{"id":95620,"date":"2020-10-01T07:45:10","date_gmt":"2020-10-01T05:45:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom"},"modified":"2020-10-01T07:45:10","modified_gmt":"2020-10-01T05:45:10","slug":"1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom","title":{"rendered":"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/75034c513ef3ce93bc27afe604afdba1.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Dnes s\u00ed\u0165ov\u00fd administr\u00e1tor nebo in\u017een\u00fdr IT bezpe\u010dnosti tr\u00e1v\u00ed obrovsk\u00e9 mno\u017estv\u00ed \u010dasu a \u00fasil\u00ed, aby ochr\u00e1nil perimetr s\u00edt\u011b podniku p\u0159ed r\u016fzn\u00fdmi hrozbami, osvoj\u00ed si st\u00e1le nov\u00e9 syst\u00e9my prevence a monitorov\u00e1n\u00ed ud\u00e1lost\u00ed, ale ani to mu nezaru\u010duje \u00faplnou ochranu. Soci\u00e1ln\u00ed in\u017een\u00fdrstv\u00ed je aktivn\u011b pou\u017e\u00edv\u00e1no \u00fato\u010dn\u00edky a m\u016f\u017ee m\u00edt v\u00e1\u017en\u00e9 n\u00e1sledky.<\/p>\n<p>Jak \u010dasto jste se p\u0159istihli p\u0159i my\u0161lence: \u201eBylo by dobr\u00e9 prov\u00e9st pro zam\u011bstnance test na znalosti v oblasti IT bezpe\u010dnosti?\u201c Bohu\u017eel, my\u0161lenky nar\u00e1\u017e\u00ed na ze\u010f nepochopen\u00ed v podob\u011b velk\u00e9ho po\u010dtu \u00fakol\u016f nebo omezen\u00e9ho \u010dasu pracovn\u00ed doby. Pl\u00e1nujeme v\u00e1m p\u0159edstavit modern\u00ed produkty a technologie v oblasti automatizace \u0161kolen\u00ed zam\u011bstnanc\u016f, kter\u00e9 nebudou vy\u017eadovat dlouhou p\u0159\u00edpravu pro prov\u00e1d\u011bn\u00ed pilotn\u00edch projekt\u016f nebo zav\u00e1d\u011bn\u00ed, ale o v\u0161em popo\u0159ad\u011b.<\/p>\n<h2>Teoretick\u00fd z\u00e1klad<\/h2>\n<p>V sou\u010dasnosti je v\u00edce ne\u017e 80 % \u0161kodliv\u00fdch soubor\u016f \u0161\u00ed\u0159eno prost\u0159ednictv\u00edm e-mailu (data z\u00edsk\u00e1na z zpr\u00e1v specialist\u016f Check Point za posledn\u00ed rok pomoc\u00ed slu\u017eby Intelligence Reports).<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/db65c5e2a78dc046e46a006af473516a.JPG\" style=\"display:block;margin: 0 auto;\" \/>Zpr\u00e1va za posledn\u00edch 30 dn\u00ed o vektorech \u00fatok\u016f zam\u011b\u0159en\u00fdch na \u0161\u00ed\u0159en\u00ed \u0161kodliv\u00fdch soubor\u016f (Rusko) \u2014 Check Point<\/p>\n<p>To nazna\u010duje, \u017ee obsah v e-mailov\u00fdch zpr\u00e1v\u00e1ch je dostate\u010dn\u011b zraniteln\u00fd pro zneu\u017eit\u00ed \u00fato\u010dn\u00edky. Pokud se pod\u00edv\u00e1me na nejpopul\u00e1rn\u011bj\u0161\u00ed form\u00e1ty \u0161kodliv\u00fdch soubor\u016f v p\u0159\u00edloh\u00e1ch (EXE, RTF, DOC), je t\u0159eba poznamenat, \u017ee obvykle obsahuj\u00ed automatick\u00e9 prvky prov\u00e1d\u011bn\u00ed k\u00f3du (skripty, makra).<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/a6d1d2d8f374250104e156381b002ea1.JPG\" style=\"display:block;margin: 0 auto;\" \/>Ro\u010dn\u00ed zpr\u00e1va o form\u00e1tech soubor\u016f v obdr\u017een\u00fdch \u0161kodliv\u00fdch zpr\u00e1v\u00e1ch \u2014 Check Point<\/p>\n<p>Jak bojovat proti tomuto vektoru \u00fatok\u016f? Kontrola e-mailu spo\u010d\u00edv\u00e1 v pou\u017e\u00edv\u00e1n\u00ed bezpe\u010dnostn\u00edch n\u00e1stroj\u016f:&nbsp;<\/p>\n<ul>\n<li>\n<p><strong>Antivirus<\/strong> \u2014 signaturn\u00ed detekce hrozeb.<\/p>\n<\/li>\n<li>\n<p><strong>Emulace<\/strong> \u2014 sandbox, pomoc\u00ed n\u011bho\u017e jsou p\u0159\u00edlohy otev\u00edr\u00e1ny v izolovan\u00e9m prost\u0159ed\u00ed.<\/p>\n<\/li>\n<li>\n<p><strong>Pov\u011bdom\u00ed o obsahu <\/strong>\u2014 extrakce aktivn\u00edch prvk\u016f z dokument\u016f. U\u017eivatel obdr\u017e\u00ed o\u010di\u0161t\u011bn\u00fd dokument (obvykle ve form\u00e1tu PDF).<\/p>\n<\/li>\n<li>\n<p><strong>AntiSpam<\/strong> \u2014 kontrola dom\u00e9ny p\u0159\u00edjemce\/odes\u00edlatele z hlediska reputace.<\/p>\n<\/li>\n<\/ul>\n<p>A, ide\u00e1ln\u011b, to by m\u011blo sta\u010dit, ale existuje je\u0161t\u011b jeden nem\u00e9n\u011b cenn\u00fd zdroj pro spole\u010dnost \u2014 firemn\u00ed a osobn\u00ed \u00fadaje zam\u011bstnanc\u016f. V posledn\u00edch letech roste popularita n\u00e1sleduj\u00edc\u00edho typu internetov\u00e9ho podvodu:<\/p>\n<p><strong><u>Phishing<\/u><\/strong> (angl. phishing, od fishing \u2014 rybolov, vyloven\u00ed) \u2014 druh internetov\u00e9ho podvodu. Jeho c\u00edlem je z\u00edskat identifika\u010dn\u00ed \u00fadaje u\u017eivatel\u016f. Sem pat\u0159\u00ed kr\u00e1de\u017e hesel, \u010d\u00edsel kreditn\u00edch karet, bankovn\u00edch \u00fa\u010dt\u016f a dal\u0161\u00edch d\u016fv\u011brn\u00fdch informac\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/64ed74d70fe7a573c5e14cc03ebef33a.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Zlo\u010dinci zdokonaluj\u00ed zp\u016fsoby phishingov\u00fdch \u00fatok\u016f, p\u0159esm\u011brov\u00e1vaj\u00ed DNS dotazy z popul\u00e1rn\u00edch str\u00e1nek, realizuj\u00ed cel\u00e9 kampan\u011b s vyu\u017eit\u00edm soci\u00e1ln\u00edho in\u017een\u00fdrstv\u00ed pro rozes\u00edl\u00e1n\u00ed e-mail\u016f.&nbsp;<\/p>\n<p>K ochran\u011b va\u0161\u00ed firemn\u00ed po\u0161ty p\u0159ed phishingem jsou doporu\u010deny dva p\u0159\u00edstupy, p\u0159i\u010dem\u017e jejich spole\u010dn\u00e9 pou\u017eit\u00ed p\u0159in\u00e1\u0161\u00ed nejlep\u0161\u00ed v\u00fdsledky:<\/p>\n<ol>\n<li>\n<p><strong>Technick\u00e9 n\u00e1stroje ochrany<\/strong>. Jak ji\u017e bylo zm\u00edn\u011bno, pou\u017e\u00edvaj\u00ed se r\u016fzn\u00e9 technologie k prov\u011b\u0159ov\u00e1n\u00ed a p\u0159epos\u00edl\u00e1n\u00ed pouze legitimn\u00ed po\u0161ty.<\/p>\n<\/li>\n<li>\n<p><strong>Teoretick\u00e1 p\u0159\u00edprava zam\u011bstnanc\u016f<\/strong>. Spo\u010d\u00edv\u00e1 v komplexn\u00edm testov\u00e1n\u00ed zam\u011bstnanc\u016f za \u00fa\u010delem identifikace potenci\u00e1ln\u00edch ob\u011bt\u00ed. Pot\u00e9 prob\u00edh\u00e1 jejich p\u0159e\u0161kolen\u00ed, p\u0159i\u010dem\u017e se neust\u00e1le zaznamen\u00e1v\u00e1 statistika.&nbsp;&nbsp;&nbsp;<\/p>\n<\/li>\n<\/ol>\n<h2>Ned\u016fv\u011b\u0159uj a prov\u011b\u0159uj<\/h2>\n<p>Dnes se zam\u011b\u0159\u00edme na druh\u00fd p\u0159\u00edstup k prevenci phishingov\u00fdch \u00fatok\u016f, a to automatizovan\u00e9mu \u0161kolen\u00ed zam\u011bstnanc\u016f s c\u00edlem zv\u00fd\u0161it celkovou \u00farove\u0148 zabezpe\u010den\u00ed firemn\u00edch a osobn\u00edch dat. Pro\u010d m\u016f\u017ee b\u00fdt to tak nebezpe\u010dn\u00e9?<\/p>\n<p><strong><u>Soci\u00e1ln\u00ed in\u017een\u00fdrstv\u00ed <\/u><\/strong>\u2014 psychologick\u00e9 manipulov\u00e1n\u00ed lidmi s c\u00edlem vykon\u00e1n\u00ed ur\u010dit\u00fdch akc\u00ed nebo prozrazen\u00ed d\u016fv\u011brn\u00fdch informac\u00ed (v oblasti informa\u010dn\u00ed bezpe\u010dnosti).<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/97f19afc49a5101d20cebabe040073a1.JPG\" style=\"display:block;margin: 0 auto;\" \/>Sch\u00e9ma typick\u00e9ho sc\u00e9n\u00e1\u0159e nasazen\u00ed phishingov\u00e9ho \u00fatoku<\/p>\n<p>Pod\u00edvejme se na zaj\u00edmavou blokovou diagramu, kter\u00e1 stru\u010dn\u011b zobrazuje cestu pro prov\u00e1d\u011bn\u00ed phishingov\u00e9 kampan\u011b. Obsahuje r\u016fzn\u00e9 f\u00e1ze:<\/p>\n<ol>\n<li>\n<p>Shroma\u017e\u010fov\u00e1n\u00ed prim\u00e1rn\u00edch dat.<\/p>\n<p>Ve 21. stolet\u00ed je t\u011b\u017ek\u00e9 naj\u00edt \u010dlov\u011bka, kter\u00fd nen\u00ed registrov\u00e1n v \u017e\u00e1dn\u00e9 soci\u00e1ln\u00ed s\u00edti nebo na r\u016fzn\u00fdch tematick\u00fdch f\u00f3rech. P\u0159irozen\u011b, mnoz\u00ed z n\u00e1s zanech\u00e1vaj\u00ed podrobn\u00e9 informace o sob\u011b: m\u00edsto sou\u010dasn\u00e9ho zam\u011bstn\u00e1n\u00ed, skupina pro kolegy, telefon, e-mail atd. P\u0159idejte k tomu personalizovan\u00e9 informace o z\u00e1jmech osoby a dostanete \u00fadaje pro vytvo\u0159en\u00ed phishingov\u00e9 \u0161ablony. I kdy\u017e se nepoda\u0159ilo naj\u00edt lidi s takov\u00fdmi informacemi, v\u017edy existuje webov\u00e1 str\u00e1nka spole\u010dnosti, odkud lze z\u00edskat ve\u0161ker\u00e9 pot\u0159ebn\u00e9 informace (dom\u00e9nov\u00e1 po\u0161ta, kontakty, vazby).<\/p>\n<\/li>\n<li>\n<p>Zah\u00e1jen\u00ed kampan\u011b.<\/p>\n<p>Jakmile bude p\u0159ipravena \u201ez\u00e1kladna\u201c, m\u016f\u017eete pomoc\u00ed bezplatn\u00fdch nebo placen\u00fdch n\u00e1stroj\u016f spustit vlastn\u00ed c\u00edlenou phishingovou kampa\u0148. B\u011bhem kampan\u011b se v\u00e1m budou hromadit statistiky: doru\u010den\u00e1 po\u0161ta, otev\u0159en\u00e1 po\u0161ta, kliknut\u00ed na odkazy, zad\u00e1n\u00ed p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f atd.<\/p>\n<\/li>\n<\/ol>\n<h2>Produkty na trhu<\/h2>\n<p>Phishing mohou vyu\u017e\u00edvat jak \u00fato\u010dn\u00edci, tak zam\u011bstnanci IT bezpe\u010dnosti spole\u010dnosti k prov\u00e1d\u011bn\u00ed pravideln\u00fdch audit\u016f chov\u00e1n\u00ed zam\u011bstnanc\u016f. Co n\u00e1m tedy trh s bezplatn\u00fdmi a komer\u010dn\u00edmi \u0159e\u0161en\u00edmi pro automatizovan\u00e9 \u0161kolen\u00ed zam\u011bstnanc\u016f nab\u00edz\u00ed:<\/p>\n<ol>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/getgophish.com\/\">GoPhish<\/a><\/noindex> \u2014 open-source projekt, kter\u00fd umo\u017e\u0148uje rozvinout phishingovou kampa\u0148 za \u00fa\u010delem ov\u011b\u0159en\u00ed IT gramotnosti va\u0161ich zam\u011bstnanc\u016f. Mezi v\u00fdhody bych zm\u00ednil jednoduchost nasazen\u00ed a minim\u00e1ln\u00ed syst\u00e9mov\u00e9 n\u00e1roky. Mezi nev\u00fdhody \u2014 absence hotov\u00fdch \u0161ablon pro rozes\u00edl\u00e1n\u00ed, chyb\u011bj\u00edc\u00ed testy a \u0161kol\u00edc\u00ed materi\u00e1ly pro person\u00e1l.<\/p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.knowbe4.com\/\">KnowBe4<\/a><\/noindex> \u2014 platforma s velk\u00fdm mno\u017estv\u00edm dostupn\u00fdch produkt\u016f pro testov\u00e1n\u00ed zam\u011bstnanc\u016f.<\/p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/phishman.ru\/\">Phishman<\/a><\/noindex> \u2014 automatizovan\u00fd syst\u00e9m testov\u00e1n\u00ed a \u0161kolen\u00ed zam\u011bstnanc\u016f. M\u00e1 r\u016fzn\u00e9 verze produkt\u016f, kter\u00e9 podporuj\u00ed od 10 do v\u00edce ne\u017e 1000 zam\u011bstnanc\u016f. \u0160kol\u00edc\u00ed kurzy zahrnuj\u00ed teorii a praktick\u00e1 cvi\u010den\u00ed, existuje mo\u017enost identifikace pot\u0159eb na z\u00e1klad\u011b z\u00edskan\u00e9 statistiky po phishingov\u00e9 kampani. \u0158e\u0161en\u00ed je komer\u010dn\u00ed s mo\u017enost\u00ed zku\u0161ebn\u00edho pou\u017eit\u00ed.<\/p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.antiphish.ru\/\">Antiphishing<\/a><\/noindex> \u2014 automatizovan\u00fd syst\u00e9m \u0161kolen\u00ed a kontroly bezpe\u010dnosti. Komer\u010dn\u00ed produkt nab\u00edz\u00ed prov\u00e1d\u011bn\u00ed periodick\u00fdch \u0161kol\u00edc\u00edch \u00fatok\u016f, \u0161kolen\u00ed zam\u011bstnanc\u016f atd. Jako demo verzi produktu je nab\u00edzena kampa\u0148, kter\u00e1 zahrnuje nasazen\u00ed \u0161ablon a proveden\u00ed t\u0159\u00ed \u0161kol\u00edc\u00edch \u00fatok\u016f.<\/p>\n<\/li>\n<\/ol>\n<p>V\u00fd\u0161e uveden\u00e1 \u0159e\u0161en\u00ed jsou pouze \u010d\u00e1st\u00ed dostupn\u00fdch produkt\u016f na trhu automatizovan\u00e9ho \u0161kolen\u00ed person\u00e1lu. Samoz\u0159ejm\u011b, \u017ee ka\u017ed\u00e9 m\u00e1 sv\u00e9 v\u00fdhody a nev\u00fdhody. Dnes se sezn\u00e1m\u00edme s <noindex><a rel=\"nofollow\" href=\"https:\/\/getgophish.com\/\">GoPhish<\/a><\/noindex>, simulujeme phishingov\u00fd \u00fatok, prozkoum\u00e1me dostupn\u00e9 mo\u017enosti. <\/p>\n<h2>GoPhish<\/h2>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/cd95681b345ce85d131272c66032a68e.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>A te\u010f nastal \u010das na praktickou \u010d\u00e1st. GoPhish byl vybr\u00e1n n\u00e1hodn\u011b: je to u\u017eivatelsky p\u0159\u00edv\u011btiv\u00fd n\u00e1stroj, kter\u00fd m\u00e1 n\u00e1sleduj\u00edc\u00ed vlastnosti:<\/p>\n<ol>\n<li>\n<p>Jednoduch\u00e1 instalace a spu\u0161t\u011bn\u00ed.<\/p>\n<\/li>\n<li>\n<p>Podpora REST API. Umo\u017e\u0148uje vytv\u00e1\u0159et dotazy z <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.getgophish.com\/api-documentation\/\">dokumentaci<\/a><\/noindex> a aplikovat automatizovan\u00e9 skripty.&nbsp;<\/p>\n<\/li>\n<li>\n<p>Pohodln\u00e9 grafick\u00e9 u\u017eivatelsk\u00e9 rozhran\u00ed.<\/p>\n<\/li>\n<li>\n<p>K\u0159\u00ed\u017eov\u00e1 platforma.<\/p>\n<\/li>\n<\/ol>\n<p>T\u00fdm v\u00fdvoj\u00e1\u0159\u016f p\u0159ipravil skv\u011bl\u00e9 <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.getgophish.com\/user-guide\/installation\">n\u00e1vody<\/a><\/noindex> pro nasazen\u00ed a nastaven\u00ed GoPhish. Ve skute\u010dnosti sta\u010d\u00ed p\u0159ej\u00edt na <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/gophish\/gophish\">repuzit\u00e1\u0159e<\/a><\/noindex>, st\u00e1hnout ZIP archiv pro odpov\u00eddaj\u00edc\u00ed OS, spustit intern\u00ed bin\u00e1rn\u00ed soubor, po \u010dem\u017e bude n\u00e1stroj nainstalov\u00e1n.<\/p>\n<p><u>D\u016eLE\u017dIT\u00c1 POZN\u00c1MKA!<\/u><\/p>\n<p>Nakonec byste m\u011bli v termin\u00e1lu z\u00edskat informace o nasazen\u00e9m port\u00e1lu, stejn\u011b jako \u00fadaje pro autorizaci (plat\u00ed pro verze vy\u0161\u0161\u00ed ne\u017e 0.10.1). Nezapome\u0148te si poznamenat heslo!<\/p>\n<pre><code class=\"bash\">msg=\"Please login with the username admin and the password \"<\/code><\/pre>\n<h2>Nastaven\u00ed GoPhish<\/h2>\n<p>Po instalaci bude v adres\u00e1\u0159i aplikace vytvo\u0159en konfigura\u010dn\u00ed soubor (config.json). Pop\u00ed\u0161eme parametry pro jeho zm\u011bnu:<\/p>\n<p><strong>Kl\u00ed\u010d<\/strong><\/p>\n<p><strong>Hodnota (v\u00fdchoz\u00ed)<\/strong><\/p>\n<p><strong>Popis<\/strong><\/p>\n<p><em>admin_server.listen_url<\/em><\/p>\n<p>127.0.0.1:3333<\/p>\n<p>IP adresa serveru GoPhish <\/p>\n<p><em>admin_server.use_tls<\/em><\/p>\n<p>false<\/p>\n<p>Pou\u017e\u00edv\u00e1 se TLS pro p\u0159ipojen\u00ed k serveru GoPhish <\/p>\n<p><em>admin_server.cert_path<\/em><\/p>\n<p>example.crt<\/p>\n<p>Cesta k SSL certifik\u00e1tu pro administra\u010dn\u00ed port\u00e1l GoPhish<\/p>\n<p><em>admin_server.key_path<\/em><\/p>\n<p>example.key<\/p>\n<p>Cesta k soukrom\u00e9mu SSL kl\u00ed\u010di<\/p>\n<p><em>phish_server.listen_url<\/em><\/p>\n<p>0.0.0.0:80<\/p>\n<p>IP adresa a port um\u00edst\u011bn\u00ed phishingov\u00e9 str\u00e1nky (v\u00fdchoz\u00ed je um\u00edst\u011bna na samotn\u00e9m serveru GoPhish na portu 80)<\/p>\n<p>&#8212;&gt; P\u0159ejd\u011bte do port\u00e1lu spr\u00e1vy. V na\u0161em p\u0159\u00edpad\u011b:  <em>https:\/\/127.0.0.1:3333<\/em><\/p>\n<p>&#8212;&gt; Budete vyzv\u00e1ni k zm\u011bn\u011b dostate\u010dn\u011b dlouh\u00e9ho hesla na jednodu\u0161\u0161\u00ed nebo naopak.<\/p>\n<p>Vytv\u00e1\u0159en\u00ed profilu odes\u00edlatele<\/p>\n<p>P\u0159ejd\u011bte na kartu \"Odes\u00edlac\u00ed profily\" a uve\u010fte \u00fadaje o u\u017eivateli, od kter\u00e9ho bude na\u0161e rozes\u00edlka prob\u00edhat:<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/7932413b0fd342dff9f952e4aa8a76f8.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><strong>Kde:<\/strong><\/p>\n<p><em><u>N\u00e1zev<\/u><\/em><\/p>\n<p>Jm\u00e9no odes\u00edlatele<\/p>\n<p><em><u>Od<\/u><\/em><\/p>\n<p>E-mail odes\u00edlatele<\/p>\n<p><em><u>Hostitel<\/u><\/em><\/p>\n<p>IP adresa po\u0161tovn\u00edho serveru, ze kter\u00e9ho bude naslouch\u00e1na p\u0159\u00edchoz\u00ed po\u0161ta.<\/p>\n<p><em><u>U\u017eivatelsk\u00e9 jm\u00e9no<\/u><\/em><\/p>\n<p>P\u0159ihla\u0161ovac\u00ed \u00fadaje u\u017eivatelsk\u00e9ho \u00fa\u010dtu po\u0161tovn\u00edho serveru.<\/p>\n<p><em><u>Heslo<\/u><\/em><\/p>\n<p>Heslo u\u017eivatelsk\u00e9ho \u00fa\u010dtu po\u0161tovn\u00edho serveru.<\/p>\n<p>M\u016f\u017eete tak\u00e9 odeslat testovac\u00ed zpr\u00e1vu, abyste se ujistili o \u00fasp\u011b\u0161n\u00e9m doru\u010den\u00ed. Ulo\u017ete nastaven\u00ed pomoc\u00ed tla\u010d\u00edtka \"Ulo\u017eit profil\".<\/p>\n<p>Vytv\u00e1\u0159en\u00ed skupiny p\u0159\u00edjemc\u016f<\/p>\n<p>D\u00e1le je t\u0159eba vytvo\u0159it skupinu p\u0159\u00edjemc\u016f \u201e\u0161\u0165astn\u00fdch zpr\u00e1v\u201c. P\u0159ejd\u011bte do \u201eU\u017eivatel\u00e9 a skupiny\u201c \u2192 \u201eNov\u00e1 skupina\u201c. Existuj\u00ed dva zp\u016fsoby p\u0159id\u00e1n\u00ed: ru\u010dn\u011b nebo importem CSV souboru.<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/15728f9314b0ca24e4709137595b7cda.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pro druh\u00fd zp\u016fsob je pot\u0159eba m\u00edt povinn\u00e1 pole:<\/p>\n<ul>\n<li>\n<p>Jm\u00e9no<\/p>\n<\/li>\n<li>\n<p>P\u0159\u00edjmen\u00ed<\/p>\n<\/li>\n<li>\n<p>E-mail<\/p>\n<\/li>\n<li>\n<p>Pozice<\/p>\n<\/li>\n<\/ul>\n<p>Jako p\u0159\u00edklad:<\/p>\n<pre><code>First Name,Last Name,Position,Email\nRichard,Bourne,CEO,rbourne@morningcatch.ph\nBoyd,Jenius,Systems Administrator,bjenius@morningcatch.ph\nHaiti,Moreo,Sales &amp; Marketing,hmoreo@morningcatch.ph<\/code><\/pre>\n<\/p>\n<p>Vytv\u00e1\u0159en\u00ed \u0161ablony phishingov\u00e9ho e-mailu<\/p>\n<p>Pot\u00e9, co jsme identifikovali imagin\u00e1rn\u00edho \u00fato\u010dn\u00edka a potenci\u00e1ln\u00ed ob\u011bti, je nutn\u00e9 vytvo\u0159it \u0161ablonu s zpr\u00e1vou. Za t\u00edmto \u00fa\u010delem p\u0159ejd\u011bte do sekce \u201cEmail Templates\u201d \u2192 \u201cNew Templates\u201d.<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/1f867bbec9d2b08811ba4452bc27b7c8.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>P\u0159i vytv\u00e1\u0159en\u00ed \u0161ablony je pot\u0159eba aplikovat technick\u00fd a kreativn\u00ed p\u0159\u00edstup, m\u011bli bychom uv\u00e9st zpr\u00e1vu od slu\u017eby, se kterou jsou ob\u011bti obezn\u00e1meny, nebo kter\u00e1 v nich vyvol\u00e1 ur\u010ditou reakci. Mo\u017en\u00e9 mo\u017enosti:<\/p>\n<p><em><u>N\u00e1zev<\/u><\/em> <\/p>\n<p>N\u00e1zev \u0161ablony<\/p>\n<p><em><u>P\u0159edm\u011bt<\/u><\/em><\/p>\n<p>T\u00e9ma e-mailu<\/p>\n<p><em><u>Text \/ HTML<\/u><\/em> <\/p>\n<p>Pole pro zad\u00e1n\u00ed textu nebo HTML k\u00f3du<\/p>\n<p>Gophish podporuje import e-mailu, my v\u0161ak vytvo\u0159\u00edme vlastn\u00ed. P\u0159edstavme si sc\u00e9n\u00e1\u0159: u\u017eivatel spole\u010dnosti obdr\u017e\u00ed e-mail s n\u00e1vrhem na zm\u011bnu hesla jeho firemn\u00ed e-mailov\u00e9 adresy. Pot\u00e9 analyzujeme jeho reakci a pod\u00edv\u00e1me se na na\u0161i \"ulovku\".<\/p>\n<p>V \u0161ablon\u011b budeme pou\u017e\u00edvat vestav\u011bn\u00e9 prom\u011bnn\u00e9. S nimi se m\u016f\u017eete podrobn\u011bji sezn\u00e1mit v ji\u017e zm\u00edn\u011bn\u00e9m <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.getgophish.com\/user-guide\/installation\">n\u00e1vodu<\/a><\/noindex> v sekci <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.getgophish.com\/user-guide\/template-reference\">Template Reference<\/a><\/noindex>.<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/86973c1e490bfcb2c7b86bd775c025f5.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Nejprve nahrajeme n\u00e1sleduj\u00edc\u00ed text:<\/p>\n<pre><code>{{.FirstName}},\n\nHeslo pro {{.Email}} vypr\u0161elo. Pros\u00edme, resetujte si heslo zde.\n\nD\u011bkujeme,\nIT Team<\/code><\/pre>\n<p>Automaticky se tak dosad\u00ed jm\u00e9no u\u017eivatele (podle d\u0159\u00edve zadan\u00e9ho bodu \u201eNew Group\u201d) a bude uvedena jeho e-mailov\u00e1 adresa.<\/p>\n<p>Nyn\u00ed mus\u00edme uv\u00e9st odkaz na n\u00e1\u0161 phishingov\u00fd zdroj. K tomu zv\u00fdrazn\u00edme ve textu slovo \u201ehere\u201c a zvol\u00edme mo\u017enost &#171;Odkaz&#187; na ovl\u00e1dac\u00edm panelu.<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/ded21d192d8829c73d90169aa8e3315e.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Jako URL uvedeme vestav\u011bnou prom\u011bnnou {{.URL}}, kterou pozd\u011bji vypln\u00edme. Ta se automaticky vlo\u017e\u00ed do textu phishingov\u00e9ho e-mailu.<\/p>\n<p>P\u0159ed ulo\u017een\u00edm \u0161ablony nezapome\u0148te aktivovat mo\u017enost &#171;P\u0159idat sledovac\u00ed obr\u00e1zek&#187;. To p\u0159id\u00e1 medi\u00e1ln\u00ed prvek o velikosti 1&#215;1 pixel, kter\u00fd bude sledovat otev\u0159en\u00ed e-mailu u\u017eivatelem.<\/p>\n<p>A m\u00e1me t\u00e9m\u011b\u0159 hotovo, ale nejd\u0159\u00edve shr\u0148me povinn\u00e9 kroky po p\u0159ihl\u00e1\u0161en\u00ed do port\u00e1lu Gophish:&nbsp;<\/p>\n<ol>\n<li>\n<p>Vytvo\u0159it profil odes\u00edlatele;<\/p>\n<\/li>\n<li>\n<p>Vytvo\u0159it seznam adres\u00e1t\u016f, kde uvedeme u\u017eivatele;<\/p>\n<\/li>\n<li>\n<p>Vytvo\u0159it \u0161ablonu phishingov\u00e9ho e-mailu.<\/p>\n<\/li>\n<\/ol>\n<p>Sami uzn\u00e1te, \u017ee nastaven\u00ed zabralo m\u00e1lo \u010dasu a jsme t\u00e9m\u011b\u0159 p\u0159ipraveni na spu\u0161t\u011bn\u00ed na\u0161\u00ed kampan\u011b. Je\u0161t\u011b zb\u00fdv\u00e1 p\u0159idat phishingovou str\u00e1nku.<\/p>\n<p>Vytvo\u0159en\u00ed phishingov\u00e9 str\u00e1nky<\/p>\n<p>P\u0159ejd\u011bte na kartu &nbsp;\u201eC\u00edlov\u00e9 str\u00e1nky\u201c.<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/1306ce51563f606801744aff82120c17.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Budeme po\u017e\u00e1d\u00e1ni o zad\u00e1n\u00ed n\u00e1zvu objektu. Existuje mo\u017enost importu webu zdroje. V na\u0161em p\u0159\u00edkladu jsem zkusil zadat pracovn\u00ed webov\u00fd port\u00e1l po\u0161tovn\u00edho serveru. Odpov\u00eddaj\u00edc\u00edm zp\u016fsobem byl importov\u00e1n ve form\u00e1tu HTML (i kdy\u017e ne \u00fapln\u011b). N\u00e1sleduj\u00ed zaj\u00edmav\u00e9 mo\u017enosti pro zachycen\u00ed zadan\u00fdch \u00fadaj\u016f u\u017eivatele:<\/p>\n<ul>\n<li>\n<p>Zachytit odeslan\u00e9 \u00fadaje. Pokud uveden\u00e1 str\u00e1nka webu obsahuje r\u016fzn\u00e9 formul\u00e1\u0159e pro zad\u00e1n\u00ed, budou v\u0161echna data zaznamen\u00e1na.<\/p>\n<\/li>\n<li>\n<p>Zachyt\u00e1v\u00e1n\u00ed hesel &#8212; z\u00e1znam zadan\u00fdch hesel. Data jsou ukl\u00e1d\u00e1na v datab\u00e1zi GoPhish bez \u0161ifrov\u00e1n\u00ed, tak jak jsou.<\/p>\n<\/li>\n<\/ul>\n<p>Dal\u0161\u00ed mo\u017enost\u00ed je pou\u017e\u00edt volbu \u201eP\u0159esm\u011brovat na\u201c, kter\u00e1 p\u0159esm\u011bruje u\u017eivatele na zadanou str\u00e1nku po zad\u00e1n\u00ed p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f. P\u0159ipom\u00edn\u00e1m, \u017ee jsme nastavili sc\u00e9n\u00e1\u0159, kdy je u\u017eivatelovi nab\u00eddnuta zm\u011bna hesla k firemn\u00edmu e-mailu. K tomu je mu nab\u00eddnuta fale\u0161n\u00e1 str\u00e1nka port\u00e1lu pro autorizaci e-mailu, po \u010dem\u017e m\u016f\u017ee b\u00fdt u\u017eivatel odesl\u00e1n na jak\u00fdkoli dostupn\u00fd zdroj spole\u010dnosti.<\/p>\n<p>Nezapome\u0148te ulo\u017eit vypln\u011bnou str\u00e1nku a p\u0159ej\u00edt do \u010d\u00e1sti &#171;Nov\u00e1 kampa\u0148&#187;.<\/p>\n<h2>Spu\u0161t\u011bn\u00ed chyt\u00e1n\u00ed GoPhish<\/h2>\n<p>Uvedli jsme v\u0161echny pot\u0159ebn\u00e9 \u00fadaje. Na kart\u011b &#171;Nov\u00e1 kampa\u0148&#187; vytvo\u0159\u00edme novou kampa\u0148.<\/p>\n<p>Spu\u0161t\u011bn\u00ed kampan\u011b<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/dcb86ba80285f0663b15ffd6d2652a47.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kde:<\/p>\n<p><em><u>N\u00e1zev<\/u><\/em> <\/p>\n<p>N\u00e1zev kampan\u011b<\/p>\n<p><em><u>Emailov\u00fd \u0161ablona<\/u><\/em><\/p>\n<p>\u0160ablona zpr\u00e1vy<\/p>\n<p><em><u>Landing Page<\/u><\/em><\/p>\n<p>Phishingov\u00e1 str\u00e1nka<\/p>\n<p><em><u>URL<\/u><\/em><\/p>\n<p>IP va\u0161eho serveru GoPhish (mus\u00ed b\u00fdt s\u00ed\u0165ov\u011b p\u0159\u00edstupn\u00fd z&nbsp;hostitele ob\u011bti)<\/p>\n<p><em><u>Datum spu\u0161t\u011bn\u00ed<\/u><\/em><\/p>\n<p>Datum zah\u00e1jen\u00ed kampan\u011b<\/p>\n<p><em><u>Odes\u00edlat e-maily p\u0159es<\/u><\/em><\/p>\n<p>Datum ukon\u010den\u00ed kampan\u011b (rozes\u00edlka je distribuov\u00e1na rovnom\u011brn\u011b)<\/p>\n<p><em><u>Odes\u00edlac\u00ed profil<\/u><\/em><\/p>\n<p>Profil odes\u00edlatele<\/p>\n<p><em><u>Skupiny<\/u><\/em><\/p>\n<p>Skupina p\u0159\u00edjemc\u016f rozes\u00edlky<\/p>\n<\/p>\n<p>Po zah\u00e1jen\u00ed kampan\u011b si v\u017edy m\u016f\u017eeme prohl\u00e9dnout statistiky, ve kter\u00fdch jsou uvedeny: odeslan\u00e9 zpr\u00e1vy, otev\u0159en\u00e9 zpr\u00e1vy, p\u0159echody na odkazy, zanechan\u00e9 \u00fadaje a p\u0159enos do spamu.<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/9043fc4d7358c7ff4bd5a344c772fe62.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Ze statistiky vid\u00edme, \u017ee byla odesl\u00e1na 1 zpr\u00e1va, zkontrolujeme e-mail na stran\u011b&nbsp; p\u0159\u00edjemce:<\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/129fbb8f438d2e19efb927747203e752.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Opravdu, ob\u011b\u0165 \u00fasp\u011b\u0161n\u011b obdr\u017eela phishingov\u00fd e-mail s \u017e\u00e1dost\u00ed o p\u0159echod na odkaz pro zm\u011bnu hesla k firemn\u00edmu \u00fa\u010dtu. Prov\u00e1d\u00edme po\u017eadovan\u00e9 kroky, jsme p\u0159esm\u011brov\u00e1ni na str\u00e1nku Landing Pages, jak\u00e9 jsou statistiky? <\/p>\n<p><img decoding=\"async\" alt=\"1. \u0160kolen\u00ed u\u017eivatel\u016f z\u00e1klad\u016fm IB. Boj s phishingem\" src=\"\/wp-content\/uploads\/2020\/10\/f7efae1c10c1fb941ae651c93478c74e.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>V d\u016fsledku toho n\u00e1\u0161 u\u017eivatel p\u0159e\u0161el na phishingov\u00fd odkaz, kde potenci\u00e1ln\u011b mohl zanechat \u00fadaje o sv\u00e9m \u00fa\u010dtu. <\/p>\n<p><em>Pozn\u00e1mka autora: <\/em>proces zad\u00e1v\u00e1n\u00ed \u00fadaj\u016f nebyl zaznamen\u00e1n z d\u016fvodu pou\u017e\u00edv\u00e1n\u00ed testovac\u00edho makety, ale takov\u00e1 mo\u017enost existuje. Obsah nen\u00ed \u0161ifrov\u00e1n a je ukl\u00e1d\u00e1n v datab\u00e1zi GoPhish, m\u011bjte to na pam\u011bti. <\/p>\n<h2>Na z\u00e1v\u011br<\/h2>\n<p>Dnes jsme se dotkli aktu\u00e1ln\u00edho t\u00e9matu automatizovan\u00e9ho \u0161kolen\u00ed zam\u011bstnanc\u016f s c\u00edlem chr\u00e1nit je p\u0159ed phishingov\u00fdmi \u00fatoky a vychovat v nich IT gramotnost. Jako dostupn\u00e9 \u0159e\u0161en\u00ed byl nasazen Gophish, kter\u00fd se uk\u00e1zal jako velmi efektivn\u00ed z hlediska \u010dasu nasazen\u00ed a v\u00fdsledku. S pomoc\u00ed tohoto dostupn\u00e9ho n\u00e1stroje budete moci prov\u011b\u0159it sv\u00e9 zam\u011bstnance a vytvo\u0159it zpr\u00e1vy o jejich chov\u00e1n\u00ed. Pokud v\u00e1s tento produkt zaj\u00edm\u00e1, nab\u00edz\u00edme pomoc p\u0159i jeho nasazen\u00ed a prov\u00e1d\u011bn\u00ed auditu va\u0161ich zam\u011bstnanc\u016f (<u>sales@tssolution.ru<\/u>).<\/p>\n<p>Nicm\u00e9n\u011b, nem\u00e1me v pl\u00e1nu zastavit se pouze u jednoho \u0159e\u0161en\u00ed a pl\u00e1nujeme pokra\u010dovat v cyklu, kde v\u00e1m p\u0159ibl\u00ed\u017e\u00edme enterprise \u0159e\u0161en\u00ed pro automatizaci procesu \u0161kolen\u00ed a kontroly zabezpe\u010den\u00ed zam\u011bstnanc\u016f. Z\u016fsta\u0148te s n\u00e1mi a bu\u010fte obez\u0159etn\u00ed!<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/521252\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0438\u043b\u0438 \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0418\u0411 \u0442\u0440\u0430\u0442\u0438\u0442 \u0443\u0439\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0441\u0438\u043b, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u0441\u0435\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u043e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u043e\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u043d\u043e \u0434\u0430\u0436\u0435 \u044d\u0442\u043e \u043d\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u0421\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u0441\u0442\u0438 \u0437\u0430 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f. \u041a\u0430\u043a \u0447\u0430\u0441\u0442\u043e \u0432\u044b \u043b\u043e\u0432\u0438\u043b\u0438 \u0441\u0435\u0431\u044f \u043d\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95621,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95620","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd471. \u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411. \u0411\u043e\u0440\u044c\u0431\u0430 \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u043c | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-01T05:45:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-01T05:45:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd471. \u0160kolen\u00ed u\u017eivatel\u016f v z\u00e1kladech IT bezpe\u010dnosti. Boj proti phishingu | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd471. \u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411. \u0411\u043e\u0440\u044c\u0431\u0430 \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u043c | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-01T05:45:10+00:00","article:modified_time":"2020-10-01T05:45:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95620","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:02:17","updated":"2022-09-27 14:57:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/95620","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=95620"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/95620\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/95621"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=95620"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=95620"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=95620"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}