{"id":95620,"date":"2020-10-01T07:45:10","date_gmt":"2020-10-01T05:45:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom"},"modified":"2020-10-01T07:45:10","modified_gmt":"2020-10-01T05:45:10","slug":"1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom","title":{"rendered":"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/75034c513ef3ce93bc27afe604afdba1.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Danas mre\u017eni administrator ili stru\u010dnjak za informati\u010dku sigurnost tro\u0161i puno vremena i truda kako bi za\u0161titio perimetar mre\u017ee poduze\u0107a od razli\u010ditih prijetnji, usvajaju\u0107i sve nove sustave prevencije i nadzora doga\u0111aja, no \u010dak ni to mu ne jam\u010di potpunu sigurnost. Dru\u0161tveni in\u017eenjering aktivno koriste zlonamjerni akteri i mo\u017ee imati ozbiljne posljedice.<\/p>\n<p>Koliko ste se \u010desto ulovili kako mislite: \u201cBilo bi dobro provesti provjeru osoblja o pismenosti u informati\u010dkoj sigurnosti\u201d? Na\u017ealost, misli se susre\u0107u s zidom nerazumijevanja u vidu velikog broja zadataka ili ograni\u010denja vremena radnog dana. Planiramo vam ispri\u010dati o suvremenim proizvodima i tehnologijama u podru\u010dju automatizacije obuke osoblja, koje ne\u0107e zahtijevati dugotrajnu pripremu za provo\u0111enje pilot projekata ili implementaciju, ali sve u svoje vrijeme.<\/p>\n<h2>Teorijska osnova<\/h2>\n<p>Danas vi\u0161e od 80% zlonamjernih datoteka \u0161iri se putem e-po\u0161te (podaci su uzeti iz izvje\u0161taja stru\u010dnjaka Check Point-a u protekloj godini putem usluge Intelligence Reports).<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/db65c5e2a78dc046e46a006af473516a.JPG\" style=\"display:block;margin: 0 auto;\" \/>Izvje\u0161taj za posljednjih 30 dana o vektorima napada na rasprostranjenje zlonamjernih datoteka (Rusija) \u2014 Check Point<\/p>\n<p>To pokazuje da je sadr\u017eaj u e-porukama dovoljno ranjiv na kori\u0161tenje od strane zlonamjernih aktera. Ako razmatramo najpopularnije zlonamerne formate datoteka u privicima (EXE, RTF, DOC), valja napomenuti da obi\u010dno sadr\u017ee automatske elemente izvr\u0161enja koda (skripte, makroi).<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/a6d1d2d8f374250104e156381b002ea1.JPG\" style=\"display:block;margin: 0 auto;\" \/>Godi\u0161nji izvje\u0161taj o formatima datoteka u primljenim zlonamjernim porukama \u2014 Check Point<\/p>\n<p>Kako se boriti protiv ovog vektora napada? Provjera e-po\u0161te uklju\u010duje kori\u0161tenje sigurnosnih alata:&nbsp;<\/p>\n<ul>\n<li>\n<p><strong>Antivirus<\/strong> \u2014 detekcija prijetnji putem potpisivanja.<\/p>\n<\/li>\n<li>\n<p><strong>Emulacija<\/strong> \u2014 sandbox, putem kojeg se privitci otvaraju u izoliranom okru\u017eenju.<\/p>\n<\/li>\n<li>\n<p><strong>Svijest o sadr\u017eaju <\/strong>\u2014 ekstrakcija aktivnih elemenata iz dokumenata. Korisnik dobiva o\u010di\u0161\u0107en dokument (obi\u010dno u PDF formatu).<\/p>\n<\/li>\n<li>\n<p><strong>AntiSpam<\/strong> \u2014 provjera domene primatelja\/po\u0161iljatelja na osnovu reputacije.<\/p>\n<\/li>\n<\/ul>\n<p>I, po svemu sude\u0107i, to bi trebalo biti dovoljno, ali postoji jo\u0161 jedan jednako vrijedan resurs za kompaniju \u2014 korporativni i osobni podaci zaposlenika. U posljednjim godinama raste popularnost sljede\u0107e vrste internetskih prijevara:<\/p>\n<p><strong><u>Phishing<\/u><\/strong> (eng. phishing, from fishing \u2014 catching fish, pulling out) \u2014 a type of internet fraud. Its goal is to obtain users' identification data. This includes stealing passwords, credit card numbers, bank account information, and other confidential data.<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/64ed74d70fe7a573c5e14cc03ebef33a.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Criminals are improving methods of phishing attacks, redirecting DNS requests from popular sites, and launching entire campaigns using social engineering to send emails.&nbsp;<\/p>\n<p>Thus, to protect your corporate email from phishing, it is recommended to apply two approaches, and their combined use yields the best results:<\/p>\n<ol>\n<li>\n<p><strong>Technical protection tools<\/strong>. As mentioned earlier, various technologies are used to check and forward only legitimate emails.<\/p>\n<\/li>\n<li>\n<p><strong>Theoretical training of staff<\/strong>. This involves comprehensive testing of personnel to identify potential victims. Following this, retraining is conducted, and statistics are constantly recorded.&nbsp;&nbsp;&nbsp;<\/p>\n<\/li>\n<\/ol>\n<h2>Trust but verify<\/h2>\n<p>Today we will discuss the second approach to preventing phishing attacks, namely automated training of personnel to enhance the overall level of security for corporate and personal data. Why can this be so dangerous?<\/p>\n<p><strong><u>Socijalni in\u017eenjering <\/u><\/strong>\u2014 psiholo\u0161ko manipuliranje ljudima s ciljem provo\u0111enja odre\u0111enih radnji ili otkrivanja povjerljivih informacija (u odnosu na informati\u010dku sigurnost).<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/97f19afc49a5101d20cebabe040073a1.JPG\" style=\"display:block;margin: 0 auto;\" \/>Scheme of the typical phishing attack deployment scenario<\/p>\n<p>Let's refer to an engaging flowchart that briefly displays the path of a phishing campaign. It includes various stages:<\/p>\n<ol>\n<li>\n<p>Collection of primary data.<\/p>\n<p>In the 21st century, it's hard to find a person who is not registered on any social network or various thematic forums. Naturally, many of us leave detailed information about ourselves: current workplace, group for colleagues, phone number, email, etc. Add to this personalized information about the person's interests, and you have data for forming a phishing template. Even if it was not possible to find people with such information, there is always the company's website where you can gather all the information of interest (domain email, contacts, connections).<\/p>\n<\/li>\n<li>\n<p>Launching the campaign.<\/p>\n<p>Nakon \u0161to se pripremi \"platforma\", pomo\u0107u besplatnih ili pla\u0107enih alata mo\u017eete pokrenuti vlastitu ciljanju phishing kampanju. Tijekom rada s newsletterom prikupit \u0107ete statistiku: isporu\u010dena po\u0161ta, otvorena po\u0161ta, klikovi na linkove, unos vjerodajnica itd.<\/p>\n<\/li>\n<\/ol>\n<h2>Proizvodi na tr\u017ei\u0161tu<\/h2>\n<p>Phishing mogu koristiti i napada\u010di i zaposlenici IT sigurnosti poduze\u0107a s ciljem provo\u0111enja stalnog audita pona\u0161anja zaposlenika. \u0160to nam tr\u017ei\u0161te nudi u pogledu besplatnih i komercijalnih rje\u0161enja za automatizirani sustav obuke zaposlenika:<\/p>\n<ol>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/getgophish.com\/\">GoPhish<\/a><\/noindex> \u2014 open-source projekt koji omogu\u0107uje provedbu phishing kampanje s ciljem provjere informati\u010dke pismenosti va\u0161ih zaposlenika. Prednosti uklju\u010duju jednostavnost implementacije i minimalne sistemske zahtjeve. Nedostaci \u2014 nedostatak gotovih predlo\u017eaka za slanje, nedostatak testova i obrazovnih materijala za osoblje.<\/p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.knowbe4.com\/\">KnowBe4<\/a><\/noindex> \u2014 platforma s velikim brojem dostupnih proizvoda za testiranje zaposlenika.<\/p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/phishman.ru\/\">Phishman<\/a><\/noindex> \u2014 automatizirani sustav testiranja i obrazovanja zaposlenika. Ima razli\u010dite verzije proizvoda koje podr\u017eavaju od 10 do vi\u0161e od 1000 zaposlenika. Te\u010dajevi obuke uklju\u010duju teoriju i prakti\u010dne zadatke, a postoji mogu\u0107nost prepoznavanja potreba temeljenih na statistici nakon phishing kampanje. Rje\u0161enje je komercijalno s mogu\u0107no\u0161\u0107u probnog kori\u0161tenja.<\/p>\n<\/li>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.antiphish.ru\/\">Antiphishing<\/a><\/noindex> \u2014 automatizirani sustav obrazovanja i nadzora sigurnosti. Komercijalni proizvod nudi provo\u0111enje periodi\u010dnih obrazovnih napada, obuku zaposlenika itd. Kao demo verziju proizvoda nudi se kampanja koja uklju\u010duje implementaciju predlo\u017eaka i izvo\u0111enje tri obrazovna napada.<\/p>\n<\/li>\n<\/ol>\n<p>Gore navedena rje\u0161enja samo su dio dostupnih proizvoda na tr\u017ei\u0161tu automatiziranog obrazovanja zaposlenika. Naravno, svako od njih ima svoje prednosti i nedostatke. Danas \u0107emo se upoznati s <noindex><a rel=\"nofollow\" href=\"https:\/\/getgophish.com\/\">GoPhish<\/a><\/noindex>, imitirati phishing napad, istra\u017eiti dostupne opcije. <\/p>\n<h2>GoPhish<\/h2>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/cd95681b345ce85d131272c66032a68e.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Dakle, do\u0161lo je vreme za praksu. GoPhish je odabran ne slu\u010dajno: predstavlja user-friendly alat s sljede\u0107im zna\u010dajkama:<\/p>\n<ol>\n<li>\n<p>Jednostavna instalacija i pokretanje.<\/p>\n<\/li>\n<li>\n<p>Podr\u0161ka za REST API. Omogu\u0107uje formiranje zahtjeva iz <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.getgophish.com\/api-documentation\/\">dokumentaciju<\/a><\/noindex> i primjenu automatiziranih skripti.&nbsp;<\/p>\n<\/li>\n<li>\n<p>Prijenos korisni\u010dkog su\u010delja.<\/p>\n<\/li>\n<li>\n<p>Krosplatformnost.<\/p>\n<\/li>\n<\/ol>\n<p>Tim programera je pripremio odli\u010dan <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.getgophish.com\/user-guide\/installation\">vodi\u010d<\/a><\/noindex> alate za raspore\u0111ivanje i postavljanje GoPhish. U stvarnosti vam treba samo oti\u0107i na <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/gophish\/gophish\">repozitorij<\/a><\/noindex>, preuzeti ZIP arhivu za odgovaraju\u0107i OS, pokrenuti unutarnju binarnu datoteku, nakon \u010dega \u0107e alat biti instaliran.<\/p>\n<p><u>VA\u017dNA NAPOMENA!<\/u><\/p>\n<p>Na kraju trebate dobiti informacije u terminalu o raspore\u0111enom portalu, kao i podatke za prijavu (odre\u0111eno za verziju noviju od 0.10.1). Ne zaboravite zabilje\u017eiti svoju lozinku!<\/p>\n<pre><code class=\"bash\">msg=\"Molimo prijavite se s korisni\u010dkim imenom admin i lozinkom &lt;LOZINKA&gt;\"<\/code><\/pre>\n<h2>Postavljanje GoPhish-a<\/h2>\n<p>Nakon instalacije u direktoriju aplikacije bit \u0107e stvorena konfiguracijska datoteka (config.json). Opisat \u0107emo parametre za njezinu izmjenu:<\/p>\n<p><strong>Klju\u010d<\/strong><\/p>\n<p><strong>Vrijednost (zadano)<\/strong><\/p>\n<p><strong>Opis<\/strong><\/p>\n<p><em>admin_server.listen_url<\/em><\/p>\n<p>127.0.0.1:3333<\/p>\n<p>IP adresa servera GoPhish <\/p>\n<p><em>admin_server.use_tls<\/em><\/p>\n<p>false<\/p>\n<p>Koristi li se TLS za povezivanje sa serverom GoPhish <\/p>\n<p><em>admin_server.cert_path<\/em><\/p>\n<p>example.crt<\/p>\n<p>Putanja do SSL certifikata za administrativni portal GoPhish<\/p>\n<p><em>admin_server.key_path<\/em><\/p>\n<p>example.key<\/p>\n<p>Putanja do privatnog SSL klju\u010da<\/p>\n<p><em>phish_server.listen_url<\/em><\/p>\n<p>0.0.0.0:80<\/p>\n<p>IP adresa i port za smje\u0161taj phishing stranice (zadano se smje\u0161ta na samom serveru GoPhish na portu 80)<\/p>\n<p>&#8212;&gt; Idite na upravlja\u010dki portal. U na\u0161em slu\u010daju:  <em>https:\/\/127.0.0.1:3333<\/em><\/p>\n<p>&#8212;&gt; Bit \u0107ete zatra\u017eeni da promijenite dovoljno duga\u010dku lozinku u jednostavniju ili obrnuto.<\/p>\n<p>Izrada po\u0161iljateljskog profila<\/p>\n<p>Idite na karticu \"Po\u0161iljateljski profili\" i unesite podatke o korisniku s kojeg \u0107e se slati na\u0161a po\u0161ta:<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/7932413b0fd342dff9f952e4aa8a76f8.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><strong>Gdje:<\/strong><\/p>\n<p><em><u>Name<\/u><\/em><\/p>\n<p>Ime po\u0161iljatelja<\/p>\n<p><em><u>From<\/u><\/em><\/p>\n<p>E-mail po\u0161iljatelja<\/p>\n<p><em><u>Host<\/u><\/em><\/p>\n<p>IP adresa po\u0161tanskog servera s kojeg \u0107e se slati dolazna po\u0161ta.<\/p>\n<p><em><u>Korisni\u010dko ime<\/u><\/em><\/p>\n<p>Korisni\u010dko ime ra\u010duna na po\u0161tanskom serveru.<\/p>\n<p><em><u>Lozinka<\/u><\/em><\/p>\n<p>Lozinka ra\u010duna korisnika po\u0161tanskog servera.<\/p>\n<p>Tako\u0111er mo\u017eete poslati testnu poruku da biste se uvjerili u uspje\u0161nost isporuke. Spremite postavke pomo\u0107u gumba \"Spremi profil\".<\/p>\n<p>Izrada grupe primatelja<\/p>\n<p>Sljede\u0107e treba formirati grupu adresa \"poruka sre\u0107e\". Idite na&nbsp; \"User &amp; Groups\" \u2192 \"New Group\". Postoje dva na\u010dina dodavanja: ru\u010dno ili uvozom CSV datoteke.<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/15728f9314b0ca24e4709137595b7cda.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Za drugi na\u010din potrebna su obavezna polja:<\/p>\n<ul>\n<li>\n<p>Ime<\/p>\n<\/li>\n<li>\n<p>Prezime<\/p>\n<\/li>\n<li>\n<p>Email<\/p>\n<\/li>\n<li>\n<p>Pozicija<\/p>\n<\/li>\n<\/ul>\n<p>Kao primjer:<\/p>\n<pre><code>Ime,Prezime,Pozicija,E-mail\nRichard,Bourne,CEO,rbourne@morningcatch.ph\nBoyd,Jenius,System Administrator,bjenius@morningcatch.ph\nHaiti,Moreo,Sales &amp;amp; Marketing,hmoreo@morningcatch.ph<\/code><\/pre>\n<\/p>\n<p>Izrada predlo\u0161ka phishing e-po\u0161te<\/p>\n<p>Nakon \u0161to smo identificirali imaginarne zlonamjernike i potencijalne \u017ertve, potrebno je stvoriti predlo\u017eak sa porukom. Za to idite na dio \"Email Templates\" \u2192 \"New Templates\".<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/1f867bbec9d2b08811ba4452bc27b7c8.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Pri izradi predlo\u0161ka koristi se tehni\u010dki i kreativni pristup, potrebno je navesti poruku od usluge koja \u0107e biti poznata korisnicima-\u017ertvama ili izazvati odre\u0111enu reakciju kod njih. Mogu\u0107e opcije:<\/p>\n<p><em><u>Name<\/u><\/em> <\/p>\n<p>Naziv predlo\u0161ka<\/p>\n<p><em><u>Predmet<\/u><\/em><\/p>\n<p>Tema e-maila<\/p>\n<p><em><u>Tekst \/ HTML<\/u><\/em> <\/p>\n<p>Polje za unos teksta ili HTML koda<\/p>\n<p>Gophish podr\u017eava uvoz e-maila, no mi \u0107emo stvoriti vlastiti. Za to imitiramo scenarij: korisnik tvrtke prima e-mail s prijedlogom za promjenu lozinke s njegove korporativne po\u0161te. Nakon toga \u0107emo analizirati njegovu reakciju i pogledati na\u0161 \"ulov\".<\/p>\n<p>U predlo\u0161ku \u0107emo koristiti ugra\u0111ene varijable. O njima se mo\u017ee detaljnije cijelo upoznati u prethodno spomenutom <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.getgophish.com\/user-guide\/installation\">priru\u010dniku<\/a><\/noindex> u odjeljku <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.getgophish.com\/user-guide\/template-reference\">Template Reference<\/a><\/noindex>.<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/86973c1e490bfcb2c7b86bd775c025f5.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Za po\u010detak, u\u010ditajmo sljede\u0107i tekst:<\/p>\n<pre><code>{{.FirstName}},\n\nLozinka za {{.Email}} je istekla. Molimo vas da ovdje ponovo postavite svoju lozinku.\n\nHvala,\nIT Tim<\/code><\/pre>\n<p>Tako \u0107e se automatski umetnuti ime korisnika (prema prethodno zadanom stavku \"New Group\") i navesti njegova e-mail adresa.<\/p>\n<p>Zatim trebamo navesti vezu na na\u0161u phishing stranicu. Da bismo to u\u010dinili, ozna\u010dite rije\u010d \"here\" u tekstu i odaberite opciju &#171;Link&#187; na upravlja\u010dkoj plo\u010di.<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/ded21d192d8829c73d90169aa8e3315e.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Kao URL navest \u0107emo ugra\u0111enu varijablu {{.URL}}, koju \u0107emo kasnije popuniti. Ona \u0107e se automatski umetnuti u tekst phishing e-maila.<\/p>\n<p>Prije spremanja predlo\u0161ka ne zaboravite uklju\u010diti opciju &#171;Add Tracking Image&#187;. Ovo \u0107e dodati medijski element veli\u010dine 1&#215;1 piksela, koji \u0107e pratiti otvaranje e-maila od strane korisnika.<\/p>\n<p>Dakle, ostalo je jo\u0161 malo, ali prvo recimo obavezne korake nakon prijave na Gophish portal:&nbsp;<\/p>\n<ol>\n<li>\n<p>Stvoriti profil po\u0161iljatelja;<\/p>\n<\/li>\n<li>\n<p>Stvoriti grupu za slanje, gdje \u0107ete navesti korisnike;<\/p>\n<\/li>\n<li>\n<p>Stvoriti predlo\u017eak phishing e-maila.<\/p>\n<\/li>\n<\/ol>\n<p>Sla\u017eete se, postavke nisu oduzele puno vremena i ve\u0107 smo gotovo spremni za pokretanje na\u0161e kampanje. Ostaje dodati phishing stranicu.<\/p>\n<p>Stvaranje phishing stranice<\/p>\n<p>Idite na karticu &nbsp;\"Landing Pages\".<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/1306ce51563f606801744aff82120c17.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Bit \u0107emo zatra\u017eeni da navedemo ime objekta. Postoji mogu\u0107nost uvoza izvornog web-mjesta. U na\u0161em primjeru poku\u0161ao sam navesti radni web portal po\u0161tanskog servera. Shodno tome, uvezen je u obliku HTML koda (premda ne potpuno). Idu zanimljive opcije za preuzimanje unesenih podataka korisnika:<\/p>\n<ul>\n<li>\n<p>Preuzmi poslane podatke. Ako navedena stranica sadr\u017ei razli\u010dite obrasce za unos, svi podaci \u0107e biti zabilje\u017eeni.<\/p>\n<\/li>\n<li>\n<p>Capture Passwords &#8212; hvatanje unesene lozinke. Podaci se bilje\u017ee u GoPhish bazi podataka bez enkripcije, onakvi kakvi jesu.<\/p>\n<\/li>\n<\/ul>\n<p>Dodatno mo\u017eemo koristiti opciju \"Preusmjeri na\", koja \u0107e preusmjeriti korisnika na zadanju stranicu nakon unosa vjerodajnica. Podsje\u0107am da smo postavili scenarij u kojem se korisniku nudi promjena lozinke za korporativnu po\u0161tu. Za to mu se nudi la\u017ena stranica portala za prijavu po\u0161te, nakon \u010dega se korisnika mo\u017ee poslati na bilo koji dostupni resurs kompanije.<\/p>\n<p>Ne zaboravite spremiti ispunjenu stranicu i idite na odjeljak &#171;New Campaign&#187;.<\/p>\n<h2>Pokretanje GoPhish lova<\/h2>\n<p>Unijeli smo sve potrebne podatke. U kartici &#171;New Campaign&#187; kreiramo novu kampanju.<\/p>\n<p>Pokretanje kampanje<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/dcb86ba80285f0663b15ffd6d2652a47.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Gdje:<\/p>\n<p><em><u>Name<\/u><\/em> <\/p>\n<p>Ime kampanje<\/p>\n<p><em><u>Email predlo\u017eak<\/u><\/em><\/p>\n<p>Predlo\u017eak poruke<\/p>\n<p><em><u>Landing Page<\/u><\/em><\/p>\n<p>Phishing stranica<\/p>\n<p><em><u>URL<\/u><\/em><\/p>\n<p>IP va\u0161e GoPhish poslu\u017eiteljske jedinice (mora biti mre\u017eno dostupan s&nbsp;\u017ertvinim hostom)<\/p>\n<p><em><u>Datum pokretanja<\/u><\/em><\/p>\n<p>Datum zavr\u0161etka kampanje<\/p>\n<p><em><u>\u0160aljite emailove do<\/u><\/em><\/p>\n<p>Datum zavr\u0161etka kampanje (slanje se ravnomjerno raspore\u0111uje)<\/p>\n<p><em><u>Profil po\u0161iljatelja<\/u><\/em><\/p>\n<p>Profil po\u0161iljatelja<\/p>\n<p><em><u>Grupe<\/u><\/em><\/p>\n<p>Grupa primatelja maila<\/p>\n<\/p>\n<p>Nakon pokretanja uvijek mo\u017eemo zaviriti u statistiku koja pokazuje: poslane poruke, otvorene poruke, klikove na linkove, ostavljene podatke, premje\u0161tanje u spam.<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/9043fc4d7358c7ff4bd5a344c772fe62.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Iz statistike vidimo da je 1 poruka poslana, provjerimo e-po\u0161tu s strane&nbsp; primitka:<\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/129fbb8f438d2e19efb927747203e752.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Uistinu, \u017ertva je uspje\u0161no primila phishing email s molbom da klikne na link za promjenu lozinke korporativnog ra\u010duna. Izvr\u0161avamo tra\u017eene radnje, preusmjerava nas na stranicu odredi\u0161ne stranice, kakva je statistika? <\/p>\n<p><img decoding=\"async\" alt=\"1. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga\" src=\"\/wp-content\/uploads\/2020\/10\/f7efae1c10c1fb941ae651c93478c74e.JPG\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Na kraju, na\u0161 korisnik je kliknuo na phishing link, gdje je potencijalno mogao ostaviti podatke za svoj ra\u010dun. <\/p>\n<p><em>Napomena autora: <\/em>proces unosa podataka nije zabilje\u017een zbog kori\u0161tenja testnog modela, ali takva opcija postoji. Sadr\u017eaj se ne \u0161ifrira i pohranjuje u GoPhish BDP, imajte to na umu. <\/p>\n<h2>Umjesto zaklju\u010dka<\/h2>\n<p>Danas \u0107emo se dotaknuti aktualne teme automatiziranog \u0161kolovanja zaposlenika s ciljem za\u0161tite od phishing napada i razvijanja IT pismenosti. Kao dostupno rje\u0161enje implementirali smo Gophish, koji se pokazao kao dobro rje\u0161enje s obzirom na vrijeme implementacije i rezultate. Pomo\u0107u ovog dostupnog alata mo\u0107i \u0107ete testirati svoje zaposlenike i sastaviti izvje\u0161taje o njihovu pona\u0161anju. Ako vas zanima ovaj proizvod, nudimo pomo\u0107 u njegovoj implementaciji i provo\u0111enju audita va\u0161ih zaposlenika (<u>sales@tssolution.ru<\/u>).<\/p>\n<p>Me\u0111utim, ne namjeravamo stati na analizi jednog rje\u0161enja i planiramo nastaviti s ciklusom u kojem \u0107emo govoriti o Enterprise rje\u0161enjima za automatizaciju procesa obuke i kontrole sigurnosti zaposlenika. Ostanite s nama i budite budni!<\/p>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/521252\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0438\u043b\u0438 \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0418\u0411 \u0442\u0440\u0430\u0442\u0438\u0442 \u0443\u0439\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0441\u0438\u043b, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u0441\u0435\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u043e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437, \u043e\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u043d\u043e \u0434\u0430\u0436\u0435 \u044d\u0442\u043e \u043d\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u0421\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043d\u0435\u0441\u0442\u0438 \u0437\u0430 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f. \u041a\u0430\u043a \u0447\u0430\u0441\u0442\u043e \u0432\u044b \u043b\u043e\u0432\u0438\u043b\u0438 \u0441\u0435\u0431\u044f \u043d\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95621,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95620","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd471. \u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411. \u0411\u043e\u0440\u044c\u0431\u0430 \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u043c | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-01T05:45:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-01T05:45:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd471. Obuka korisnika o osnovama informacijske sigurnosti. Borba protiv phishinga | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd471. \u041e\u0431\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0441\u043d\u043e\u0432\u0430\u043c \u0418\u0411. \u0411\u043e\u0440\u044c\u0431\u0430 \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u043c | ProHoster","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/1-obuchenie-polzovatelej-osnovam-ib-borba-s-fishingom","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-01T05:45:10+00:00","article:modified_time":"2020-10-01T05:45:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95620","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:02:17","updated":"2022-09-27 14:57:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/95620","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=95620"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/95620\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/95621"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=95620"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=95620"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=95620"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}