{"id":826,"date":"2023-02-28T09:31:26","date_gmt":"2023-02-28T09:31:26","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-e-gradani-sustav-se-koristi-za-novu-qr-phishing-kampanju\/"},"modified":"2026-11-04T08:50:08","modified_gmt":"2026-11-04T08:50:08","slug":"upozorenje-e-gradani-sustav-se-koristi-za-novu-qr-phishing-kampanju","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/upozorenje-e-gradani-sustav-se-koristi-za-novu-qr-phishing-kampanju\/","title":{"rendered":"[UPOZORENJE] e-Gra\u0111ani sustav se koristi za novu QR phishing kampanju!"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Nacionalni CERT je zaprimio prijave gra\u0111ana u kojima napada\u010di putem la\u017ene e-poruke u kojoj spominju nov\u010danu pomo\u0107 \u0161ire poveznice u obliku QR koda koje vode na stranicu koja imitira sustav e-Gra\u0111ani!<\/strong><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec122d3a&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec122d3a\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/e-gradani-phishing-plakat-724x1024.png\" alt=\"\" class=\"wp-image-110667\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><span class=\"has-inline-color has-vivid-red-color\">28.2.2023. UPOZORENJE!<\/span><\/strong> <strong>Phishing stranice se koriste za kra\u0111u bankovnih podataka. Podataka bankovne kartice i tokena mobilnog bankarstva.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><span class=\"has-inline-color has-vivid-red-color\">U slu\u010daju da ste unijeli podatke o kartici, savjetujemo da hitno blokirate karticu u banci, a ako ste unijeli i podatke o mobilnom bankarstvu, zatra\u017eite novi token\/korisni\u010dki broj u banci.<\/span><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><span class=\"has-inline-color has-vivid-red-color\">Dana 27.2.2023. detektirali smo promjenu u kampanji.<\/span><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Napada\u010di su se po\u010deli predstavljati kao: <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><span class=\"has-inline-color has-vivid-red-color\">Ministarstvo gospodarstva i odr\u017eivog razvoja<\/span><\/strong> i <span class=\"has-inline-color has-vivid-red-color\"><strong>Hrvatski zavod za zdravstveno osiguranje<\/strong><\/span>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">U kampanji koja imitira <strong>Ministarstvo gospodarstva i odr\u017eivog razvoja<\/strong> - obe\u0107aje se odobrenje zahtjeva za <strong>pomo\u0107 za energetsku potporu<\/strong> (pla\u0107anje ra\u010duna za struju, plin i druge energetske izvore) u iznosu od 211,42 eura.<\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><em>Subject: Slu\u017ebeno potvr\u0111ena prijava automatskog zahtjeva za nadoknadu tro\u0161kova zdravstvene za\u0161tite<\/em><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec123773&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec123773\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/financijska-pomoc-211.42-1.png\" alt=\"\" class=\"wp-image-110639\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>Primjer phishing poruke<\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">U kampanji koja imitira <strong>Hrvatski zavod za zdravstveno osiguranje<\/strong> - obe\u0107aje se <strong>povrat tro\u0161kova za zdravstvenu za\u0161titu<\/strong> u iznosu od 116,19 eura.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec123e11&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec123e11\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/troskovi-zdravstvene-zastite-116-1024x414.png\" alt=\"\" class=\"wp-image-110640\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>Primjer phishing poruke<\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Nove adrese maliciozne e-po\u0161te i malicioznih web stranica<\/strong><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec12448c&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec12448c\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/maliciozne-e-poste-i-web-str-5.png\" alt=\"\" class=\"wp-image-110659\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><span class=\"has-inline-color has-vivid-red-color\"><strong>Dana 20.2.2023. detektirali smo nove adrese e-po\u0161te koje se koriste za ovu vrstu phishinga!<\/strong><\/span><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec124a93&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec124a93\" class=\"aligncenter size-large is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/MicrosoftTeams-image-3.png\" alt=\"\" class=\"wp-image-110614\" width=\"262\" height=\"40\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec124fec&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec124fec\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/MicrosoftTeams-image-2.png\" alt=\"\" class=\"wp-image-110613\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec12555c&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec12555c\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/MicrosoftTeams-image.png\" alt=\"\" class=\"wp-image-110609\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><span class=\"has-inline-color has-vivid-red-color\">17.2.2023.<\/span><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Naslov poruke glasi: <strong>Potvrda o prihva\u0107anju automatskog zahtjeva za pomo\u0107 u stanovanju<\/strong>. Kao po\u0161iljatelj e-poruke navodi se \u201e<strong>e-Gra\u0111ani<\/strong> &lt;info@egradani[.]com&gt;\u201c, a u potpisu je <strong>Ministarstvo rada, mirovinskog sustava, obitelji i socijalne politike.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Obavijest o financijskoj pomo\u0107i za stanovanje<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">U tekstu poruke se navodi kako je Republika Hrvatska primatelju odredila financijsku pomo\u0107 za stanovanje u iznosu od 250,89\u20ac i da se sustavu e-Gra\u0111ani zbog sigurnosti mo\u017ee pristupiti samo putem QR k\u00f4da i pristupne lozinke koja je va\u017ee\u0107a samo 48 sati.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec125cff&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec125cff\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/02\/e-gradani-priejvara.png\" alt=\"\" class=\"wp-image-110593\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>Primjer phishing poruke<\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Vidimo da se napada\u010di opet slu\u017ee QR kodom umjesto poveznice, imitiraju legitimne institucije i servise, nude nov\u010danu pomo\u0107 te stvaraju privid hitnosti kako bi vas natjerali na brzu reakciju.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Skeniranjem QR koda \u017ertvu se usmjerava na web stranicu koja uvjerljivo opona\u0161a izgled sustava e-Gra\u0111ani, a odabirom prijave putem tokena banke otvara se prozor za unos podataka.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>La\u017ene stranice i forme za prijavu poput ovih koriste se za kra\u0111u bankovnih podataka, \u0161to mo\u017ee dovesti do gubitka nov\u010danih sredstava.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>INDIKATORI OVE PRIJEVARE: <\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong><span class=\"has-inline-color has-vivid-red-color\">PO\u0160ILJATELJ<\/span><\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">E-po\u0161ta dolazi s adresa:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"> info@egradani[.]com <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">info@e-gradani-hr[.]com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">info@e-gradani-gov[.]info<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">info@e-gradani-gov[.]org<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">info@hzzo-portalu[.]com <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">info@e-gradani-nias[.]net<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">info@hzzoportalu[.]com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">info@hzzoportals[.]net<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">info@portal-hzzo[.]com<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><span class=\"has-inline-color has-vivid-red-color\"><strong>To nisu slu\u017ebene adrese sustava e-gra\u0111ani!<\/strong><\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Provjerite s koje adrese po\u0161ta dolazi i usporedite tu adresu sa slu\u017ebenim adresama navedenim na stranicama servisa.<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong><span class=\"has-inline-color has-vivid-red-color\">NUDE VAM NOVAC<\/span><\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Ako ste zaprimili neo\u010dekivanu poruku u kojoj vam nude financijsku pomo\u0107, budite na oprezu! <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Napada\u010di koriste lo\u0161e financijske situacije i ljudsku pohlepu kako bi prevarili gra\u0111ane.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong><span class=\"has-inline-color has-vivid-red-color\">KORISTE QR K\u00d4D KAO POVEZNICU<\/span><\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Ako vas u e-po\u0161ti tjeraju da skenirate QR k\u00f4d radi ve\u0107e \u201esigurnosti\u201c nemojte to napraviti! Kori\u0161tenjem QR k\u00f4da napada\u010di lak\u0161e skrivaju stvarnu adresu stranice na koju vas vode i tjeraju vas na pristup stranici putem mobitela na kojem je te\u017ee prepoznati prijevaru zbog manjeg ekrana.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>VODE VAS NA LA\u017dNU STRANICU NA KOJOJ<span class=\"has-inline-color has-vivid-red-color\"> MORATE OSTAVITI SVOJE OSOBNE PODATKE<\/span><\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Kori\u0161tenjem poveznice ili QR k\u00f4da vode vas na stranicu koja izgledom opona\u0161a stranicu legitimnog servisa. Provjerite URL stranice na kojoj se nalazite i usporedite ga sa slu\u017ebenom stranicom. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nagla\u0161avamo da je ispravna adresa stranice sustava e-gra\u0111ani : <strong>https:\/\/gov.hr\/<\/strong>  <\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>TJERAJU VAS NA<\/strong><span class=\"has-inline-color has-vivid-red-color\"><strong> BRZU REAKCIJU<\/strong> <strong>I UNOS OSOBNIH PODATAKA<\/strong><\/span><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201eLozinka za pristup vrijedi jo\u0161 48 sati\u201c.<\/em> Stvaranjem osje\u0107aja hitnosti napada\u010di vas tjeraju na brzu reakciju i \u017eele da djelujete nepromi\u0161ljeno i bez kriti\u010dkog razmi\u0161ljanja predate svoje osobne podatke!<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong><span class=\"has-inline-color has-vivid-red-color\">OPONA\u0160AJU IZGLED LEGITIMNOG SERVISA<\/span><\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Skeniranjem QR k\u00f4da dolazite na la\u017enu stranicu koja opona\u0161a izgled e-Gra\u0111ani sustava i pristupne forme u obliku prijave tokenima internetskog bankarstva.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Savjetujemo da poruku obri\u0161ete i da na nju ne odgovarate!<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ostale poveznice na kojima se gra\u0111ane upozorava na ovu prijevaru:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/gov.hr\/\">https:\/\/gov.hr\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/mrosp.gov.hr\/vijesti\/upozorenje-gradjanima-lazna-poruka-o-ostvarivanju-prava-na-pomoc-u-stanovanju\/13016\">https:\/\/mrosp.gov.hr\/vijesti\/upozorenje-gradjanima-lazna-poruka-o-ostvarivanju-prava-na-pomoc-u-stanovanju\/13016<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/hzzo.hr\/novosti\/hzzo\/obavijest-osiguranicima-hzzo-ne-nasjedajte-na-lazne-mailove\">https:\/\/hzzo.hr\/novosti\/hzzo\/obavijest-osiguranicima-hzzo-ne-nasjedajte-na-lazne-mailove<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>OGLASILI SU SE POLICIJA I MINISTARSTVO:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201ePrimatelje navedene poruke upozorili smo da se radi o la\u017enoj poruci i da ju ne otvaraju niti da koriste poveznice unutar poruke.\u201c<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\"Pravo koje se u poruci navodi ne postoji u hrvatskom sustavu socijalne skrbi i radi se o prijevari. <strong>Savjetujemo da poruku obri\u0161ete i da na nju ne odgovarate.<\/strong>\"<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Nacionalni CERT je zaprimio prijave gra\u0111ana u kojima napada\u010di putem la\u017ene e-poruke u kojoj spominju nov\u010danu pomo\u0107 \u0161ire poveznice u obliku QR koda koje vode na stranicu koja imitira sustav e-Gra\u0111ani! 28.2.2023. UPOZORENJE! Phishing stranice se koriste za kra\u0111u bankovnih podataka. Podataka bankovne kartice i tokena mobilnog bankarstva. U slu\u010daju da ste unijeli podatke o [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1306,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-826","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/826","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=826"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/826\/revisions"}],"predecessor-version":[{"id":1308,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/826\/revisions\/1308"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1306"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=826"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=826"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=826"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=826"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=826"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}