{"id":960,"date":"2025-03-06T15:02:39","date_gmt":"2025-03-06T15:02:39","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-napadaci-se-predstavljaju-kao-zaposlenici-sveucilista\/"},"modified":"2026-11-04T08:59:21","modified_gmt":"2026-11-04T08:59:21","slug":"upozorenje-napadaci-se-predstavljaju-kao-zaposlenici-sveucilista","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/upozorenje-napadaci-se-predstavljaju-kao-zaposlenici-sveucilista\/","title":{"rendered":"Upozorenje: napada\u010di se predstavljaju kao zaposlenici sveu\u010dili\u0161ta"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Nacionalni CERT je zaprimio nekoliko prijava u kojima se napada\u010di predstavljaju kao zaposlenici sveu\u010dili\u0161ta i kontaktiraju tvrtke s naizgled legitimnim zahtjevima.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">U zaprimljenim prijavama uo\u010deno je da napada\u010di koriste stvarna imena zaposlenika sveu\u010dili\u0161ta te poku\u0161avaju <strong>ostvariti komunikaciju s tvrtkama <\/strong>tra\u017ee\u0107i <strong>ponudu<\/strong> za kupnju odre\u0111enih artikala ili ih uvjeriti na <strong>preuzimanje zlonamjerne datoteke<\/strong> <strong>iz privitka<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Upozoravamo gra\u0111ane da kriti\u010dki promi\u0161ljaju i provjere indikatore za <a href=\"\/wp-content\/uploads\/2023\/07\/Prepoznaj-phishing-na-vrijeme.png\" target=\"_blank\" rel=\"noreferrer noopener\">prepoznavanje phishinga<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Obratite pa\u017enju na: <strong>adresu po\u0161iljatelja, gramatiku, legitimnost zahtjeva, navode li kratak rok za djelovanje i druge.. <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em><strong>Ako se netko predstavlja u ime sveu\u010dili\u0161ta, a poruka nije poslana sa slu\u017ebene mail adrese budite na oprezu! Ali, \u010dak i ako je poruka poslana sa slu\u017ebene mail adrese, a zahtjev vam se \u010dini sumnjiv, provjerite legitimnost upita drugim kanalima komunikacije (slu\u017ebene mail adrese mogu biti kompromitirane i kori\u0161tene za prijevaru).<\/strong><\/em><\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19e9b1b09c&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19e9b1b09c\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/07\/Prepoznaj-phishing-e-mail-1024x576.png\" alt=\"\" class=\"wp-image-111059\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">U nastavku mo\u017eete vidjeti primjere phishing mailova.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19e9b1b679&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19e9b1b679\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2025\/03\/phishing-sveucilista-1-2.png\" alt=\"\" class=\"wp-image-112608\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19e9b1bb1a&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19e9b1bb1a\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2025\/03\/Phishing-sveucilista-1024x500.png\" alt=\"\" class=\"wp-image-112601\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"<p>Nacionalni CERT je zaprimio nekoliko prijava u kojima se napada\u010di predstavljaju kao zaposlenici sveu\u010dili\u0161ta i kontaktiraju tvrtke s naizgled legitimnim zahtjevima. U zaprimljenim prijavama uo\u010deno je da napada\u010di koriste stvarna imena zaposlenika sveu\u010dili\u0161ta te poku\u0161avaju ostvariti komunikaciju s tvrtkama tra\u017ee\u0107i ponudu za kupnju odre\u0111enih artikala ili ih uvjeriti na preuzimanje zlonamjerne datoteke iz privitka. Upozoravamo [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1534,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-960","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=960"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/960\/revisions"}],"predecessor-version":[{"id":1539,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/960\/revisions\/1539"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1534"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=960"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=960"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}