{"id":789,"date":"2022-08-08T13:31:35","date_gmt":"2022-08-08T13:31:35","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-aktivne-phishing-kampanje-koje-ciljaju-korisnike-hrvatskih-banaka\/"},"modified":"2026-11-04T08:47:35","modified_gmt":"2026-11-04T08:47:35","slug":"upozorenje-aktivne-phishing-kampanje-koje-ciljaju-korisnike-hrvatskih-banaka","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/upozorenje-aktivne-phishing-kampanje-koje-ciljaju-korisnike-hrvatskih-banaka\/","title":{"rendered":"[UPOZORENJE] Aktivne phishing kampanje koje ciljaju korisnike hrvatskih banaka"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Posljednjih nekoliko dana aktivne su <strong><em>phishing kampanje<\/em><\/strong> koje ciljaju korisnike hrvatskih banaka radi ostvarivanja <strong>financijske koristi<\/strong> i <strong>kra\u0111e podataka<\/strong>. Phishing kampanje \u0161ire se <strong>porukama elektroni\u010dke po\u0161te<\/strong> u kojima se napada\u010d predstavlja kao <strong>banka<\/strong>. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Na jezi\u010dno neispravnom hrvatskom jeziku korisnika se obavje\u0161tava o <strong>novom a\u017euriranju<\/strong> zbog <strong>uvo\u0111enja eura <\/strong>kao slu\u017ebene valute Republike Hrvatske. Napada\u010di korisnika navode da potvrdi to\u010dnost telefonskog broja putem <strong>phishing poveznice<\/strong> kako bi a\u017eurirao aplikaciju mobilnog bankarstva. &nbsp; <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nakon unosa telefonskog broja korisnika se preusmjerava na <strong>la\u017enu stranicu<\/strong> za <strong>unos aktivacijskog k\u020fda.<\/strong> Korisnika se tra\u017ei da prebaci svoju aplikaciju na novi ure\u0111aj - ure\u0111aj napada\u010da, pri \u010demu zaprima aktivacijski k\u020fd koji unosi u formu i \u0161alje napada\u010du. Na taj na\u010din, napada\u010d <strong>dobiva pristup<\/strong> aplikaciji mobilnog bankarstva \u017ertve, kao i <strong>svim funkcionalnostima<\/strong> same aplikacije. Na posljednjem koraku, korisnika se obavje\u0161tava da zbog a\u017euriranja sustava mobilna aplikacija ne\u0107e biti u funkciji naredna 24 sata te da \u0107e novi aktivacijski k\u020fd za prijavu biti poslan na e-mail adresu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">U nastavku se nalazi nekoliko <strong>poveznica i poruke koje izgledaju kao phishing hrvatskih banaka<\/strong>. Pozivamo korisnike da ne otvaraju sumnjive poveznice i <a href=\"https:\/\/www.cert.hr\/oincprijavi\/\">prijave phishing poruke.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/m-banka.com\/Prijava\/ERM-II-Azuriranje.php\">hxxps:\/\/m-<strong>banka<\/strong>[.]com\/Prijava\/ERM-II-Azuriranje.php<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/m-banka.com\/Prijava\/ERM-II-Azuriranje.php\">hxxps:\/\/<strong>banka-hr<\/strong>[.]com\/Prijava\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Poruke su poslane s adresa u obliku <strong>podrska@m-banka[.]com<\/strong><\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ebad6456&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ebad6456\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2022\/08\/mphishing.png\" alt=\"\" class=\"wp-image-110093\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ebad68ab&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ebad68ab\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2022\/08\/mobilno_phishing-1024x444.png\" alt=\"\" class=\"wp-image-110091\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Posljednjih nekoliko dana aktivne su phishing kampanje koje ciljaju korisnike hrvatskih banaka radi ostvarivanja financijske koristi i kra\u0111e podataka. Phishing kampanje \u0161ire se porukama elektroni\u010dke po\u0161te u kojima se napada\u010d predstavlja kao banka. Na jezi\u010dno neispravnom hrvatskom jeziku korisnika se obavje\u0161tava o novom a\u017euriranju zbog uvo\u0111enja eura kao slu\u017ebene valute Republike Hrvatske. Napada\u010di korisnika navode [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1240,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-789","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/789","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=789"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/789\/revisions"}],"predecessor-version":[{"id":1243,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/789\/revisions\/1243"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1240"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=789"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=789"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=789"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}