{"id":972,"date":"2025-04-23T10:03:02","date_gmt":"2025-04-23T10:03:02","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-sirenje-malvera-oponasanjem-obavijesti-sustava-edozvola\/"},"modified":"2026-11-04T08:37:43","modified_gmt":"2026-11-04T08:37:43","slug":"upozorenje-sirenje-malvera-oponasanjem-obavijesti-sustava-edozvola","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/upozorenje-sirenje-malvera-oponasanjem-obavijesti-sustava-edozvola\/","title":{"rendered":"Upozorenje: \u0161irenje malvera opona\u0161anjem obavijesti sustava eDozvola"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Nacionalni CERT zaprimio je prijave gra\u0111ana o phishing porukama u kojima napada\u010di opona\u0161aju obavijest sustava eDozvola.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Naslov maila: <\/strong>\"Elektroni\u010dka dostava iz sustava eDozvole\"&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Polje po\u0161iljatelja je la\u017eirano i izgleda kao da je poruka poslana sa slu\u017ebene adrese.<\/strong>&nbsp;<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ec213175&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ec213175\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2025\/04\/image-2.png\" alt=\"\" class=\"wp-image-112727\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>U privitku se nalazi &nbsp;malver<\/strong> <strong>za kra\u0111u lozinki iz va\u0161eg preglednika!<\/strong>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Datoteka ima nastavak <strong>.img.<\/strong>&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Datoteka s nastavkom .img&nbsp; ozna\u010dava datoteku slike diska, koja u pravilu slu\u017ei kao sigurnosna kopija podataka, ali ona mo\u017ee sadr\u017eavati i zlonamjerne datoteke.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>NE OTVARAJTE .img datoteke (i druge sumnjive privitke) koje niste o\u010dekivali i ako ne znate s njima rukovati!<\/strong>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Napada\u010di koriste ovu vrstu datoteke kako bi izbjegli detekciju, nastavak .img asocira na slikovnu datoteku (engl. <em>image<\/em>), a potrebno je samo par klikova kako bi do\u0161lo do kompromitacije.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sve obavijesti usluga dostupnih putem servisa e-Gra\u0111ani dostavljaju se u pretinac unutar servisa. <\/strong>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ako niste prepoznali ovu prijetnju i smatrate da je do\u0161lo do kompromitacije va\u0161eg ra\u010dunala, potrebno je:\u00a0<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Odspajanje ure\u0111aja s mre\u017ee\u202f&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>skeniranje ure\u0111aja antivirusnim alatom\u202f&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>ako je potrebno i mogu\u0107e, vratiti ure\u0111aj na stanje prije zaraze kori\u0161tenjem slike sustava (eng. backup).&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>izmijeniti sve lozinke koje su bile spremljene u preglednicima, a ako je potrebno i druge lozinke pohranjene na ra\u010dunalu.&nbsp;<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Dodatni\u202fsavjeti<\/strong>:\u202f&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Ne spremajte lozinke u internetske preglednike\u202f&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Koristite upravitelj lozinkama\u202f&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Omogu\u0107ite vi\u0161efaktorsku autentifikaciju (MFA)\u202f&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Koristite sna\u017ene lozinke\u202f&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>A\u017eurirajte sustave\u202f&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Koristite antivirusne programe\u00a0<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Nacionalni CERT uputio je prijave prema izvorima incidenta i nadle\u017enim CERT timovima.&nbsp;<\/p>","protected":false},"excerpt":{"rendered":"<p>Nacionalni CERT zaprimio je prijave gra\u0111ana o phishing porukama u kojima napada\u010di opona\u0161aju obavijest sustava eDozvola.\u00a0 Naslov maila: &#8220;Elektroni\u010dka dostava iz sustava eDozvole&#8221;&nbsp; Polje po\u0161iljatelja je la\u017eirano i izgleda kao da je poruka poslana sa slu\u017ebene adrese.&nbsp; U privitku se nalazi &nbsp;malver za kra\u0111u lozinki iz va\u0161eg preglednika!&nbsp; Datoteka ima nastavak .img.&nbsp;&nbsp; Datoteka s nastavkom [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1030,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-972","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=972"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/972\/revisions"}],"predecessor-version":[{"id":1048,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/972\/revisions\/1048"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1030"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=972"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=972"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=972"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=972"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}