{"id":877,"date":"2023-12-07T15:33:53","date_gmt":"2023-12-07T15:33:53","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/spyloan-android-malware-je-preuzelo-vise-od-12-milijuna-korisnika\/"},"modified":"2026-11-04T08:54:00","modified_gmt":"2026-11-04T08:54:00","slug":"spyloan-android-malware-je-preuzelo-vise-od-12-milijuna-korisnika","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/novosti\/spyloan-android-malware-je-preuzelo-vise-od-12-milijuna-korisnika\/","title":{"rendered":"SpyLoan Android malware je preuzelo vi\u0161e od 12 milijuna korisnika"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Vi\u0161e od 12 milijuna korisnika preuzelo je putem Google trgovine aplikacije koje u sebi sadr\u017ee zlonamjerni k\u00f4d, a ta brojka je sigurno i ve\u0107a jer su preuzimane i putem tre\u0107ih strana te sumnjivih stranica.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>SpyLoan Android malware slu\u017ei za kra\u0111u osobnih podataka<\/strong> kao \u0161to su korisni\u010dki ra\u010duni, podaci o ure\u0111aju, ispis poziva, instalirane aplikacije, doga\u0111aji iz kalendara, podaci o wi-fi mre\u017ei te metapodaci slika, a u opasnosti je i popis va\u0161ih kontakata, lokacija te poruke.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Aplikacije zara\u017eene ovim malverom predstavljaju se kao financijske aplikacije za brzo i lako ostvarivanje zajmova. Napada\u010di djeluju tako da nagovore \u017ertve na pozajmice s velikim kamatama, a zatim ih ucjenjuju kako bi od njih ostvarili financijsku korist.<\/strong><\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a07441aff&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a07441aff\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/12\/image.png\" alt=\"\" class=\"wp-image-111408\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>bleepingcomputer.com<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/spyloan-android-malware-on-google-play-downloaded-12-million-times\/\">BleepingComputer<\/a> navodi kako je od po\u010detka godine otkriveno 18 takvih aplikacija.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ovakve aplikacije prilikom objave na Google trgovini su u skladu sa svim uvjetima i pravilima privatnosti koje Google od njih tra\u017ei, a zatim unutar aplikacije preusmjeravaju \u017ertvu na zlonamjerne stranice koje imitiraju legitimne financijske institucije.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Aplikacije od korisnika tra\u017ee sumnjiva dopu\u0161tenja koja nisu neophodna za njihov rad. Tako npr. tra\u017ee pristup kameri, popisu poziva, listi kontakata i sl.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kako bi se za\u0161titili od ove prijevare, budite oprezni i zajmove ugovarajte samo s provjerenim i registriranim financijskim institucijama, \u010ditajte recenzije korisnika i dobro prou\u010dite zahtjeve za dopu\u0161tenja koje vas aplikacija tra\u017ei.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">#SurfajSigurnije<\/p>","protected":false},"excerpt":{"rendered":"<p>Vi\u0161e od 12 milijuna korisnika preuzelo je putem Google trgovine aplikacije koje u sebi sadr\u017ee zlonamjerni k\u00f4d, a ta brojka je sigurno i ve\u0107a jer su preuzimane i putem tre\u0107ih strana te sumnjivih stranica. SpyLoan Android malware slu\u017ei za kra\u0111u osobnih podataka kao \u0161to su korisni\u010dki ra\u010duni, podaci o ure\u0111aju, ispis poziva, instalirane aplikacije, doga\u0111aji [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1398,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[12],"tags":[],"tema":[],"class_list":["post-877","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/877","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=877"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/877\/revisions"}],"predecessor-version":[{"id":1399,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/877\/revisions\/1399"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1398"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=877"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=877"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=877"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=877"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=877"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}