{"id":922,"date":"2023-10-12T08:34:55","date_gmt":"2023-10-12T08:34:55","guid":{"rendered":"http:\/\/localhost:9000\/?p=922"},"modified":"2024-05-16T08:55:24","modified_gmt":"2024-05-16T08:55:24","slug":"bud-mudrejsi-ako-hacker-osobne-udaje-2","status":"publish","type":"post","link":"http:\/\/localhost:9000\/posts\/922","title":{"rendered":"Bu\u010f m\u00fadrej\u0161\u00ed ako hacker- osobn\u00e9 \u00fadaje #2"},"content":{"rendered":"\n

V dne\u0161nej digit\u00e1lnej dobe s\u00fa osobn\u00e9 \u00fadaje ohrozen\u00e9 viac ako kedyko\u013evek predt\u00fdm. Kreativita \u00fato\u010dn\u00edkov na z\u00edskanie Va\u0161ich osobn\u00fdch \u00fadajov nem\u00e1 hranice. \u00dato\u010dn\u00edci m\u00f4\u017eu pou\u017ei\u0165 r\u00f4zne met\u00f3dy na zbieranie osobn\u00fdch \u00fadajov svojich obet\u00ed, vr\u00e1tane soci\u00e1lneho in\u017einierstva, phishingov\u00fdch \u00fatokov alebo preh\u013ead\u00e1vanie otvoren\u00fdch zdrojov, ako napr\u00edklad fotografi\u00ed na soci\u00e1lnych sie\u0165ach…<\/p>\n\n\n\n

Najbe\u017enej\u0161ie met\u00f3dy \u00fato\u010dn\u00edkov:<\/u><\/strong><\/p>\n\n\n\n

Soci\u00e1lne in\u017einierstvo<\/em><\/strong>: Zah\u0155\u0148a manipul\u00e1ciu obet\u00ed za \u00fa\u010delom prezradenia ich citliv\u00fdch inform\u00e1ci\u00ed. \u00dato\u010dn\u00edci vykon\u00e1vaj\u00fa online prieskum aktiv\u00edt svojich obet\u00ed a pou\u017e\u00edvaj\u00fa inform\u00e1cie, ktor\u00e9 n\u00e1jdu, na z\u00edskanie ich d\u00f4very a na ich presved\u010denie.<\/p>\n\n\n\n

Reverzn\u00e9 soci\u00e1lne in\u017einierstvo: <\/em><\/strong>\u00dato\u010dn\u00edk vytvor\u00ed situ\u00e1ciu, pri ktorej obe\u0165 sama pr\u00edde za \u00fato\u010dn\u00edkom. Ide o sofistikovan\u00fa met\u00f3du psychickej manipul\u00e1cie, pri ktorej \u00fato\u010dn\u00edk za pou\u017eitia \u0161tandardn\u00fdch met\u00f3d soci\u00e1lneho in\u017einierstva uvedie obe\u0165 do omylu a presved\u010d\u00ed ju, \u017ee on je osoba z d\u00f4veryhodnej organiz\u00e1cie a iba on vie obeti pom\u00f4c\u0165 s jej probl\u00e9mom, ktor\u00fd rovnako vytvoril on. Viac inform\u00e1ci\u00ed n\u00e1jdete tu.<\/a><\/p>\n\n\n\n

Taktika: Baiting, Pretexting, DNS spoofing, Scareware, Position of authority, Sense of urgency<\/p>\n\n\n\n

Prevedenie: Mail, Smishing, Vishing, podvodn\u00e1 webstr\u00e1nka\/aplik\u00e1cia<\/p>\n\n\n\n

Extrakcia metad\u00e1t z fotografi\u00ed:<\/em><\/strong><\/p>\n\n\n\n

\u00dato\u010dn\u00edk dok\u00e1\u017ee z\u00edska\u0165 rozli\u010dn\u00e9 d\u00e1ta z fotografi\u00ed, napr. EXIF, d\u00e1tum a \u010das, GPS, popis fotky alebo autorsk\u00e9 pr\u00e1va. Z fotografi\u00ed vie \u00fato\u010dn\u00edk z\u00edska\u0165 citliv\u00e9 inform\u00e1cie o osobe, hlavne ak informuj\u00fa o dennej rutine \u010dloveka, \u0161peci\u00e1lnych pr\u00edle\u017eitostiach, alebo pl\u00e1noch a \u00faspechoch.<\/p>\n\n\n\n

Web scraping:<\/em><\/strong><\/p>\n\n\n\n

Je proces z\u00edskavania d\u00e1t z webov\u00fdch str\u00e1nok pomocou automatizovan\u00fdch n\u00e1strojov alebo softv\u00e9ru. Web scraping zo soci\u00e1lnych siet\u00ed umo\u017e\u0148uje \u00fato\u010dn\u00edkom z\u00edska\u0165 r\u00f4zne druhy \u00fadajov o pou\u017e\u00edvate\u013eoch. Napr\u00edklad kontaktn\u00e9 inform\u00e1cie, s\u00fakromn\u00e9 spr\u00e1vy, pr\u00edspevky a koment\u00e1re, sledovanie pou\u017e\u00edvate\u013eov alebo profilov\u00e9 inform\u00e1cie.<\/p>\n\n\n\n

Obsah na soci\u00e1lnych sie\u0165ach:<\/em><\/strong><\/p>\n\n\n\n

\u00dato\u010dn\u00edk m\u00f4\u017ee z\u00edska\u0165 inform\u00e1cie o identite a polohe pou\u017e\u00edvate\u013ea na z\u00e1klade jeho profilu na soci\u00e1lnych sie\u0165ach. Pou\u017e\u00edvatelia \u010dasto zdie\u013eaj\u00fa citliv\u00e9 inform\u00e1cie, ako s\u00fa napr\u00edklad d\u00e1tum narodenia, miesto narodenia, rodinn\u00fd stav, zamestnanie a vzdelanie.  Tieto inform\u00e1cie m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 na vytvorenie falo\u0161n\u00e9ho profilu alebo na sledovanie pou\u017e\u00edvate\u013ea.<\/p>\n\n\n\n

Na obr\u00e1zku ni\u017e\u0161ie m\u00f4\u017eeme vidie\u0165 pr\u00edklad phishingov\u00e9ho \u00fatoku, ktor\u00fd nav\u00e1dza obe\u0165 na stiahnutie hlasovej spr\u00e1vy z aplik\u00e1cie Outlook. V prvom rade si v\u0161imnime emailov\u00fa adresu, z ktorej n\u00e1m pri\u0161iel email. T\u00e1to dom\u00e9na nepatr\u00ed spolo\u010dnosti Microsoft, \u010do si vieme overi\u0165 na ich ofici\u00e1lnej str\u00e1nke alebo pomocou webovej platformy who.is<\/a> alebo centralops<\/a>. Po presunut\u00ed kurzora na tento odkaz sa n\u00e1m v \u013eavom spodnom rohu uk\u00e1zala webov\u00e1 str\u00e1nka, kam by sme boli presunut\u00ed po kliknut\u00ed na odkaz. Nikdy na tak\u00fdto odkaz NEKLIKAJTE!<\/em><\/strong>  Za druh\u00e9 si treba skontrolova\u0165, \u010di v\u00f4bec aplik\u00e1cia Outlook dovo\u013euje odosielanie hlasov\u00fdch spr\u00e1v, pri\u010dom po kr\u00e1tkom prieskume zist\u00edme, \u017ee t\u00e1to mo\u017enos\u0165 neexistuje. Dbajte na obsah emailu a inform\u00e1cie, ktor\u00e9 s\u00fa v \u0148om zahnut\u00e9. V pr\u00edpade \u00faspe\u0161n\u00e9ho presved\u010denia obete by sa \u00fato\u010dn\u00edkovi mohlo podari\u0165 z\u00edska\u0165 od nej prihlasovacie \u00fadaje, finan\u010dn\u00e9 \u010di osobn\u00e9 inform\u00e1cie alebo citliv\u00e9 inform\u00e1cie, ktor\u00e9 dok\u00e1\u017ee zneu\u017ei\u0165.<\/p>\n\n\n\n

\"phishmail\"<\/figure>\n\n\n\n

Bu\u010fte opatrn\u00ed vo\u010di \u017eiadostiam o priate\u013estvo a spr\u00e1vam od nezn\u00e1mych jednotlivcov. Pou\u017e\u00edvate\u013e soci\u00e1lnych siet\u00ed by mal obmedzi\u0165 mno\u017estvo zdie\u013ean\u00fdch osobn\u00fdch inform\u00e1ci\u00ed. Okrem toho odpor\u00fa\u010dame skontrolova\u0165 nastavenie s\u00fakromia a upravi\u0165 ich tak, aby sa obmedzila vidite\u013enos\u0165 osobn\u00fdch \u00fadajov pre verejnos\u0165. Je d\u00f4le\u017eit\u00e9 by\u0165 si t\u00fdchto riz\u00edk vedom\u00fd a prija\u0165 kroky na svoju ochranu. T\u00fdmito opatreniami m\u00f4\u017eete chr\u00e1ni\u0165 sam\u00fdch seba a svojich najbli\u017e\u0161\u00edch pred \u00fato\u010dn\u00edkmi, ktor\u00ed sa sna\u017eia zneu\u017ei\u0165 Va\u0161e osobn\u00e9 \u00fadaje na \u00fatok proti V\u00e1m.  INTERNET NEZAB\u00daDA !!!<\/strong><\/p>\n\n\n\n

Pripravili sme si pre V\u00e1s kr\u00e1tky phishingov\u00fd test, kde si m\u00f4\u017eete na praktick\u00fdch pr\u00edkladoch overi\u0165 svoje znalosti. Phishingov\u00fd test: https:\/\/www.csirt.gov.sk\/archiv\/osvedcene-postupy\/navody-a-odporucania\/phishingovy-test-871.html?csrt=6113910499060114075<\/a><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Bud\u00faci t\u00fd\u017ede\u0148 si bli\u017e\u0161ie predstav\u00edme zneu\u017eitie osobn\u00fdch \u00fadajov, ktor\u00e9 sa podarilo kyber\u00fato\u010dn\u00edkom z\u00edska\u0165 od svojich obet\u00ed. Sledujte na\u0161e str\u00e1nky pre viac inform\u00e1ci\u00ed.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

V dne\u0161nej digit\u00e1lnej dobe s\u00fa osobn\u00e9 \u00fadaje ohrozen\u00e9 viac ako kedyko\u013evek predt\u00fdm. Kreativita \u00fato\u010dn\u00edkov na z\u00edskanie Va\u0161ich osobn\u00fdch \u00fadajov nem\u00e1…<\/p>\n","protected":false},"author":1,"featured_media":926,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,6],"tags":[57,58],"_links":{"self":[{"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/posts\/922"}],"collection":[{"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/comments?post=922"}],"version-history":[{"count":2,"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/posts\/922\/revisions"}],"predecessor-version":[{"id":935,"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/posts\/922\/revisions\/935"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/media\/926"}],"wp:attachment":[{"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/media?parent=922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/categories?post=922"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/localhost:9000\/wp-json\/wp\/v2\/tags?post=922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}