{"id":200770,"date":"2026-09-03T04:08:11","date_gmt":"2026-09-03T04:08:11","guid":{"rendered":"https:\/\/www.europesays.com\/cz\/200770\/"},"modified":"2026-09-03T04:08:11","modified_gmt":"2026-09-03T04:08:11","slug":"kartu-nedate-z-ruky-presto-s-ni-podvodnik-zaplati-takto-funguje-novy-trik","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/cz\/200770\/","title":{"rendered":"Kartu ned\u00e1te z\u00a0ruky, p\u0159esto s\u00a0n\u00ed podvodn\u00edk zaplat\u00ed. Takto funguje nov\u00fd trik"},"content":{"rendered":"

Na novou kampa\u0148 upozornila ve sv\u00e9 anal\u00fdze \u010desk\u00e1 spole\u010dnost ComSource. Podle n\u00ed skupina ozna\u010dovan\u00e1 jako WindTapper v\u00a0uplynul\u00fdch t\u00fddnech c\u00edlila na finan\u010dn\u00ed sektor a\u00a0kombinovala telefonick\u00e9 podvody v\u00a0\u010de\u0161tin\u011b s\u00a0malwarem WindRelay.<\/p>\n

Vishing je podvod zalo\u017een\u00fd na telefon\u00e1tu. N\u00e1zev vznikl spojen\u00edm slov \u201evoice\u201c a\u00a0\u201ephishing\u201c. \u00dato\u010dn\u00edk se p\u0159i n\u011bm vyd\u00e1v\u00e1 nap\u0159\u00edklad za pracovn\u00edka banky, policistu nebo jinou d\u016fv\u011bryhodnou osobu a\u00a0sna\u017e\u00ed se ob\u011b\u0165 p\u0159esv\u011bd\u010dit, aby mu prozradila citliv\u00e9 \u00fadaje, provedla ur\u010ditou operaci nebo si nainstalovala aplikaci.<\/p>\n

V tomto p\u0159\u00edpad\u011b podvodn\u00edci podle ComSource telefonicky napodobovali bankovn\u00ed zam\u011bstnance a\u00a0vyu\u017e\u00edvali \u010desky mluv\u00edc\u00ed osoby, aby hovor p\u016fsobil v\u011brohodn\u011b. C\u00edlem nebylo pouze z\u00edskat informace. \u00dato\u010dn\u00edci se sna\u017eili ob\u011b\u0165 p\u0159im\u011bt tak\u00e9 k\u00a0instalaci \u0161kodliv\u00e9ho softwaru, kter\u00fd n\u00e1sledn\u011b umo\u017enil dal\u0161\u00ed \u010d\u00e1st \u00fatoku.<\/p>\n

<\/a>NFC relay \u00fatok<\/p>\n

Nejneobvyklej\u0161\u00ed \u010d\u00e1st \u00fatoku p\u0159edstavuje malware WindRelay. Vyu\u017e\u00edv\u00e1 takzvan\u00fd NFC relay \u00fatok, tedy p\u0159epos\u00edl\u00e1n\u00ed bezkontaktn\u00ed komunikace mezi dv\u011bma za\u0159\u00edzen\u00edmi.<\/p>\n

NFC je technologie, d\u00edky kter\u00e9 spolu na kr\u00e1tkou vzd\u00e1lenost komunikuj\u00ed nap\u0159\u00edklad bezkontaktn\u00ed platebn\u00ed karta, telefon a\u00a0platebn\u00ed termin\u00e1l. P\u0159i relay \u00fatoku malware zachyt\u00ed komunikaci mezi fyzickou kartou a\u00a0telefonem ob\u011bti a\u00a0v re\u00e1ln\u00e9m \u010dase ji p\u0159es internet p\u0159epos\u00edl\u00e1 na za\u0159\u00edzen\u00ed ovl\u00e1dan\u00e9 \u00fato\u010dn\u00edkem. To pak m\u016f\u017ee komunikovat s\u00a0platebn\u00edm termin\u00e1lem, jako by byla skute\u010dn\u00e1 karta u\u00a0n\u011bj. Fyzickou kartu tedy nen\u00ed nutn\u00e9 ob\u011bti ukr\u00e1st ani ji fyzicky z\u00edskat.<\/p>\n

Princip \u00fatoku m\u016f\u017ee vypadat nap\u0159\u00edklad tak, \u017ee fale\u0161n\u00fd bank\u00e9\u0159 ob\u011b\u0165 p\u0159esv\u011bd\u010d\u00ed, \u017ee je pot\u0159eba kv\u016fli bezpe\u010dnosti nebo \u00fadajn\u00e9mu probl\u00e9mu s\u00a0\u00fa\u010dtem ov\u011b\u0159it jej\u00ed kartu. \u010clov\u011bk si na telefon nainstaluje \u0161kodlivou aplikaci a\u00a0n\u00e1sledn\u011b podle instrukc\u00ed p\u0159ilo\u017e\u00ed svou fyzickou platebn\u00ed kartu k\u00a0telefonu.<\/p>\n

Pr\u00e1v\u011b v\u00a0tu chv\u00edli m\u016f\u017ee WindRelay zachytit NFC komunikaci karty. \u00dato\u010dn\u00edk ji n\u00e1sledn\u011b p\u0159epo\u0161le na sv\u00e9 za\u0159\u00edzen\u00ed, kter\u00e9 m\u016f\u017ee b\u00fdt pou\u017eito u\u00a0platebn\u00edho termin\u00e1lu. Podle zve\u0159ejn\u011bn\u00e9 anal\u00fdzy tedy nejde o\u00a0klasick\u00e9 zkop\u00edrov\u00e1n\u00ed \u010d\u00edsla karty, ale o\u00a0\u017eiv\u00e9 p\u0159epojen\u00ed komunikace mezi kartou a\u00a0termin\u00e1lem.<\/p>\n

V\u00fdzkumn\u00edci popsali p\u0159\u00edpad, p\u0159i n\u011bm\u017e \u00fatok za\u010dal telefon\u00e1tem \u00fadajn\u00e9ho bankovn\u00edho pracovn\u00edka. Ob\u011b\u0165 byla p\u0159esv\u011bd\u010dena k\u00a0instalaci aplikace pro Android. Ta obsahovala trojsk\u00e9ho kon\u011b SpyNote, kter\u00fd \u00fato\u010dn\u00edkovi umo\u017enil z\u00edskat vzd\u00e1len\u00fd p\u0159\u00edstup k\u00a0telefonu a\u00a0n\u00e1sledn\u011b do n\u011bj nainstalovat WindRelay.<\/p>\n

Cel\u00fd postup byl podle anal\u00fdzy velmi rychl\u00fd. V\u00a0jednom popsan\u00e9m p\u0159\u00edpadu trval telefon\u00e1t p\u0159ibli\u017en\u011b 13\u00a0minut. \u00dato\u010dn\u00edk b\u011bhem n\u011bj z\u00edskal p\u0159\u00edstup k\u00a0telefonu, p\u0159im\u011bl ob\u011b\u0165 pracovat s\u00a0platebn\u00ed kartou a\u00a0n\u00e1sledn\u011b byly zaznamen\u00e1ny neopr\u00e1vn\u011bn\u00e9 karetn\u00ed transakce.<\/p>\n

Kyber\u0161mejdi kombinuj\u00ed n\u011bkolik metod najednou<\/p>\n

Pr\u00e1v\u011b spojen\u00ed soci\u00e1ln\u00edho in\u017een\u00fdrstv\u00ed s\u00a0technick\u00fdm \u00fatokem je na cel\u00e9 kampani podle bezpe\u010dnostn\u00edch expert\u016f nejnebezpe\u010dn\u011bj\u0161\u00ed. Samotn\u00fd telefon\u00e1t m\u00e1 ob\u011b\u0165 p\u0159esv\u011bd\u010dit, aby \u00fato\u010dn\u00edkovi otev\u0159ela dve\u0159e. Malware pak umo\u017en\u00ed z\u00edskat kontrolu nad telefonem a\u00a0dal\u0161\u00ed program se postar\u00e1 o\u00a0zneu\u017eit\u00ed NFC komunikace.<\/p>\n

\u201eWindTapper ukazuje, kam se posouv\u00e1 soci\u00e1ln\u00ed in\u017een\u00fdrstv\u00ed\u00a0\u2013 \u00fato\u010dn\u00edci si naj\u00edmaj\u00ed \u010desky mluv\u00edc\u00ed osoby, aby telefon\u00e1ty p\u016fsobily d\u016fv\u011bryhodn\u011b, a\u00a0kombinuj\u00ed to s\u00a0malwarem, kter\u00fd dok\u00e1\u017ee v\u00a0re\u00e1ln\u00e9m \u010dase zneu\u017e\u00edt fyzickou platebn\u00ed kartu ob\u011bti,\u201c uvedl Jaroslav Cihelka, expert na kybernetickou bezpe\u010dnost a\u00a0spolumajitel spole\u010dnosti ComSource.<\/p>\n

Podle \u00fadaj\u016f zve\u0159ejn\u011bn\u00fdch bezpe\u010dnostn\u00edmi v\u00fdzkumn\u00edky byly vzorky WindRelay mezi listopadem 2025\u00a0a\u00a0\u010dervencem 2026\u00a0spojov\u00e1ny mimo jin\u00e9 s\u00a0c\u00edli v\u00a0\u010cesku, na Slovensku a\u00a0ve Slovinsku. \u010cesk\u00fd CSIRT na hrozbu upozornil v\u00a0srpnu a\u00a0uvedl, \u017ee malware m\u016f\u017ee umo\u017enit zneu\u017eit\u00ed karty k\u00a0platb\u00e1m nebo v\u00fdb\u011br\u016fm hotovosti.<\/p>\n

<\/a>Banka po telefonu nechce instalovat aplikace<\/p>\n

Obrana proti podobn\u00e9mu \u00fatoku za\u010d\u00edn\u00e1 u\u00a0samotn\u00e9ho telefon\u00e1tu. Pokud volaj\u00edc\u00ed tvrd\u00ed, \u017ee je pracovn\u00edkem banky, nen\u00ed vhodn\u00e9 pokra\u010dovat v\u00a0hovoru podle jeho instrukc\u00ed ani instalovat aplikaci, kterou doporu\u010duje.<\/p>\n

Podez\u0159el\u00fd hovor je nejlep\u0161\u00ed ukon\u010dit a\u00a0banku kontaktovat samostatn\u011b prost\u0159ednictv\u00edm ofici\u00e1ln\u00edho telefonn\u00edho \u010d\u00edsla. Z\u00e1sadn\u00ed je tak\u00e9 neinstalovat do telefonu aplikace z\u00a0nezn\u00e1m\u00fdch zdroj\u016f a\u00a0nep\u0159ikl\u00e1dat platebn\u00ed kartu k\u00a0telefonu na z\u00e1klad\u011b instrukc\u00ed \u010dlov\u011bka, kter\u00fd ne\u010dekan\u011b vol\u00e1 a\u00a0vyd\u00e1v\u00e1 se za pracovn\u00edka banky. \u010cesk\u00fd CSIRT p\u0159ed instalac\u00ed podobn\u00fdch aplikac\u00ed na z\u00e1klad\u011b telefonick\u00fdch pokyn\u016f v\u00fdslovn\u011b varuje.<\/p>\n

Jak se br\u00e1nit?Ukon\u010dete ne\u010dekan\u00fd hovor z banky. Pokud v\u00e1m n\u011bkdo vol\u00e1 kv\u016fli \u00fadajn\u00e9mu probl\u00e9mu s \u00fa\u010dtem \u010di kartou, hovor ukon\u010dete a banku si zavolejte sami na ofici\u00e1ln\u00ed \u010d\u00edslo.Nikomu po telefonu nesd\u011blujte citliv\u00e9 \u00fadaje. Banka po v\u00e1s nebude cht\u00edt p\u0159ihla\u0161ovac\u00ed \u00fadaje, hesla ani bezpe\u010dnostn\u00ed k\u00f3dy k tomu, aby \u201ezachr\u00e1nila\u201c va\u0161e pen\u00edze.Neinstalujte aplikace na pokyn volaj\u00edc\u00edho. Pokud v\u00e1s n\u011bkdo po telefonu p\u0159esv\u011bd\u010duje, abyste si nainstalovali aplikaci kv\u016fli bezpe\u010dnosti \u00fa\u010dtu, jde o v\u00fdrazn\u00fd varovn\u00fd sign\u00e1l.Nepovolujte nezn\u00e1m\u00e9 aplikaci vzd\u00e1len\u00fd p\u0159\u00edstup k telefonu. Takov\u00fd p\u0159\u00edstup m\u016f\u017ee \u00fato\u010dn\u00edkovi umo\u017enit sledovat d\u011bn\u00ed v telefonu nebo ho ovl\u00e1dat.Nep\u0159ikl\u00e1dejte platebn\u00ed kartu k telefonu podle instrukc\u00ed nezn\u00e1m\u00e9ho volaj\u00edc\u00edho. Pr\u00e1v\u011b t\u00edm m\u016f\u017ee v popsan\u00e9m \u00fatoku doj\u00edt k zachycen\u00ed NFC komunikace mezi kartou a telefonem.P\u0159i podez\u0159en\u00ed jednejte okam\u017eit\u011b. Pokud jste u\u017e \u00fadaje prozradili, nainstalovali podez\u0159elou aplikaci nebo podle pokyn\u016f pracovali s kartou, ihned kontaktujte svou banku a nechte zablokovat kartu \u010di dal\u0161\u00ed ohro\u017een\u00e9 slu\u017eby.Nej\u010dast\u011bj\u0161\u00ed podvody, jak je odhalit a\u00a0nenechat se okr\u00e1st<\/p>\n

Policejn\u00ed statistiky zaplavuj\u00ed v\u00a0posledn\u00edch m\u011bs\u00edc\u00edch p\u0159\u00edb\u011bhy ne\u0161\u0165astn\u00edk\u016f, kte\u0159\u00ed sedli na lep internetov\u00fdm podvodn\u00edk\u016fm. Kyber\u0161mejdi p\u0159itom pou\u017e\u00edvaj\u00ed po\u0159\u00e1d dokola stejn\u00e9 triky, jejich\u017e prost\u0159ednictv\u00edm se sna\u017e\u00ed d\u016fv\u011b\u0159ivce nap\u00e1lit a\u00a0\u010dasto i\u00a0o\u0161kubat. P\u0159ipravte se na n\u011b a\u00a0pod\u00edvejte se, jak se nej\u010dast\u011bj\u0161\u00edm podvod\u016fm na s\u00edti br\u00e1nit<\/a>.<\/p>\n

<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Na novou kampa\u0148 upozornila ve sv\u00e9 anal\u00fdze \u010desk\u00e1 spole\u010dnost ComSource. Podle n\u00ed skupina ozna\u010dovan\u00e1 jako WindTapper v\u00a0uplynul\u00fdch t\u00fddnech…\n","protected":false},"author":2,"featured_media":200771,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[7],"tags":[43,42,41,40,2685,920,921,21074,731],"class_list":["post-200770","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cesko","tag-ceska-republika","tag-cesko","tag-czech-republic","tag-czechia","tag-falesni-bankeri","tag-kyberneticka-bezpecnost","tag-kyberneticky-utok","tag-malware","tag-vishing-voice-phishing"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@cz\/117205146670082164","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts\/200770","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/comments?post=200770"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts\/200770\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/media\/200771"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/media?parent=200770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/categories?post=200770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/tags?post=200770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}