n N\u00eb t\u00eb gjitha rastet, ekspert\u00ebt e siguris\u00eb k\u00ebshillojn\u00eb kujdes, por jo panik. Mund\u00ebsia p\u00ebr t\u00eb qen\u00eb viktim\u00eb e nj\u00eb POS-i t\u00eb piratuar ekziston, por \u00ebsht\u00eb e kufizuar n\u00ebse zbatohen sjellje t\u00eb kujdesshme dhe ka informacion p\u00ebr k\u00ebt\u00eb fenomen. Siguria teknike e sistemeve NFC, gjurmueshm\u00ebria e transaksioneve, si dhe k\u00ebrkesat p\u00ebr kushte specifike gjat\u00eb p\u00ebrdorimit t\u00eb terminaleve POS, e b\u00ebjn\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb grabitje gjithmon\u00eb e m\u00eb t\u00eb v\u00ebshtir\u00eb p\u00ebr t\u2019u aplikuar. Megjithat\u00eb, rastet e dokumentuara shtrojn\u00eb nevoj\u00ebn p\u00ebr t\u00eb t\u00ebrhequr v\u00ebmendjen e publikut, n\u00eb m\u00ebnyr\u00eb q\u00eb p\u00ebrdoruesit e kartave me teknologjin\u00eb contactless t\u00eb mos viktimizohen nga kurthet digjitale gjithnj\u00eb e m\u00eb t\u00eb sofistikuara.\/Monitor<\/p>\n The post Kujdes nga pajisjet POS pirate! Ju grabisin nga kartat q\u00eb mbani n\u00eb xhep a \u00e7ant\u00eb<\/a> appeared first on GIJOTINA<\/a>.<\/p>","protected":false},"excerpt":{"rendered":" Nj\u00eb m\u00ebnyr\u00eb e re mashtrimi digjital ka krijuar shqet\u00ebsim n\u00eb p\u00ebrdoruesit e kartave bankare. N\u00ebp\u00ebrmjet nj\u00eb pajisje POS pirate, e cila duket identike me lexuesit normal\u00eb t\u00eb kartave t\u00eb instaluara n\u00eb nj\u00ebsit\u00eb e biznesit, tentohet t\u00eb grabitet mbajt\u00ebsi i saj duke manipuluar pagesa t\u00eb paautorizuara prej tij, thjesht duke iu afruar \u00e7antave apo xhepave ku […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-44313","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/posts\/44313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/comments?post=44313"}],"version-history":[{"count":0,"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/posts\/44313\/revisions"}],"wp:attachment":[{"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/media?parent=44313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/categories?post=44313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zennihost.com\/test\/wp-json\/wp\/v2\/tags?post=44313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}