Materiály Bezpečnost - Lukáš Barda

Statistics

The evolution of the global cost of cybercrime. 70% increase year 2023 vs. year 2028. year 2020 vs. 2028 = 4 times. https://www.statista.com/chart/28878/expected-cost-of-cybercrime-until-2027/
Numbers from the FBI for 2023: https://www.ic3.gov/Media/PDF/AnnualReport/2023_IC3Report.pdf
Real-time cyberattack map – Radware: Live Cyber Attack Threat Map | Radware
Real-time cyberattack map – Check Point: https://threatmap.checkpoint.com/

Social engineering

The Art of Deception (Kevin Mitnick) https://www.databazeknih.cz/knihy/umeni-klamu-12032
Hacking Conference - DEF CON: https://defcon.org
AI Grandma Daisy helps detect fraud (UK): https://www.cbsnews.com/news/ai-grandma-daisy-uk-anti-fraud-scammers-virgin-media-o2/

Attacks and surveillance

Stolen voter database: https://www.privacyaffairs.com/hacked-voter-records/
Chancellor's Issues: https://reportermagazin.cz/12978/jsem-kancler-prezidenta-hackeri-vitejte/
Problems of the University of Defense: https://ct24.ceskatelevize.cz/domaci/3617508-na-univerzitu-obrany-zautocili-hackeri-a-zrejme-odcizili-data-z-rektoratu-pise
John Oliver sits down with Edward Snowden to discuss the NSA, the balance between privacy and security: https://www.youtube.com/watch?v=XEVlyP4_11M
Watch This Russian Hacker Break Into Our Computer In Minutes | CNBC: https://www.youtube.com/watch?v=CV39QzFpJx4
Study: What Android whispers about you: https://lukasbarda.cz/studie-co-o-vas-android-naseptava/
Article on anonymity on the web: https://lukasbarda.cz/web-a-anonymita/
An extreme example to watch – Social Credit System in China: https://www.youtube.com/watch?v=CLo3e1Pak-Y
AI imitates human voice in 15 seconds: https://www.novinky.cz/clanek/internet-a-pc-software-umela-inteligence-naklonuje-hlas-cloveka-staci-ji-15-sekund-40466255
Cyberattack on X (Twitter): https://www.theguardian.com/technology/2025/mar/10/elon-musk-cyberattack-x-outages
TikTok and influencing elections in Romania: https://www.investigace.cz/rumunsko-tiktok-volby-prezident/
Stuxnet: Cyberattack on Iran's nuclear program: https://en.wikipedia.org/wiki/Stuxnet
Darknet diaries podcast - episode about the NotPetya attack: https://darknetdiaries.com/episode/54/
Unwanted AirTags: https://support.apple.com/cs-cz/119874
Services and tools to protect your privacy from tracking: https://www.privacytools.io/

Scams

Sample Ransomware attack: https://www.irozhlas.cz/zpravy-svet/hacker-belorusko-rusko-vojaci-zeleznice-utok-vezni_2201242135_voj
Example of a Ransomware attack in the Czech Republic: https://ct24.ceskatelevize.cz/domaci/3164067-utok-na-benesovskou-nemocnici-zpusobil-sedesatimilionovou-skodu-police-pripad
Sample Phishing Attack: https://www.seznamzpravy.cz/clanek/autenticka-nahravka-zlodeje-takhle-vas-okrade-o-citlive-udaje-a-penize-156431
Fake owner in meeting: https://archiv.hn.cz/c1-67234820-miliardovy-e-shop-tercem-deepfake-podvodu-zamestnanec-si-ctvrt-hodiny-volal-s-videokopii-majitele-gymbeamu
The most professional fraud in the Czech Republic: https://www.youtube.com/watch?v=rB0x09uAyyE
Globally, the recent case in Hong Kong: https://edition.cnn.com/2024/02/04/asia/deepfake-cfo-scam-hong-kong-intl-hnk/index.html
Fake child abductions in the US: https://amp.theguardian.com/us-news/2023/jun/14/ai-kidnapping-scam-senate-hearing-jennifer-destefano

Fake videos

How beautiful Prague is in Czech (HeyGen tool) possibly on YouTube
How beautiful Prague is in English (HeyGen tool) possibly on YouTube (including English subtitles generated by AI in YouTube studio)
How beautiful Prague is in Japanese (HeyGen tool) possibly on YouTube (including AI-generated Japanese subtitles in YouTube Studio)
Mona Lisa on AI: https://youtu.be/JlPlNh7NC2s

Disinfo

Death of King Charles III https://www.idnes.cz/zpravy/zahranicni/britanie-kral-karel-nemoc-rakovina-spekulace-ruska-media-dezinfromace-falesna-zprava.A240319_101600_zahranicni_dtt
Article on how to verify online information: https://lukasbarda.cz/jak-overovat-online-informace-nastroje-a-tipy/

Passwords and the second factor

Has your login information been stolen? https://haveibeenpwned.com/
Password strength check: https://www.passwordmonster.com/
200 most common passwords: https://nordpass.com/most-common-passwords-list/
10000 most common passwords: https://en.wikipedia.org/wiki/Wikipedia:10,000_most_common_passwords
YubiKey dongle: https://www.yubico.com/
Article on the second factor: https://lukasbarda.cz/vicefaktorova-autentizace-vas-ucet-v-bezpeci/

Password Managers / Keychains

Secure keychain https://keepass.info/
The keychain I use: https://bitwarden.com/
How to export passwords from Google Keychain: https://www.google.com/search?q=how+to+export+passwords+from+google+to+1password
Keepass iOS app: Keepasium https://keepassium.com/
Keepass Android apk: KeePassDroid https://play.google.com/store/apps/details?id=com.android.keepass
Password Manager Comparison – NordPass vs Bitwarden: NordPass vs Bitwarden 2024: 8 Tests, 1 Clear Winner (restoreprivacy.com)
Why you should stop using LastPass (Forbes): Why You Should Stop Using LastPass After New Hack Method Update (forbes.com)
LastPass issues: https://www.seznamzpravy.cz/clanek/tech-technologie-internet-zmente-si-hesla-a-prchejte-po-pul-roce-lastpass-priznal-co-jim-ukradli-227282
Trezor – hardware wallet for cryptocurrencies: https://trezor.io/
Have I Been Pwned – password or email leak check: https://haveibeenpwned.com/
Password Monster – password strength test: https://www.passwordmonster.com/

VPN

NordVPN: https://nordvpn.com/
Proton VPN: https://protonvpn.com/
Article on how to choose a VPN: https://lukasbarda.cz/proc-pouzivat-vpn-a-jak-vybrat-nejlepsi/

Profiles and Login

What Google knows about you: https://myactivity.google.com/
Gmail security label: https://apps.apple.com/us/app/gmail-email-by-google/id422689480
Securing your Facebook profile: https://www.facebook.com/settings?tab=security
Where you are logged in with your Facebook account: https://www.facebook.com/settings?tab=applications&section=active
Securing your Google profile: https://myaccount.google.com/security-checkup/3
Where you are signed in with your Google Account: https://myaccount.google.com/permissions
Logging in with your bank identity: https://www.bankid.cz/
Shared credentials: http://bugmenot.com/
DeleteMe – removing personal data from Google and the internet: Remove Personal Info from Google - DeleteMe
Incogni – service for removing data from intermediaries (data brokers): Data Broker Removal Service | Incognito

More tips, tools and apps

Article on how to set up a new mobile phone: https://lukasbarda.cz/novy-telefon-naucte-se-ho-spravne-nastavit/
Ad blocking: https://blokada.org/
Check file or web page before opening: https://www.virustotal.com/
Online PDF distribution (use Adobe tools for sensitive files: https://www.ilovepdf.com/
Online translator: https://www.deepl.com/en/translator
Google Duplex Voice Assistant: https://www.youtube.com/watch?v=D5VN56jQMWM
Boston Dynamics robots: https://www.youtube.com/watch?v=fn3KWM1kuAw
Boston Dynamics robots to buy: https://www.alza.cz/search.htm?exps=boston+dynamics
Lustering a person in the online space (OSINT tool): https://www.maltego.com/
OSINT Techniques: https://cs.wikipedia.org/wiki/Zpravodajstv%C3%AD_z_otev%C5%99en%C3%BDch_zdroj%C5%AF
DDoS report for 2023: https://blog.cloudflare.com/ddos-threat-report-2023-q3/
Am I unique: https://amiunique.org/
Book Hooked: https://www.goodreads.com/book/show/22668729-hooked
The Irresistible Book: https://www.databazeknih.cz/knihy/neodolatelne-365327
The book Digital Dementia: https://www.databazeknih.cz/knihy/digitalni-demence-jak-pripravujeme-sami-sebe-a-nase-deti-o-rozum-198686
The book Child in the Net: https://www.databazeknih.cz/knihy/dite-v-siti-411738
Documentary The Social Dilemma. https://www.netflix.com/title/81254224
The Big Hack documentary: https://www.netflix.com/title/80117542
Series Black Mirror, episode Nosedive: https://www.csfd.cz/film/214772-cerne-zrcadlo/460789-pad-stremhlav/prehled/
Documentary The Art of Espionage – part The Honey Trap: https://www.csfd.cz/film/970241-umeni-spionaze/970273-medova-past/prehled/
Long Distance podcast and scam from India (part one): https://gimletmedia.com/shows/reply-all/6nh3wk
Long Distance podcast and scam from India (part two): https://gimletmedia.com/shows/reply-all/76h5gl
Security analysis of MY 2022 Olympic app: https://citizenlab.ca/2022/01/cross-country-exposure-analysis-my2022-olympics-app/
What we do on networks: https://amidigital.cz/index2023/
Publications on cybersecurity research – NÚKIB: https://nukib.gov.cz/cs/kyberneticka-bezpecnost/vyzkum/publikace-k-vyzkumu/
OMG Cable – Hak5 Assault USB Cable: https://shop.hak5.org/products/omg-cable
Flipper Zero – a tool for testing devices and networks: https://flipperzero.one/
Windows Sandbox – a secure testing environment: https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-install
Maltego (tool for lustrating a person's digital footprint): https://www.maltego.com/
Maltego (sample output): https://lukasbardacz-my.sharepoint.com/:f:/g/personal/jsem_lukasbarda_cz/Epr5pecyoChIloTINGtzqIUBOD461YCFWjet9HTLVpSf8Q?e=rtsmVB
HeyGen – AI tool for creating avatar videos: https://app.heygen.com/home
Microsoft 365 Copilot Chat – AI chat in the corporate environment: https://m365.cloud.microsoft/chat/
GPTZero – AI generated text detection: https://app.gptzero.me/
Google Alerts – monitoring new content online: https://www.google.com/alerts
Bug Hunters – rewards for found bugs (Google): https://bughunters.google.com/
T-Mobile Bug Bounty Program: https://www.t-mobile.cz/bug-bounty/zed-slavy
3-2-1 Backup Strategy: https://www.techtarget.com/searchdatabackup/definition/3-2-1-Backup-Strategy
What to do after losing your Facebook account – Lukáš Barda: https://lukasbarda.cz/ukradli-mi-facebook-ucet-co-ted/
Barbie apps: https://www.barbieselfie.ai/
Ronaldo speaking Slovak: https://www.instagram.com/reel/CzdmPo-M0HN/?utm_source=ig_web_copy_link&igshid=MzRlODBiNWFlZA==
Google and the fine for false anonymity: https://mobilizujeme.cz/clanky/anonymni-rezim-nebyl-vubec-anonymni-ted-musi-google-zaplatit-tucnou-pokutu

Authorities

Publications on cybersecurity – NÚKIB: https://nukib.gov.cz/cs/kyberneticka-bezpecnost/vyzkum/publikace-k-vyzkumu/
National Cyber Security Center SK-CERT (Slovakia): https://www.sk-cert.sk/sk/o-nas/index.html

Electronic signatures

Individuals: https://signi.com/
Corporate solutions: https://www.sefira.cz/

Flask andhorse and photo

Iconfinder - icons and graphic elements: https://www.iconfinder.com/
Dreamstime – paid photos and illustrations: https://www.dreamstime.com/
iStock – professional photos and vectors: https://www.istockphoto.com/
Unsplash – photos for non-commercial and commercial use: https://unsplash.com/ (Free)

Children

Materials for adults: https://lukasbarda.cz/materialy-dospelaci/
Sharenting – why (not) share photos of children online: https://lukasbarda.cz/sharenting-fotky-deti-na-site-nepatri/
Message from Ella (Deutsche Telekom): https://www.youtube.com/watch?v=F4WZ_k0vUDM

Alternatives to Google services

Alternative applications: https://lukasbarda.cz/alternativy-ke-sluzbam-a-aplikacim-zdarma/
DuckDuckGo: https://duckduckgo.com/
Brave browser: https://brave.com/
Vivaldi browser: https://vivaldi.com/cs/
Tor browser: https://www.torproject.org/
Proton email: https://proton.me/cs/mail
Mullvad VPN and browser: https://mullvad.net/en
Alternative Office: https://cryptpad.cz/
Session (anonymous messenger with encryption): https://getsession.org/

How much is our data worth (available on the Darknet)

online banking logins cost $40 on average
credit card information including related information costs $14-$30
hacked facebook account: $35.

Source: http://thedwffdwtwlcsp4rgbbcjhvixmbz7q7g57sphyebt3sd6enjlkuwiqd.onion/index.php/news-and-articles/the-deep-web/item/1020-you-are-worth-1-000-on-the-dark-web-new-study-by-privacy-affairs-finds

Where to go for information

NÚKIB – Its infographics, reports and recommendations https://osveta.nukib.cz/course/view.php?id=123
Safe remote work - recommendations for companies and employees: https://www.nukib.cz/cs/infoservis/doporuceni/1523-bezpecna-prace-na-dalku-doporuceni-pro-firmy-i-zamestnance/
The absolute basics in the video: https://lukasbarda.cz/zaklady-bezpecneho-chovani-online-rozhovor-s-michalem/
Cyber Security Ten Commandments: https://lukasbarda.cz/desatero-kyberneticke-bezpecnosti-uzivatele/
Video conferencing safely for users: https://www.nukib.cz/download/publikace/podpurne_materialy/2020-07-17_Standard-pro-VTC_1.0_Priloha-1-barevne.pdf
Pavel Spajek Matějíček's horror bulletin board: https://padlet.com/pavelmatejicek/security-videa-nejen-ke-kolen-m-3dlmvuv2jzahkvd5
Project Be safe online from Avast: https://www.avast.com/cz/besafeonline/
E-safety project: https://www.e-bezpeci.cz/
Project I Know Where I'm Clicking: https://www.vimkamklikam.cz/
Click for Peace Project: https://www.t-mobile.cz/microsites/klik-pro-klid/index.html#bezpecnostni-desatero-1

Test yourself

Google Phishing Quiz - Can you spot a scam email?: https://phishingquiz.withgoogle.com/
Cybertest – verification of basic cybersecurity knowledge: https://www.kybertest.cz/