{"id":828,"date":"2023-03-10T10:39:48","date_gmt":"2023-03-10T10:39:48","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/zlonamjerna-chatgpt-ekstenzija-sluzi-za-kradu-facebook-profila\/"},"modified":"2026-11-04T08:50:16","modified_gmt":"2026-11-04T08:50:16","slug":"zlonamjerna-chatgpt-ekstenzija-sluzi-za-kradu-facebook-profila","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/zlonamjerna-chatgpt-ekstenzija-sluzi-za-kradu-facebook-profila\/","title":{"rendered":"Zlonamjerna ChatGPT ekstenzija slu\u017ei za kra\u0111u Facebook profila"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>La\u017ena <a href=\"https:\/\/cert.hr\/en\/revolicioniranje-komunikacije-moc-chat-gpt-a-u-digitalnom-dobu\/\" target=\"_blank\" rel=\"noreferrer noopener\">ChatGPT<\/a> Google Chrome ekstenzija krade pristupne podatke i putem Facebooka pokre\u0107e skupe kampanje ogla\u0161avanja (<a href=\"https:\/\/cybernews.com\/news\/fake-chatgpt-chrome-extension-pilfers-facebook-accounts\/\" target=\"_blank\" rel=\"noreferrer noopener\">cybernews.com<\/a>).<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ekstenzija \"<strong>Quick access to Chat GPT<\/strong>\" pru\u017ea korisnicima jednostavan pristupu ChatGPT-u direktno iz preglednika. Nakon instalacije ekstenzije u pregledniku se pojavi sko\u010dni prozor koji komunicira direktno s ChatGPT botom. I tu zapravo nastaje problem. Nakon instalacije, ekstenzija postaje sastavni dio va\u0161eg preglednika i mo\u017ee slati zahtjeve bilo kojoj usluzi u va\u0161e ime.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a09490529&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a09490529\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/03\/Guardio-ChatGPT-Chrome.png\" alt=\"\" class=\"wp-image-110715\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>Izvor: Guardio<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Istra\u017eiva\u010di tvrtke <a href=\"https:\/\/labs.guard.io\/fakegpt-new-variant-of-fake-chatgpt-chrome-extension-stealing-facebook-ad-accounts-with-4c9996a8f282\" target=\"_blank\" rel=\"noreferrer noopener\">Guardio <\/a>otkrili su da \"Quick access to Chat GPT\" krade pristupne podatke svojih korisnika.<\/strong> Osim pristupnih podataka, ekstenzija krade sve kola\u010di\u0107e, sigurnosne tokene i tokene sesija za usluge kao \u0161to su YouTube, Twitter i Google ra\u010duni.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ukradene tokene autoriziranih aktivnih sesija, napada\u010di bi iskoristili za preuzimanje kontrole nad Facebook profilima. Ciljali bi korisni\u010dke ra\u010dune visoke vrijednosti, a zatim bi iskoristili sredstva ukradenog ra\u010duna za svoje ogla\u0161avanje.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Osim Facebooka, kontrolu mogu preuzeti i nad povezanim WhatsApp i Instagram ra\u010dunima.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ekstenzija se prvi put pojavila 3. o\u017eujka i preuzeta je vi\u0161e od 2000 puta. Google ju je u me\u0111uvremenu uklonio iz Chrome trgovine.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ponavljamo savjete koje smo i dosad pisali:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Aplikacije preuzimajte samo iz provjerenih izvora.<\/strong> \u0160anse za preuzimanje zlonamjernog sadr\u017eaja iz slu\u017ebenih, provjerenih izvora zna\u010dajno su manje nego prilikom preuzimanja sadr\u017eaja iz neprovjerenih izvora. Iako se ovdje radi o aplikaciji preuzetoj iz Google trgovine, vidimo da je opasnost brzo otkrivena i uklonjena. <strong>Budite oprezni ako je aplikacija nedavno objavljena i preuzeo ju je tek mali broj korisnika<\/strong>.<\/li><li><strong>\u010citajte recenzije i komentare drugih korisnika.<\/strong><\/li><li><strong>Provjerite informacije na drugim mjestima \u2013 \u201eguglajte\u201c.<\/strong><\/li><li><strong>Budite oprezni i imajte na umu da napada\u010di koriste aktualne teme za nove napade.<\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>#SurfajSigurnije<\/strong><\/p>","protected":false},"excerpt":{"rendered":"<p>La\u017ena ChatGPT Google Chrome ekstenzija krade pristupne podatke i putem Facebooka pokre\u0107e skupe kampanje ogla\u0161avanja (cybernews.com). Ekstenzija &#8220;Quick access to Chat GPT&#8221; pru\u017ea korisnicima jednostavan pristupu ChatGPT-u direktno iz preglednika. Nakon instalacije ekstenzije u pregledniku se pojavi sko\u010dni prozor koji komunicira direktno s ChatGPT botom. I tu zapravo nastaje problem. Nakon instalacije, ekstenzija postaje sastavni [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1311,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-828","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/828","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=828"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/828\/revisions"}],"predecessor-version":[{"id":1315,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/828\/revisions\/1315"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1311"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=828"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=828"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=828"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=828"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=828"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}