![\"1.](\"\/wp-content\/uploads\/2020\/10\/75034c513ef3ce93bc27afe604afdba1.JPG\")
<\/p>\n<\/p>\n
Aktualisht, administrator\u00ebt e rrjetit ose inxhinier\u00ebt e siguris\u00eb s\u00eb informacionit harxhojn\u00eb shum\u00eb koh\u00eb dhe energji p\u00ebr t\u00eb mbrojtur perimetrin e rrjetit t\u00eb biznesit nga k\u00ebrc\u00ebnime t\u00eb ndryshme, duke u njohur me sisteme t\u00eb reja p\u00ebr parandalimin dhe monitorimin e ngjarjeve, por edhe kjo nuk garanton mbrojtje t\u00eb plot\u00eb. Ingenieria sociale p\u00ebrdoret aktivisht nga keqb\u00ebr\u00ebsit dhe mund t\u00eb sjell\u00eb pasoja serioze.<\/p>\n
Sa shpesh keni menduar: \u201cDo t\u00eb ishte mir\u00eb t\u00eb organizonim nj\u00eb verifikim p\u00ebr stafin p\u00ebr nivelin e dituris\u00eb n\u00eb sigurin\u00eb e informacionit\u201d? Fatkeq\u00ebsisht, mendimet hasin n\u00eb nj\u00eb mur moskuptimi p\u00ebr shkak t\u00eb numrit t\u00eb madh t\u00eb detyrave ose kufizimit t\u00eb koh\u00ebs n\u00eb dit\u00ebn e pun\u00ebs. Ne planifikojm\u00eb t'ju flasim p\u00ebr produktet dhe teknologjit\u00eb moderne n\u00eb fush\u00ebn e automatizimit t\u00eb trajnimeve p\u00ebr stafin, t\u00eb cilat nuk k\u00ebrkojn\u00eb p\u00ebrgatitje t\u00eb gjat\u00eb p\u00ebr zbatimin e pilot\u00ebve ose implementimin, por p\u00ebr gjith\u00e7ka n\u00eb radh\u00eb.<\/p>\n
Aktualisht, m\u00eb shum\u00eb se 80% e skedar\u00ebve keqdash\u00ebs shp\u00ebrndahen p\u00ebrmes post\u00ebs (t\u00eb dh\u00ebnat jan\u00eb marr\u00eb nga raportet e specialist\u00ebve t\u00eb Check Point n\u00eb vitin e fundit p\u00ebrmes sh\u00ebrbimit Intelligence Reports).<\/p>\n
![\"1.](\"\/wp-content\/uploads\/2020\/10\/db65c5e2a78dc046e46a006af473516a.JPG\")
Raporti p\u00ebr 30 dit\u00ebt e fundit mbi drejtimin e sulmeve lidhur me shp\u00ebrndarjen e skedar\u00ebve t\u00eb d\u00ebmsh\u00ebm (Rusia) \u2014 Check Point<\/p>\n
Kjo tregon se p\u00ebrmbajtja e mesazheve n\u00eb post\u00eb \u00ebsht\u00eb mjaft e prekshme p\u00ebr p\u00ebrdorimin nga ana e keqb\u00ebr\u00ebsve. N\u00ebse shqyrtojm\u00eb format m\u00eb t\u00eb njohura t\u00eb skedar\u00ebve keqdash\u00ebs n\u00eb bashk\u00ebngjitje (EXE, RTF, DOC), vlen t\u00eb theksohet se ato zakonisht p\u00ebrmbajn\u00eb elemente automatike t\u00eb ekzekutimit t\u00eb kodit (skripte, makro).<\/p>\n
![\"1.](\"\/wp-content\/uploads\/2020\/10\/a6d1d2d8f374250104e156381b002ea1.JPG\")
Raporti vjetor mbi formatet e skedareve n\u00eb mesazhet e marra t\u00eb d\u00ebmshme \u2014 Check Point<\/p>\n
Si t\u00eb luftojm\u00eb k\u00ebt\u00eb vektor sulmesh? Kontrolli i post\u00ebs p\u00ebrfshin p\u00ebrdorimin e mjeteve t\u00eb siguris\u00eb: <\/p>\n
Antivirus<\/strong> \u2014 zbulimi i mjeteve p\u00ebrmes n\u00ebnshkrimit t\u00eb k\u00ebrc\u00ebnimeve.<\/p>\n<\/li>\n Emulimi<\/strong> \u2014 nj\u00eb sandboxes, me ndihm\u00ebn e s\u00eb cil\u00ebs bashk\u00ebngjitjet hapen n\u00eb nj\u00eb ambient t\u00eb izoluar.<\/p>\n<\/li>\n Nd\u00ebrgjegj\u00ebsimi p\u00ebr p\u00ebrmbajtjen <\/strong>\u2014 nxjerrja e elementeve aktive nga dokumentet. P\u00ebrdoruesi merr nj\u00eb dokument t\u00eb pastruar (zakonisht\u00eb n\u00eb formatin PDF).<\/p>\n<\/li>\n AntiSpam<\/strong> \u2014 kontrolli i reputacionit t\u00eb domenit t\u00eb marr\u00ebsit\/d\u00ebrguesit.<\/p>\n<\/li>\n<\/ul>\n Dhe, n\u00eb teori, kjo \u00ebsht\u00eb e mjaftueshme, por ekziston edhe nj\u00eb burim tjet\u00ebr po aq t\u00eb \u00e7muar p\u00ebr kompanin\u00eb \u2014 t\u00eb dh\u00ebnat korporative dhe personale t\u00eb punonj\u00ebsve. N\u00eb vitet e fundit ka pasur nj\u00eb rritje t\u00eb madhe t\u00eb popullaritetit t\u00eb llojeve t\u00eb tjera t\u00eb mashtrimeve n\u00eb internet:<\/p>\n Phishing<\/u><\/strong> (angl. phishing, nga fishing \u2014 peshkimi) \u2014 nj\u00eb lloj mashtrimi n\u00eb internet. Q\u00ebllimi i tij \u00ebsht\u00eb t\u00eb marr\u00eb t\u00eb dh\u00ebnat identifikuese t\u00eb p\u00ebrdoruesve. K\u00ebtu p\u00ebrfshihet vjedhja e fjal\u00ebkalimeve, numrave t\u00eb kartave t\u00eb kreditit, llogarive bankare dhe informacionit tjet\u00ebr konfidencial.<\/p>\n K\u00ebrc\u00ebnuesit po p\u00ebrmir\u00ebsojn\u00eb metodat e sulmeve t\u00eb phishing, duke drejtuar DNS k\u00ebrkesat nga faqet e njohura, duke zhvilluar gjith\u00eb fushata duke p\u00ebrdorur inxhinierin\u00eb sociale p\u00ebr t\u00eb d\u00ebrguar letra. <\/p>\n Prandaj, p\u00ebr t\u00eb mbrojtur post\u00ebn tuaj korporative nga phishing, rekomandohet t\u00eb p\u00ebrdoren dy qasje, nd\u00ebrsa p\u00ebrdorimi i tyre i p\u00ebrbashk\u00ebt \u00e7on n\u00eb rezultate m\u00eb t\u00eb mira:<\/p>\n Mjetet teknike t\u00eb mbrojtjes<\/strong>. Si\u00e7 u p\u00ebrmend m\u00eb par\u00eb, p\u00ebrdoren teknologji t\u00eb ndryshme p\u00ebr t\u00eb verifikuar dhe d\u00ebrguar vet\u00ebm post\u00eb legjitime.<\/p>\n<\/li>\n P\u00ebrgatitja teorike e stafit<\/strong>. Kjo p\u00ebrfshin testimin e gjith\u00ebp\u00ebrfshir\u00ebs t\u00eb stafit p\u00ebr t\u00eb identifikuar viktimat e mundshme. M\u00eb pas, zhvillohet ritraining-i i tyre, duke regjistruar vazhdimisht statistikat. <\/p>\n<\/li>\n<\/ol>\n Sot do t\u00eb flasim p\u00ebr qasjen e dyt\u00eb p\u00ebr parandalimin e sulmeve t\u00eb phishing, dmth. p\u00ebrvet\u00ebsimin automatizues t\u00eb stafit me q\u00ebllim rritjen e nivelit t\u00eb p\u00ebrgjithsh\u00ebm t\u00eb mbrojtjes s\u00eb t\u00eb dh\u00ebnave korporative dhe personale. Pse kjo mund t\u00eb jet\u00eb kaq e rrezikshme?<\/p>\n Inxhinieria sociale <\/u><\/strong>\u2014 manipulimi psikologjik i njer\u00ebzve me q\u00ebllim q\u00eb t\u00eb kryejn\u00eb veprime t\u00eb caktuara ose t\u00eb zbulojn\u00eb informacione konfidenciale (n\u00eb lidhje me Sigurin\u00eb e Informacionit).<\/p>\n Le t\u00eb referohemi n\u00eb nj\u00eb diagram t\u00ebrheq\u00ebs, q\u00eb shfaq shkurtimisht rrug\u00ebtimin e promovimit t\u00eb nj\u00eb fushate phishing. Ajo ka faza t\u00eb ndryshme:<\/p>\n Mblidhja e t\u00eb dh\u00ebnave fillestare.<\/p>\n N\u00eb shekullin 21 \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb gjejm\u00eb ndonj\u00eb person q\u00eb nuk \u00ebsht\u00eb regjistruar n\u00eb asnj\u00eb rrjet social ose n\u00eb forume t\u00eb ndryshme tematike. Natyrisht, shum\u00eb prej nesh l\u00ebn\u00eb informacion t\u00eb holl\u00ebsish\u00ebm p\u00ebr veten: vendi i pun\u00ebs aktual, grupi p\u00ebr koleg\u00ebt, telefoni, posta etj. Shtoni k\u00ebtu informacionin e personalizuar mbi interesat e personit dhe do t\u00eb merrni t\u00eb dh\u00ebna p\u00ebr formimin e nj\u00eb shablli phishing. Edhe n\u00ebse nuk arrit\u00ebt t\u00eb gjeni njer\u00ebz me k\u00ebt\u00eb informacion, gjithmon\u00eb ka nj\u00eb faqe kompanie, nga e cila mund t\u00eb merrni t\u00eb gjith\u00eb informacionin q\u00eb na intereson (posta e domain-it, kontaktet, lidhjet).<\/p>\n<\/li>\n Nisja e fushat\u00ebs.<\/p>\n Pasi p\u00ebrgatitet \"platforma\", me ndihm\u00ebn e mjeteve falas ose me pages\u00eb, mund t\u00eb filloni fushat\u00ebn tuaj t\u00eb synuar t\u00eb phishing-ut. Gjat\u00eb pun\u00ebs s\u00eb shp\u00ebrndarjes, do t\u00eb grumbullohen statistikat: email t\u00eb d\u00ebrguar, email t\u00eb hapur, klikime n\u00eb lidhje, futje t\u00eb kredencialeve etj.<\/p>\n<\/li>\n<\/ol>\n Phishing-u mund t\u00eb p\u00ebrdoret si nga keqb\u00ebr\u00ebsit ashtu edhe nga punonj\u00ebsit e siguris\u00eb s\u00eb informacionit t\u00eb kompanis\u00eb, me q\u00ebllim q\u00eb t\u00eb kryhet nj\u00eb auditim i vazhduesh\u00ebm i sjelljes s\u00eb punonj\u00ebsve. \u00c7far\u00eb na ofron tani tregu i zgjidhjeve falas dhe komerciale p\u00ebr sistemet e automatizuara t\u00eb trajnimit t\u00eb punonj\u00ebsve t\u00eb kompanis\u00eb:<\/p>\n![\"1.](\"\/wp-content\/uploads\/2020\/10\/64ed74d70fe7a573c5e14cc03ebef33a.JPG\")
<\/p>\n\n
Mos beso dhe kontrollo<\/h2>\n
![\"1.](\"\/wp-content\/uploads\/2020\/10\/97f19afc49a5101d20cebabe040073a1.JPG\")
Skema tipike e skenarit t\u00eb zhvillimit t\u00eb nj\u00eb sulmi phishing<\/p>\n\n
Produkte n\u00eb treg<\/h2>\n
\n