{"id":819,"date":"2023-02-02T14:37:41","date_gmt":"2023-02-02T14:37:41","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-e-postom-se-sire-zlonamjerni-qr-kodovi\/"},"modified":"2026-11-04T08:49:10","modified_gmt":"2026-11-04T08:49:10","slug":"upozorenje-e-postom-se-sire-zlonamjerni-qr-kodovi","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/upozorenje-e-postom-se-sire-zlonamjerni-qr-kodovi\/","title":{"rendered":"[UPOZORENJE] E-po\u0161tom se \u0161ire zlonamjerni QR k\u00f4dovi"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Nacionalni CERT je zaprimio pove\u0107an broj prijava u kojima napada\u010di poku\u0161avaju ukrasti osobne podatke i podatke bankovnih kartica gra\u0111ana kori\u0161tenjem QR k\u00f4dova.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nova prijevara se odvija putem elektroni\u010dke po\u0161te u kojoj se napada\u010d la\u017eno predstavlja kao <strong>Porezna uprava<\/strong> te potencijalnu \u017ertvu obavje\u0161tava o odobrenom automatskom povratu poreza.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Novost u ovoj prijevari je ta da <strong>napada\u010di umjesto &nbsp;poveznice u mailu koriste QR k\u00f4d koji vodi do phishing stranice.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Skeniranjem QR k\u00f4da, \u017ertva dolazi na phishing stranicu. Kako bi sve izgledalo legitimno i sigurno <strong>za pristup stranici ponekad se tra\u017ei unos \u0161esteroznamenkastog PIN-a dobivenog u poruci.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nakon unosa PIN-a, prikazuje se forma za unos podataka bankovne kartice, kako bi se \"izvr\u0161ila uplata povrata poreza\u201c, a zapravo slu\u017ei za kra\u0111u osobnih podataka.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ako se susretnete s ovakvom porukom, savjetujemo da ju obri\u0161ete.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Primjer zlonamjerne poruke:<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a09d14972&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a09d14972\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/Untitled-1024x415.png\" alt=\"\" class=\"wp-image-110539\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>Primjer zlonamjerne poruke s QR k\u00f4dom.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Dodatni savjeti:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Ne skenirajte nepoznate i sumnjive QR k\u00f4dove<\/li><li>Svoje osobne podatke i podatke bankovnih kartica ne dijelite s drugima te ih upisujte samo na provjerenim stranicama<\/li><li>Ne \u0161aljite osobne podatke putem elektroni\u010dke po\u0161te<\/li><li>Ne \u0161aljite slike svojih dokumenata i bankovnih kartica<\/li><li>Ako mislite da ste nasjeli na ovu vrstu prevare, kontaktirajte svoju banku i dogovorite daljnje korake za za\u0161titu va\u0161eg ra\u010duna<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">#SurfajSigurnije<\/p>","protected":false},"excerpt":{"rendered":"<p>Nacionalni CERT je zaprimio pove\u0107an broj prijava u kojima napada\u010di poku\u0161avaju ukrasti osobne podatke i podatke bankovnih kartica gra\u0111ana kori\u0161tenjem QR k\u00f4dova. Nova prijevara se odvija putem elektroni\u010dke po\u0161te u kojoj se napada\u010d la\u017eno predstavlja kao Porezna uprava te potencijalnu \u017ertvu obavje\u0161tava o odobrenom automatskom povratu poreza. Novost u ovoj prijevari je ta da napada\u010di [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1288,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-819","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/819","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=819"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/819\/revisions"}],"predecessor-version":[{"id":1289,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/819\/revisions\/1289"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1288"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=819"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=819"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=819"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=819"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=819"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}