Phishing z uporabo QR-kod

diplomsko delo visokošolskega študijskega programa Informacijska varnost

Tian Leljak (Author), Blaž Markelj (Mentor)

Abstract

QR-kode so postale integralni del naše digitalne komunikacije, saj ponujajo učinkovite rešitve za različne vidike digitalne komunikacije, od plačilnih mehanizmov do marketinških strategij ali preprostega deljenja informacij. To dosežejo z izjemno kapaciteto shranjevanja informacij na zelo majhnem prostoru. Kljub njihovi široki uporabi pa, podobno kot pri mnogih drugih tehnoloških inovacijah, niso imune na varnostne grožnje. V tej študiji smo analizirali specifično varnostno tveganje – phishing napade z uporabo QR-kod. Medtem ko so bili prejšnji phishing napadi večinoma omejeni na e-pošto in različne prevare, ki so uporabljale tehnike socialnega inženiringa na digitalnih platformah, je uporaba QR-kod v phishing napadih predstavila novo obzorje možnih groženj – izvajanje digitalnih prevar skozi fizični svet. Napadalci spretno izkoriščajo neznanje uporabnikov za visoko uspešnost svojih zlonamernih prevar. Posledice napadov so lahko katastrofalne tako za posameznike kot za organizacije, ki so žrtve uspešnih napadov. V diplomskem delu je predstavljen izdelan primer napada s pomočjo QR-kod. Začnemo z idejno zasnovo in strategijo napada ter nadaljujemo z opisom razvojnih faz, od ponarejevanja spletnih strani do zbiranja podatkov žrtev. Na koncu so izpostavljene še potencialne nepravilnosti, na katere morajo biti uporabniki pozorni, da se uspešno varujejo pred tovrstnimi napadi.

Keywords

phishing;QR-kode;spletna varnost;socialni inženiring;diplomske naloge;

Data

Language:	Slovenian
Year of publishing:	2023
Typology:	2.11 - Undergraduate Thesis
Organization:	UM FVV - Faculty of Criminal Justice
Publisher:	[T. Leljak]
UDC:	343.3/.7:004.056.5(043.2)
COBISS:	165761539
Views:	17
Downloads:	2
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	QR code phishing
Secondary abstract:	QR codes have become an integral part of our digital communication, offering efficient solutions for various aspects of digital communication, from payment mechanisms to marketing strategies or simple information sharing. They achieve this with an extraordinary capacity to store information in a very small space. Despite their widespread use, however, like many other technological innovations, they are not immune to security threats. In this study, we analyzed a specific security risk – phishing attacks using QR codes. While previous phishing attacks were mostly limited to email and various scams using social engineering techniques on digital platforms, the use of QR codes in phishing attacks has opened up a new horizon of potential threats – executing digital scams through the physical world. Attackers skillfully exploit users' lack of knowledge for the high success rate of their malicious scams. The consequences of attacks can be catastrophic for both individuals and organizations that fall victim to successful attacks. In the thesis, an example of an attack using QR codes is presented. We start with the conceptual design and attack strategy and continue with a description of the development phases, from counterfeiting websites to collecting victim data. In the end, potential irregularities are highlighted, which users need to be aware of in order to successfully protect themselves against such attacks.
Secondary keywords:	Phishing prevare;Varstvo podatkov (računalništvo);Univerzitetna in visokošolska dela;
Type (COBISS):	Bachelor thesis/paper
Thesis comment:	Univ. v Mariboru, Fak. za varnostne vede, Ljubljana
Pages:	VIII f., [71] str.
ID:	19993756