{"id":683,"date":"2026-01-05T10:33:18","date_gmt":"2026-01-05T10:33:18","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-prijevara-putem-facebooka-s-ciljem-krade-whatsapp-racuna\/"},"modified":"2026-11-04T08:37:37","modified_gmt":"2026-11-04T08:37:37","slug":"upozorenje-prijevara-putem-facebooka-s-ciljem-krade-whatsapp-racuna","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/upozorenje-prijevara-putem-facebooka-s-ciljem-krade-whatsapp-racuna\/","title":{"rendered":"Upozorenje: Prijevara putem Facebooka s ciljem kra\u0111e WhatsApp ra\u010duna"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Nacionalni CERT upozorava gra\u0111ane na <strong>zlonamjernu kampanju<\/strong> koja se \u0161iri putem <strong>Facebook grupa i stranica<\/strong>, a \u010diji je cilj <strong>neovla\u0161teno preuzimanje WhatsApp ra\u010duna<\/strong> korisnika.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Opis prijevare<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Korisnici putem Facebooka zaprimaju poruke ili objave sa zamolbom za glasanje u navodnom dje\u010djem natjecanju, naj\u010de\u0161\u0107e uz poruku:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em><span class=\"has-inline-color has-vivid-cyan-blue-color\">\u201eBok! Mo\u017eete li, molim vas, glasati za Mariju u ovom natjecanju? Ona je k\u0107i mog prijatelja. Prva nagrada je besplatna stipendija za sljede\u0107u godinu. To joj puno zna\u010di. Hvala vam puno!\u201c<\/span><\/em><\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Poveznica vodi na web stranicu koja se predstavlja kao <strong>\u201eNatjecanja Croatia\u201c<\/strong>, gdje se nudi mogu\u0107nost \u201eglasanja\u201c. Prije glasanja korisnike se tra\u017ei <strong>autorizacija ili registracija (koja slu\u017ei za ostvarivanje pristupa va\u0161em WhatsApp ra\u010dunu)<\/strong>.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a07904201&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a07904201\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2026\/01\/Slika-1.png\" alt=\"\" class=\"wp-image-113266\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kako prijevara funkcionira<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tijekom la\u017ene registracije od korisnika se tra\u017ei:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>odabir dr\u017eave<\/li><li><strong>unos broja mobitela<\/strong> (broj mobitela napada\u010di iskoriste za prijavu u WhatsApp na svom ure\u0111aju)<\/li><li><strong>unos<\/strong> <strong>SMS k\u00f4da<\/strong> <strong>zaprimljenog na mobilni telefon <\/strong>(zaprimljeni k\u00f4d je autorizacijski k\u00f4d za prijavu u WhatsApp na drugom ure\u0111aju)<\/li><\/ul>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a07904757&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a07904757\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2026\/01\/Slika-2.png\" alt=\"\" class=\"wp-image-113265\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Opisani postupak predstavlja <strong>zloupotrebu WhatsApp funkcionalnosti \u201ePovezani ure\u0111aji (Linked Devices)\u201d<\/strong>, \u010dime napada\u010d:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>povezuje svoj ure\u0111aj s WhatsApp ra\u010dunom \u017ertve<\/strong><\/li><li><strong>dobiva pristup porukama<\/strong><\/li><li><strong>mo\u017ee slati poruke u ime \u017ertve<\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Posljedice<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nakon kompromitacije ra\u010duna napada\u010d:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>koristi WhatsApp ra\u010dun \u017ertve za slanje poruka njezinim kontaktima<\/li><li><strong>tra\u017ei uplate novca ili \u0161iri istu prijevarnu poveznicu<\/strong><\/li><li>dodatno pove\u0107ava doseg i vjerodostojnost prijevare<\/li><\/ul>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a07904ccf&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a07904ccf\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2026\/01\/Slika-3.png\" alt=\"\" class=\"wp-image-113264\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Preporuke korisnicima<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Gra\u0111anima savjetujemo:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>ne klikati na poveznice za glasanje i natjecanja zaprimljene putem dru\u0161tvenih mre\u017ea ili poruka<\/li><li>ne unositi broj mobitela niti zaprimljene SMS k\u00f4dove na sumnjivim web stranicama<\/li><li>redovito provjeravati WhatsApp postavke \u2192 <strong>Povezani ure\u0111aji<\/strong> i ukloniti nepoznate ure\u0111aje<\/li><li>uklju\u010diti <strong>dvofaktorsku autentifikaciju (PIN)<\/strong> u WhatsApp aplikaciji (<em>Postavke \u2013 Ra\u010dun \u2013 Provjera u dva koraka)<\/em><\/li><li>upozoriti kontakte u slu\u010daju sumnje na kompromitaciju ra\u010duna<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u0160to u\u010diniti ako je ra\u010dun kompromitiran<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ako sumnjate da je va\u0161 WhatsApp ra\u010dun kompromitiran:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>odmah se odjavite sa svih povezanih ure\u0111aja<\/li><li>ponovno verificirajte WhatsApp ra\u010dun u aplikaciji<\/li><li>obavijestite svoje kontakte o prijevari<\/li><li>prijavite incident Nacionalnom CERT-u<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Nacionalni CERT upozorava gra\u0111ane na zlonamjernu kampanju koja se \u0161iri putem Facebook grupa i stranica, a \u010diji je cilj neovla\u0161teno preuzimanje WhatsApp ra\u010duna korisnika. Opis prijevare Korisnici putem Facebooka zaprimaju poruke ili objave sa zamolbom za glasanje u navodnom dje\u010djem natjecanju, naj\u010de\u0161\u0107e uz poruku: \u201eBok! Mo\u017eete li, molim vas, glasati za Mariju u ovom natjecanju? [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1030,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-683","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/683","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=683"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/683\/revisions"}],"predecessor-version":[{"id":1035,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/683\/revisions\/1035"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1030"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=683"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=683"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=683"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=683"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=683"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}