[{"data":1,"prerenderedAt":1105},["ShallowReactive",2],{"threats-nav-data-en":3,"content-page-en-\u002Fabout":830,"content-counterpart-en-\u002Fabout":978},[4,321,563],{"id":5,"title":6,"alias":7,"body":8,"category":302,"description":303,"extension":304,"gameScenarioLink":305,"gameScenarioTitle":306,"icon":307,"meta":308,"navigation":309,"path":310,"seo":311,"severity":312,"sitemap":313,"slug":314,"stem":315,"vector":316,"__hash__":320},"threats_en\u002Fthreats\u002F01.phishing.md","Phishing (Credential Harvesting & Scams)","Email Phishing, Smishing & Deceptive Portals",{"type":9,"value":10,"toc":290},"minimark",[11,34,39,45,52,56,106,110,138,144,148,218,222,252,256],[12,13,14,19,28],"scan-trap",{},[15,16,18],"h3",{"id":17},"security-alert-you-scanned-an-untrusted-qr-code","⚠ Security Alert: You Scanned an Untrusted QR Code!",[20,21,22,23,27],"p",{},"You just triggered a simulated ",[24,25,26],"strong",{},"Quishing (QR Phishing)"," training trap! In a real incident, scanning untrusted physical\nor digital QR codes can covertly exfiltrate credentials, hijack sessions, or execute malicious payloads.",[20,29,30,33],{},[24,31,32],{},"Security Reminder:"," Always inspect destination URLs and never scan unsolicited or publicly posted QR codes without\nverification.",[35,36,38],"h2",{"id":37},"what-is-phishing","What is Phishing?",[20,40,41,44],{},[24,42,43],{},"Phishing"," remains one of the most widespread and damaging cyber attack vectors worldwide. Attackers send fraudulent\ncommunications disguised as trusted organizations—such as Microsoft 365, Google Workspace, postal couriers (DHL, FedEx,\nCzech Post), tax authorities, or popular streaming platforms.",[20,46,47,48,51],{},"The primary objective is almost always to direct the victim to a ",[24,49,50],{},"pixel-perfect fake login page"," where entered\ncredentials (and often active 2FA session tokens via Adversary-in-the-Middle proxies) are harvested by the threat actor.",[35,53,55],{"id":54},"the-phishing-attack-sequence","The Phishing Attack Sequence",[57,58,59],"attack-flow",{},[60,61,62,69,88,94,100],"ol",{},[63,64,65,68],"li",{},[24,66,67],{},"Bait Crafting",": Attackers replicate corporate branding, logos, and email templates (e.g. \"Password expiring in 24\nhours\" or \"Package delivery suspended due to unpaid customs fee\").",[63,70,71,74,75,79,80,83,84,87],{},[24,72,73],{},"Domain Spoofing & Lookalikes",": Scammers register lookalike domains (",[76,77,78],"code",{},"rnicrosoft.com"," ,",[76,81,82],{},"micros0ft-login.com",",",[76,85,86],{},"post-package-tracking.net",") or abuse compromised legitimate domains.",[63,89,90,93],{},[24,91,92],{},"Mass or Targeted Dispatch",": Automated mailers deliver thousands of messages, bypassing basic spam filters with\nhomoglyphs, encoded links, or QR codes (Quishing).",[63,95,96,99],{},[24,97,98],{},"Credential Harvesting",": The victim lands on a fake authentication portal. As soon as user inputs username,\npassword, or SMS OTP, it is relayed directly to the attacker.",[63,101,102,105],{},[24,103,104],{},"Account Takeover (ATO)",": Attackers log into the victim's genuine account, establish mailbox forwarding rules, and\npivot deeper into the corporate network.",[35,107,109],{"id":108},"real-world-simulation","Real-World Simulation",[111,112,116,124,127,130,135],"threat-example",{"channel":113,"icon":114,"sender":115},"Email","i-lucide-mail","IT Helpdesk Notifications \u003Calerts@corplog1n-verify.com>",[20,117,118,119,123],{},"\"Subject: ",[120,121,122],"span",{},"URGENT"," Security Alert: Your Microsoft 365 Session Has Expired",[20,125,126],{},"Dear Employee,",[20,128,129],{},"Our security monitoring detected suspicious sign-in attempts against your account from an unrecognized IP in Warsaw.\nYour access will be locked in 30 minutes unless you verify your identity.",[20,131,132],{},[120,133,134],{},"Click here to confirm your credentials and update password",[20,136,137],{},"Failure to comply will result in an immediate IT security suspension.\"",[20,139,140,141,143],{},"Pay attention to the urgency of the email (",[76,142,122],{}," etc.). Hackers use it to put time\npressure on you, so you will not spot the suspicious details and mistakes in the email.",[35,145,147],{"id":146},"defense-checklist","Defense Checklist",[149,150,152],"defense-tips",{"title":151},"Phishing Prevention Rules",[153,154,155,194,200,206,212],"ul",{},[63,156,157,160,161,164,165,168,169,171,172,175,176,179,180,187,188,193],{},[24,158,159],{},"Inspect the actual sender address, not just display name",": Check the domain after the ",[76,162,163],{},"@"," symbol carefully. Look ",[166,167],"br",{}," --- Unknown node: hardBreak --- ",[166,170],{}," for misspellings, substitute characters (",[76,173,174],{},"rn"," vs ",[76,177,178],{},"m"," - @",[181,182,186],"a",{"href":183,"rel":184},"http:\u002F\u002Fmicrosoft.com",[185],"nofollow","microsoft.com"," vs @",[181,189,192],{"href":190,"rel":191},"http:\u002F\u002Frnicrosoft.com",[185],"rnicrosoft.com,"," etc.), or strange top-level domains.",[63,195,196,199],{},[24,197,198],{},"Hover before clicking",": Hover your cursor over hyperlinks to inspect the destination URL before clicking. If on\nmobile, long-press to view preview.",[63,201,202,205],{},[24,203,204],{},"Never authenticate via links sent in unsolicited emails",": Navigate directly to known services by typing their\naddress into your browser or using verified bookmarks.",[63,207,208,211],{},[24,209,210],{},"Use FIDO2 \u002F Passkey Hardware Authentication",": Phishing-resistant multi-factor authentication (like YubiKeys or\nWindows Hello \u002F Passkeys) prevents credential harvesting even if you land on a spoofed portal.",[63,213,214,217],{},[24,215,216],{},"Beware of QR code emails (Quishing)",": Never scan QR codes embedded in security notifications or password reset\nemails.",[35,219,221],{"id":220},"immediate-actions-if-phished","Immediate Actions If Phished",[223,224,226],"emergency-action",{"title":225},"Clicked a Suspicious Link or Entered Credentials?",[153,227,228,234,240,246],{},[63,229,230,233],{},[24,231,232],{},"Immediately change passwords on legitimate portals",": Do not use the link from the email. Open a new browser window,\nlog into the official service, and change your credentials.",[63,235,236,239],{},[24,237,238],{},"Revoke all active sessions and app passwords",": In Microsoft 365 or Google, trigger a \"Sign out of all devices\"\ncommand.",[63,241,242,245],{},[24,243,244],{},"Inspect email inbox forwarding rules",": Attackers routinely create hidden rules to silently forward incoming emails\nor delete notifications from security teams.",[63,247,248,251],{},[24,249,250],{},"Notify IT Security (SOC)",": Prompt reporting allows defenders to blacklist the phishing domain across the entire\nenterprise gateway and reset impacted tokens.",[35,253,255],{"id":254},"resources-references","Resources & References",[153,257,258,266,274,282],{},[63,259,260,265],{},[181,261,264],{"href":262,"rel":263},"https:\u002F\u002Fwww.kb.cz\u002Fcs\u002Fpodpora\u002Fbezpecnost\u002Ftypy-utoku",[185],"Komerční banka – Bezpečnost a typy útoků"," – Guide on email scams,\nfake e-banking portals, and smishing defense.",[63,267,268,273],{},[181,269,272],{"href":270,"rel":271},"https:\u002F\u002Fwww.cisa.gov\u002Fsecure-our-world\u002Fteach-employees-avoid-phishing",[185],"CISA – Recognizing and Reporting Phishing"," –\nCybersecurity and Infrastructure Security Agency best practices.",[63,275,276,281],{},[181,277,280],{"href":278,"rel":279},"https:\u002F\u002Fwww.nukib.gov.cz\u002F",[185],"NÚKIB – Doporučení k ochraně před phishingem"," – National Cyber and Information Security\nAgency advisory.",[63,283,284,289],{},[181,285,288],{"href":286,"rel":287},"https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1566\u002F",[185],"MITRE ATT&CK – Technique T1566: Phishing"," – Comprehensive adversary\ntactics and techniques index.",{"title":291,"searchDepth":292,"depth":292,"links":293},"",2,[294,296,297,298,299,300,301],{"id":17,"depth":295,"text":18},3,{"id":37,"depth":292,"text":38},{"id":54,"depth":292,"text":55},{"id":108,"depth":292,"text":109},{"id":146,"depth":292,"text":147},{"id":220,"depth":292,"text":221},{"id":254,"depth":292,"text":255},"social-engineering","Deceptive emails, text messages, or direct communications designed to trick users into revealing confidential credentials, banking details, or downloading malware via lookalike websites.","md","https:\u002F\u002Fplay.cyber-framework.net?scenario=phishing","The Phishing Labyrinth","i-lucide-mail-warning",{},true,"\u002Fthreats\u002Fphishing",{"title":6,"description":303},null,{"loc":310},"phishing","threats\u002F01.phishing",[113,317,318,319],"SMS \u002F Smishing","Lookalike Domains (Typosquatting)","Fake Login Portals","vQ4E3-SjHlVYfPDRgOROyamltaASWpsC0HbXldxZS-A",{"id":322,"title":323,"alias":324,"body":325,"category":302,"description":546,"extension":304,"gameScenarioLink":547,"gameScenarioTitle":548,"icon":549,"meta":550,"navigation":309,"path":551,"seo":552,"severity":312,"sitemap":553,"slug":556,"stem":557,"vector":558,"__hash__":562},"threats_en\u002Fthreats\u002F02.vishing.md","Vishing (Voice Phishing)","Voice Phishing & Phone Spoofing",{"type":9,"value":326,"toc":538},[327,331,346,353,357,360,404,406,409,420,424,431,466,470,473,502,504],[35,328,330],{"id":329},"what-is-vishing","What is Vishing?",[20,332,333,336,337,341,342,345],{},[24,334,335],{},"Vishing"," (short for ",[338,339,340],"em",{},"voice phishing",") is a social engineering attack conducted over telephone networks. Unlike\ntraditional email phishing where you can inspect suspicious links and headers at your own pace, vishing exploits\n",[24,343,344],{},"real-time psychological pressure",", authority impersonation, and panic.",[20,347,348,349,352],{},"Attackers frequently spoof legitimate caller IDs so your phone screen displays the actual name or number of your bank's\nfraud department, local police, or corporate IT helpdesk. Advanced threat actors also deploy ",[24,350,351],{},"AI voice cloning (\ndeepfakes)"," replicating the tone and cadence of executives or loved ones.",[35,354,356],{"id":355},"how-attackers-operate","How Attackers Operate",[20,358,359],{},"Attackers rely on emotional manipulation—typically fear, urgency, or helpfulness—to override rational critical thinking.",[57,361,362],{},[60,363,364,380,386,392,398],{},[63,365,366,379],{},[24,367,368,369,378],{},"Target Intelligence (",[24,370,371],{},[24,372,373],{},[181,374,377],{"href":375,"rel":376},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FOpen-source_intelligence",[185],"OSINT",")",": The caller acquires basic personal details from data leaks, LinkedIn, or social\nmedia (your full name, employer, banking institution, or phone provider).",[63,381,382,385],{},[24,383,384],{},"Caller ID Spoofing",": Attackers configure VoIP software to display a legitimate number—such as your bank's\npublished 24\u002F7 client hotline or police department.",[63,387,388,391],{},[24,389,390],{},"Manufactured Crisis",": The scammer reports that your bank account is \"under active attack\", unauthorized loans are\nbeing approved, or your computer has malware.",[63,393,394,397],{},[24,395,396],{},"The \"Safe Account\" or Remote Access Trap",": The victim is instructed to immediately transfer all funds to a \"secure\nreserve vault\" or install remote support software (AnyDesk, TeamViewer) to \"clean the machine\".",[63,399,400,403],{},[24,401,402],{},"Fund Extraction & Disappearance",": Once transferred or logged in, the funds are instantly laundered through\ncryptocurrency exchanges or offshore mule networks.",[35,405,109],{"id":108},[20,407,408],{},"Here is what a typical high-pressure banking vishing dialogue sounds like:",[111,410,414,417],{"channel":411,"icon":412,"sender":413},"Phone Call","i-lucide-phone-incoming","\"Bank Security Department\" (Spoofed)",[20,415,416],{},"\"Good morning Mr. Anderson. This is Marcus from the Cybersecurity Operations Center at your bank. We are detecting an\nunauthorized wire transfer of $8,400 to an offshore account in Vienna right now.",[20,418,419],{},"To prevent this transaction from settling, I need you to confirm the 6-digit one-time code we just dispatched to your\nmobile phone. Do not hang up—if you disconnect, the funds will irreversibly leave your account.\"",[35,421,423],{"id":422},"how-to-defend-yourself","How to Defend Yourself",[20,425,426,427,430],{},"The golden rule of incoming phone security is simple: ",[24,428,429],{},"never verify a caller using the inbound call itself",".",[149,432,434],{"title":433},"Vishing Defense Checklist",[153,435,436,442,448,454,460],{},[63,437,438,441],{},[24,439,440],{},"Hang up and verify independently",": Never continue a high-stakes call initiated by someone else. Hang up, wait 30\nseconds (or restart the line), and dial the official phone number printed on the back of your payment card or official\ncompany directory.",[63,443,444,447],{},[24,445,446],{},"Banks never ask for full credentials or 2FA codes",": Legitimate bank employees will never ask for your login\npasswords, card PIN, CVC\u002FCVV security code, or push authorization approvals over the phone.",[63,449,450,453],{},[24,451,452],{},"Beware of \"Safe Deposit Accounts\"",": Banks never instruct clients to transfer money into an alternative or temporary\n\"reserve vault\" account to protect it.",[63,455,456,459],{},[24,457,458],{},"Never install remote control software on request",": If a caller asks you to install AnyDesk, TeamViewer, RustDesk,\nor QuickSupport, hang up immediately.",[63,461,462,465],{},[24,463,464],{},"Establish internal verification protocols",": For corporate calls asking for financial transactions or credentials,\nrequire dual-channel out-of-band verification.",[35,467,469],{"id":468},"immediate-actions-if-targeted","Immediate Actions If Targeted",[20,471,472],{},"If you suspect you have disclosed financial data or authorized a fraudulent transaction during a phone call:",[223,474,476],{"title":475},"Compromised via Vishing? Take These Steps Now",[153,477,478,484,490,496],{},[63,479,480,483],{},[24,481,482],{},"Immediately contact your bank's official fraud line",": Request immediate card blocking, internet banking session\ntermination, and transaction recalls. Every minute matters for wire recall requests.",[63,485,486,489],{},[24,487,488],{},"Change all passwords from an uninfected device",": If you installed software or entered passwords on suggested links,\nassume your workstation is compromised. Change passwords and revoke active sessions.",[63,491,492,495],{},[24,493,494],{},"File a report with law enforcement (Police)",": Document the attacker's phone number, time of call, claimed identity,\nand transaction identifiers.",[63,497,498,501],{},[24,499,500],{},"Notify your company's IT \u002F Security Operations (CISO)",": If corporate credentials or workstations were involved,\nreport the incident immediately so credentials can be rotated and endpoints isolated.",[35,503,255],{"id":254},[153,505,506,514,522,530],{},[63,507,508,513],{},[181,509,512],{"href":510,"rel":511},"https:\u002F\u002Fwww.kb.cz\u002Fcs\u002Fpodpora\u002Fbezpecnost\u002Ftypy-utoku\u002Fvishing",[185],"Komerční banka – Podvodné telefonáty (Vishing)"," – Guide on\nspoofed bank calls and caller verification.",[63,515,516,521],{},[181,517,520],{"href":518,"rel":519},"https:\u002F\u002Fcbaczech.cz\u002F",[185],"Czech Banking Association – #NePINdej! Campaign"," – Educational nationwide campaign on banking\nfraud and social engineering.",[63,523,524,529],{},[181,525,528],{"href":526,"rel":527},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fnews\u002Favoiding-social-engineering-and-phishing-attacks",[185],"CISA – Avoiding Social Engineering and Phishing Attacks"," –\nVoice phishing and imposter call defense.",[63,531,532,537],{},[181,533,536],{"href":534,"rel":535},"https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1566\u002F004\u002F",[185],"MITRE ATT&CK – Technique T1566.004: Spearphishing Voice"," – Adversary\nmethodology for vishing operations.",{"title":291,"searchDepth":292,"depth":292,"links":539},[540,541,542,543,544,545],{"id":329,"depth":292,"text":330},{"id":355,"depth":292,"text":356},{"id":108,"depth":292,"text":109},{"id":422,"depth":292,"text":423},{"id":468,"depth":292,"text":469},{"id":254,"depth":292,"text":255},"Fraudulent phone calls where attackers impersonate bank officers, police, or IT support using psychological pressure and caller ID spoofing to steal money or credentials.","https:\u002F\u002Fplay.cyber-framework.net?scenario=day-one","First Day","i-lucide-phone-call",{},"\u002Fthreats\u002Fvishing",{"title":323,"description":546},{"loc":551,"videos":554,"images":555},[],[],"vishing","threats\u002F02.vishing",[559,384,560,561],"Phone (Voice)","Audio Deepfakes","Social Engineering","E3QIMt3RJ-53_ay8LTgTwoCBoOawNRczk2aaKQW7pOc",{"id":564,"title":565,"alias":566,"body":567,"category":812,"description":813,"extension":304,"gameScenarioLink":291,"gameScenarioTitle":291,"icon":814,"meta":815,"navigation":309,"path":816,"seo":817,"severity":312,"sitemap":819,"slug":822,"stem":823,"vector":824,"__hash__":829},"threats_en\u002Fthreats\u002F03.ransomware.md","Ransomware & Malicious Attachments","Extortion Ware, Crypto-Lockers & Malicious Payloads",{"type":9,"value":568,"toc":804},[569,573,579,586,597,601,651,655,664,700,702,737,741,770,772],[35,570,572],{"id":571},"what-is-ransomware","What is Ransomware?",[20,574,575,578],{},[24,576,577],{},"Ransomware"," is a devastating class of malware that covertly infiltrates network infrastructure, maps connected shares\nand cloud backups, and deploys military-grade encryption (e.g. AES-256 and RSA-4096) across entire file repositories.",[20,580,581,582,585],{},"Modern ransomware groups practice ",[24,583,584],{},"Double and Triple Extortion",":",[60,587,588,591,594],{},[63,589,590],{},"Encrypting systems to halt daily operations.",[63,592,593],{},"Exfiltrating sensitive customer and intellectual property records to threaten public leaks.",[63,595,596],{},"Conducting distributed denial-of-service (DDoS) attacks or contacting company customers directly to accelerate\npayment.",[35,598,600],{"id":599},"infection-spread-lifecycle","Infection & Spread Lifecycle",[57,602,603],{},[60,604,605,623,633,639,645],{},[63,606,607,610,611,614,615,618,619,622],{},[24,608,609],{},"Initial Access Vector",": An employee opens a macro-enabled invoice (",[76,612,613],{},"Invoice_9042.docm","), a deceptive ZIP archive\ncontaining a disguised ",[76,616,617],{},".vbs"," or ",[76,620,621],{},".exe",", or attackers exploit exposed VPN\u002FRDP portals.",[63,624,625,628,629,632],{},[24,626,627],{},"Persistence & Defense Evasion",": The malware disables endpoint protection, clears Windows Volume Shadow Copies\n(",[76,630,631],{},"vssadmin delete shadows","), and establishes persistence.",[63,634,635,638],{},[24,636,637],{},"Lateral Movement & Domain Escalation",": Attackers harvest local credentials (using tools like Mimikatz), escalate\nto Active Directory Domain Admin, and locate all network storage (NAS\u002FSAN).",[63,640,641,644],{},[24,642,643],{},"Data Exfiltration",": Confidential databases, financial spreadsheets, and emails are compressed and quietly uploaded\nto anonymous cloud storage.",[63,646,647,650],{},[24,648,649],{},"Mass Encryption & Ransom Note",": Encryption scripts trigger simultaneously across domain servers and workstations,\nreplacing desktop wallpapers with ransom instructions.",[35,652,654],{"id":653},"simulated-ransom-note","Simulated Ransom Note",[20,656,657],{},[658,659],"img",{"alt":660,"className":661,"src":663,"title":660},"Ransomware screen example",[662],"w-full","\u002Fthreats\u002Fransomware-screen.webp",[111,665,669,672,675,678,697],{"channel":666,"icon":667,"sender":668},"Ransom Screen Notice","i-lucide-skull","BlackLock Ransomware Group",[20,670,671],{},"\"=== ATTENTION: ALL YOUR IMPORTANT FILES HAVE BEEN ENCRYPTED ===",[20,673,674],{},"All your corporate databases, documents, customer PII, and backups are locked with military-grade encryption algorithms.",[20,676,677],{},"To restore your systems:",[60,679,680,687,694],{},[63,681,682,683],{},"Download the Tor Browser from ",[181,684,685],{"href":685,"rel":686},"https:\u002F\u002Fwww.torproject.org",[185],[63,688,689,690],{},"Open our private portal: ",[181,691,692],{"href":692,"rel":693},"http:\u002F\u002Fblacklock5x9...onion",[185],[63,695,696],{},"Enter your Unique Client ID: 894F-29BC-EE01",[20,698,699],{},"PRICE: 4.5 BTC (Bitcoin). You have 72 hours before the decryption key is permanently deleted and all private files are\nreleased on the public darknet.\"",[35,701,147],{"id":146},[149,703,705],{"title":704},"Ransomware Resilience Rules",[153,706,707,713,719,725,731],{},[63,708,709,712],{},[24,710,711],{},"Maintain Immutable, Offline Backups (3-2-1-1-0 Rule)",": Ensure at least one full backup is physically disconnected\n(air-gapped) or stored in an immutable, write-once-read-many (WORM) cloud repository.",[63,714,715,718],{},[24,716,717],{},"Never enable macros or execute unexpected script attachments",": Office documents asking you to \"Enable Content\" or\n\"Enable Editing\" to view content are almost always weaponized droppers.",[63,720,721,724],{},[24,722,723],{},"Enforce the Principle of Least Privilege",": Standard employee accounts must not have local administrative rights on\ntheir machines.",[63,726,727,730],{},[24,728,729],{},"Isolate and patch remote access interfaces",": Never expose Remote Desktop Protocol (RDP) directly to the open\ninternet; mandate VPN with strict multi-factor authentication.",[63,732,733,736],{},[24,734,735],{},"Deploy Endpoint Detection & Response (EDR)",": Modern behavioral EDR tools can detect mass file modification and\nisolate the infected host automatically.",[35,738,740],{"id":739},"immediate-incident-containment","Immediate Incident Containment",[223,742,744],{"title":743},"Ransomware Detected? Take Instant Containment Actions",[153,745,746,752,758,764],{},[63,747,748,751],{},[24,749,750],{},"Disconnect immediately from physical networks",": Unplug ethernet cables and turn off Wi-Fi and Bluetooth on all\naffected devices immediately. DO NOT turn off the power (RAM holds crucial decryption keys and malware artifacts).",[63,753,754,757],{},[24,755,756],{},"Do not pay the ransom",": Cybersecurity authorities and law enforcement strongly advise against paying ransoms.\nPayment fuels criminal syndicates, does not guarantee data recovery, and marks your company as an easy repeat target.",[63,759,760,763],{},[24,761,762],{},"Isolate network segments and storage arrays",": Take offline network-attached storage and shared drives to stop\nencryption traversal.",[63,765,766,769],{},[24,767,768],{},"Contact certified forensic responders & law enforcement",": Engage certified incident response teams to secure\nforensic evidence and guide secure recovery from immutable backups.",[35,771,255],{"id":254},[153,773,774,782,789,796],{},[63,775,776,781],{},[181,777,780],{"href":778,"rel":779},"https:\u002F\u002Fwww.cisa.gov\u002Fstopransomware",[185],"CISA #StopRansomware"," – Official U.S. government guidance, threat alerts, and\nransomware playbooks.",[63,783,784,788],{},[181,785,787],{"href":262,"rel":786},[185],"Komerční banka – Škodlivý software a ochrana dat"," – Banking\nclient advisory on malware infections and prevention.",[63,790,791,795],{},[181,792,794],{"href":278,"rel":793},[185],"NÚKIB – Reakce na ransomware incidenty"," – National Cyber and Information Security Agency\nransomware defense guide.",[63,797,798,803],{},[181,799,802],{"href":800,"rel":801},"https:\u002F\u002Fattack.mitre.org\u002Ftechniques\u002FT1486\u002F",[185],"MITRE ATT&CK – Technique T1486: Data Encrypted for Impact"," – Tactical\nbreakdown of ransomware encryption behaviors.",{"title":291,"searchDepth":292,"depth":292,"links":805},[806,807,808,809,810,811],{"id":571,"depth":292,"text":572},{"id":599,"depth":292,"text":600},{"id":653,"depth":292,"text":654},{"id":146,"depth":292,"text":147},{"id":739,"depth":292,"text":740},{"id":254,"depth":292,"text":255},"malware","Malicious software that encrypts vital business files, databases, and backup systems, demanding enourmous cryptocurrency ransoms under threat of permanent data destruction or public leaks.","i-lucide-lock-keyhole",{},"\u002Fthreats\u002Fransomware",{"title":565,"description":818},"Malicious software that encrypts vital business files, databases, and backup systems, demanding exorbitant cryptocurrency ransoms under threat of permanent data destruction or public leaks.",{"loc":816,"videos":820,"images":821},[],[],"ransomware","threats\u002F03.ransomware",[825,826,827,828],"Weaponized Attachments (PDF, Office macros, ZIP\u002FISO)","Drive-by Downloads","Compromised Remote Desktop (RDP)","Unpatched Software Vulnerabilities","7PQfpCikml7DgKVB8SCpY_YutgGtoDUW9hxpn2xPpzE",{"id":831,"title":832,"body":833,"counterpart":969,"description":839,"extension":304,"icon":970,"meta":971,"navigation":309,"path":973,"seo":974,"sitemap":975,"slug":976,"stem":976,"toc":309,"__hash__":977},"pages_en\u002Fabout.md","About Cyber Framework",{"type":9,"value":834,"toc":962},[835,840,844,847,854,863,867,874,909,913,924,936,940,943,952,956,959],[836,837],"u-page-header",{":links":838,"description":839,"title":832},"[{\"label\":\"Email\",\"icon\":\"i-lucide-mail\",\"to\":\"mailto:info@cyber-framework.net?subject=Contact%20Cyber%20Framework\"},{\"label\":\"Discord\",\"icon\":\"i-simple-icons-discord\",\"to\":\"https:\u002F\u002Fdiscord.gg\u002FeRETGNTYWZ\",\"target\":\"_blank\",\"color\":\"neutral\",\"variant\":\"outline\"},{\"label\":\"LinkedIn\",\"icon\":\"i-simple-icons-linkedin\",\"to\":\"https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fcyber-framework\u002F\",\"target\":\"_blank\",\"color\":\"neutral\",\"variant\":\"outline\",\"class\":\"not-prose\"}]","Transforming dry, mandatory cybersecurity awareness training into interactive games people actually want to play.",[35,841,843],{"id":842},"security-training-is-broken-were-fixing-it","Security Training is Broken. We're Fixing It.",[20,845,846],{},"Traditional corporate cybersecurity training has a notorious reputation: tedious 45-minute slide presentations,\ncompliance videos running in background tabs on mute, and simplistic multiple-choice quizzes where employees simply\nguess until they pass.",[20,848,849,850,853],{},"The result? ",[24,851,852],{},"Zero behavioral change."," Despite millions spent on compliance checklists, organizations remain vulnerable\nto human-centric attack vectors like phishing, social engineering, and fraudulent credential prompts.",[20,855,856,859,860],{},[24,857,858],{},"Cyber Framework"," was born out of a simple conviction: ",[24,861,862],{},"the most effective way to build genuine security reflexes is\nthrough active, experiential gameplay.",[35,864,866],{"id":865},"why-interactive-games","Why Interactive Games?",[20,868,869,870,873],{},"When people play games, their brains enter an active problem-solving state. Instead of being told ",[338,871,872],{},"\"do not click\nsuspicious links\"",", players in Cyber Framework investigate deceptive signals, analyze realistic headers, and make\ndecisions under simulated pressure.",[875,876,880,888,895,902],"u-page-grid",{"className":877},[878,879],"lg:grid-cols-2","[&_p]:my-0",[881,882,885],"u-page-card",{"icon":883,"title":884},"i-lucide-gamepad-2","Active Decision Making",[20,886,887],{},"Passive video watching produces minimal retention. Branching game choices force players to evaluate risk and experience\nthe immediate aftermath of their decisions.",[881,889,892],{"icon":890,"title":891},"i-lucide-shield-alert","Real Incident Scenarios",[20,893,894],{},"Levels are inspired by actual incident response cases—such as Quishing, CEO Fraud, AI Voice Vishing, and Ransomware\ninfiltration.",[881,896,899],{"icon":897,"title":898},"i-lucide-flask-conical","Safe-to-Fail Sandbox",[20,900,901],{},"Employees can safely explore attack vectors, trigger simulated payloads, and learn from mistakes without risking\ncorporate systems or sensitive data.",[881,903,906],{"icon":904,"title":905},"i-lucide-zap","Instant Actionable Reflexes",[20,907,908],{},"Immediately after completing a scenario, players receive breakdown analytics and clear defensive habits they can apply\nat work and home right away.",[35,910,912],{"id":911},"the-creator-behind-the-mission","The Creator Behind the Mission",[20,914,915,916,919,920,923],{},"Cyber Framework was created and developed by ",[24,917,918],{},"Vašek Bílý"," (known online as ",[24,921,922],{},"xprees","), drawing on a background in\nsoftware engineering, web technologies, and indie game development to address human-factor security vulnerabilities.",[925,926,933],"team-card",{"avatar-url":927,"github":928,"instagram":929,"linkedin":930,"name":918,"role":931,"website":932},"\u002Fteam\u002Fvbily.webp","https:\u002F\u002Fgithub.com\u002Fcyber-framework","https:\u002F\u002Fwww.instagram.com\u002Fxprees.dev\u002F","https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Fvbily20","Founder & Developer","https:\u002F\u002Fxprees.com\u002F",[20,934,935],{},"Software engineer and game developer passionate about combining immersive gaming mechanics with practical cybersecurity\neducation. Believes security training should empower people rather than bore them.",[35,937,939],{"id":938},"play-the-simulation","Play the Simulation",[20,941,942],{},"Want to see how it works in action? You don't need to install anything—our scenarios run directly inside any modern web\nbrowser on desktop, tablet, or mobile.",[944,945,949],"game-scenario-link",{"button-text":946,"title":947,"url":948},"Launch demo","Try the demo in your browser","https:\u002F\u002Fplay.cyber-framework.net",[20,950,951],{},"Launch the instant, playable Cyber Framework demo and test your cybersecurity instincts against realistic, modern\nthreats.",[35,953,955],{"id":954},"get-in-touch","Get in Touch",[20,957,958],{},"Whether you're interested in deploying Cyber Framework for your organization, discussing partnerships, inquiring about\ncustom training scenarios, or just saying hello, we'd love to hear from you.",[960,961],"contact-channels",{},{"title":291,"searchDepth":292,"depth":292,"links":963},[964,965,966,967,968],{"id":842,"depth":292,"text":843},{"id":865,"depth":292,"text":866},{"id":911,"depth":292,"text":912},{"id":938,"depth":292,"text":939},{"id":954,"depth":292,"text":955},"o-nas","i-lucide-shield-check",{"locale":972},"en","\u002Fabout",{"title":832,"description":839},{"loc":973},"about","sHBuljykTjV7cl_HPje-9GHZeVlvhZNtEaCEKc_K13w",{"id":979,"title":980,"body":981,"counterpart":976,"description":988,"extension":304,"icon":970,"meta":1097,"navigation":309,"path":1099,"seo":1100,"sitemap":1101,"slug":969,"stem":1103,"toc":309,"__hash__":1104},"pages_cs\u002Fcs\u002Fabout.md","O projektu Cyber Framework",{"type":9,"value":982,"toc":1090},[983,989,993,996,1003,1011,1015,1022,1050,1054,1063,1069,1073,1076,1081,1085,1088],[836,984],{":links":985,"className":986,"description":988,"title":980},"[{\"label\":\"E-mail\",\"icon\":\"i-lucide-mail\",\"to\":\"mailto:info@cyber-framework.net?subject=Dotaz%20Cyber%20Framework\"},{\"label\":\"Discord\",\"icon\":\"i-simple-icons-discord\",\"to\":\"https:\u002F\u002Fdiscord.gg\u002FeRETGNTYWZ\",\"target\":\"_blank\",\"color\":\"neutral\",\"variant\":\"outline\"},{\"label\":\"LinkedIn\",\"icon\":\"i-simple-icons-linkedin\",\"to\":\"https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fcyber-framework\u002F\",\"target\":\"_blank\",\"color\":\"neutral\",\"variant\":\"outline\"}]",[987],"not-prose","Přetváříme nudná povinná školení kybernetické bezpečnosti v interaktivní hry, které lidé skutečně chtějí hrát.",[35,990,992],{"id":991},"tradiční-bezpečnostní-školení-nefungují-my-to-měníme","Tradiční bezpečnostní školení nefungují. My to měníme.",[20,994,995],{},"Běžná firemní školení kybernetické bezpečnosti mají špatnou pověst: zdlouhavé prezentace plné textu, compliance videa\nběžící na pozadí se ztlumeným zvukem a předvídatelné testy, kde lidé klikají tak dlouho, dokud náhodou neprojdou.",[20,997,998,999,1002],{},"Výsledek? ",[24,1000,1001],{},"Žádná skutečná změna návyků."," I přes miliony vynaložené na formální školení zůstávají organizace zranitelné\nvůči útokům cílícím na lidský faktor – od phishingu přes sociální inženýrství až po podvodné výzvy k ověření identity.",[20,1004,1005,1007,1008],{},[24,1006,858],{}," vznikl s jasnou vizí: ",[24,1009,1010],{},"nejefektivnější způsob, jak vybudovat skutečné bezpečnostní reflexy, je aktivní (herní) zážitek.",[35,1012,1014],{"id":1013},"proč-právě-interaktivní-hry","Proč právě interaktivní hry?",[20,1016,1017,1018,1021],{},"Při hraní her je lidský mozek v aktivním režimu řešení problémů. Místo pasivního poučování ",[338,1019,1020],{},"\"neklikejte na neznámé\nodkazy\""," hráči v Cyber Frameworku sami zkoumají podezřelé signály, analyzují e-mailové hlavičky a rozhodují se pod\nrealistickým tlakem.",[875,1023,1025,1031,1038,1044],{"className":1024},[878,879],[881,1026,1028],{"icon":883,"title":1027},"Aktivní rozhodování",[20,1029,1030],{},"Pasivní sledování videa nepřináší trvalé zapamatování. Větvené volby nutí hráče zvažovat rizika a nést okamžité následky\nsvých rozhodnutí v herním světě.",[881,1032,1035],{"icon":1033,"title":1034},"i-lucide:shield-alert","Opravdové situace",[20,1036,1037],{},"Herní scénáře jsou inspirovány skutečnými incidenty, jako je quishing, vishing nebo ransomwarový útok.",[881,1039,1041],{"icon":897,"title":1040},"Bezpečné prostředí pro chyby",[20,1042,1043],{},"Herní úrovně vycházejí ze skutečných útoků – od quishingu (podvodné QR kódy) přes CEO fraud a vishing s klonováním\nhlasu až po ransomware. Zaměstnanci mohou bezpečně prozkoumat techniky útočníků a učit se z chyb, aniž by ohrozili\nfiremní data či infrastrukturu.",[881,1045,1047],{"icon":904,"title":1046},"Okamžitě uplatnitelné návyky",[20,1048,1049],{},"Po dokončení scénáře hráč obdrží přehlednou zpětnou vazbu a praktické bezpečnostní návyky, které okamžitě využije v\npráci i v soukromí.",[35,1051,1053],{"id":1052},"kdo-za-projektem-stojí","Kdo za projektem stojí",[20,1055,1056,1057,1059,1060,1062],{},"Cyber Framework navrhuje a vyvíjí ",[24,1058,918],{}," (na internetu vystupující jako ",[24,1061,922],{},"). Propojuje zkušenosti ze\nsoftwarového inženýrství, webového vývoje a nezávislé herní tvorby s cílem chránit lidi před moderními kybernetickými\nhrozbami.",[925,1064,1066],{"avatar-url":927,"github":928,"instagram":929,"linkedin":930,"name":918,"role":1065,"website":932},"Zakladatel & vývojář",[20,1067,1068],{},"Softwarový inženýr a herní vývojář, který věří, že bezpečnostní vzdělávání má lidi bavit a posilovat jejich intuici,\nnikoli je nudit tabulkami a slidovými prezentacemi.",[35,1070,1072],{"id":1071},"vyzkoušejte-si-simulaci","Vyzkoušejte si simulaci",[20,1074,1075],{},"Zajímá vás, jak Cyber Framework funguje v praxi? Nemusíte nic instalovat – scénáře běží přímo v moderním webovém\nprohlížeči na počítači, tabletu i telefonu.",[944,1077],{"button-text":1078,"description":1079,"title":1080,"url":948},"Spustit demo","Spusťte si bezplatné hratelné demo v prohlížeči a otestujte své bezpečnostní reflexy proti realistickým hrozbám.","Vyzkoušejte demo v prohlížeči",[35,1082,1084],{"id":1083},"ozvěte-se-nám","Ozvěte se nám",[20,1086,1087],{},"Ať už máte zájem o nasazení Cyber Frameworku ve vaší organizaci, chcete probrat partnerství, tvorbu scénářů na míru,\nnebo nás jen pozdravit – velmi rádi od vás uslyšíme.",[960,1089],{},{"title":291,"searchDepth":292,"depth":292,"links":1091},[1092,1093,1094,1095,1096],{"id":991,"depth":292,"text":992},{"id":1013,"depth":292,"text":1014},{"id":1052,"depth":292,"text":1053},{"id":1071,"depth":292,"text":1072},{"id":1083,"depth":292,"text":1084},{"locale":1098},"cs","\u002Fcs\u002Fabout",{"title":980,"description":988},{"loc":1102},"\u002Fcs\u002Fo-nas","cs\u002Fabout","x8RFcOmwoqsXLpYmNvYMbdAuvhU3lh7J-EYHe342bEQ",1792020361877]