{"id":790,"date":"2022-08-02T13:58:47","date_gmt":"2022-08-02T13:58:47","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/tech-support-prijevare\/"},"modified":"2026-11-04T08:47:27","modified_gmt":"2026-11-04T08:47:27","slug":"tech-support-prijevare","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/tech-support-prijevare\/","title":{"rendered":"&#8220;Tech-support&#8221; prijevare"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">U posljednjih nekoliko godina, u svijetu, ali i u Hrvatskoj, aktualne su prijevare gdje se napada\u010d predstavlja kao tehni\u010dka podr\u0161ka za neku uslugu npr. <strong>operacijski sustav<\/strong>, <strong>sigurnosna rje\u0161enja<\/strong>,<strong> elektroni\u010dku po\u0161tu<\/strong> ili sli\u010dno. Iskori\u0161tavaju ljudski strah i izazivaju <strong>paniku <\/strong>kod potencijalne \u017ertve, a u svrhu <strong>financijske dobiti<\/strong>. Takve \u201etehni\u010dke podr\u0161ke\u201c poma\u017eu kod <strong>nepostoje\u0107ih problema<\/strong> u softveru ili na ra\u010dunalu, instaliraju zlonamjerni softver te <strong>kradu osjetljive i bankovne podatke<\/strong>.<\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Financijski gubitci u zadnjih pet godina<\/strong><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a082c8e7f&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a082c8e7f\" class=\"aligncenter size-large is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2022\/08\/tech-support-scam-losses-double-causing-nearly-350-million-in-damages-in-2021-1-1024x878.png\" alt=\"\" class=\"wp-image-110044\" width=\"512\" height=\"439\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Kako funkcioniraju?<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Velik broj zlonamjernih skupina, kojima je ova vrsta prijevare <strong>primarni izvor zarade<\/strong>, koristi istu shemu napada. Napada\u010di postave <strong>la\u017enu stranicu<\/strong> s kontakt podacima te nude usluge tehni\u010dke podr\u0161ke neke legitimne korporacije ili <strong>\u0161alju <a href=\"https:\/\/www.cert.hr\/19795-2\/spam\/\">spam poruke<\/a><\/strong> s kontakt podacima. Potencijalna \u017ertva pretra\u017euje internet kako bi do\u0161la do telefonskog broja tehni\u010dke podr\u0161ke npr. Microsofta. Zbog dobro optimiziranih tzv. <em>SEO<\/em> (eng. <em>Search Engine Optimization<\/em>) postavki, napada\u010deva stranica je<strong> visoko pozicionirana<\/strong> me\u0111u rezultatima pretrage. Potencijalna \u017ertva zove telefonski broj jedne od tehni\u010dkih podr\u0161ki ponu\u0111enih me\u0111u rezultatima pretrage. <strong>Agent u pozivnom centru<\/strong>, koji je dio zlonamjerne skupine, preuzima poziv i kre\u0107e s prvom fazom prijevare. Tra\u017ei od \u017ertve da uklju\u010di ili instalira softver za udaljeno upravljanje, kao \u0161to je npr. <strong>TeamViewer <\/strong>ili <strong>AnyDesk<\/strong>, a po\u017eeljno je taj softver ima mogu\u0107nost oduzimanja tipkovnice ili mi\u0161a ili \u010dak ga\u0161enje ekrana, kako \u017ertva ne bi vidjela \u0161to se doga\u0111a ispred nje. Napada\u010d zatim <strong>prikazuje ekran<\/strong> sa skriptama koje prikazuju <strong>zara\u017eeno ra\u010dunalo<\/strong>, a zapravo se radi o bezazlenim kodovima. Na taj na\u010din stvaraju <strong>paniku <\/strong>kod \u017ertve, a u tom trenutku nudi rje\u0161enje \u2013 o\u010distit \u0107e ra\u010dunalo od \u201ezlonamjernog programa\u201c, za malu svotu novca, u obliku <strong>kriptovalute <\/strong>ili <strong>poklon kartice<\/strong>. \u017drtva u panici upla\u0107uje \"tehni\u010dkoj podr\u0161ci\", a osim \u0161to je na <strong>financijskom gubitku<\/strong>, potencijalno ostaje bez osjetljivih podataka. Naravno, napada\u010d obri\u0161e bezazlenu skriptu, ali ostavlja <strong>zlonamjerni softver<\/strong>, kako bi u budu\u0107nosti ponovno mogao pristupiti ra\u010dunalu. <\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Primjer sko\u010dnog prozora la\u017ene tehni\u010dke podr\u0161ke<\/strong><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a082c943a&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a082c943a\" class=\"aligncenter size-large is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2022\/08\/Fake-scam-1.png\" alt=\"\" class=\"wp-image-110036\" width=\"541\" height=\"471\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Najbolja obrana<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\"><li>Odr\u017eavajte <a href=\"\/wp-content\/uploads\/2021\/11\/carnet_infografika_0511-novo-1.png\"><strong>kiberneti\u010dku higijenu<\/strong><\/a> \u2013 za\u0161titite svoje podatke, ure\u0111aje, korisni\u010dke ra\u010dune i mre\u017eu<\/li><li>Dobro <strong>provjerite kontakt<\/strong> podatke \u2013 brojeve telefona i adrese elektroni\u010dke po\u0161te, legitimna adresa ne\u0107e izgledati ovako <a href=\"http:\/\/microsoft.support15@yahoo[.]com\">microsoft.support15@yahoo[.]com<\/a> ili <a href=\"http:\/\/microsoft.support15@yahoo[.]com\">delete-malware@gmail[.]com<\/a>.<\/li><li>Legitimne tvrtke vas <strong><span style=\"text-decoration: underline;\">nikad ne\u0107e tra\u017eiti osjetljive podatke<\/span><\/strong> poput lozinki, a pogotovo ne putem telefonskog ili video poziva!<\/li><li><strong>Blokirajte sko\u010dne prozore! <\/strong>Oni vas mogu preusmjeriti na la\u017ene, <a href=\"https:\/\/www.cert.hr\/phishing\/\">phishing stranice<\/a> ili pokrenuti preuzimanje zlonamjernih programa, a legitimne tvrtke ne\u0107e ostaviti kontakt podatke tehni\u010dke podr\u0161ke u sko\u010dni prozor.<\/li><li>Tehni\u010dke podr\u0161ke su naj\u010de\u0161\u0107e besplatna usluga, a u slu\u010daju pla\u0107anja legitimne tvrtke ne\u0107e od vas tra\u017eiti<strong> pla\u0107anje u kriptovalutama ili poklon karticama<\/strong><\/li><li>Preuzimajte softver s <strong>legitimnih izvora!<\/strong><\/li><li><strong>A\u017eurirajte<\/strong> softvere, operacijski sustav i preglednik redovito!<\/li><li><strong><a href=\"https:\/\/www.cert.hr\/HrNaiva\">#SurfajteSigurnije<\/a>!<\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">La\u017ene tehni\u010dke podr\u0161ke Microsofta mo\u017eete prijaviti putem <strong><a href=\"https:\/\/www.microsoft.com\/hr-hr\/concern\/scam?rtc=1\">forme<\/a><\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>U posljednjih nekoliko godina, u svijetu, ali i u Hrvatskoj, aktualne su prijevare gdje se napada\u010d predstavlja kao tehni\u010dka podr\u0161ka za neku uslugu npr. operacijski sustav, sigurnosna rje\u0161enja, elektroni\u010dku po\u0161tu ili sli\u010dno. Iskori\u0161tavaju ljudski strah i izazivaju paniku kod potencijalne \u017ertve, a u svrhu financijske dobiti. Takve \u201etehni\u010dke podr\u0161ke\u201c poma\u017eu kod nepostoje\u0107ih problema u softveru [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1229,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-790","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/790","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=790"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/790\/revisions"}],"predecessor-version":[{"id":1233,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/790\/revisions\/1233"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1229"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=790"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=790"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=790"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=790"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=790"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}