20.500.12556/DKUM-97598 Analiza phishing napadov z imitacijo bank diplomsko delo visokošolskega študijskega programa Informacijska varnost Analysis of bank imitation phisihing attacks Diplomska naloga analizira phishing napade, usmerjene v bančne institucije, s posebnim poudarkom na Banki X. Cilj diplomske naloge je predstaviti značilnosti takšnih napadov in oceniti učinkovitost obstoječih zaščitnih ukrepov. V teoretičnem delu so predstavljene najpogostejše oblike phishinga, kot so e-poštni phishing, smishing in spear phishing, ter psihološki sprožilci, med katerimi izstopajo občutek nujnosti, izkoriščanje avtoritete in obljuba koristi. Predstavljene so bile tudi tehnične metode, ki jih uporabljajo napadalci, vključno z manipulacijo domen, zlorabo TLS-certifikatov in uporabo proxy rešitev za prestrezanje podatkov v realnem času. Posebej so poudarjeni regulativni in standardizacijski okvirji (NIS2, DORA, GDPR, ISO/IEC 27001, ISO/IEC 27701, PCI DSS), ki opredeljujejo obveznosti bank na področju kibernetske varnosti. Empirični del je temeljil na analizi primerov napadov iz obdobja 2023–2025, zbranih iz javnih virov in anonimno obdelanih podatkov Banke X. Rezultati so pokazali, da napadalci kombinirajo tehnično imitacijo uporabniških vmesnikov, zlorabo HTTPS in manipulacijo domen s psihološkimi elementi, kar znatno zmanjša možnost, da bi uporabniki napade prepoznali. Ugotovljeno je bilo, da obstoječi ukrepi omogočajo hitro odkrivanje in ublažitev posledic, vendar niso vedno uspešni pri preprečevanju napadov. Na podlagi analize je bilo priporočeno, da se uvedejo naprednejše oblike večfaktorske avtentikacije, proaktivno spremljanje novih registracij domene in okrepi komunikacijske kanale za hitro obveščanje uporabnikov. Zaključek naloge potrjuje, da je dolgoročno odpornost bank in njihovih uporabnikov mogoče doseči le s celostnim pristopom, ki združuje tehnične, organizacijske in vedenjske ukrepe. This thesis analysed phishing attacks targeting banking institutions, with a particular focus on Bank X. The purpose of the research was to identify the main characteristics of such attacks and to assess the effectiveness of existing security measures. The theoretical part included a review of common phishing techniques, such as e-mail phishing, smishing and spear-phishing, as well as psychological triggers like urgency, authority and promised benefits. Technical methods used by attackers were also presented, including domain manipulation, TLS certificate abuse and the use of real-time proxy solutions for data interception. Special emphasis was placed on regulatory and standardisation frameworks (NIS2, DORA, GDPR, ISO/IEC 27001, ISO/IEC 27701, PCI DSS), which define the obligations of banks in the field of cybersecurity. The empirical part was based on the analysis of phishing cases from the period 2023–2025, collected from public sources and anonymised internal data of Bank X. The results showed that attackers combine technical imitation of user interfaces, misuse of HTTPS and domain manipulation with psychological techniques, significantly reducing the likelihood of user detection. It was established that current measures enable rapid detection and mitigation, but are less effective in prevention. Based on the findings, recommendations were made to implement advanced forms of multi-factor authentication, proactively monitor new domain registrations and strengthen communication channels for user awareness. The conclusion confirms that long-term resilience of banks and their customers requires a comprehensive approach that integrates technical, organisational and behavioural measures. diplomske naloge phishing banking security cyber security social engineering data security true true false N. Maglica Slovenski jezik Angleški jezik Diplomsko delo/naloga 2026-03-24 13:22:26 2026-06-16 16:19:55 2026-06-17 03:07:57 0000-00-00 00:00:00 2026 0 Ljubljana 2026 Ljubljana VII f., 41 str. 0000-00-00 Zaloznikova Objavljeno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 343.3/.7:004(043.2) 281849347 VS_Maglica_Nejc_2026.pdf VS_Maglica_Nejc_2026.pdf 1 671C83BCA9575D8979B5F433B2F5B676 4bed02d3ae63a1f37cf9154512b4a74718be4d16e3117d65e568dadb2db38fee c3458b05-3e24-11f1-bc9c-00155d0001a1 https://dk.um.si/Dokument.php?lang=slv&id=205525 Fakulteta za varnostne vede 0 0 0