Kako radi phishing prijevara: 122 milijuna i lažna faktura

Epizoda prati prijevaru u kojoj je jedan čovjek krivotvorenim fakturama i lažnim e-porukama izvukao 122 milijuna dolara od Facebooka i Googlea. Uz taj konkretan slučaj, film objašnjava pet dokumentiranih faza phishing napada, zašto SMTP protokol ne autentificira pošiljatelja i kako kognitivni mehanizmi poput autoriteta i hitnosti objašnjavaju zašto ni tehnički upućeni zaposlenici nisu imuni. Poglavlja pokrivaju i povijest phishinga od AOL-a 1994. do podataka FBI-jevog IC3 za 2024. Poglavlja 00:00 Prizor: Faktura iz Tajvana 01:48 Tko su žrtve — i zašto nasjedaju 07:22 Nastanak: Od AOL-ovih lozinki do bankovnih krivotvorina 10:36 Pet koraka do krađe: Anatomija napada 15:14 Slučaj: 122 milijuna dolara za lažnu Quantu 18:44 Operacija Phish Phry: Suradnja i njezine granice 23:10 E-pošta, SMS, glas — i što ostaje iza prijevare 27:34 Tri nalaza, jedna granica i otvorena pitanja Izvori - NBC News — Lithuanian Pleads Guilty to $100 Million Fraud Against Google, Facebook: https://www.nbcnews.com/tech/tech-news/lithuanian-pleads-guilty-u-s-100-million-fraud-against-google-n986871 - CyberScoop — Man who hacked Facebook and Google for $120m faces five years behind bars: https://cyberscoop.com/facebook-google-scam-man-sentenced/ - Latvian Public Broadcasting (LSM.lv) — Lithuanian Accused of Stealing $100m Through Latvian Company: https://eng.lsm.lv/article/economy/economy/lithuanian-accused-of-stealing-100m-through-latvian-company.a229400/ - Anvilogic (secondary; primary: FBI IC3 2024 Annual Report, ic3.gov) — IC3 Reports $16.6B in Cybercrime Losses for 2024: https://www.anvilogic.com/threat-reports/ic3-cybercrime-losses-2024 - CyberScoop (secondary; primary: FBI IC3 2024 Annual Report) — 10 key numbers from the 2024 FBI IC3 report: https://cyberscoop.com/fbi-ic3-cybercrime-report-2024-key-statistics-trends/ - Abnormal AI (secondary; primary: FBI IC3 2024 Annual Report) — 2024 FBI IC3 Report: Business Email Compromise Remains a Multi-Billion Dollar Threat: https://abnormal.ai/blog/2024-fbi-ic3-report - KnowBe4 (secondary; primary: APWG Phishing Activity Trends Report Q4 2024, Fortra BEC research) — Amount of Money Requested in BEC Attacks Nearly Doubled in Q4 2024: https://blog.knowbe4.com/amount-of-money-requested-in-bec-attacks-nearly-doubled-in-q4-2024 - Anvilogic (secondary; primary: FBI IC3 2024 Annual Report) — IC3 Reports $16.6B in Cybercrime Losses for 2024: https://www.anvilogic.com/threat-reports/ic3-cybercrime-losses-2024 - IDEAS/RePEC (secondary; primary: Economics Letters, Elsevier, Vol. 237, April 2024, Article 111663) — Phishing attacks: An analysis of the victims' characteristics based on administrative data: https://ideas.repec.org/a/eee/ecolet/v237y2024ics0165176524001460.html - Barracuda Networks — Report: 2023 spear-phishing trends: https://blog.barracuda.com/2023/05/24/2023-spear-phishing-trends - arXiv (ETH Zurich; peer-reviewed: IEEE Symposium on Security and Privacy 2022, DOI 10.1109/SP46214.2022.9833766) — Phishing in Organizations: Findings from a Large-Scale and Long-Term Study: https://arxiv.org/abs/2112.07498 - Fortra (secondary; primary: APWG Phishing Activity Trends Report Q4 2024, docs.apwg.org) — APWG Phishing Activity Trends Report Q4 2024 – summary: https://www.fortra.com/resources/articles/apwg-phishing-activity-trends-report-q42024 - KnowBe4 (secondary; primary: APWG Phishing Activity Trends Report Q4 2024) — Amount of Money Requested in BEC Attacks Nearly Doubled in Q4 2024: https://blog.knowbe4.com/amount-of-money-requested-in-bec-attacks-nearly-doubled-in-q4-2024 - HandWiki — Software:AOHell — HandWiki: https://handwiki.org/wiki/Software:AOHell - arXiv / Cornell University — Early Phishing — arXiv:1106.4692: https://arxiv.org/abs/1106.4692 - Cisco — Security History: The Evolution of Phishing — Cisco Newsroom: https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2023/m02/security-history-the-evolution-of-phishing.html - Red Wire Services (Wikipedia mirror) — Phishing — Wikipedia (archived mirror via Red Wire Services): https://www.redwireservices.com/wp-content/uploads/2011/09/Phishing/ - APWG (eCrime Research) — About Us — APWG / eCrime Research: https://ecrimeresearch.org/about-us - Anti-Phishing Working Group (APWG) — Phishing Attack Trends Report — February 2004: https://docs.apwg.org/reports/APWG.Phishing.Attack.Report.Feb2004.pdf - Anti-Phishing Working Group (APWG) — Phishing Attack Trends Report — January 2004: https://docs.apwg.org/reports/APWG.Phishing.Attack.Report.Jan2004.pdf - The Register — Phishing attacks on the rise — The Register: https://www.theregister.com/2004/03/21/phishing_attacks_on_the_rise/ - … Napomene - Naracija: sintetski (AI) glas. Glazba: originalna, sintetizirana za ovaj video. - Sheme su pojednostavljeni prikazi. - AI ilustracije označene su na ekranu natpisom „AI ilustracija”. #dokumentarac #kibernetičkaSigurnost #phishing

Pogledaj na YouTubeu