{"id":19307,"date":"2021-03-11T06:27:00","date_gmt":"2021-03-11T06:27:00","guid":{"rendered":"http:\/\/catalinx.ro\/wordpress\/?p=19307"},"modified":"2021-03-12T11:01:25","modified_gmt":"2021-03-12T11:01:25","slug":"phishing-uite-ca-ti-se-poate-intampla-si-mie","status":"publish","type":"post","link":"https:\/\/catalinx.ro\/wordpress\/?p=19307","title":{"rendered":"Phishing: Uite c\u0103 \u021bi se poate \u00eent\u00e2mpla \u0219i mie"},"content":{"rendered":"
<\/div>\n\n

Am primit de la unii, nu conteaza cine, conteaza c\u00e2nd – ieri, \u00eenainte s-o comit, o agend\u0103 care are pe copert\u0103 un mesaj cu \u201dYou are a fraud target – these may be the most important words you read this year<\/strong>\u201d \u0219i mi-o flutura femeia pe la nas. Ai dracu’, ei \u0219tiau, dar eu le-am dat jet direct. \u0218i lor \u0219i so\u021biei care mi-a pus jegul \u0103sta \u00een fa\u021b\u0103 . \u201dCine ma, eu? Eu sunt tatalor, c\u00e2nd f\u0103ceam eu d-\u0103stea, ei se-nc\u0103l\u021bau cu fesul\u201d – \u0219i restul de infatu\u0103ri \u0219i b\u0103\u0219ini, i-am f\u0103cut semn so\u021biei s\u0103 ia mizeria asta din fa\u021ba mea. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Fix cum i-am spus acum vreo 15 ani, \u00een timp ce intram \u00een lift, \u0219i m\u0103 dojenea s\u0103 nu m\u0103 mai joc cu cheile de la garsonier\u0103 pe degete, c\u0103 m\u0103 \u0219i vede cum \u201d\u00eentr-o frac\u021biune de secund\u0103<\/em>\u201d \u00eemi cad pe g\u0103urica de la lift \u00een pu\u021b \u0219i r\u0103m\u00e2nem pe afar\u0103. Am l\u0103murit-o eu pe loc c\u0103 nu exist\u0103 frac\u021biune de secund\u0103, c\u0103 eu am ni\u0219te reflexe cum nu exist\u0103 pe planet\u0103. Motiv pentru care 2 minute mai t\u00e2rziu, c\u00e2nd a ajuns liftul la parter, c\u0103utam prin pu\u021bul lui dup\u0103 chei, dar a trebuit s\u0103 m\u0103 rog de un vecin s\u0103 ne sparg\u0103 u\u0219a, c\u0103 eu aveam atunci vreo 55 de kile, cred. \u0218i-acuma sunt la cur\u0103 de \u00eenfometare( post!) , s\u0103 ajung la o greutate mai rezonabil\u0103 \u0219i f\u0103r\u0103 m\u00e2nere. Atunci doar f\u0103ceam foamea de s\u0103rac. <\/p>\n\n\n\n

Au fost mai multe frac\u021biuni de secund\u0103 \u00een care m-am uitat absolut \u00eencremenit cum cheile \u0103lea se t\u0103v\u0103leau \u00eenspre g\u0103urica aia \u0219i eu nici n-am clipit. \u00cen fine, \u0103stea-s alte vremuri , n-au nimic \u00een comun cu ziua de ieri.<\/p>\n\n\n\n

S\u0103pt\u0103m\u00e2na trecut\u0103 am trecut ca prin br\u00e2nz\u0103 printr-un curs despre phishing \u0219i social engineering la suedezii la care lucrez – pe semne \u0219i \u0103ia au nevoie de cineva care s\u0103 le explice cum se face, de-mi pierd mie timpul cu astea. Scria acolo: STAR. <\/p>\n\n\n\n

STOP. THINK. ASK. REACT<\/strong>. P\u0103i nu sunt eu staru’ la phishing?<\/p>\n\n\n\n

De obicei navighez printre mailurile de phishing cu gra\u021bie \u0219i cu talent, nici nu m\u0103 deranjeaz\u0103. Am inboxurile pline de ele. Numa’ s\u0103raki. <\/p>\n\n\n\n

Ar putea s\u0103 se r\u0103stoarne basculanta de phishing in c\u0103su\u021ba mea de mail, cum se \u0219i \u00eent\u00e2mpl\u0103 uneori, nu m\u0103 pot atinge. Serios, c\u00e2nd m\u0103 plictisex m\u0103 \u0219i trag de pul\u0103 cu scammeri. <\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Pentru mine chestiile astea sunt a\u0219a u\u0219urele, de var\u0103, arogan\u021ba e numele \u0219amponului antimatrea\u021b\u0103 pe care-l folosesc regulat.<\/p>\n\n\n\n

P\u00e2n\u0103 c\u00e2nd m\u0103 \u00een\u021bep \u0219i eu ca orice pe\u0219te \u00een vreun c\u00e2rlig \u0219i o halesc ca ultima g\u0103in\u0103. Ru\u0219ine s\u0103-mi fie . Acum c\u0103 mi-am f\u0103cut scurt autocritica, s\u0103 v\u0103 spui povestea. <\/p>\n\n\n\n

Am comandat o chitar\u0103 pentru un copil, nu scump\u0103, 35 de lire. Pe care culmea , \u0219i-a pl\u0103tit-o din aloca\u021bie, cu cardul . A zis ca nu vrea de la Amazon, unde am toate datele precompletate, c\u0103 i-a spus ei cineva c\u0103 \u0103ia au chit\u0103ri na\u0219pa \u0219i c\u0103 vrea s\u0103 o cumpere de la unii Dawsons, care aveau magazin pe centrul ora\u0219ului, dar au fost afecta\u021bi de lockdown, evident. <\/p>\n\n\n\n

\u0218i c\u0103 vrea s\u0103 \u00eei ajute pe \u0103ia chiar dac\u0103 au chit\u0103ri mai scumpe, c\u0103 a\u0219a \u0219i pe dincolo. <\/p>\n\n\n\n

B\u0103, eu sunt sco\u021bian evreu din Oltenia, da’ pula mea, cred c\u0103 genera\u021bia mea \u0219i aia de dinaintea mea am futut lucrurile frumoase din lume \u0219i am mutat totul \u00een China, iar acum scheun\u0103m c\u0103 nu e bine, fiind lipsi\u021bi de principii , coloan\u0103 vertebral\u0103 \u0219i atitudine \u0219i ac\u021bion\u00e2nd ca ni\u0219te cum am scris mai sus. Prin urmare, n-am comentat nimic, am zis #bravo #d\u0103c\u00e2trespekt \u0219i i-am comandat chitara vie\u021bii. Probabil e produs\u0103 \u00een China, dar nu po\u021bi s\u0103 le mai ai pe toate, acum. <\/p>\n\n\n\n

Am completat datele de livrare, am dat comanda , primit mail de confirmare, totul OK. <\/p>\n\n\n\n

I-am spus c\u00e2nd vine comanda, nici n-am b\u0103gat de seam\u0103 c\u0103 au trecut zilele. Ieri era ultima zi \u00een care putea sosi, vine copilul s\u0103-mi cear\u0103 socoteal\u0103, c\u0103 unde e. La c\u00e2teva ore dup\u0103 incidentul cu cartea de mai sus. <\/p>\n\n\n\n

Zic, b\u0103i nu \u0219tiu, stai s\u0103 caut, poate am vreun mail. V\u0103d mail de la DPD , nu r\u00e2de\u021bi c\u0103 arat\u0103 ca un scam , v\u0103d \u0219i eu linkul ala de pe wiki \u00een loc de logo ACUMA , am b\u0103legat de seam\u0103 \u0219i atunci din prima, c\u0103 arat\u0103 cam funky, dar eu chiar a\u0219teptam un mail de la DPD, iar copilul status \u0219i aveam treab\u0103, din care treab\u0103 m-a \u00eentrerupt \u0219i voiam s\u0103 m\u0103 \u00eentorc repede la ce f\u0103ceam , altfel \u00eel \u0219tergeam direct. <\/p>\n\n\n\n

Pun poza \u0219i ca s\u0103 r\u00e2de\u021bi de mine c\u0103 ce prost sunt, dar \u0219i ca s\u0103 \u00een\u021belege\u021bi c\u0103 indiferent c\u00e2t de \u0219mecher e\u0219ti, po\u021bi s\u0103 ai o zi proast\u0103 ( eu am mai multe, e OK) , c\u00e2nd te treze\u0219ti cu ochelarii \u0103ia de cal pe ochi \u0219i tr\u0103ie\u0219ti pe automat. \u0218tii, c\u00e2nd r\u00e2zi de al\u021bii, c\u0103 cum au putut, coaie, s\u0103 ignore toate stegule\u021bele ro\u0219ii<\/strong>, a\u0219a merit\u0103 , handicapa\u021bii dracului. <\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Da, stegule\u021beLE, c\u0103 \u0103sta nu e singurul. \u0218i, da, a\u0219a spuneam \u0219i eu, c\u0103 pro\u0219tii a\u0219a merit\u0103, tre’ s\u0103 moar\u0103, d\u0103-i in pula mea. \u0218i \u00eenc\u0103 cred asta, nu-mi pl\u00e2ng de mil\u0103 sau ceva, doar pentru c\u0103 azi eu sunt prostul. S\u0103 continu\u0103m. <\/p>\n\n\n\n

C\u00e2nd am deschis emailul , mailul \u0103sta…<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Are absolut TOATE elementele care-\u021bi indic\u0103 c\u0103 e o fraud\u0103. Vine de la orb… nu r\u00e2de\u021bi, URL-ul te duce la dracu \u00een India, parcel number-ul nu se verific\u0103 pe site-ul DPD, desigur.<\/p>\n\n\n\n

Eu am un defect \u00een via\u021b\u0103, care e \u0219i una din cele mai importante calit\u0103\u021bi ale mele. Sunt ceea ce se nume\u0219te \u201dasertiv\u201d , m\u0103 uit doar la scop, \u0219i \u00een general din via\u021b\u0103 iau doar ce m\u0103 intereseaz\u0103 \u0219i ignor zgomotul. Dac\u0103 m\u0103 uit dup\u0103 fraude, le v\u0103d ascunse \u0219i-n gaur\u0103 de \u0219arpe, dac\u0103 nu, po\u021bi s\u0103 mi le pui \u00een fa\u021b\u0103 \u0219i trec pe l\u00e2ng\u0103.<\/p>\n\n\n\n

Ca \u0219i azi. Nu \u0219tiu c\u00e2t conteaz\u0103 c\u0103 sunt la cur\u0103 de sl\u0103bire, m\u0103n\u00e2nc, o dat\u0103 de dou\u0103 ori pe zi c\u00e2te pu\u021bin \u0219i stau nem\u00e2ncat 15-18 ore. S-ar putea, dar nu-i o scuz\u0103, c\u0103 fac gre\u0219eli din astea \u0219i s\u0103tul.<\/p>\n\n\n\n

A\u0219a c\u0103 am \u00eenjurat pu\u021bin c\u0103 ce mor\u021bii lor de adres\u0103 incomplet\u0103 au g\u0103sit \u0103ia, i-am spus copilului c\u0103 rezolv, s\u0103 m\u0103 lase-n pace \u0219i-am purces \u00eentru rezolvare cu click \u0219i ochelarii de cal la locul lor. <\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Ia uite ce Pagina frumoas\u0103 \u0219i securizat\u0103, cu certificat SSL valid.<\/strong><\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Evident c\u0103 dac\u0103 m\u0103 uitam, \u00een pula mea, la URL, r\u00e2deam \u0219i cu curul , \u00eenjuram \u0219i \u00eemi vedeam de treab\u0103. Tot nu primeam chitara, c\u0103 e povestea lung\u0103, fuckups de la un cap la altul, dar ave\u021bi r\u0103bdare. <\/p>\n\n\n\n

Cum nu m-am uitat, am dat ca g\u0103ina click pe pagina asta<\/a><\/strong>, nu \u0219tiu daca mai e \u00een picioare c\u00e2nd da\u021bi voi click, c\u0103 i-am reclamat, normal. La DPD, ca la adresa indicata pe site-ul dpd de raportat phishing in UK nu merge. Le-am forwardat mailul si le-am explicat ce e, am primit reject, c\u0103 au detectat spam \u00een con\u021binut. Lol. \u00cen fine am trimis alt mail, altfel. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Continu\u00e2nd, \u0103ia au zis c\u0103 s\u0103 le pl\u0103tesc o lir\u0103 pentru reprogramarea livr\u0103rii \u0219i textul \u0103la standard, rom\u00e2nesc, cu \u201dau \u00eencercat livrarea dar nu m-au g\u0103sit acas\u0103\u201d. B\u0103i, \u0219tiu, nimic nu se potrive\u0219te. Fix a\u0219a \u00ee\u0219i luau \u021beap\u0103 \u0219i g\u0103inile mele. <\/p>\n\n\n\n

Recunosc, c\u0103 m-am enervat \u0219i m-am trezit pu\u021bin din amor\u021beal\u0103 c\u00e2nd mi-au cerut o lir\u0103 \u0219i am vrut s\u0103-i sun, c\u0103 ce pula mea s\u0103 pl\u0103tesc eu, dar a\u0219a e c\u00e2nd nu \u00ee\u021bi mai pas\u0103 de at\u00e2ta lucru – hai, m\u0103, \u00een pula mea, lua\u021bi \u0219i lira aia \u0219i aduce\u021bi \u00een mor\u021bii vo\u0219tri de calici, chitara. <\/p>\n\n\n\n

Dup\u0103 ce bag cardul de Revolut virtual, \u00eemi mai cer detalii . Num\u0103r de cont, sort code, data na\u0219terii, numele lu’ mama, c\u0103 cic\u0103 e pentru siguran\u021ba mea.<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Aici m-am enervat \u0219i-am zis c\u0103 mai da\u021bi-v\u0103 m\u0103 \u00een mor\u021bii mamelor voastre c\u0103 nu v\u0103 dau nimic, sun s\u0103 v\u0103 \u00eenjur. \u0218i m\u0103 g\u00e2ndesc, b\u0103, dar dac\u0103 o fi de la cardul de Revolut, c\u0103 \u0103la mai face belele. Nu \u00eel bag eu \u0219i pe \u0103la de Metro, s\u0103 v\u0103d? C\u0103 dac\u0103-s orb \u0219i nu v\u0103d URL-uri , adrese nimic, a\u0219a fac, bag acolo.<\/p>\n\n\n\n

Da. Tot la fel, moment \u00een care zic c\u0103-mi bag pula \u0219i \u00eei sun. Am mai f\u0103cut eu pe la \u0103\u0219tia prin UK plata cu cardul prin telefon, c\u0103 sunt handicapa\u021bi DAR \u00ceI SUN \u0219i \u00eei \u00eenjur, ce pula mea e asta!<\/p>\n\n\n\n

Moment \u00een care dau click pe linkul \u0103la din poza de sus cu \u201dContact us\u201d \u0219i v\u0103d c\u0103 nu merge, e doar un text. \u0218i am un moment din \u0103la:<\/p>\n\n\n\n

-Aaaaa, ce prost sunt! CE PROST SUNT. <\/p>\n\n\n\n

\u0218i v\u0103d \u0219i URL-ul \u0219i \u00een spate \u0219i mailul \u0219i m\u0103 t\u0103v\u0103lesc pe jos de r\u00e2s. Nu trebuie s\u0103-mi pl\u00e2nge\u021bi de mil\u0103, c\u0103 am anulat cardurile imediat \u0219i mai am m\u0103suri ca s\u0103 m\u0103 protejeze de prostia mea, Pe cardul virtual de la Revolut am limit\u0103 de 100 de lei pe lun\u0103 \u0219i o cresc cu 100 de lei c\u00e2nd ajung la ea \u0219i suplimentar cardul st\u0103 blocat, pe \u0103la de Metro nu \u0219i oricum \u021bin bani de care m\u0103 pot lipsi ni\u0219te mii de lire, dar m\u0103 pot lipsi ( zic nu c\u0103 nu \u00eemi pas\u0103, dar nici nu mor f\u0103r\u0103 ei), dar deja la c\u00e2nd l-am b\u0103gat acolo m\u0103 g\u00e2ndeam c\u0103 e posibil s\u0103 anulez cardul \u0103la . \u0218i mai am un bra\u021b de carduri, fiecare cu ni\u0219te m\u0103run\u021bi\u0219 pe el.<\/p>\n\n\n\n

Porunca num\u0103rul unu a banilor: S\u0103 nu stai niciodat\u0103, niciodat\u0103 – doar \u00eentr-un card. <\/strong>( Pentru mine – nici \u00een dou\u0103, c\u0103 evident, am nevoie de mai multe rezerve ) <\/p>\n\n\n\n

Dac\u0103 mie mi se poate \u00eent\u00e2mpla probabil c\u0103 \u0219i vou\u0103. Bine, poate voi nu sunte\u021bi chiar at\u00e2t de durimpuli\u0219ti ca mine, c\u0103 povestea nu se termin\u0103 aici. <\/p>\n\n\n\n

Dup\u0103 ce \u201dam rezolvat\u201d cu cardurile, m\u0103 uit \u00een comand\u0103 s\u0103 v\u0103d totu\u0219i c\u00e2nd pizda m\u0103-sii vine chitara aia. Mda, nu cred c\u0103 mai vine. <\/p>\n\n\n\n

C\u0103 atunci c\u00e2nd am pus datele de livrare, c\u00e2nd am completat telefonul, autofill-ul pizdelor m\u0103-sii de la Chrome, a suprascris adresa cu adresa de \u00eenregistrare a firmei mele din UK, care din motive obiective (protec\u021bie antispam, c\u0103 e public\u0103), nu e unde locuiesc, ci la contabil. Doar codul po\u0219tal a r\u0103mas \u00een comand\u0103 \u0103la corect. Normal c\u0103 n-am observat NICI AIA, c\u0103 a\u0219a sunt eu, nici nu m\u0103 uit, via\u021ba pe pilot automat.<\/strong><\/p>\n\n\n\n

Am sunat la oameni s\u0103 \u00eemi cer scuze \u0219i s\u0103 vedem \u00een ce status e comanda \u0219i cum o rerut\u0103m la mine. Ce s\u0103 mai rerut\u0103m c\u0103 s-a livrat la firma de contabilitate, \u00eemi \u0219i imaginez ce zdrang\u0103ne\u0219te doamna de la recep\u021bie la ea. <\/p>\n\n\n\n

Am vorbit \u0219i cu dumnealor \u0219i am f\u0103cut o comand\u0103 s-o ridice DPD azi de la ei \u0219i s\u0103 mi-o aduc\u0103 c\u00e2nd or aduce-o. 15 lire. Sper c\u0103 de data asta am completat adresa corect. Stai s\u0103 m\u0103 uit. <\/p>\n\n\n\n

R\u00e2dem, glumim , eu mai am accese acute de prostie, dar c\u00e2nd mi-e foame , sau sunt la cur\u0103 de slabire nu-s eu deloc, ca-n reclama aia la ciocolat\u0103. <\/p>\n\n\n\n

V\u0103 las cu concluzia.<\/p>\n\n\n\n

\u201cNu<\/em> credeam sa-nvat a muri vrodata, Pururi tanar, infasurat in manta-mi, Ochii mei naltam visatori la steaua Singuratatii.\u201d<\/em><\/p>Citat dintr-un alt sifilitic, cu p\u0103rul v\u00e2lvoi \u0219i aere de \u0219mecher<\/cite><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

Am primit de la unii, nu conteaza cine, conteaza c\u00e2nd – ieri, \u00eenainte s-o comit, o agend\u0103 care are pe copert\u0103 un mesaj cu \u201dYou…<\/p>\n","protected":false},"author":2,"featured_media":19333,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[7,4],"tags":[4328,4324,4326,4325,4327],"class_list":["post-19307","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrare-it","category-internetu","tag-ai-grija-unde-ti-bagi-cardul","tag-inginerie-sociala","tag-nu-da-click-pe-linkuri-din-email","tag-phishing","tag-phishing-dpd"],"views":2175,"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/catalinx.ro\/wordpress\/wp-content\/uploads\/2021\/03\/Esti-tinta-unei-fraude-1.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4Eq23-51p","jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/19307","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=19307"}],"version-history":[{"count":17,"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/19307\/revisions"}],"predecessor-version":[{"id":19345,"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/19307\/revisions\/19345"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=\/wp\/v2\/media\/19333"}],"wp:attachment":[{"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=19307"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=19307"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/catalinx.ro\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=19307"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}