20.500.12556/DKUM-94732 Napredne oblike phishing napadov diplomsko delo visokošolskega študijskega programa Varnost in policijsko delo Advanced forms of phishing attacks Phishing je ena najpogostejših oblik spletnih prevar, kjer napadalci skušajo pretentati uporabnike, da jim razkrijejo osebne ali finančne podatke. Tovrstni napadi se izvajajo preko različnih kanalov, najpogosteje preko elektronske pošte, vendar se vse bolj širijo tudi na druga področja, kot so telefonski klici in SMS sporočila. Napadi so lahko usmerjeni proti posameznikom ali podjetjem, pri čemer so žrtve pogosto tisti, ki niso dovolj pozorni ali pa imajo premalo znanja na področju kibernetske varnosti in ne poznajo vseh pasti in nevarnosti spletne komunikacije. V zadnjih letih so se taktike napadalcev še dodatno razvile in postale bolj prefinjene in posledično bol uspešne. V diplomski nalogi smo se osredotočili na napredne oblike phishinga, ki so se razvile v zadnjih petih letih. Z raziskavo smo preverjali, katere metode napadalci najpogosteje uporabaljajo in kako se njihovi pristopi sprminjajo skozi čas, kako izgledajo sodobna phishing sporočila, katere so njihove najpogostejše značilnosti in kakšne smernice obstajajo za njihovo prepznavanje in preprečevanje. Ugotovili smo, da samo tehnični varnostni sistemi niso dovolj, saj so napadi pogosto zasnovani tako, da izkoristijo človeške napake, zato je poleg tehnologije ključnega pomena izobraževanje in ozaveščanje uporabnikov, saj s tem lahko bistveno zmanjšamo tveganje za uspešen phishing napad in s tem prispevamo k večji kibernetski varnosti tako pri posameznikih kot tudi v organizacijah. Phishing is one of the most common forms of online fraud, where attackers try to trick users into revealing personal or financial information. Such attacks are carried out through various channels, most commonly via email, but are increasingly spreading to other areas such as phone calls and text messages. Attacks can be directed at individuals or companies, with victims often being those who are not sufficiently vigilant or who lack knowledge in the field of cyber security and are unaware of all the pitfalls and dangers of online communication. In recent years, attackers' tactics have evolved further and become more sophisticated and, as a result, more successful. In this thesis, we focused on advanced forms of phishing that have developed over the past five years. Through our research, we examined which methods attackers use most often and how their approaches change over time, what modern phishing messages look like, what their most common characteristics are, and what guidelines exist for recognizing and preventing them. We found that technical security systems alone are not enough, as attacks are often designed to exploit human error. Therefore, in addition to technology, user education and awareness are crucial, as they can significantly reduce the risk of a successful phishing attack and thus contribute to greater cyber security for both individuals and organizations. diplomske naloge phishing cyber security attack e-mail users true true false T. Tešanović Slovenski jezik Angleški jezik Diplomsko delo/naloga 2025-08-26 12:23:18 2025-11-13 14:38:16 2025-11-14 03:10:57 0000-00-00 00:00:00 2025 0 Ljubljana 2025 Ljubljana V f., 38 str. 0000-00-00 Zaloznikova Objavljeno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 343.3/.7:004(043.2) 257125379 VS_Tesanovic_Taja_2025.pdf VS_Tesanovic_Taja_2025.pdf 1 FFE1A3B21EB0A746839C3EDED1079C46 e9d2805804933afa2f316afdc3f5a8c1cd9e941ce43640272f60be789954ce1b ba80fdb3-984d-11f0-8a3e-00155d000105 https://dk.um.si/Dokument.php?lang=slv&id=199022 Fakulteta za varnostne vede 0 0 0