Articles | Cybersecurity at MUNI

20 Sep

ClickFix: an attack where you run the malware yourself

All it takes is a few clicks, copying a short command, and confirming its execution. That is exactly what ClickFix attacks rely on: the attacker convinces the user to run malicious code themselves. The entire process may appear to be a routine verification, update, installation, or a set of instructions for resolving a technical issue. In this article, we will show what ClickFix campaigns look like in practice, which techniques attackers use, and how to recognize this type of attack before it succeeds.

1 SepThreats

Are your data at risk? Find out easily with this useful free service.

In this guide, we’ll show you how to quickly find out whether your email address or password has appeared in a major data breach. We’ll use the free service Have I Been Pwned to do this. You’ll learn how to use it safely, how to set up automatic monitoring for future breaches, and what steps to take if you find your information in the database.

30 Mar

Gamified attacks: don’t let a hacker play you

Gamified attacks use game-like mechanics — rewards, tasks, and even the feeling of “just one last step” — to push you into clicking, granting permissions, entering a password, or running a malicious command. The article presents four typical scenarios: clicker malware, intrusive adware, fake CAPTCHA, and scams promising free in-game rewards. This is not some genius hacking — it is calculated manipulation designed to turn your device into a source of profit for the attacker.

18 Mar

AI and cybersecurity: 3 notes worth knowing

Artificial intelligence is now as natural a part of studying and work as searching for information online. It can speed up research, help with drafting text, or offer a new perspective. At the same time, however, it also raises (cyber)security questions: some of them are complex, while others can already be answered today.

10 Feb

Safer Internet Day

Safer Internet Day (SID) is an international initiative held every February, aimed at promoting safer and more responsible use of online technologies and mobile phones. Every day can be a Safer Internet Day, but today can serve as a reminder to make a change – choose one of our three activities.

14 JanThreats

Hackers without rules: when attacks are driven by profit, chaos, or ideology

Not all hacker groups work for governments. Some operate independently — driven by profit, ideology, or pure chaos. They extort hospitals, target critical infrastructure, and manipulate the public sphere. Here are five groups from the cyber underworld, along with their tactics and motivations. Get to know them — and hope they never decide to get to know you.

30 Oct 2025Threats

Not all factors are created equal. Or why verification codes aren’t enough.

Multi-factor authentication (MFA) is now a common protection against password misuse. When logging in, we are used to entering not only a password but also one-time verification codes from email, SMS, or an app. However, this method has a critical weakness. In this article, we reveal the vulnerabilities of verification codes and show how to ensure security without sacrificing convenience.

28 Jul 2025Threats

Hacker elites: how the most dangerous APT groups operate

Forget the cliché of a hooded hacker. Today’s real threats come from well-organized groups acting on behalf of nation-states. They steal data, influence elections, and disrupt infrastructure — systematically and with political intent. This article presents five of the most active APT groups today, their methods, targets, and the environments in which they operate.

27 Jun 2025Threats

Connecting to public Wi-Fi networks - threat or scare?

Avoid carrying out banking transactions on public networks – especially at airports! Hackers can steal your login credentials or spy on your communication. Never connect to public Wi-Fi without a VPN. But is it really that bad?

18 Jun 2025Threats

Vishing: Why Is the Human Voice More Effective Than Malware?

Vishing – Phishing by Phone – Is Becoming One of the Most Sophisticated Forms of Cyberattack. It doesn’t require any malicious files or complex hacking—just a convincing voice and a well-crafted script. In this article, we’ll explore why vishing is so effective, who its targets are, what techniques attackers use—and most importantly, how to protect yourself against it.

2 May 2025Threats

Digital nightmare: malware is in your hands?

One careless click can lead to a digital disaster. Your computer slows down, strange ads start popping up, and before you know it, your colleagues report receiving suspicious emails from you. In that moment, you may be holding more than just a device – you may be holding a digital nightmare called malware. This article will help you recognize the warning signs, understand where the threat comes from, and most importantly – show you how to respond without panicking.

7 Apr 2025Threats

DDoS Attacks: Digital Vandalism or a Security Threat?

Imagine thousands of people banging on your door all at once – not because they want to get in, but to prevent anyone else from entering. That’s essentially how a DDoS attack works. It doesn’t destroy data, but it can paralyze a website, service, or infrastructure. And that’s exactly what makes it one of the most widespread cyberattacks today.

5 Mar 2025Threats

Infostealers: the new trend in cybercrime

Infostealers are a growing cyber threat aimed at stealing personal data, passwords, and other sensitive information. This article answers frequently asked questions, explains the principle of infostealers, and provides key recommendations for protection.

2 Mar 2025Threats

Ransomware

A single careless click, a single downloaded attachment—and your data could be lost forever. Ransomware is one of the biggest cyber threats of today and can affect anyone. How does it work, how can you defend against it, and why paying the attackers might not be the solution?

7 Jan 2025

Safely to 2025

Enter the new year safely. The Cybersecurity Team of Masaryk University prepared ten resolutions for you that will help you to take better care of yourself in cyberspace.

11 Oct 2024

Alternative browsers Brave and TOR

Most people are familiar with common web browsers such as Chrome, Mozilla Firefox, or Edge. However, there are also alternative browsers like Brave or TOR, which focus on privacy protection. But are these browsers truly competitive alternatives to the traditional giants? And do they really offer a higher level of privacy as they claim? In this article, we will take a closer look at these browsers and try to answer these questions.

1 Oct 2024Threats

Device Security: Antivirus and Everything Around It

Why should we use antivirus software? And is it worth splashing out on premium features? In this article, we'll delve into the world of antivirus programs, which are more crucial than ever in today's online landscape. We'll uncover how these programs combat ever-evolving threats and safeguard your personal data. We'll explore how antivirus actually works and what other options you can employ against malicious files.

18 Jun 2024E-mailThreats

70 % of MUNI students fell prey to fraudulent e-mails

These were the findings of David Magušin’s research, in which he took the role of a cyber attacker to see how 215 Masaryk University students responded to fake phishing e-mails. An actual attacker, if successful, could use IS to terminate their studies, change their scholarship bank number or send counterfeit email with malware attached on their behalf.

7 Jun 2024Passwords

Databases of leaked passwords and account protection

Databases of leaked passwords contain passwords obtained and published after hacking attacks or due to insufficient system security. These databases can help regular users discover if their passwords have been compromised, but cyber attackers can also misuse them. This article explains how databases of leaked passwords work, what steps to take if a leak is discovered, and what preventive measures to enhance security.

5 Apr 2024Threats

AI as a Friend and Foe in Cybersecurity

Today, AI is an essential part of our everyday lives, whether it's generating text, creating images, or improving the user experience online. It is not only for these reasons that we have decided to introduce you in this article to the specific role of AI in cybersecurity, an area where its potential and challenges are reaching new dimensions. In addition to exploring the benefits of AI for defending against cyber threats, we will not shy away from looking at the darker side of AI...

31 Oct 2023

What threats lurk in the digital world? Alarming facts about cybersecurity.

In an era of digital threats, this article unveils key facts about cybersecurity. Learn how to protect yourself in the online world.

20 Sep 2023

Who wants our data? Besides social networks or supermarkets, Barbie as well!

All of us have encountered the annoying process of agreeing to contract terms on websites. We do it almost automatically, whether using apps, products, or social networks. But what are we actually agreeing on? That is what we will be diving into today – the terms and conditions, as well as user privacy.

24 Apr 2023

Why are universities increasingly being targeted by cyberattacks?

Attacks in cyberspace have become the new standard with the rise of digital technologies. These attacks take place every day. However, unlike physical attacks, they may not be noticed or even known by the target for long. If a significant attack occurs, it rarely makes it into the media and the general public's awareness. Did you know, for example, that Masaryk University faces such attacks almost daily?

E-mail

Do you understand e-mail headers?

We receive many e-mails daily, and it's not always solicited mail. Have you noticed that the sender's address sometimes looks trustworthy in similar e-mails at first glance? In the following article, you will learn how this situation is possible and how the e-mail headers are related to it.

30 Jan 2020Data EncryptionThreats

The Ransomware Threat

Attackers encrypt data and then require money to decrypt them - that's ransomware.

26 Jul 2019E-mail

Don't be fooled

„Hello, your university account has been hacked. Please send us the password for this account as soon as possible so that we can secure it."

Threats

What if it catches fire?

We often write that preventing a fire is much better than fighting it. It is still valid. But what to do if a fire does break out? That’s the topic of the last part of the Cybersecurity series from CSIRT-MU.

10 Dec 2018Threats

How to not get tangled up in the net?

When traveling to a foreign country, it is wise to search for what to watch out for in that country. It’s the same with surfing the Internet.