{"id":961,"date":"2025-03-18T16:14:18","date_gmt":"2025-03-18T16:14:18","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-napadaci-koriste-lazne-captcha-zahtjeve-za-sirenje-malvera\/"},"modified":"2026-11-04T08:59:23","modified_gmt":"2026-11-04T08:59:23","slug":"upozorenje-napadaci-koriste-lazne-captcha-zahtjeve-za-sirenje-malvera","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/upozorenje-napadaci-koriste-lazne-captcha-zahtjeve-za-sirenje-malvera\/","title":{"rendered":"Upozorenje: napada\u010di koriste la\u017ene CAPTCHA verifikacije za \u0161irenje malvera"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Stru\u010dnjaci iz podru\u010dja kiberneti\u010dke sigurnosti uo\u010dili su globalnu kampanju u kojoj napada\u010di koriste<a href=\"https:\/\/thehackernews.com\/2025\/01\/beware-fake-captcha-campaign-spreads.html\" target=\"_blank\" rel=\"noreferrer noopener\"> la\u017enu CAPTCHA verifikaciju<\/a> kako bi pro\u0161irili Lumma Stealer - malver za kra\u0111u podataka.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Napad zapo\u010dinje tako da se \u017ertvu s pomo\u0107u phishinga dovede na zlonamjerno web sjedi\u0161te, a na sjedi\u0161tu se od njih tra\u017ei verifikacija da nisu robot (CAPTCHA). La\u017ena verifikacija se izvr\u0161ava pritiskom odre\u0111enih kombinacija tipki.<\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Tra\u017eena kombinacija:<\/strong><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ed8b5665&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ed8b5665\" class=\"aligncenter size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2025\/03\/image-6.png\" alt=\"\" class=\"wp-image-112639\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>Izvor: TheHackweNews<\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Pritiskom ovih kombinacija \u017ertva otvara polje za unos komandi u \u201eRun\u201c te pokre\u0107e zlonamjerni k\u00f4d (*) za preuzimanje i pokretanje Lumma Stealer malvera.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em><strong>* <\/strong>Po\u010detni vektor napada uklju\u010duje kori\u0161tenje maskiranog JavaScripta koji kopira PowerShell naredbu u me\u0111uspremnik.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Budu\u0107i da \u017ertva direktno upisuje naredbu u \u201eRun\u201c, a ne izvr\u0161ava ju putem preglednika, napad uspje\u0161no zaobilazi standardne sustave za\u0161tite koje preglednici pru\u017eaju.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Lumma Stealer se koristi za kra\u0111u osjetljivih podataka, uklju\u010duju\u0107i kola\u010di\u0107e, vjerodajnice i financijske podatke iz razli\u010ditih web preglednika. Tako\u0111er, mo\u017ee ciljati kripto nov\u010danike i druge osjetljive datoteke, \u0161to dovodi do potencijalnog financijskog gubitka za \u017ertve.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ova prijevara mo\u017ee se \u0161iriti putem oglasa, e-mailova, kompromitiranih web stranica i sl.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kako bi se za\u0161titili od ove prijevare:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Razmislite o legitimnosti zahtjeva koji vam je postavljen<\/li><li>Ne priti\u0161\u0107ite kombinacije tipki za koje niste sigurni \u0161to \u010dine<\/li><li>Koristite dvofaktorsku autentifikaciju<\/li><li>Koristite antivirusni program<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Ako ste postali \u017ertva ove prijevare, potrebno je o\u010distiti ra\u010dunalo i pobrinuti se kako bi svi faktori kompromitacije bili uklonjeni, potrebno je promijeniti lozinke (kori\u0161tenjem nekompromitiranog ra\u010dunala), ako ste unosili podatke bankovne kartice, kontaktirajte banku kako bi se poduzele sve potrebne radnje za za\u0161titu va\u0161eg ra\u010duna. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ako se susretnete s kiberneti\u010dkim incidentom, prijavite na Nacionalnom CERT-u.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">#SurfajSigurnije<\/p>","protected":false},"excerpt":{"rendered":"<p>Stru\u010dnjaci iz podru\u010dja kiberneti\u010dke sigurnosti uo\u010dili su globalnu kampanju u kojoj napada\u010di koriste la\u017enu CAPTCHA verifikaciju kako bi pro\u0161irili Lumma Stealer &#8211; malver za kra\u0111u podataka. Napad zapo\u010dinje tako da se \u017ertvu s pomo\u0107u phishinga dovede na zlonamjerno web sjedi\u0161te, a na sjedi\u0161tu se od njih tra\u017ei verifikacija da nisu robot (CAPTCHA). La\u017ena verifikacija se [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1540,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-961","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/961","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=961"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/961\/revisions"}],"predecessor-version":[{"id":1543,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/961\/revisions\/1543"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1540"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=961"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=961"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=961"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=961"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=961"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}