{"id":473,"date":"2025-12-18T08:00:40","date_gmt":"2025-12-18T07:00:40","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=473"},"modified":"2026-05-29T20:05:27","modified_gmt":"2026-05-29T18:05:27","slug":"cum-functioneaza-spoofing-ul","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/ro\/knowledgebase\/how-does-spoofing-work\/","title":{"rendered":"Cum func\u021bioneaz\u0103 spoofing-ul?"},"content":{"rendered":"<div class=\"translation-block translation-block-merged\">\n<p class=\"wp-block-paragraph\">\u00cen esen\u021b\u0103, <strong>Spoofing<\/strong> este un cadru de exploatare \u00een care un actor neautorizat falsific\u0103 seturi de date pentru a se da drept o entitate de \u00eencredere. O campanie de spoofing reu\u0219it\u0103 se bazeaz\u0103 pe interac\u021biunea dintre dou\u0103 componente opera\u021bionale distincte: <strong>manipularea tehnic\u0103 a \u00eenc\u0103rc\u0103turii utile<\/strong> (falsificarea mecanic\u0103 a unui site web, a unui e-mail, a unei adrese IP sau a unui pachet de re\u021bea) \u0219i <strong>nivelul psihologic al ingineriei sociale<\/strong> (manipularea strategic\u0103 care determin\u0103 victima s\u0103 \u00eentreprind\u0103 o ac\u021biune).<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Cuprins<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class=\"ez-toc-list ez-toc-list-level-1\"><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/how-does-spoofing-work\/#The_Dual-Engine_Exploitation_Model\">Modelul de exploatare cu dou\u0103 motoare<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/how-does-spoofing-work\/#The_Spectrum_of_Spoofing_Attack_Patterns\">Spectrul tiparelor de atacuri de spoofing<\/a><\/li><li class=\"ez-toc-page-1 ez-toc-heading-level-3\"><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/how-does-spoofing-work\/#Downstream_Organizational_Consequences\">Consecin\u021be organiza\u021bionale \u00een aval<\/a><\/li><\/ul><\/nav><\/div>\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"The_Dual-Engine_Exploitation_Model\"><\/span>Modelul de exploatare cu dou\u0103 motoare<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">1. Falsificarea tehnic\u0103 (masca)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Componenta structural\u0103 a atacului abstractizeaz\u0103 sau suprascrie c\u0103ile de date autentice. Straturile legitime de transport al datelor acord\u0103 adesea prioritate eficien\u021bei de rutare \u00een detrimentul valid\u0103rii criptografice a sursei. Atacatorii exploateaz\u0103 aceast\u0103 caracteristic\u0103 de proiectare prin rescrierea anteturilor de metadate din transmisiile electronice.<\/p>\n\n\n\n<\/div>\n\n<div id=\"mybox-3583013685\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Acces timpuriu<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Mai ave\u021bi nevoie de ajutor?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contacta\u021bi echipa noastr\u0103 de servicii pentru clien\u021bi.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Trimite mesaj<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\">Fie c\u0103 \u00eenlocuiesc octe\u021bi din \u0219irul <code>From:<\/code> al unui e-mail, fie c\u0103 \u00eenregistreaz\u0103 domenii omografe similare, fie c\u0103 construiesc pachete UDP f\u0103r\u0103 stare cu coordonate IP de surs\u0103 interne falsificate, obiectivul este acela\u0219i: s\u0103 for\u021beze terminalul receptor sau nodul de re\u021bea s\u0103 proceseze un element ne\u00eencredibil ca pe o intrare verificat\u0103 \u00een sistem.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">2. Vectorul de inginerie social\u0103 (declan\u0219atorul)<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Odat\u0103 ce masca tehnic\u0103 ocole\u0219te filtrele de baz\u0103, atacatorul exploateaz\u0103 punctele slabe comportamentale. Ace\u0219ti vectori exploateaz\u0103 ierarhia organiza\u021bional\u0103, urgen\u021ba, frica sau \u00eencrederea opera\u021bional\u0103 \u00eencorporat\u0103.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">De exemplu, un atacator poate trimite un e-mail cu un antet modificat, care imit\u0103 semn\u0103tura unui director de rang \u00eenalt al \u00eentreprinderii. Textul din interior \u00eei solicit\u0103 unui controlor financiar s\u0103 efectueze un transfer imediat de active pentru a asigura o achizi\u021bie corporativ\u0103 critic\u0103. Prin combinarea unei fa\u021bade vizuale conving\u0103toare din punct de vedere tehnic cu o nara\u021biune opera\u021bional\u0103 care creeaz\u0103 un nivel ridicat de stres, atacatorul ocole\u0219te obiceiurile standard de verificare, determin\u00e2nd \u021binta s\u0103 autorizeze divulgarea datelor sau a informa\u021biilor financiare f\u0103r\u0103 nicio suspiciune.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"The_Spectrum_of_Spoofing_Attack_Patterns\"><\/span>Spectrul modelelor de atacuri de spoofing<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Opera\u021biunile de spoofing acoper\u0103 un spectru larg de complexitate tehnic\u0103, viz\u00e2nd diferite straturi ale modelului standard de re\u021bea.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Vectorul de atac<\/strong><\/td><td><strong>Stratul \u021bint\u0103<\/strong><\/td><td><strong>Mecanismul tehnic de baz\u0103<\/strong><\/td><\/tr><\/thead><tbody><tr><td><strong>Falsificarea e-mailurilor<\/strong><\/td><td>Stratul de aplica\u021bie<\/td><td>Rescrierea anteturilor vizuale <code>De la:<\/code> ale plicului pentru a imita conturile interne ale directorilor executivi sau ale furnizorilor globali de \u00eencredere.<\/td><\/tr><tr><td><strong>Falsificarea site-urilor web<\/strong><\/td><td>Stratul de aplica\u021bie<\/td><td>Utilizarea typosquatting-ului sau a caracterelor interna\u021bionale omografe (non-ASCII) pentru a crea replici vizuale precise ale paginilor de autentificare.<\/td><\/tr><tr><td><strong>Falsificarea ID-ului apelantului \/ a mesajelor SMS<\/strong><\/td><td>Telecomunica\u021bii<\/td><td>Injectarea de constante sub form\u0103 de \u0219iruri alfanumerice arbitrare \u00een anteturile pachetelor de pe gateway-urile VoIP sau SIP pentru a masca datele privind loca\u021bia de origine.<\/td><\/tr><tr><td><strong>Otr\u0103virea cache-ului DNS<\/strong><\/td><td>Rutare de re\u021bea<\/td><td>Injectarea de \u00eenregistr\u0103ri de rutare IP contaminate \u00een memoria temporar\u0103 a unui resolver, redirec\u021bion\u00e2nd eronat traficul web global.<\/td><\/tr><tr><td><strong>Falsificarea adresei IP<\/strong><\/td><td>Re\u021bea \/ Transport<\/td><td>Modificarea octe\u021bilor adresei surs\u0103 din antetul unui pachet brut pentru a ocoli listele de permisiuni ale firewall-ului perimetral.<\/td><\/tr><tr><td><strong>Falsificarea ARP<\/strong><\/td><td>Stratul de leg\u0103tur\u0103 (LAN)<\/td><td>Difuzarea asocierilor MAC-IP neautentificate \u00eentr-o subre\u021bea local\u0103 pentru a intercepta cadrele de date din re\u021beaua intern\u0103.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Downstream_Organizational_Consequences\"><\/span>Consecin\u021be organiza\u021bionale ulterioare<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Permiterea trecerii necontrolate a blocurilor de rutare neverificate sau a datelor manipulate \u00een re\u021belele de produc\u021bie poate declan\u0219a daune structurale grave \u00een cascad\u0103 \u00een mediile \u00eentreprinderilor:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Ansambluri de colectare a datelor de autentificare:<\/strong> Zonele de aterizare falsificate intercepteaz\u0103 token-urile de sesiune ale angaja\u021bilor \u0219i administratorilor, oferind atacatorilor acces ne\u00eengr\u0103dit la re\u021belele private ale companiei.<\/li>\n\n\n\n<li><strong>Distribuirea de malware \u0219i ransomware:<\/strong> Ata\u0219amentele de e-mail \u00een\u0219el\u0103toare \u0219i suprapunerile de scripturi declan\u0219eaz\u0103 execu\u021bii silen\u021bioase de fi\u0219iere \u00een fundal, implement\u00e2nd \u00eenc\u0103rc\u0103turi de criptare care pot bloca activele de date ale unei companii.<\/li>\n\n\n\n<li><strong>\u00cenc\u0103lc\u0103ri ale securit\u0103\u021bii datelor critice:<\/strong> Ocolirea controalelor de acces permite actorilor r\u0103u inten\u021biona\u021bi s\u0103 extrag\u0103 \u00een mod silen\u021bios informa\u021bii de identificare personal\u0103 (PII) ale clien\u021bilor, secrete comerciale, \u00eenregistr\u0103ri financiare \u0219i jurnale opera\u021bionale, ceea ce duce la costuri masive de recuperare a datelor.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[10,42],"manual_kb_tag":[3106,737,739,740,743,810,1309,1665,1674,3105],"class_list":["post-473","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-safety","manualknowledgebasecat-miscellaneous","manual_kb_tag-malware-distribution","manual_kb_tag-spoofing","manual_kb_tag-social-engineering","manual_kb_tag-email-spoofing","manual_kb_tag-caller-id-spoofing","manual_kb_tag-phishing-attacks","manual_kb_tag-business-email-compromise","manual_kb_tag-website-spoofing","manual_kb_tag-credential-theft","manual_kb_tag-phone-spoofing"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/473","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":1,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/473\/revisions"}],"predecessor-version":[{"id":8924,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/473\/revisions\/8924"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/media?parent=473"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manualknowledgebasecat?post=473"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb_tag?post=473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}