V\u00e1\u017een\u00e9 kolegyn\u011b, v\u00e1\u017een\u00ed kolegov\u00e9,<\/p>\n
v \u010dervnov\u00e9m vyd\u00e1n\u00ed Cyber News se pod\u00edv\u00e1me na re\u00e1lnou bezpe\u010dnostn\u00ed ud\u00e1lost, kter\u00e1 dob\u0159e ukazuje, pro\u010d m\u00e1 pravideln\u00fd Kybertr\u00e9nink smysl. Ne\u0161lo o teoretick\u00fd p\u0159\u00edklad ani o p\u0159ipravenou simulaci, ale o skute\u010dn\u00fd pokus o z\u00edsk\u00e1n\u00ed p\u0159\u00edstupov\u00fdch \u00fadaj\u016f.<\/p>\n
Jeden z na\u0161ich dodavatel\u016f m\u011bl napaden\u00fd web a e-mailov\u00fd server. \u00dato\u010dn\u00edk toho vyu\u017eil a za\u010dal jeho jm\u00e9nem rozes\u00edlat podvodn\u00e9 e-maily z\u00e1kazn\u00edk\u016fm, v\u010detn\u011b n\u00e1s. Zpr\u00e1va sice obsahovala podez\u0159el\u00e9 prvky, ale mohla p\u016fsobit v\u011brohodn\u011bji pr\u00e1v\u011b proto, \u017ee p\u0159i\u0161la od zn\u00e1m\u00e9ho dodavatele.<\/p>\n
Tentokr\u00e1t ne\u0161lo o klasick\u00fd sc\u00e9n\u00e1\u0159 typu \u201ezapla\u0165te fakturu na nov\u00fd \u00fa\u010det\u201c. C\u00edlem bylo p\u0159im\u011bt p\u0159\u00edjemce ke kliknut\u00ed na odkaz a zad\u00e1n\u00ed p\u0159\u00edstupov\u00fdch \u00fadaj\u016f.<\/p>\n
Pr\u00e1v\u011b tady se uk\u00e1zalo, \u017ee Kybertr\u00e9nink nen\u00ed jen formalita. D\u00edky tomu, \u017ee si podobn\u00e9 situace pravideln\u011b zkou\u0161\u00edme nane\u010disto, jsme l\u00e9pe p\u0159ipraveni i na skute\u010dn\u00e9 \u00fatoky. Jeden ze zam\u011bstnanc\u016f zpr\u00e1vu vyhodnotil jako podez\u0159elou a nahl\u00e1sil ji bezpe\u010dnostn\u00edmu t\u00fdmu k prov\u011b\u0159en\u00ed.<\/p>\n
N\u00e1sledn\u00e9 ov\u011b\u0159en\u00ed uk\u00e1zalo, \u017ee nejde o na\u0161i simulaci. Sta\u010dil jeden telefon\u00e1t dodavateli a bylo jasno: skute\u010dn\u011b se stal ob\u011bt\u00ed \u00fatoku. Potvrdil, \u017ee jeho web i e-mailov\u00fd server byly napadeny, a za vzniklou situaci se omluvil.<\/p>\n
D\u00edky v\u010dasn\u00e9mu nahl\u00e1\u0161en\u00ed jsme mohli rychle reagovat: upozornili jsme zam\u011bstnance, kter\u00fdm mohl b\u00fdt tento e-mail doru\u010den, prov\u011b\u0159ili jsme jeho v\u00fdskyt v e-mailov\u00e9m prost\u0159ed\u00ed a sledovali, zda se neobjevuj\u00ed dal\u0161\u00ed souvisej\u00edc\u00ed zpr\u00e1vy.<\/p>\n
V\u00fdsledek? Pokus se poda\u0159ilo zachytit hned v z\u00e1rodku.<\/p>\n
Tento p\u0159\u00edpad ukazuje, \u017ee kybernetick\u00e9 \u00fatoky se ned\u011bj\u00ed jen \u201en\u011bkde jinde\u201c. Mohou p\u0159ij\u00edt i od zn\u00e1m\u00e9ho dodavatele nebo obchodn\u00edho partnera, pokud byla jeho infrastruktura napadena.<\/p>\n
Proto plat\u00ed: pokud v\u00e1m e-mail p\u0159ipad\u00e1 podez\u0159el\u00fd, obsahuje ne\u010dekan\u00fd odkaz, \u017e\u00e1d\u00e1 p\u0159ihl\u00e1\u0161en\u00ed nebo p\u016fsob\u00ed jinak ne\u017e obvykle, neklikejte automaticky. Rad\u011bji ho nahlaste nebo si po\u017eadavek ov\u011b\u0159te jin\u00fdm komunika\u010dn\u00edm kan\u00e1lem, jako se stalo v tomto p\u0159\u00edpad\u011b.<\/p>\n
D\u011bkujeme v\u0161em, kte\u0159\u00ed podobn\u00e9 situace nepodce\u0148uj\u00ed. Pod\u011bkov\u00e1n\u00ed pat\u0159\u00ed zejm\u00e9na t\u011bm, kte\u0159\u00ed zpr\u00e1vu vyhodnotili jako podez\u0159elou, nahl\u00e1sili ji a pomohli t\u00edm spustit v\u010dasnou reakci. Pr\u00e1v\u011b takov\u00e1 v\u0161\u00edmavost chr\u00e1n\u00ed nejen jednotlivce, ale celou spole\u010dnost.<\/p>\n","protected":false},"excerpt":{"rendered":"
V\u00e1\u017een\u00e9 kolegyn\u011b, v\u00e1\u017een\u00ed kolegov\u00e9, v \u010dervnov\u00e9m vyd\u00e1n\u00ed Cyber News se pod\u00edv\u00e1me na re\u00e1lnou bezpe\u010dnostn\u00ed ud\u00e1lost, kter\u00e1 dob\u0159e ukazuje, pro\u010d m\u00e1 pravideln\u00fd Kybertr\u00e9nink smysl. Ne\u0161lo o teoretick\u00fd p\u0159\u00edklad ani o p\u0159ipravenou simulaci, ale o skute\u010dn\u00fd pokus o z\u00edsk\u00e1n\u00ed p\u0159\u00edstupov\u00fdch \u00fadaj\u016f. Jeden z na\u0161ich dodavatel\u016f m\u011bl napaden\u00fd web a e-mailov\u00fd server. \u00dato\u010dn\u00edk toho vyu\u017eil a za\u010dal jeho jm\u00e9nem […]<\/p>\n","protected":false},"author":53,"featured_media":876,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-873","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nezarazene"],"acf":[],"_links":{"self":[{"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/posts\/873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/comments?post=873"}],"version-history":[{"count":1,"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/posts\/873\/revisions"}],"predecessor-version":[{"id":874,"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/posts\/873\/revisions\/874"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/media\/876"}],"wp:attachment":[{"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/media?parent=873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/categories?post=873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kyberbezpecnost.ttc.cz\/cs\/wp-json\/wp\/v2\/tags?post=873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}