{"id":9040,"date":"2020-04-14T13:09:48","date_gmt":"2020-04-14T11:09:48","guid":{"rendered":"https:\/\/sii.pl\/blog\/?p=9040"},"modified":"2023-10-18T12:20:41","modified_gmt":"2023-10-18T10:20:41","slug":"czym-jest-phishing","status":"publish","type":"post","link":"https:\/\/sii.pl\/blog\/czym-jest-phishing\/","title":{"rendered":"Czym jest Phishing?"},"content":{"rendered":"\n

W przeci\u0105gu ostatniej dekady, ilo\u015b\u0107 atak\u00f3w na nasze konta osobiste <\/span><\/span>wzros\u0142a drastycznie<\/span><\/span>. Automatyzacja oraz nowe technologie <\/span><\/span>pomagaj\u0105 hackerom<\/span><\/span> w \u0142atwym dotarciu do wielu u\u017cytkownik\u00f3w. <\/span><\/span>Jednocze\u015bnie portale i banki coraz bardziej chroni\u0105 u\u017cytkownik\u00f3w wielowarstwowymi systemami obronnymi. <\/span><\/span>Pytanie tylko – p<\/span><\/span>o co <\/span><\/span>traci\u0107 godziny i dni <\/span><\/span>aby<\/span><\/span> w\u0142ama\u0107 <\/span><\/span>si\u0119 <\/span><\/span>na konto, skoro <\/span><\/span>przy drobinie <\/span><\/span>perswazji<\/span><\/span> <\/span><\/span>u\u017cytkownik <\/span><\/span>sam poda nam swoje has\u0142o<\/span><\/span>?<\/span><\/span><\/p>\n\n\n\n

Atak typu <\/span><\/span>Phishing<\/span><\/span><\/strong> <\/strong>polega na tym, \u017ce atakuj\u0105cy <\/span><\/span>udaje<\/span><\/span> znan\u0105 nam firm\u0119 lub osob\u0119 i pr\u00f3buje wyci\u0105gn\u0105\u0107 od nas informacje. Najcz\u0119\u015bciej atakuj\u0105cy podszywa si\u0119 pod bank, serwisy<\/span><\/span> internetowe<\/span><\/span> jak <\/span><\/span>Netflix<\/span><\/span> albo zwyczajnie za<\/span><\/span> naszych znajomych<\/span><\/span> czy koleg\u00f3w z pracy. <\/span><\/span>Wysy\u0142ane s\u0105 e-maile, SMS-y oraz wiadomo\u015bci na portalach spo\u0142eczno\u015bciowy jak Facebook.<\/span><\/span> <\/span>
<\/span>
<\/span>W jaki spos\u00f3b atakuj\u0105cy \u201e<\/span><\/span>przekona<\/span><\/span><\/em>\u201d nas, \u017ceby\u015bmy wykonali to, o co prosi? Rutyna i brak uwagi na pewno nam nie pomog\u0105. Najwa\u017cniejszy jest zdrowy rozs\u0105dek i czujno\u015b\u0107 przy weryfikacji wiadomo\u015bci. <\/span><\/span>Jest wiele detali, kt\u00f3re zdradzaj\u0105 atakuj\u0105cego. <\/span><\/span><\/p>\n\n\n\n

Przyk\u0142adowy email-phishing<\/span><\/span><\/h2>\n\n\n\n
\"Wiadomo\u015b\u0107<\/a><\/figure>\n\n\n\n
<\/div>\n\n\n\n

1.<\/span><\/span>\u00a0<\/span><\/span>W nag\u0142\u00f3wku brakuje naszego adresu email.
<\/span><\/span><\/strong>Jest to rezultat wys\u0142ania wiadomo\u015bci do setek jak nie tysi\u0119cy r\u00f3\u017cnych os\u00f3b. Je\u015bli nie zostaliby \u201ewrzuceni\u201d do pola\u00a0<\/span><\/span>Ukryt<\/span><\/span>y<\/span><\/span>\u00a0Odbiorc<\/span><\/span>a<\/span><\/span>, \u0142atwo by\u015bmy to zauwa\u017cyli maj\u0105c ogromn\u0105 ilo\u015b\u0107 odbiorc\u00f3w w nag\u0142\u00f3wku.<\/span><\/span>
<\/span>
<\/span>2.<\/span><\/span><\/strong>\u00a0Adres zwrotny pochodzi z dziwnej domeny.
<\/strong><\/span><\/span>Je\u015bli wybierzemy \u201eOdpowiedz\u201d, to wiadomo\u015b\u0107 zostanie wys\u0142ana do atakuj\u0105cego. Dobry\u00a0<\/span><\/span>spos\u00f3b<\/span><\/span>\u00a0aby pozosta\u0107 niezauwa\u017conym.<\/span><\/span>
<\/span>
<\/span>3.<\/span><\/span>\u00a0<\/span><\/span>Rozmazane obrazki.
<\/span><\/span><\/strong>Aby wiadomo\u015b\u0107 by\u0142a \u201elekka\u201d i szybko dotar\u0142a do wielu odbiorc\u00f3w, jako\u015b\u0107 obrazk\u00f3w jest cz\u0119sto znacznie gorsza.\u00a0<\/span><\/span>\u00a0<\/span>
<\/span>
4.<\/span><\/span>\u00a0<\/span><\/span>Agresywne s\u0142ownictwo\/gro\u017cenie.
<\/span><\/span><\/strong>Ponaglanie oraz zastraszanie to najprostsze i najskuteczniejsze metody wp\u0142yni\u0119cia na odbiorc\u0119. W ten spos\u00f3b<\/span><\/span>\u00a0istnieje<\/span><\/span>\u00a0wi\u0119ksza szansa, \u017ce post\u0105pimy\u00a0<\/span><\/span>nierozwa\u017cnie<\/span><\/span>.<\/span><\/span>\u00a0<\/span>
<\/span>
5.\u00a0<\/span><\/span>Zwroty og\u00f3lne bez p\u0142ci<\/span><\/span>, brak naszego imienia.
<\/span><\/span><\/strong>Dok\u0142adnie ten sam e-mail prawdopodobnie poszed\u0142 do wielu odbiorc\u00f3w. Naj\u0142atwiej dla atakuj\u0105cego nie u\u017cywa\u0107 imion ani nie sugerowa\u0107 p\u0142ci odbiorcy.\u00a0<\/span><\/span>\u00a0<\/span>
<\/span>
6. Link do\u00a0<\/span><\/span>strony<\/span><\/span>.
<\/span><\/span><\/strong>Najwa\u017cniejszy czynnik w ataku typu\u00a0<\/span><\/span>Phishing<\/span><\/span>. Jest to link do fa\u0142szywej strony<\/strong>. Klikaj\u0105c w niego nara\u017camy nasz komputer oraz dane na nim zawarte na\u00a0<\/span><\/span>wyciek<\/span><\/span>\u00a0do atakuj\u0105cego. Nie mamy poj\u0119cia gdzie nas zaprowadzi.\u00a0<\/span><\/span>\u00a0<\/span>
<\/span>Aby\u00a0<\/span><\/span>zweryfikowa\u0107<\/span><\/span>\u00a0gdzie prowadzi link, wystarczy najecha\u0107 na niego kursorem:<\/strong><\/span><\/span><\/p>\n\n\n\n

\"adres<\/a><\/figure>\n\n\n\n
<\/div>\n\n\n\n

Pod danym linkiem najcz\u0119\u015bciej chowa si\u0119 fa\u0142szywa strona, kt\u00f3ra wygl\u0105da niemal identycznie jak prawdziwa.\u00a0R\u00f3\u017cnica jest taka, \u017ce na g\u00f3rze widzimy inny adres:<\/strong><\/span><\/span><\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Gdy wpiszemy\u00a0login i has\u0142o,\u00a0zostan\u0105 one wys\u0142ane prosto do atakuj\u0105cego!\u00a0<\/strong><\/p>\n\n\n\n

Jak si\u0119 broni\u0107?<\/span><\/span><\/span><\/h2>\n\n\n\n

1.\u00a0Nie odpisywa\u0107 na takie wiadomo\u015bci\u00a0<\/span>
2.\u00a0Sprawdzi\u0107 nadawc\u0119 w wyszukiwarce Google\u00a0<\/span>
3.\u00a0Nie wchodzi\u0107 w linki, kt\u00f3re budz\u0105 w\u0105tpliwo\u015bci\u00a0<\/span>
4. Mo\u017cemy zweryfikowa\u0107 link, bez wchodzenia na niego. W tym celu nale\u017cy skopiowa\u0107 link (<\/span><\/span>prawy przycisk myszy\u00a0->\u00a0kopiuj adres linku<\/span><\/span><\/strong>) oraz wklei\u0107 go w darmowe skanery, typu:\u00a0\u00a0<\/span>
–\u00a0<\/span><\/span>Virus<\/span><\/span><\/strong>\u00a0Total<\/strong> –\u00a0<\/span><\/span>virustotal.com<\/span><\/span><\/em>\u00a0<\/span><\/em>
– Symantec<\/strong> –\u00a0<\/span><\/span>sitereview.bluecoat.com<\/span><\/span><\/em>\u00a0<\/span><\/em>
–\u00a0<\/span><\/span>Sucuri<\/span><\/span><\/strong>\u00a0<\/strong>–\u00a0<\/span><\/span>sitecheck.sucuri.net<\/span><\/span><\/em>\u00a0<\/span><\/em>
–\u00a0<\/span><\/span>URLscan<\/span><\/span><\/strong>\u00a0<\/strong>–\u00a0<\/span><\/span>urlscan.io<\/span><\/span><\/em>\u00a0\u2013 tutaj bez ryzyka\u00a0mo\u017cemy\u00a0zobaczy\u0107 podgl\u0105d strony\u00a0<\/span>
5.\u00a0Zweryfikowa\u0107\u00a0czy link ma prefiks HTTP<\/span><\/span>S<\/span><\/span><\/strong><\/span>. HTTP to po\u0142\u0105czenie nieszyfrowane i bez certyfikatu, a zatem podejrzane.<\/span><\/span><\/p>\n\n\n\n

Poni\u017cej rezultat skanu\u00a0<\/span><\/span>paypal.cc\/login<\/span><\/span><\/strong><\/em>\u00a0w\u00a0VirusTotal:<\/span><\/span><\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

B\u0105d\u017acie wi\u0119c czujni, zachowujcie ostro\u017cno\u015b\u0107 i zwracajcie uwag\u0119 na wszystko, co mo\u017ce \u015bwiadczy\u0107 o pr\u00f3bie <\/span><\/span>phishingu<\/span><\/span><\/strong>.<\/span><\/span>
<\/span><\/span><\/p>\n\n\n

\n \n
\n \n
\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n <\/div>\n \n
\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n <\/div>\n<\/div>\n \n\n
\n 4.7\/5 ( votes: 8) <\/div>\n <\/div>\n","protected":false},"excerpt":{"rendered":"

W przeci\u0105gu ostatniej dekady, ilo\u015b\u0107 atak\u00f3w na nasze konta osobiste wzros\u0142a drastycznie. Automatyzacja oraz nowe technologie pomagaj\u0105 hackerom w \u0142atwym dotarciu do wielu … Continued<\/a><\/p>\n","protected":false},"author":245,"featured_media":15246,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_editorskit_title_hidden":false,"_editorskit_reading_time":2,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","inline_featured_image":false,"footnotes":""},"categories":[1316],"tags":[851,899,900,898,896,895,901],"class_list":["post-9040","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-development-na-miekko","tag-cybersecurity","tag-atak","tag-hacker","tag-incydent","tag-paypal","tag-phishing","tag-scam"],"acf":[],"aioseo_notices":[],"republish_history":[],"featured_media_url":"https:\/\/sii.pl\/blog\/wp-content\/uploads\/2020\/04\/BlogersiiCovery-Cybersecurity.jpg","category_names":["Development na mi\u0119kko"],"_links":{"self":[{"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/posts\/9040"}],"collection":[{"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/users\/245"}],"replies":[{"embeddable":true,"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/comments?post=9040"}],"version-history":[{"count":2,"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/posts\/9040\/revisions"}],"predecessor-version":[{"id":25071,"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/posts\/9040\/revisions\/25071"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/media\/15246"}],"wp:attachment":[{"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/media?parent=9040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/categories?post=9040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sii.pl\/blog\/wp-json\/wp\/v2\/tags?post=9040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}