{"id":863,"date":"2023-08-24T10:37:00","date_gmt":"2023-08-24T10:37:00","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/kompromitirani-su-podaci-2-6-milijuna-korisnika-duolingo-aplikacije\/"},"modified":"2026-11-04T08:52:54","modified_gmt":"2026-11-04T08:52:54","slug":"kompromitirani-su-podaci-2-6-milijuna-korisnika-duolingo-aplikacije","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/kompromitirani-su-podaci-2-6-milijuna-korisnika-duolingo-aplikacije\/","title":{"rendered":"Kompromitirani su podaci 2.6 milijuna korisnika Duolingo aplikacije"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Duolingo, aplikacija s vi\u0161e od 74 milijuna aktivnih mjese\u010dnih korisnika, jedna je od najpopularnijih aplikacija za u\u010denje stranih jezika.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/scraped-data-of-26-million-duolingo-users-released-on-hacking-forum\/\" target=\"_blank\" rel=\"noreferrer noopener\">Bleepingcomputer<\/a> pi\u0161e kako su podaci 2.6 milijuna korisnika ove aplikacije ponu\u0111eni na podaju putem hakerskog foruma. Me\u0111u podacima se nalaze javno dostupne informacije kao \u0161to su korisni\u010dka imena, ali i skrivene informacije poput email adresa i dr.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Zbog ranjivosti aplikacije, napada\u010di su mogli provjeravati jesu li pojedine email adrese povezane s korisnicima Duolinga, a za provjeru su mogli koristiti popise email adresa koje su bile dio prija\u0161njih kompromitacija. Pomo\u0107u provjere email adresa, napada\u010di su sastavili bazu podataka koja sadr\u017ei javne i skrivene podatke korisnika Duolingo aplikacije.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a08bdd65f&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a08bdd65f\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/08\/sale-1-1024x353.png\" alt=\"\" class=\"wp-image-111142\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>Prodaja podataka Duolingo korisnika | Izvor: BleepingComputer<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Problem ovakve kompromitacije je \u0161to mo\u017ee biti osnova za naprednu phishing kampanju.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ako ste korisnik Duolingo aplikacije, budite na oprezu prilikom otvaranja mailova koji se odnose na ovu aplikaciju. <\/strong>Napada\u010di mogu iskoristiti prikupljene podatke kako bi kreirali uvjerljivu phishing poruku i prevarili Vas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Obratite pa\u017enju na poruke koje Vas tra\u017ee:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Otvaranje sumnjive poveznice<\/strong><\/li><li><strong>Unos osobnih podataka<\/strong><\/li><li><strong>Hitnu promjenu lozinke<\/strong><\/li><li><strong>Uplatu nov\u010danih sredstava<\/strong><\/li><li><strong>Preuzimanje sumnjivih privitaka<\/strong><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Prou\u010dite na\u0161u infografiku: <a href=\"\/wp-content\/uploads\/2023\/07\/Prepoznaj-phishing-na-vrijeme.png\" target=\"_blank\" rel=\"noreferrer noopener\">Prepoznaj phishing<\/a><\/strong><\/p>","protected":false},"excerpt":{"rendered":"<p>Duolingo, aplikacija s vi\u0161e od 74 milijuna aktivnih mjese\u010dnih korisnika, jedna je od najpopularnijih aplikacija za u\u010denje stranih jezika. Bleepingcomputer pi\u0161e kako su podaci 2.6 milijuna korisnika ove aplikacije ponu\u0111eni na podaju putem hakerskog foruma. Me\u0111u podacima se nalaze javno dostupne informacije kao \u0161to su korisni\u010dka imena, ali i skrivene informacije poput email adresa i [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1362,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-863","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/863","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=863"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/863\/revisions"}],"predecessor-version":[{"id":1365,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/863\/revisions\/1365"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1362"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=863"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=863"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=863"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=863"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=863"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}