![\"1.](\"\/wp-content\/uploads\/2020\/10\/75034c513ef3ce93bc27afe604afdba1.JPG\")
<\/p>\n<\/p>\n
Aktualisht, nj\u00eb administrator rrjeti ose inxhinier i siguris\u00eb shpenzon shum\u00eb koh\u00eb dhe energji p\u00ebr t\u00eb mbrojtur perimetrin e rrjetit t\u00eb nd\u00ebrmarrjes nga k\u00ebrc\u00ebnime t\u00eb ndryshme, duke m\u00ebsuar sisteme gjithnj\u00eb e m\u00eb t\u00eb reja p\u00ebr parandalimin dhe monitorimin e ngjarjeve, por as kjo nuk i garanton atij mbrojtje t\u00eb plot\u00eb. Inxhinieria sociale p\u00ebrdoret aktivisht nga sulmuesit dhe mund t\u00eb sjell\u00eb pasoja t\u00eb r\u00ebnda.<\/p>\n
Sa her\u00eb e keni kapur veten teksa mendonit: \u201cDo t\u00eb ishte mir\u00eb t\u00eb b\u00ebnim nj\u00eb kontroll p\u00ebr stafin p\u00ebr shkall\u00ebn e njohurive n\u00eb sigurin\u00eb e informacionit\u201d? P\u00ebr fat t\u00eb keq, mendimet p\u00ebrplasen me nj\u00eb mur t\u00eb moskuptimit p\u00ebr shkak t\u00eb numrit t\u00eb madh t\u00eb detyrave apo kufizimeve t\u00eb koh\u00ebs n\u00eb dit\u00ebn e pun\u00ebs. Ne planifikojm\u00eb t'ju tregojm\u00eb p\u00ebr produktet dhe teknologjit\u00eb moderne n\u00eb fush\u00ebn e automatizimit t\u00eb trajnimit t\u00eb stafit, t\u00eb cilat nuk do t\u00eb k\u00ebrkojn\u00eb p\u00ebrgatitje t\u00eb gjat\u00eb p\u00ebr t\u00eb realizuar prova ose implementime, por gjith\u00e7ka do t\u00eb jet\u00eb n\u00eb rregull.<\/p>\n
Aktualisht, mbi 80% e skedar\u00ebve malware shp\u00ebrndahen p\u00ebrmes post\u00ebs elektronike (t\u00eb dh\u00ebnat e marra nga raportet e specialist\u00ebve t\u00eb Check Point gjat\u00eb vitit t\u00eb fundit me ndihm\u00ebn e sh\u00ebrbimit Intelligence Reports).<\/p>\n
![\"1.](\"\/wp-content\/uploads\/2020\/10\/db65c5e2a78dc046e46a006af473516a.JPG\")
Raporti p\u00ebr 30 dit\u00ebt e fundit mbi drejtimet e sulmeve p\u00ebr shp\u00ebrndarjen e skedar\u00ebve t\u00eb d\u00ebmsh\u00ebm (Rusia) \u2014 Check Point<\/p>\n
Kjo tregon se p\u00ebrmbajtja n\u00eb mesazhet e post\u00ebs elektronike \u00ebsht\u00eb e mjaftueshme p\u00ebr t\u2019u shfryt\u00ebzuar nga sulmuesit. N\u00ebse shqyrtojm\u00eb format m\u00eb t\u00eb njohura t\u00eb skedar\u00ebve malware n\u00eb bashk\u00ebngjitje (EXE, RTF, DOC), vlen t\u00eb p\u00ebrmendet se ato zakonisht p\u00ebrmbajn\u00eb elemente automatike p\u00ebr ekzekutimin e kodit (skripte, makros).<\/p>\n
![\"1.](\"\/wp-content\/uploads\/2020\/10\/a6d1d2d8f374250104e156381b002ea1.JPG\")
Raporti vjetor mbi format e skedar\u00ebve n\u00eb mesazhet e d\u00ebmshme t\u00eb marra \u2014 Check Point<\/p>\n
Si t\u00eb luftojm\u00eb k\u00ebt\u00eb vektor sulmi? Kontrolli i post\u00ebs p\u00ebrfshin p\u00ebrdorimin e mjeteve t\u00eb siguris\u00eb: <\/p>\n
Antivirus<\/strong> \u2014 zbuluar e k\u00ebrc\u00ebnimeve p\u00ebrmes n\u00ebnshkrimeve.<\/p>\n<\/li>\n Emulimi<\/strong> \u2014 sandboxes, me ndihm\u00ebn e t\u00eb cilave bashk\u00ebngjitjet hapen n\u00eb nj\u00eb mjedis t\u00eb izoluar.<\/p>\n<\/li>\n Njoftimi p\u00ebr P\u00ebrmbajtjen <\/strong>\u2014 nxjerrja e elementeve aktiv\u00eb nga dokumentet. P\u00ebrdoruesi merr nj\u00eb dokument t\u00eb pastruar (zakonisht n\u00eb format PDF).<\/p>\n<\/li>\n AntiSpam<\/strong> \u2014 kontrolli i reputacionit t\u00eb domenit t\u00eb marr\u00ebsit\/d\u00ebrguesit.<\/p>\n<\/li>\n<\/ul>\n Dhe, teorikisht, kjo \u00ebsht\u00eb e mjaftueshme, por ka nj\u00eb burim tjet\u00ebr t\u00eb vlefsh\u00ebm p\u00ebr kompanin\u00eb \u2014 t\u00eb dh\u00ebnat e korporatave dhe personale t\u00eb punonj\u00ebsve. N\u00eb vitet e fundit ka pasur nj\u00eb rritje t\u00eb madhe n\u00eb popullaritetin e llojit t\u00eb ndalimit n\u00eb internet:<\/p>\n Phishing<\/u><\/strong> (angl. phishing, from fishing \u2014 fishing) \u2014 a type of internet fraud. Its goal is to obtain users' identification data. This includes the theft of passwords, credit card numbers, bank account information, and other confidential details.<\/p>\n Criminals are improving their phishing attack methods, redirecting DNS requests from popular websites, and launching entire campaigns using social engineering to send emails. <\/p>\n Thus, to protect your corporate email from phishing, it is recommended to apply two approaches, and their combined use leads to the best results:<\/p>\n Technical protection tools<\/strong>. As previously mentioned, various technologies are used to verify and forward only legitimate emails.<\/p>\n<\/li>\n Theoretical training of personnel<\/strong>. This involves comprehensive testing of staff to identify potential victims. Subsequently, their retraining is conducted, and statistics are continually recorded. <\/p>\n<\/li>\n<\/ol>\n Today we will discuss the second approach to preventing phishing attacks, namely automated training of staff to enhance the overall security level of corporate and personal data. Why can this be so dangerous?<\/p>\n Inxhinieria sociale <\/u><\/strong>\u2014 manipulimi psikologjik i njer\u00ebzve me q\u00ebllim p\u00ebr t\u00eb kryer veprime t\u00eb caktuara ose p\u00ebr t\u00eb zbuluar informacion t\u00eb besuesh\u00ebm (p\u00ebr t'u aplikuar n\u00eb sigurin\u00eb e informacionit).<\/p>\n Let's turn to an intriguing flowchart that briefly shows the process of conducting a phishing campaign. It contains various stages:<\/p>\n Collection of primary data.<\/p>\n In the 21st century, it is hard to find a person who is not registered on any social networks or various thematic forums. Naturally, many of us provide extensive information about ourselves: current job, group for colleagues, phone, email, etc. Add personalized information about a person's interests, and you have data to create a phishing template. Even if it is not possible to find people with such information, there is always a company's website from which you can gather all the information you are interested in (domain email, contacts, connections).<\/p>\n<\/li>\n Campaign launch.<\/p>\n Pasi do t\u00eb p\u00ebrgatitet \"plani i veprimit\", mund t\u00eb nisni fushat\u00ebn tuaj t\u00eb targetimit t\u00eb phishing me ndihm\u00ebn e mjeteve falas ose me pages\u00eb. Gjat\u00eb zhvillimit t\u00eb fushat\u00ebs do t\u00eb grumbullohet statistika: email i d\u00ebrguar, email i hapur, klikime n\u00eb lidhje, hyrje t\u00eb kredencialeve, etj.<\/p>\n<\/li>\n<\/ol>\n Phishing mund t\u00eb p\u00ebrdoret nga keqb\u00ebr\u00ebsit, por edhe nga punonj\u00ebsit e sigurimit t\u00eb informacionit n\u00eb kompani, me q\u00ebllim zhvillimin e nj\u00eb auditimi t\u00eb vazhduesh\u00ebm t\u00eb sjelljes s\u00eb punonj\u00ebsve. \u00c7far\u00eb ofron tregu i zgjidhjeve falas dhe tregtare p\u00ebr sistemet automatizuar t\u00eb trajnimit t\u00eb punonj\u00ebsve:<\/p>\n![\"1.](\"\/wp-content\/uploads\/2020\/10\/64ed74d70fe7a573c5e14cc03ebef33a.JPG\")
<\/p>\n\n
Trust but verify<\/h2>\n
![\"1.](\"\/wp-content\/uploads\/2020\/10\/97f19afc49a5101d20cebabe040073a1.JPG\")
Typical scenario of a phishing attack deployment<\/p>\n\n
Produkte n\u00eb treg<\/h2>\n
\n