{"id":170051,"date":"2026-08-06T03:47:15","date_gmt":"2026-08-06T03:47:15","guid":{"rendered":"https:\/\/www.europesays.com\/cz\/170051\/"},"modified":"2026-08-06T03:47:15","modified_gmt":"2026-08-06T03:47:15","slug":"tady-emily-zaplatim-vam-jak-vypada-chirurgicky-presny-utok-hackeru","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/cz\/170051\/","title":{"rendered":"\u201eTady Emily, zaplat\u00edm v\u00e1m.\u201c Jak vypad\u00e1 chirurgicky p\u0159esn\u00fd \u00fatok hacker\u016f"},"content":{"rendered":"

Do pracovn\u00edch schr\u00e1nek novin\u00e1\u0159\u016f denn\u011b chod\u00ed mno\u017estv\u00ed spam\u016f i\u00a0podvodn\u00fdch zpr\u00e1v. Tenhle e-mail ale byl jin\u00fd. Za\u010dal j\u00edm \u00fatok c\u00edlen\u00fd na\u00a0\u010dlena investigativn\u00edho t\u00fdmu Seznam Zpr\u00e1v, kter\u00fd rozkr\u00fdv\u00e1 korup\u010dn\u00ed i\u00a0\u0161pion\u00e1\u017en\u00ed kauzy<\/a>.<\/p>\n

Pokud by se z\u00e1m\u011br \u00fato\u010dn\u00edk\u016f maskovan\u00fdch za akademiky povedl, s\u00e1m novin\u00e1\u0159 by si nainstaloval \u0161kodliv\u00fd k\u00f3d, kter\u00fd by mu z\u00a0po\u010d\u00edta\u010de ukradl data, hesla a\u00a0z\u00e1rove\u0148 by laptop \u00fato\u010dn\u00edci na d\u00e1lku ovl\u00e1dli a\u00a0mohli by detailn\u011b sledovat, na \u010dem report\u00e9r pracuje. <\/p>\n

K tomu ale nedo\u0161lo. M\u00edsto toho Seznam Zpr\u00e1vy p\u0159in\u00e1\u0161ej\u00ed report\u00e1\u017e o\u00a0tom, jak \u00fato\u010dn\u00edci pracuj\u00ed a\u00a0jak se pokou\u0161ej\u00ed p\u0159\u00edjemce manipulovat, aby si po\u010d\u00edta\u010d s\u00e1m nakazil. Ukazuj\u00ed se tak detaily operace, pro kterou si hacke\u0159i zaregistrovali hned n\u011bkolik internetov\u00fdch dom\u00e9n. Je p\u0159itom pravd\u011bpodobn\u00e9, \u017ee c\u00edl\u016f obdobn\u00fdch \u00fatok\u016f je v\u00edce. P\u0159edchoz\u00ed \u00fatoky u\u017e v\u00a0minulosti zp\u016fsobily po sv\u011bt\u011b miliardov\u00e9 \u0161kody.<\/p>\n

Nab\u00eddka, kter\u00e1 se neodm\u00edt\u00e1<\/p>\n

Za\u010dalo to e-mailem, kter\u00fd m\u011b m\u011bl nal\u00e1kat. Dorazil do pracovn\u00ed schr\u00e1nky od odes\u00edlatelky, kter\u00e1 se p\u0159edstavila jako Emily Tan, mana\u017eerka lidsk\u00fdch zdroj\u016f soukrom\u00e9 singapursk\u00e9 \u0161koly PSB Academy.<\/p>\n

\u201eMil\u00fd Luk\u00e1\u0161i, pro na\u0161e studenty organizujeme s\u00e9rii p\u0159edn\u00e1\u0161ek hostuj\u00edc\u00edch odborn\u00edk\u016f a\u00a0r\u00e1da bych V\u00e1s p\u0159izvala,\u201c psala \u201eEmily\u201c ve zpr\u00e1v\u011b, kter\u00e1 m\u011bla v\u00a0hlavi\u010dce ofici\u00e1ln\u00ed logo asijsk\u00e9 vzd\u011bl\u00e1vac\u00ed instituce.<\/p>\n

Bylo p\u0159itom patrn\u00e9, \u017ee \u201eEmily\u201c se p\u0159ipravila a\u00a0pokou\u0161ela se mi lichotit. Co t\u00edm sleduje, se uk\u00e1zalo naplno a\u017e pozd\u011bji.<\/p>\n

\u201eVa\u0161e pr\u00e1ce investigativn\u00edho report\u00e9ra v\u00a0Seznam Zpr\u00e1v\u00e1ch, zejm\u00e9na va\u0161e zpravodajstv\u00ed o\u00a0politick\u00e9 korupci a\u00a0st\u0159etu z\u00e1jm\u016f, nab\u00edz\u00ed student\u016fm n\u00e1zorn\u00fd pohled na to, jak d\u016fsledn\u00e1 \u017eurnalistika p\u0159iv\u00e1d\u00ed ve\u0159ejn\u011b \u010dinn\u00e9 osoby k\u00a0odpov\u011bdnosti. Zvl\u00e1\u0161t\u011b n\u00e1s zaj\u00edm\u00e1 samotn\u00e1 pr\u00e1ce, kter\u00e1 za t\u00edm stoj\u00ed: Pr\u00e1ce s\u00a0dokumenty, ov\u011b\u0159ov\u00e1n\u00ed fakt\u016f a\u00a0zodpov\u011bdn\u00e9 nakl\u00e1d\u00e1n\u00ed se zdroji,\u201c uv\u00e1d\u011bl d\u00e1le e-mail.<\/p>\n

A na z\u00e1v\u011br zasekl udi\u010dku. \u201eJe to placen\u00e1 spolupr\u00e1ce. Pokud m\u00e1te z\u00e1jem, r\u00e1da poskytnu dal\u0161\u00ed detaily,\u201c kon\u010dila zpr\u00e1vu \u201eEmily\u201c.<\/p>\n

Foto: Seznam Zpr\u00e1vy<\/p>\n

P\u00ed\u0161e Emily ze Singapuru. Aneb e-mail, kter\u00fdm to v\u0161e za\u010dalo.<\/p>\n

Dev\u011bt dn\u016f star\u00e1 e-mailov\u00e1 schr\u00e1nka<\/p>\n

Nab\u00eddky na p\u0159edn\u00e1\u0161ky \u010di lektorov\u00e1n\u00ed mi ob\u010das do e-mailu doraz\u00ed, v\u011bt\u0161inou ale z\u00a0\u010ceska, p\u0159\u00edpadn\u011b n\u011bkter\u00fdch jin\u00fdch zem\u00ed Evropy. T\u00e9m\u011b\u0159 deset\u00a0tis\u00edc kilometr\u016f vzd\u00e1len\u00fd Singapur je z\u00a0ruky, a\u00a0i proto jsem zpozorn\u011bl. A\u00a0rychle jsem odhalil n\u011bkolik h\u00e1\u010dk\u016f.<\/p>\n

E-mail toti\u017e p\u0159i\u0161el z\u00a0adresy info@hr-psb.eu. Evropsk\u00fd registr ukazuje, \u017ee odpov\u00eddaj\u00edc\u00ed dom\u00e9nu si n\u011bkdo s\u00a0e-mailem suhaahaashid630@gmail.com zabral teprve v\u00a0polovin\u011b \u010dervence. Jen dev\u011bt dn\u00ed p\u0159edt\u00edm, ne\u017e ho \u201eEmily\u201c vyu\u017eila k\u00a0tomu, aby mi svou nab\u00eddku poslala.<\/p>\n

Foto: Seznam Zpr\u00e1vy<\/p>\n

Z registru dom\u00e9n je patrn\u00e9, \u017ee e-mail si \u201eEmily\u201c zprovoznila t\u011bsn\u011b p\u0159edt\u00edm, ne\u017e z\u00a0n\u011bj napsala pozv\u00e1nku.<\/p>\n

Tak jsem se na Emily Tan je\u0161t\u011b zeptal p\u0159\u00edmo v\u00a0Singapuru. A\u00a0zjistil, \u017ee pro skute\u010dnou \u0161kolu nikdo takov\u00fd nepracuje.<\/p>\n

\u201eTato osoba nen\u00ed zam\u011bstnancem PSB Academy. Pro informaci – na\u0161e e-mailov\u00e1 dom\u00e9na je @psb-academy.edu.sg,\u201c zd\u016fraznila mluv\u010d\u00ed PSB Academy Eleanor Wong, \u017ee jejich e-maily chod\u00ed z\u00a0adresy, kter\u00e1 m\u00e1 singapurskou n\u00e1rodn\u00ed koncovku sg a\u00a0nikoliv evropskou eu.<\/p>\n

Zaplat\u00edme v\u00e1m a\u017e 70\u00a0tis\u00edc<\/p>\n

Rozhodl jsem se si s\u00a0podvodnou \u201eEmily\u201c d\u00e1le dopisovat. Se z\u00e1m\u011brem tento c\u00edlen\u00fd kyber\u00fatok l\u00e9pe zdokumentovat. \u201eD\u00edky moc za nab\u00eddku. R\u00e1d se dozv\u00edm podrobnosti,\u201c napsal jsem a\u00a0zaj\u00edmal se, zda m\u011b hodl\u00e1 pozvat p\u0159\u00edmo do Singapuru, nebo pro koho m\u00e1m vlastn\u011b p\u0159edn\u00e1\u0161et.<\/p>\n

\u201eEmily\u201c mi postupn\u011b v\u011bnovala hned 22\u00a0e-mail\u016f, kter\u00e9 uk\u00e1zaly, jak sofistikovan\u00e1 je cel\u00e1 operace s\u00a0c\u00edlem dostat se k\u00a0dat\u016fm v\u00a0m\u00e9m po\u010d\u00edta\u010di. Po celou dobu na m\u011b \u201eEmily\u201c nijak netla\u010dila. Zpr\u00e1vu za zpr\u00e1vou ale zvy\u0161ovala \u0161anci, \u017ee m\u011b skute\u010dn\u011b p\u0159esv\u011bd\u010d\u00ed, abych \u00fato\u010dn\u00edk\u016fm s\u00e1m otev\u0159el dve\u0159e do sv\u00e9ho po\u010d\u00edta\u010de.<\/p>\n

Foto: Seznam Zpr\u00e1vy<\/p>\n

Sta\u010d\u00ed ud\u011blat kr\u00e1tkou p\u0159edn\u00e1\u0161ku a\u00a0a\u017e t\u0159i\u00a0tis\u00edce dolar\u016f je va\u0161ich, psali maskovan\u00ed \u00fato\u010dn\u00edci.<\/p>\n

Na dotazy \u201eEmily\u201c odpov\u011bd\u011bla v\u00a0dlouh\u00e9 zpr\u00e1v\u011b, v\u00a0n\u00ed\u017e popsala, \u010demu se v\u011bnuje skute\u010dn\u00e1 PSB Academy a\u00a0zd\u016fraznila, \u017ee proto\u017ee teprve sestavuj\u00ed rozvrh na dal\u0161\u00ed akademick\u00fd rok, r\u00e1di mi vyjdou vst\u0159\u00edc. S\u00a0t\u00edm, \u017ee za\u010dneme nejprve p\u0159edn\u00e1\u0161kou online, tak\u017ee nebudu muset opustit Prahu, ale otev\u0159en\u00e1 je i\u00a0dal\u0161\u00ed spolupr\u00e1ce. Teprve na konci e-mailu n\u00e1sledovala nenucen\u00e1 nab\u00eddka – p\u0159edn\u00e1\u0161ka obvykle trv\u00e1 45\u00a0a\u017e 75\u00a0minut a\u00a0dostanu za ni v\u00a0p\u0159epo\u010dtu a\u017e 70\u00a0tis\u00edc korun.<\/p>\n

\u201eJako p\u0159irozen\u00fd dal\u0161\u00ed krok bych uv\u00edtala kr\u00e1tk\u00fd \u00favodn\u00ed hovor, b\u011bhem kter\u00e9ho bychom mohli probrat p\u0159\u00edpadn\u00e9 zb\u00fdvaj\u00edc\u00ed ot\u00e1zky a\u00a0naj\u00edt \u0159e\u0161en\u00ed, kter\u00e9 v\u00e1m bude dob\u0159e vyhovovat,\u201c zakon\u010dila zpr\u00e1vu Emily a\u00a0rovnou poslala odkaz na b\u011b\u017en\u011b pou\u017e\u00edvanou slu\u017ebu calendly, kde jsem si m\u011bl podle sv\u00e9 libosti zarezervovat term\u00edn online setk\u00e1n\u00ed.<\/p>\n

Z\u00e1ke\u0159n\u00e1 kachna<\/p>\n

Soud\u011b dle uv\u00e1d\u011bn\u00fdch \u010dasov\u00fdch mo\u017enost\u00ed by p\u0159itom \u201eEmily\u201c musela ke sv\u00e9 pr\u00e1ci p\u0159istupovat se zna\u010dn\u00fdm nasazen\u00edm. K\u00a0dispozici byly t\u0159eba i\u00a0sloty v\u00a0deset\u00a0ve\u010der pra\u017esk\u00e9ho \u010dasu, kdy\u017e jsou v\u00a0Singapuru \u010dty\u0159i hodiny r\u00e1no.<\/p>\n

Nakonec jsem zvolil p\u0159ijateln\u011bj\u0161\u00ed dopoledn\u00ed term\u00edn. St\u00e1le jsem ale netu\u0161il, jak se s\u00a0\u201eEmily\u201c spoj\u00edme. Odkaz na webovou aplikaci dorazil a\u017e n\u011bkolik hodin p\u0159ed term\u00ednem. \u201eEmily\u201c m\u011b ponoukala, abych si s\u00a0n\u00ed zavolal p\u0159es americkou webovou str\u00e1nku StreamYard, kter\u00e1 se skute\u010dn\u011b pou\u017e\u00edv\u00e1 k\u00a0po\u0159\u00e1d\u00e1n\u00ed online webin\u00e1\u0159\u016f. Aplikace s\u00a0kachnou v\u00a0logu p\u0159itom nevy\u017eaduje instalaci na po\u010d\u00edta\u010d, v\u0161e b\u011b\u017e\u00ed v\u00a0internetov\u00e9m prohl\u00ed\u017ee\u010di.<\/p>\n

Foto: Seznam Zpr\u00e1vy<\/p>\n

Pozv\u00e1nka na videohovor? Ve skute\u010dnosti odkaz na fale\u0161n\u00e9 str\u00e1nky.<\/p>\n

Op\u011bt m\u011b ov\u0161em zarazila dom\u00e9na, p\u0159es kterou jsem se k\u00a0setk\u00e1n\u00ed s\u00a0\u201eEmily\u201c m\u011bl p\u0159ipojit. Ta toti\u017e firm\u011b StreamYard v\u016fbec nepat\u0159\u00ed. \u201eEmily\u201c m\u011b sm\u011b\u0159ovala na adresu, kterou laik za skute\u010dnou \u201estreamyard.com\u201c m\u016f\u017ee zam\u011bnit. \u201eEmily\u201c cht\u011bla, abych kliknul na \u201estreamyard.host07eu.com\u201c. <\/p>\n

Odpov\u00eddaj\u00edc\u00ed dom\u00e9na host07eu.com p\u0159itom v\u00a0tu chv\u00edli byla v\u00a0provozu necel\u00e9 t\u0159i t\u00fddny. Kdy\u017e jsem ve speci\u00e1ln\u00edm prost\u0159ed\u00ed izolovan\u00e9m od m\u00fdch dat na odkaz klikal, o\u010dek\u00e1val jsem pokus zavirovat mi po\u010d\u00edta\u010d.<\/p>\n

Fale\u0161n\u00fd hovor, skute\u010dn\u00fd vir<\/p>\n

Uk\u00e1zalo se ov\u0161em, \u017ee \u00fatok m\u00ed\u0159\u00ed mnohem d\u00e1l. Antivirov\u00fdmi skeny toti\u017e odkaz bez probl\u00e9m\u016f pro\u0161el. A\u00a0m\u011b na n\u011bm \u010dekala poda\u0159en\u00e1 kopie rozhran\u00ed skute\u010dn\u00e9ho webu StreamYard. Zvolil jsem si u\u017eivatelsk\u00e9 jm\u00e9no a\u00a0klikl na tla\u010d\u00edtko p\u0159ipojit. Chv\u00edli to vypadalo, \u017ee \u201eEmily\u201c opravdu uvid\u00edm. <\/p>\n

Pak ale aplikace zobrazila dop\u0159edu p\u0159ipravenou chybu – probl\u00e9m s\u00a0m\u00fdm spojen\u00edm. \u00dato\u010dn\u00edci na v\u011bc \u0161li pomalu a\u00a0nen\u00e1padn\u011bji.<\/p>\n

Foto: Seznam Zpr\u00e1vy<\/p>\n

Videohovor? Ve skute\u010dnosti fale\u0161n\u00fd web, kter\u00fd m\u00e1 za \u00fakol nav\u0161t\u011bvn\u00edky p\u0159im\u011bt, aby si do po\u010d\u00edta\u010de sami nainstalovali \u0161kodliv\u00fd k\u00f3d.<\/p>\n

\u201eVid\u00edme, \u017ee jste se p\u0159ipojil, ale bohu\u017eel syst\u00e9m ukazuje, \u017ee va\u0161e p\u0159ipojen\u00ed m\u00e1 velmi vysokou latenci, tak\u017ee v\u00e1s nem\u016f\u017eeme spr\u00e1vn\u011b vid\u011bt ani sly\u0161et,\u201c psala mi hned \u201eEmily\u201c, \u010d\u00edm\u017e se pokou\u0161ela vystup\u0148ovat mou p\u0159\u00edpadnou nervozitu, \u017ee domluven\u00e1 sch\u016fzka neprob\u00edh\u00e1 dle pl\u00e1nu.<\/p>\n

\u201ePokud je to mo\u017en\u00e9, mohl byste se pros\u00edm zkusit znovu p\u0159ipojit pomoc\u00ed jin\u00e9ho prohl\u00ed\u017ee\u010de, p\u0159\u00edpadn\u011b ide\u00e1ln\u011b prost\u0159ednictv\u00edm desktopov\u00e9 aplikace? To obvykle probl\u00e9m vy\u0159e\u0161\u00ed,\u201c nav\u00e1d\u011bla m\u011b d\u00e1le fale\u0161n\u00e1 pracovnice \u0161koly.<\/p>\n

Za\u010d\u00ednalo b\u00fdt z\u0159ejm\u00e9, co bude n\u00e1sledovat – snaha m\u011b nenucen\u011b p\u0159im\u011bt, abych vypnul zabezpe\u010den\u00ed a\u00a0s\u00e1m si do po\u010d\u00edta\u010de nainstaloval program na videohovory – ve skute\u010dnosti bal\u00ed\u010dek se \u0161kodliv\u00fdm k\u00f3dem, kter\u00fd by mi ukradl data.<\/p>\n

Foto: Seznam Zpr\u00e1vy<\/p>\n

Jak m\u011b Emily nen\u00e1padn\u011b sm\u011b\u0159ovala k\u00a0tomu, abych si s\u00e1m do po\u010d\u00edta\u010de nainstaloval \u0161kodliv\u00fd k\u00f3d.<\/p>\n

Kdy\u017e jsem pokra\u010doval ve sc\u00e9n\u00e1\u0159i a\u00a0\u201eEmily\u201c napsal, \u017ee se mi neda\u0159\u00ed p\u0159ipojit v\u00a0\u017e\u00e1dn\u00e9m prohl\u00ed\u017ee\u010di a\u00a0zda mi m\u016f\u017ee poslat odkaz na sta\u017een\u00ed aplikace, zp\u011bt mi p\u0159i\u0161la nefunguj\u00edc\u00ed adresa, kter\u00e1 vedla na web skute\u010dn\u00e9 firmy StreamYard.com. Fungovat ani nemohla. Firma toti\u017e po\u010d\u00edta\u010dovou aplikaci v\u016fbec nenab\u00edz\u00ed.<\/p>\n

\u201eEmily\u201c nejsp\u00ed\u0161e kalkulovala, \u017ee v\u00a0tu chv\u00edli u\u017e budu dostate\u010dn\u011b vynervovan\u00fd z\u00a0dal\u0161\u00edho nezdaru. Bylo des\u00edtky minut po \u010dase, kdy jsme se m\u011bli s\u00a0n\u00ed a\u00a0jej\u00edmi kolegy spojit p\u0159i hovoru, v\u00a0n\u011bm\u017e bychom probrali, za jak\u00fdch podm\u00ednek mi zaplat\u00ed slibovanou \u010d\u00e1stku.<\/p>\n

Teprve pak m\u011b Emily znovu nasm\u011brovala p\u0159\u00edmo do fale\u0161n\u00e9ho webov\u00e9ho rozhran\u00ed videohovorov\u00e9 aplikace, odkud se dalo prokliknout na sta\u017een\u00ed po\u010d\u00edta\u010dov\u00e9ho programu. Web m\u011b z\u00e1rove\u0148 vyz\u00fdval, abych hned po sta\u017een\u00ed vypnul ochrany opera\u010dn\u00edho syst\u00e9mu a\u00a0soubor spustil.<\/p>\n

V\u00a0prost\u0159ed\u00ed izolovan\u00e9m od m\u00fdch dat jsem ho st\u00e1hl. A\u00a0otestoval jsem, \u017ee b\u011b\u017en\u00fdmi antivirov\u00fdmi programy bez pot\u00ed\u017e\u00ed projde. Z\u00a0bezpe\u010dnostn\u00edch d\u016fvod\u016f jsem s\u00e1m ale u\u017e program nespou\u0161t\u011bl. <\/p>\n

P\u00e1r klik\u016f od vykraden\u00ed a\u00a0ovl\u00e1dnut\u00ed po\u010d\u00edta\u010de<\/p>\n

Teprve kdy\u017e software aktivovali experti Seznamu ve sv\u00e9 laborato\u0159i, za\u010daly se d\u00edt v\u011bci. Potvrdilo se, \u017ee p\u0159es sta\u017een\u00fd program bych si nezavolal. Proto\u017ee by se m\u00edsto toho \u0161kodliv\u00fd k\u00f3d pokusil z\u00edskat p\u0159\u00edstup k\u00a0m\u00fdm hesl\u016fm, soci\u00e1ln\u00edm s\u00edt\u00edm, do redak\u010dn\u00edho syst\u00e9mu, e-mailu i\u00a0chatovac\u00edch aplikac\u00ed. A\u00a0z\u00e1rove\u0148 zkop\u00edrovat a\u00a0sv\u00fdm provozovatel\u016fm odeslat dokumenty, kter\u00e9 na po\u010d\u00edta\u010di uchov\u00e1v\u00e1m.<\/p>\n

Program se p\u0159itom pokou\u0161\u00ed \u010dinnost maskovat, aby ho neodhalil antivirov\u00fd program. Jako bonus v\u00a0dal\u0161\u00edm kroku skryt\u011b nainstaloval i\u00a0n\u00e1stroj pro vzd\u00e1lenou spr\u00e1vu po\u010d\u00edta\u010de. \u201eEmily\u201c by tak mohla dlouhodob\u011b sledovat, na \u010dem na po\u010d\u00edta\u010di pracuji. Ale tak\u00e9 sama m\u016fj stroj ovl\u00e1dat.<\/p>\n

\u201eTento software se sna\u017e\u00ed ukr\u00e1st data a\u00a0z\u0159\u00eddit si perzistentn\u00ed p\u0159\u00edstup do po\u010d\u00edta\u010de. Je to sp\u00ed\u0161e v\u00a0kategorii n\u00e1stroj\u016f pro \u0161pion\u00e1\u017e,\u201c zhodnotil to \u0159editel informa\u010dn\u00ed bezpe\u010dnosti Seznamu Martin Dole\u010dek.<\/p>\n

\u201eEmily\u201c jsem odeslal posledn\u00ed e-mail. Ptal jsem se, kdo je ve skute\u010dnosti a\u00a0pro\u010d se sna\u017eila dostat k\u00a0m\u00fdm dat\u016fm. Odpov\u011b\u010f nikdy nep\u0159i\u0161la. \u00datok jsem paraleln\u011b nahl\u00e1sil i\u00a0bezpe\u010dnostn\u00edm slo\u017ek\u00e1m. Anal\u00fdza expert\u016f Seznamu dolo\u017eila, \u017ee jsem se stal c\u00edlem takzvan\u00e9ho spear-phishingu.<\/p>\n

\u201eVyu\u017e\u00edvaj\u00ed ho zlo\u010dinci i\u00a0sofistikovan\u00ed \u00fato\u010dn\u00edci (zejm\u00e9na st\u00e1ty podporovan\u00e9 skupiny hacker\u016f) k\u00a0z\u00edsk\u00e1n\u00ed p\u0159\u00edstupu do s\u00edt\u011b ob\u011bti, a\u0165 u\u017e za \u00fa\u010delem \u0161pion\u00e1\u017ee nebo zp\u016fsoben\u00ed \u0161kod,\u201c definuje techniku N\u00e1rodn\u00ed \u00fa\u0159ad pro kybernetickou bezpe\u010dnost (N\u00daKIB).<\/p>\n

Spear-phishing v\u00a0\u010cesku pou\u017eila \u010c\u00ednaP\u0159ed technikou v\u00a0roce 2020\u00a0varoval N\u00e1rodn\u00ed \u00fa\u0159ad pro kybernetickou bezpe\u010dnost<\/a>.V roce 2018 se toti\u017e ter\u010dem podobn\u00e9ho \u00fatoku staly \u010desk\u00e9 univerzity. \u201eC\u00edlem byla kr\u00e1de\u017e v\u00fdzkumn\u00fdch dat, nepublikovan\u00fdch v\u00fdsledk\u016f nebo know-how v\u00fdzkumn\u00fdch skupin. Jejich z\u00e1jmem byla data z r\u016fzn\u00fdch obor\u016f, jako nap\u0159\u00edklad l\u00e9ka\u0159stv\u00ed, technick\u00e9 obory nebo humanitn\u00ed v\u011bdy. Jednalo se o dob\u0159e p\u0159ipraven\u00e9 \u00fatoky, p\u0159i nich\u017e \u00fato\u010dn\u00edci prok\u00e1zali znalost prost\u0159ed\u00ed \u010desk\u00fdch univerzit,\u201c informoval kyber\u00fa\u0159ad.U\u017e v roce 2015 spear-phishing ale zaznamenal \u00fasp\u011bch nap\u0159\u00edklad na Ukrajin\u011b, kde dok\u00e1zali \u00fato\u010dn\u00edci do\u010dasn\u011b vy\u0159adit elektrickou s\u00ed\u0165 pro \u010dvrt milionu lid\u00ed<\/a>.V posledn\u00ed dob\u011b p\u0159i spear-phisingu byly v \u010cesku p\u0159isti\u017eeni \u00fato\u010dn\u00edci napojen\u00ed na \u010d\u00ednskou komunistickou rozv\u011bdku. Seznam Zpr\u00e1vy informovaly, \u017ee takto napadli Bezpe\u010dnostn\u00ed centrum Evropsk\u00e9 hodnoty, neziskovou organizaci, kter\u00e1 se dlouhodob\u011b v\u011bnuje \u010d\u00ednsk\u00e9mu vlivu. Hacke\u0159i p\u0159itom vyu\u017eili identitu existuj\u00edc\u00ed novin\u00e1\u0159ky AP.<\/a><\/p>\n

Identifikovat p\u016fvodce ale bude obt\u00ed\u017en\u00e9. B\u011b\u017en\u011b se o\u00a0to kyberexperti sna\u017e\u00ed propojen\u00edm pou\u017eit\u00e9ho \u0161kodliv\u00e9ho k\u00f3du nebo internetov\u00fdch dom\u00e9n s\u00a0p\u0159edchoz\u00edmi \u00fatoky. V\u00a0tomto p\u0159\u00edpad\u011b ale dom\u00e9ny \u00fato\u010dn\u00edci registrovali t\u011bsn\u011b p\u0159ed \u010dinem a\u00a0identitu taj\u00ed i\u00a0jinak.<\/p>\n

\u201eJde o\u00a0na\u010disto vytvo\u0159en\u00e9 prost\u0159ed\u00ed v\u010detn\u011b internetov\u00fdch dom\u00e9n, kter\u00e9 \u00fato\u010dn\u00edci po n\u011bjak\u00e9m \u010dase nebo \u00fatoku opou\u0161t\u00ed a\u00a0vytv\u00e1\u0159ej\u00ed jin\u00e9,\u201c konstatoval Dole\u010dek.<\/p>\n

\u0160kodliv\u00fd k\u00f3d ale nese charakteristiky n\u00e1stroje, kter\u00fd bezpe\u010dnostn\u00ed odborn\u00edci pojmenovali Storm (tedy Bou\u0159e)<\/a>. Upozornila na n\u011bj v\u00a0dubnu americk\u00e1 kyberbezpe\u010dnostn\u00ed firma Varonis.<\/p>\n

B\u00fdv\u00e1 ov\u0161em b\u011b\u017en\u00e9, \u017ee takov\u00e9 p\u0159ipraven\u00e9 n\u00e1stroje si jde v\u00a0temn\u00fdch koutech internetu na konkr\u00e9tn\u00ed \u00fatok pronajmout. Loni v\u00a0z\u00e1\u0159\u00ed popsal odborn\u00edk na kryptom\u011bny<\/a> Zac Cole podobn\u00fd pokus, ve kter\u00e9m op\u011bt fungovala fale\u0161n\u00e1 str\u00e1nka StreamYard. V\u00a0jeho p\u0159\u00edpad\u011b mu nakonec \u00fato\u010dn\u00edk p\u0159iznal, \u017ee si n\u00e1stroj pronaj\u00edm\u00e1 za t\u0159i tis\u00edce dolar\u016f m\u011bs\u00ed\u010dn\u011b. Coleovi se s\u00a0jeho pomoc\u00ed nejsp\u00ed\u0161e pokou\u0161el ukr\u00e1st kryptom\u011bny. <\/p>\n

Jako report\u00e9r Seznam Zpr\u00e1v jsem dost pravd\u011bpodobn\u011b nebyl jedin\u00fd c\u00edl prob\u00edhaj\u00edc\u00edho \u00fatoku. Dom\u00e9n, pomoc\u00ed nich\u017e p\u0159es fale\u0161n\u00e9 videohovory \u00fato\u010dn\u00edci l\u00e1kali na sta\u017een\u00ed \u0161kodliv\u00e9ho k\u00f3du, se mi poda\u0159ilo identifikovat \u0161est. V\u0161echny spojuje majitel ukryt\u00fd p\u0159es slu\u017ebu na zast\u0159en\u00ed identity, kter\u00e1 s\u00eddl\u00ed na Islandu. Ten m\u00e1 jedny z\u00a0nejp\u0159\u00edsn\u011bj\u0161\u00edch z\u00e1kon\u016f na ochranu soukrom\u00ed a\u00a0je mimo dosah \u010desk\u00fdch bezpe\u010dnostn\u00edch slo\u017eek.<\/p>\n","protected":false},"excerpt":{"rendered":"Do pracovn\u00edch schr\u00e1nek novin\u00e1\u0159\u016f denn\u011b chod\u00ed mno\u017estv\u00ed spam\u016f i\u00a0podvodn\u00fdch zpr\u00e1v. Tenhle e-mail ale byl jin\u00fd. Za\u010dal j\u00edm \u00fatok…\n","protected":false},"author":2,"featured_media":170052,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[7],"tags":[43,42,202,41,40,4899,9991,21074,7974,916],"class_list":["post-170051","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cesko","tag-ceska-republika","tag-cesko","tag-cina","tag-czech-republic","tag-czechia","tag-hacker","tag-hackersky-utok","tag-malware","tag-narodni-urad-pro-kybernetickou-a-informacni-bezpecnost-nukib","tag-phishing"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@cz\/117046519411387198","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts\/170051","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/comments?post=170051"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts\/170051\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/media\/170052"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/media?parent=170051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/categories?post=170051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/tags?post=170051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}