commit b895cddc5f4bb06564a6698ac9fc83526c8daef2 Author: Richard Date: Mon Jun 15 18:12:40 2026 +0200 Initial commit diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..92cf479 --- /dev/null +++ b/.gitignore @@ -0,0 +1,5 @@ +fm.jpg +jk.jpeg +profilbild.jpg +.DS_Store +Thumbs.db \ No newline at end of file diff --git a/community_gesundheitsämter_17_06_2026/LICENSE b/community_gesundheitsämter_17_06_2026/LICENSE new file mode 100644 index 0000000..bb7624d --- /dev/null +++ b/community_gesundheitsämter_17_06_2026/LICENSE @@ -0,0 +1,21 @@ +MIT License + +Copyright (c) 2026 Richard + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/community_gesundheitsämter_17_06_2026/LICENSE-CONTENT.txt b/community_gesundheitsämter_17_06_2026/LICENSE-CONTENT.txt new file mode 100644 index 0000000..633a2eb --- /dev/null +++ b/community_gesundheitsämter_17_06_2026/LICENSE-CONTENT.txt @@ -0,0 +1,438 @@ +Diese Datei lizenziert die NICHT-Code-Inhalte dieses Projekts +(Präsentationsfolien, Texte, Diagramme/SVGs, Bilder) – siehe LICENSING.md. + +Copyright (C) 2026 Richard +Lizenz: Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) +Lizenz-Deed (Kurzfassung): https://creativecommons.org/licenses/by-sa/4.0/ +Vollständiger Rechtstext unten und unter: +https://creativecommons.org/licenses/by-sa/4.0/legalcode + +======================================================================= + +Attribution-ShareAlike 4.0 International + +======================================================================= + +Creative Commons Corporation ("Creative Commons") is not a law firm and +does not provide legal services or legal advice. Distribution of +Creative Commons public licenses does not create a lawyer-client or +other relationship. Creative Commons makes its licenses and related +information available on an "as-is" basis. Creative Commons gives no +warranties regarding its licenses, any material licensed under their +terms and conditions, or any related information. Creative Commons +disclaims all liability for damages resulting from their use to the +fullest extent possible. + +Using Creative Commons Public Licenses + +Creative Commons public licenses provide a standard set of terms and +conditions that creators and other rights holders may use to share +original works of authorship and other material subject to copyright +and certain other rights specified in the public license below. The +following considerations are for informational purposes only, are not +exhaustive, and do not form part of our licenses. + + Considerations for licensors: Our public licenses are + intended for use by those authorized to give the public + permission to use material in ways otherwise restricted by + copyright and certain other rights. Our licenses are + irrevocable. Licensors should read and understand the terms + and conditions of the license they choose before applying it. + Licensors should also secure all rights necessary before + applying our licenses so that the public can reuse the + material as expected. Licensors should clearly mark any + material not subject to the license. This includes other CC- + licensed material, or material used under an exception or + limitation to copyright. More considerations for licensors: + wiki.creativecommons.org/Considerations_for_licensors + + Considerations for the public: By using one of our public + licenses, a licensor grants the public permission to use the + licensed material under specified terms and conditions. If + the licensor's permission is not necessary for any reason--for + example, because of any applicable exception or limitation to + copyright--then that use is not regulated by the license. Our + licenses grant only permissions under copyright and certain + other rights that a licensor has authority to grant. Use of + the licensed material may still be restricted for other + reasons, including because others have copyright or other + rights in the material. A licensor may make special requests, + such as asking that all changes be marked or described. + Although not required by our licenses, you are encouraged to + respect those requests where reasonable. More considerations + for the public: + wiki.creativecommons.org/Considerations_for_licensees + +======================================================================= + +Creative Commons Attribution-ShareAlike 4.0 International Public +License + +By exercising the Licensed Rights (defined below), You accept and agree +to be bound by the terms and conditions of this Creative Commons +Attribution-ShareAlike 4.0 International Public License ("Public +License"). To the extent this Public License may be interpreted as a +contract, You are granted the Licensed Rights in consideration of Your +acceptance of these terms and conditions, and the Licensor grants You +such rights in consideration of benefits the Licensor receives from +making the Licensed Material available under these terms and +conditions. + + +Section 1 -- Definitions. + + a. Adapted Material means material subject to Copyright and Similar + Rights that is derived from or based upon the Licensed Material + and in which the Licensed Material is translated, altered, + arranged, transformed, or otherwise modified in a manner requiring + permission under the Copyright and Similar Rights held by the + Licensor. For purposes of this Public License, where the Licensed + Material is a musical work, performance, or sound recording, + Adapted Material is always produced where the Licensed Material is + synched in timed relation with a moving image. + + b. Adapter's License means the license You apply to Your Copyright + and Similar Rights in Your contributions to Adapted Material in + accordance with the terms and conditions of this Public License. + + c. BY-SA Compatible License means a license listed at + creativecommons.org/compatiblelicenses, approved by Creative + Commons as essentially the equivalent of this Public License. + + d. Copyright and Similar Rights means copyright and/or similar rights + closely related to copyright including, without limitation, + performance, broadcast, sound recording, and Sui Generis Database + Rights, without regard to how the rights are labeled or + categorized. For purposes of this Public License, the rights + specified in Section 2(b)(1)-(2) are not Copyright and Similar + Rights. + + e. Effective Technological Measures means those measures that, in the + absence of proper authority, may not be circumvented under laws + fulfilling obligations under Article 11 of the WIPO Copyright + Treaty adopted on December 20, 1996, and/or similar international + agreements. + + f. Exceptions and Limitations means fair use, fair dealing, and/or + any other exception or limitation to Copyright and Similar Rights + that applies to Your use of the Licensed Material. + + g. License Elements means the license attributes listed in the name + of a Creative Commons Public License. The License Elements of this + Public License are Attribution and ShareAlike. + + h. Licensed Material means the artistic or literary work, database, + or other material to which the Licensor applied this Public + License. + + i. Licensed Rights means the rights granted to You subject to the + terms and conditions of this Public License, which are limited to + all Copyright and Similar Rights that apply to Your use of the + Licensed Material and that the Licensor has authority to license. + + j. Licensor means the individual(s) or entity(ies) granting rights + under this Public License. + + k. Share means to provide material to the public by any means or + process that requires permission under the Licensed Rights, such + as reproduction, public display, public performance, distribution, + dissemination, communication, or importation, and to make material + available to the public including in ways that members of the + public may access the material from a place and at a time + individually chosen by them. + + l. Sui Generis Database Rights means rights other than copyright + resulting from Directive 96/9/EC of the European Parliament and of + the Council of 11 March 1996 on the legal protection of databases, + as amended and/or succeeded, as well as other essentially + equivalent rights anywhere in the world. + + m. You means the individual or entity exercising the Licensed Rights + under this Public License. Your has a corresponding meaning. + + +Section 2 -- Scope. + + a. License grant. + + 1. Subject to the terms and conditions of this Public License, + the Licensor hereby grants You a worldwide, royalty-free, + non-sublicensable, non-exclusive, irrevocable license to + exercise the Licensed Rights in the Licensed Material to: + + a. reproduce and Share the Licensed Material, in whole or + in part; and + + b. produce, reproduce, and Share Adapted Material. + + 2. Exceptions and Limitations. For the avoidance of doubt, where + Exceptions and Limitations apply to Your use, this Public + License does not apply, and You do not need to comply with + its terms and conditions. + + 3. Term. The term of this Public License is specified in Section + 6(a). + + 4. Media and formats; technical modifications allowed. The + Licensor authorizes You to exercise the Licensed Rights in + all media and formats whether now known or hereafter created, + and to make technical modifications necessary to do so. The + Licensor waives and/or agrees not to assert any right or + authority to forbid You from making technical modifications + necessary to exercise the Licensed Rights, including + technical modifications necessary to circumvent Effective + Technological Measures. For purposes of this Public License, + simply making modifications authorized by this Section 2(a) + (4) never produces Adapted Material. + + 5. Downstream recipients. + + a. Offer from the Licensor -- Licensed Material. Every + recipient of the Licensed Material automatically + receives an offer from the Licensor to exercise the + Licensed Rights under the terms and conditions of this + Public License. + + b. Additional offer from the Licensor -- Adapted Material. + Every recipient of Adapted Material from You + automatically receives an offer from the Licensor to + exercise the Licensed Rights in the Adapted Material + under the conditions of the Adapter's License You apply. + + c. No downstream restrictions. You may not offer or impose + any additional or different terms or conditions on, or + apply any Effective Technological Measures to, the + Licensed Material if doing so restricts exercise of the + Licensed Rights by any recipient of the Licensed + Material. + + 6. No endorsement. Nothing in this Public License constitutes or + may be construed as permission to assert or imply that You + are, or that Your use of the Licensed Material is, connected + with, or sponsored, endorsed, or granted official status by, + the Licensor or others designated to receive attribution as + provided in Section 3(a)(1)(A)(i). + + b. Other rights. + + 1. Moral rights, such as the right of integrity, are not + licensed under this Public License, nor are publicity, + privacy, and/or other similar personality rights; however, to + the extent possible, the Licensor waives and/or agrees not to + assert any such rights held by the Licensor to the limited + extent necessary to allow You to exercise the Licensed + Rights, but not otherwise. + + 2. Patent and trademark rights are not licensed under this + Public License. + + 3. To the extent possible, the Licensor waives any right to + collect royalties from You for the exercise of the Licensed + Rights, whether directly or through a collecting society + under any voluntary or waivable statutory or compulsory + licensing scheme. In all other cases the Licensor expressly + reserves any right to collect such royalties. + + +Section 3 -- License Conditions. + +Your exercise of the Licensed Rights is expressly made subject to the +following conditions. + + a. Attribution. + + 1. If You Share the Licensed Material (including in modified + form), You must: + + a. retain the following if it is supplied by the Licensor + with the Licensed Material: + + i. identification of the creator(s) of the Licensed + Material and any others designated to receive + attribution, in any reasonable manner requested by + the Licensor (including by pseudonym if + designated); + + ii. a copyright notice; + + iii. a notice that refers to this Public License; + + iv. a notice that refers to the disclaimer of + warranties; + + v. a URI or hyperlink to the Licensed Material to the + extent reasonably practicable; + + b. indicate if You modified the Licensed Material and + retain an indication of any previous modifications; and + + c. indicate the Licensed Material is licensed under this + Public License, and include the text of, or the URI or + hyperlink to, this Public License. + + 2. You may satisfy the conditions in Section 3(a)(1) in any + reasonable manner based on the medium, means, and context in + which You Share the Licensed Material. For example, it may be + reasonable to satisfy the conditions by providing a URI or + hyperlink to a resource that includes the required + information. + + 3. If requested by the Licensor, You must remove any of the + information required by Section 3(a)(1)(A) to the extent + reasonably practicable. + + b. ShareAlike. + + In addition to the conditions in Section 3(a), if You Share + Adapted Material You produce, the following conditions also apply. + + 1. The Adapter's License You apply must be a Creative Commons + license with the same License Elements, this version or + later, or a BY-SA Compatible License. + + 2. You must include the text of, or the URI or hyperlink to, the + Adapter's License You apply. You may satisfy this condition + in any reasonable manner based on the medium, means, and + context in which You Share Adapted Material. + + 3. You may not offer or impose any additional or different terms + or conditions on, or apply any Effective Technological + Measures to, Adapted Material that restrict exercise of the + rights granted under the Adapter's License You apply. + + +Section 4 -- Sui Generis Database Rights. + +Where the Licensed Rights include Sui Generis Database Rights that +apply to Your use of the Licensed Material: + + a. for the avoidance of doubt, Section 2(a)(1) grants You the right + to extract, reuse, reproduce, and Share all or a substantial + portion of the contents of the database; + + b. if You include all or a substantial portion of the database + contents in a database in which You have Sui Generis Database + Rights, then the database in which You have Sui Generis Database + Rights (but not its individual contents) is Adapted Material, + including for purposes of Section 3(b); and + + c. You must comply with the conditions in Section 3(a) if You Share + all or a substantial portion of the contents of the database. + +For the avoidance of doubt, this Section 4 supplements and does not +replace Your obligations under this Public License where the Licensed +Rights include other Copyright and Similar Rights. + + +Section 5 -- Disclaimer of Warranties and Limitation of Liability. + + a. UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE + EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS + AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF + ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, + IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, + WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR + PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, + ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT + KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT + ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. + + b. TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE + TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, + NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, + INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, + COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR + USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN + ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR + DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR + IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. + + c. The disclaimer of warranties and limitation of liability provided + above shall be interpreted in a manner that, to the extent + possible, most closely approximates an absolute disclaimer and + waiver of all liability. + + +Section 6 -- Term and Termination. + + a. This Public License applies for the term of the Copyright and + Similar Rights licensed here. However, if You fail to comply with + this Public License, then Your rights under this Public License + terminate automatically. + + b. Where Your right to use the Licensed Material has terminated under + Section 6(a), it reinstates: + + 1. automatically as of the date the violation is cured, provided + it is cured within 30 days of Your discovery of the + violation; or + + 2. upon express reinstatement by the Licensor. + + For the avoidance of doubt, this Section 6(b) does not affect any + right the Licensor may have to seek remedies for Your violations + of this Public License. + + c. For the avoidance of doubt, the Licensor may also offer the + Licensed Material under separate terms or conditions or stop + distributing the Licensed Material at any time; however, doing so + will not terminate this Public License. + + d. Sections 1, 5, 6, 7, and 8 survive termination of this Public + License. + + +Section 7 -- Other Terms and Conditions. + + a. The Licensor shall not be bound by any additional or different + terms or conditions communicated by You unless expressly agreed. + + b. Any arrangements, understandings, or agreements regarding the + Licensed Material not stated herein are separate from and + independent of the terms and conditions of this Public License. + + +Section 8 -- Interpretation. + + a. For the avoidance of doubt, this Public License does not, and + shall not be interpreted to, reduce, limit, restrict, or impose + conditions on any use of the Licensed Material that could lawfully + be made without permission under this Public License. + + b. To the extent possible, if any provision of this Public License is + deemed unenforceable, it shall be automatically reformed to the + minimum extent necessary to make it enforceable. If the provision + cannot be reformed, it shall be severed from this Public License + without affecting the enforceability of the remaining terms and + conditions. + + c. No term or condition of this Public License will be waived and no + failure to comply consented to unless expressly agreed to by the + Licensor. + + d. Nothing in this Public License constitutes or may be interpreted + as a limitation upon, or waiver of, any privileges and immunities + that apply to the Licensor or You, including from the legal + processes of any jurisdiction or authority. + + +======================================================================= + +Creative Commons is not a party to its public +licenses. Notwithstanding, Creative Commons may elect to apply one of +its public licenses to material it publishes and in those instances +will be considered the "Licensor." The text of the Creative Commons +public licenses is dedicated to the public domain under the CC0 Public +Domain Dedication. Except for the limited purpose of indicating that +material is shared under a Creative Commons public license or as +otherwise permitted by the Creative Commons policies published at +creativecommons.org/policies, Creative Commons does not authorize the +use of the trademark "Creative Commons" or any other trademark or logo +of Creative Commons without its prior written consent including, +without limitation, in connection with any unauthorized modifications +to any of its public licenses or any other arrangements, +understandings, or agreements concerning use of licensed material. For +the avoidance of doubt, this paragraph does not form part of the +public licenses. + +Creative Commons may be contacted at creativecommons.org. diff --git a/community_gesundheitsämter_17_06_2026/LICENSING.md b/community_gesundheitsämter_17_06_2026/LICENSING.md new file mode 100644 index 0000000..e3a94f0 --- /dev/null +++ b/community_gesundheitsämter_17_06_2026/LICENSING.md @@ -0,0 +1,53 @@ +# Lizenzierung + +Dieses Projekt ist **dual lizenziert**: Quellcode und Inhalte stehen unter +unterschiedlichen Lizenzen, weil ein Schulungsprojekt aus beidem besteht. + +© 2026 Richard. Bitte „Richard" durch deinen vollständigen Namen (oder dein +gewünschtes Pseudonym) ersetzen – das ist die Person/Stelle, die die Rechte hält. + +## Quellcode → MIT + +Gilt für alle ausführbaren Bestandteile, u. a.: + +- `gotcha-app/` (Node-Server und ausgelieferte Seiten) +- JavaScript in den HTML-Dateien (Steuerlogik der Folien/Animation) + +Volltext: [`LICENSE`](./LICENSE) · SPDX: `MIT` + +Kurz: Andere dürfen den Code nutzen, ändern, weitergeben und auch in +proprietären Projekten einsetzen – einzige Bedingung ist, dass Copyright- +Vermerk und Lizenztext beibehalten werden. Es gibt keine Copyleft- oder +Offenlegungspflicht. + +## Inhalte → CC BY-SA 4.0 + +Gilt für die nicht ausführbaren Werke, u. a.: + +- Präsentationsfolien und deren Texte (`cybersecurity-vortrag.html` – die Inhalte) +- Diagramme/Grafiken (`aitm-schaubild.svg`, die WLAN-Animationsgrafik) +- sonstige Texte/Bilder + +Volltext: [`LICENSE-CONTENT.txt`](./LICENSE-CONTENT.txt) · SPDX: `CC-BY-SA-4.0` + +Kurz: Andere dürfen die Inhalte nutzen und bearbeiten, müssen dich aber nennen +(Attribution) und Bearbeitungen unter derselben Lizenz weitergeben (ShareAlike). + +## Hinweis zur Abgrenzung + +Einzelne Dateien mischen Code und Inhalt (z. B. die HTML-Folien mit eingebettetem +JavaScript). Maßgeblich ist die Funktion des jeweiligen Teils: ausführbare Logik = +MIT, dargestellte Lehrinhalte = CC BY-SA. Im Zweifel kannst du pro Datei einen +SPDX-Kopf setzen, z. B.: + + (Code) + (Inhalt) + +## Fremdbestandteile (nicht von dir lizenzierbar) + +- **reveal.js** wird per CDN geladen und steht unter der **MIT-Lizenz**. Wenn du + reveal.js mit ins Repo legst, füge dessen MIT-Lizenztext bei und nenne den + Urheber. Deine Lizenzwahl gilt nicht für fremden Code. +- **Marken Dritter:** Namen/Logos wie „Microsoft" sind Marken der jeweiligen + Inhaber. Eine Lizenz kann nur *dein* Urheberrecht regeln – sie gewährt **keine** + Markenrechte und macht die Nutzung fremder Logos nicht zulässig. diff --git a/community_gesundheitsämter_17_06_2026/aitm-schaubild.svg b/community_gesundheitsämter_17_06_2026/aitm-schaubild.svg new file mode 100644 index 0000000..be6f336 --- /dev/null +++ b/community_gesundheitsämter_17_06_2026/aitm-schaubild.svg @@ -0,0 +1,61 @@ + + + + + + + + + + + + Adversary-in-the-Middle: Warum MFA allein nicht reicht + + + + + Opfer + klickt Phishing-Link + gibt Daten + Code ein + + + + Angreifer-Proxy + leitet alles 1:1 weiter + stiehlt das + Session-Cookie + + + + + + + + + + Echter Login + prüft Passwort + MFA + + + + Login + Code + + + „Anmeldung ok" + + + + in Echtzeit + + + Session-Cookie + + + + Ergebnis + Mit dem Cookie ist der Angreifer angemeldet – ohne Passwort, ohne erneute MFA. + + + Schutz: Passkeys / FIDO2 sind phishing-resistent · URL immer prüfen + + diff --git a/community_gesundheitsämter_17_06_2026/cybersecurity-vortrag.html b/community_gesundheitsämter_17_06_2026/cybersecurity-vortrag.html new file mode 100644 index 0000000..b6e1c58 --- /dev/null +++ b/community_gesundheitsämter_17_06_2026/cybersecurity-vortrag.html @@ -0,0 +1,1042 @@ + + + + + + Cybersecurity im öffentlichen Gesundheitswesen + + + + + + + + +
+
+ + +
+

Cybersecurity

+

Bedrohungen erkennen, Schäden vermeiden – im öffentlichen Gesundheitswesen

+

Richard Mietz · Chaotikum e.V. · 17.06.2026

+ +
+ + +
+

$ whoami

+
+

Richard MietzProfilfoto

+ Lufthansa Industry Solutions
+ Automation, DevOps, Product Architecture
+ Chaotikum e.V. / CCC HL
+ Technik greifbar machen, "Hacken"
+

+ + +
+ + +
+

Agenda

+
    +
  1. Wer greift an?
    2. +
  2. Angriffsvektoren im Überblick
    3. +
  3. Schadensarten durch Cyberangriffe
    4. +
  4. Was tun im Angriff?
    5. +
  5. Angriffe verhindern
    6. +
+ +
+ + +
+

Wer greift an?

+
    +
  • Organisierte Kriminalität – finanziell motiviert (Ransomware, Erpressung)
    • +
  • Staatliche Akteure – Spionage, Sabotage kritischer Infrastruktur
    • +
  • Innentäter – fahrlässig oder vorsätzlich
    • +
  • Hacktivisten – Forschung
    • +
  • Einzeltäter – individuell motiviert
    • +
+

+ + +
+ + +
+

Angriffsvektoren – Überblick

+
Social Engineering
+
Phishing
+
WLAN-Hijacking
+ + +
+ + +
+
+

Angriffsvektor: Social Engineering

+

Manipulation von Menschen statt Technik.

+
    +
  • Vortäuschen von Autorität oder Dringlichkeit
    • +
  • Ausnutzen von Hilfsbereitschaft und Vertrauen
    • +
  • Beispiel: Besuch der "IT Abteilung", Besucher mit Sicherheitsweste
    • +
+ + +
+
+
+
+
+
+
+ 9:41 + + + + + +
+
+ JK + Signal + + + +
+
+ + Suchen +
+
    +
  • + IT +
    +
    Bund IT09:34
    +
    Phishing Gefahr!SIGNAL fragt nie...2
    +
    +
    • +
  • + FM +
    +
    Friedrich Merz09:12
    +
    LOL! Schau mal das Katzenvideo!1
    +
    +
    • +
  • + MS +
    +
    Markus Söder08:47
    +
    BAYERN!!!111!
    +
    +
    • +
  • + S +
    +
    Schatzi ❤️❤️❤️❤️❤️Gestern
    +
    Du: Foto
    +
    +
    • +
  • + TN +
    +
    Tom NestlèGestern
    +
    Du: Klingt gut, machen wir so.
    +
    +
    • +
+
+
+
+
+
+
+
+
+
+
+
+ 9:42 + + + + + +
+
+ JK + Signal + + + +
+
+ + Suchen +
+
    +
  • + Signal +
    +
    Signal09:42
    +
    ⚠️ DRINGEND: Um Ihr Konto zu schützen, senden Sie uns bitte den3
    +
    +
    • +
  • + IT +
    +
    Bund IT09:34
    +
    Phishing Gefahr!SIGNAL fragt nie...2
    +
    +
    • +
  • + FM +
    +
    Friedrich Merz09:12
    +
    LOL! Schau mal das Katzenvideo!1
    +
    +
    • +
  • + MS +
    +
    Markus Söder08:47
    +
    BAYERN!!!111!
    +
    +
    • +
  • + S +
    +
    Schatzi ❤️❤️❤️❤️❤️Gestern
    +
    Du: Foto
    +
    +
    • +
  • + TN +
    +
    Tom NestlèGestern
    +
    Du: Klingt gut, machen wir so.
    +
    +
    • +
+
+
+
+
+
+
+
+
+
+
+
+ 9:42 + + + + + +
+
+ + + + Signal +
+
Signal
+
Verifiziert · End-to-End
+
+ + + + +
+
+ Heute 09:42 + +
+ Hallo! Hier ist das offizielle Signal-Sicherheitsteam. + 09:42 +
+
+ Wir haben verdächtige Anmeldeversuche auf Ihr Konto festgestellt. + 09:42 +
+
+ ⚠️ DRINGEND: Um Ihr Konto zu schützen, senden Sie uns bitte den 6-stelligen Verifizierungs­code, den Sie gleich per SMS erhalten. + 09:42 +
+
+
+
+ Signal-Nachricht + + + + +
+ + + +
+
+
+
+
+
+
+
+
+
+
+
+ 9:43 + + + + + +
+
+ + + + Signal +
+
Signal
+
Verifiziert · End-to-End
+
+ + + + +
+
+ Heute 09:42 + +
+ Hallo! Hier ist das offizielle Signal-Sicherheitsteam. + 09:42 +
+
+ Wir haben verdächtige Anmeldeversuche auf Ihr Konto festgestellt. + 09:42 +
+
+ ⚠️ DRINGEND: Um Ihr Konto zu schützen, senden Sie uns bitte den 6-stelligen Verifizierungs­code, den Sie gleich per SMS erhalten. + 09:42 +
+ +
+ Ist das wirklich Signal?! + 09:43 +
+
+
+
+ Signal-Nachricht + + + + +
+ + + +
+
+
+
+
+
+
+
+
+
+
+
+ 9:43 + + + + + +
+
+ + + + Signal +
+
Signal
+
Verifiziert · End-to-End
+
+ + + + +
+
+ Heute 09:42 + +
+ Hallo! Hier ist das offizielle Signal-Sicherheitsteam. + 09:42 +
+
+ Wir haben verdächtige Anmeldeversuche auf Ihr Konto festgestellt. + 09:42 +
+
+ ⚠️ DRINGEND: Um Ihr Konto zu schützen, senden Sie uns bitte den 6-stelligen Verifizierungscode, den Sie gleich per SMS erhalten. + 09:42 +
+ +
+ Ist das wirklich Signal?! + 09:43 +
+ +
+ Ja, das ist eine Ausnahme wegen des Sicherheitsvorfalls. Bitte schnell! Sonst wird Ihr Konto in 5 Min. gesperrt. + 09:43 +
+
+
+
+ Signal-Nachricht + + + + +
+ + + +
+
+
+
+
+
+
+
+
+
+
+
+ 9:43 + + + + + +
+
+ + + + Signal +
+
Signal
+
Verifiziert · End-to-End
+
+ + + + +
+
+ Heute 09:42 + +
+ Hallo! Hier ist das offizielle Signal-Sicherheitsteam. + 09:42 +
+
+ Wir haben verdächtige Anmeldeversuche auf Ihr Konto festgestellt. + 09:42 +
+
+ ⚠️ DRINGEND: Um Ihr Konto zu schützen, senden Sie uns bitte den 6-stelligen Verifizierungscode, den Sie gleich per SMS erhalten. + 09:42 +
+ +
+ Ist das wirklich Signal?! + 09:43 +
+ +
+ Ja, das ist eine Ausnahme wegen des Sicherheitsvorfalls. Bitte schnell! Sonst wird Ihr Konto in 5 Min. gesperrt. + 09:43 +
+
+ Ok hier: 133-337 + 09:43 +
+
+
+
+ Signal-Nachricht + + + + +
+ + + +
+
+
+
+
+
+
+
+
+
+
+
+ 9:44 + + + + + +
+
+ JK + Signal + + + +
+
+ + Suchen +
+
    +
  • +
    +
    Dieses Gerät wurde deaktiviert
    +
    +
    • +
+
+
+
+
+ +
+
+ + +
+
+

Angriffsvektor: Phishing

+

Gefälschte Nachrichten zum Abgreifen von Zugangsdaten.

+
    +
  • E-Mail, SMS, Telefon
    • +
  • Erkennungsmerkmale: Absender, Links, Druckaufbau, Anhänge
    • +
  • Spear-Phishing: gezielt auf einzelne Personen zugeschnitten
    • +
+ +
+
+ +
+
+ Man-in-the-Middle-Angriff +
+
+ + +
+

Quiz: Phishing

+ QR-Code-Beispiel +

Sitzungsname: ges_vortr

+

Password: 532!ajs

+ +
+
+

Angriffsvektor: QR-Code-Angriffe

+

„Quishing" – manipulierte QR-Codes führen auf gefälschte Seiten.

+ +
    +
  • Überklebte Codes an öffentlichen Orten
    • +
  • QR-Codes in E-Mails umgehen Link-Filter
    • +
  • Ziel-URL vor dem Öffnen prüfen
    • +
+ +
+ + +
+
+

Angriffsvektor: WLAN-Hijacking

+

Abfangen von Daten über manipulierte Funknetze.

+
    +
  • „Evil Twin": gefälschter Hotspot mit vertrautem Namen
    • +
  • Man-in-the-Middle: Mitlesen des Datenverkehrs
    • +
  • Schutz: VPN, kein sensibler Zugriff über offene Netze
    • +
+ +
+
+ +
+ + + + + + + Mitarbeiter + + + + + + Echtes + Büro-WLAN + + + + + + + Internet + / Büro-Server + + + + + + + + + + + + + + + + + + + + + + + + +
+ Schritt 1 / 5 + + +
+
+ + + + + + +
+
+ + +
+

Schadensarten durch Cyberangriffe

+
Reputationsverlust
+
Datenverlust
+
Komplette Handlungsunfähigkeit
+ +
+ + +
+

Reputationsverlust

+
    +
  • Vertrauensverlust bei Bürger*innen
    • +
  • Öffentliche Wahrnehmung
    • +
+ +
+ + +
+

Datenverlust

+
    +
  • Verlust oder Diebstahl sensibler Gesundheitsdaten
    • +
  • Gefahr für die Privatsphäre und Sicherheit der Betroffenen
    • +
  • Verschlüsselung durch Ransomware = faktischer Verlust
    • +
+ +
+ + +
+

Komplette Handlungsunfähigkeit

+
    +
  • Stillstand kritischer Systeme (Notaufnahme, Labor, Verwaltung)
    • +
  • Rückfall auf Papierbetrieb – wenn überhaupt möglich
    • +
  • Gefährdung der Versorgung = unmittelbares Risiko für Menschen
    • +
+ +
+ + +
+

Was tun im Angriff?

+
    +
  1. Erkennen & Melden – sofort an IT / Notfallkontakt
    2. +
  2. Isolieren – Gerät vom Netz trennen, nicht ausschalten
    3. +
  3. Nicht zahlen, nicht verhandeln – Experten einbeziehen
    4. +
  4. Dokumentieren – für Forensik und Meldepflichten
    5. +
+ +
+ + +
+

Angriffe verhindern

+
    +
  • Schulung & Sensibilisierung aller Beteiligten
    • +
  • Mehr-Faktor-Authentifizierung & starke Passwörter
    • +
  • Schulung & Sensibilisierung ALLER Beteiligten
    • +
  • Updates, Backups (offline), Netzsegmentierung
    • +
  • Klare Prozesse & regelmäßige Übungen
    • +
+

Sicherheit ist viel Mensch, nicht nur Technik.

+ +
+ + +
+

Vielen Dank

+

Fragen & Diskussion

+

Email · richard@op3n.link
+ Signal · init.78

+ +
+ +
+
+ + + + + + + + diff --git a/community_gesundheitsämter_17_06_2026/image.png b/community_gesundheitsämter_17_06_2026/image.png new file mode 100644 index 0000000..19794c5 Binary files /dev/null and b/community_gesundheitsämter_17_06_2026/image.png differ diff --git a/community_gesundheitsämter_17_06_2026/phishing-demo-ms-login.html b/community_gesundheitsämter_17_06_2026/phishing-demo-ms-login.html new file mode 100644 index 0000000..15d81cf --- /dev/null +++ b/community_gesundheitsämter_17_06_2026/phishing-demo-ms-login.html @@ -0,0 +1,245 @@ + + + + + +Anmelden bei Ihrem Konto + + + + + +
⚠️ SCHULUNGS-DEMO – Nachgebauter Login zu Awareness-Zwecken. Es werden KEINE Daten gespeichert oder gesendet. Keine echte Microsoft-Seite.
+ + +
+ + + +
+

Anmelden

+ +

Kein Konto? Erstellen Sie jetzt eins!

+

Sie können nicht auf Ihr Konto zugreifen?

+
+ +
+
+ + +
+
‹
+

Kennwort eingeben

+ +

Kennwort vergessen

+
+ +
+
+ + +
+ +

+

Code eingeben

+

Geben Sie den Code aus Ihrer Authenticator-App ein.

+ +
+ +
+
+
+ + +
+
+

Stopp – das war eine Phishing-Simulation

+

Hätten Sie das auf einer echten Angreiferseite getan, besäße der Angreifer jetzt:

+
+

Worauf hätten Sie achten können?

+
    +
  • Die Adresszeile (URL): Der echte Login läuft nur über login.microsoftonline.com / login.live.com – niemals über eine fremde Domain.
    • +
  • Unerwartete Aufforderung: Eine Mail/SMS, die Sie zur Anmeldung drängt, ist verdächtig – besonders bei Zeitdruck.
    • +
  • Auch MFA schützt nicht immer: Moderne Angriffe leiten Ihren Code in Echtzeit weiter. Deshalb zählt, gar nicht erst Daten einzugeben.
    • +
  • Phishing-resistente Verfahren: Passkeys / FIDO2-Sicherheitsschlüssel lassen sich nicht über gefälschte Seiten abgreifen.
    • +
+

Im Zweifel: Seite schließen, URL selbst eintippen oder Lesezeichen nutzen, und die IT informieren.

+ +
+
+ +
+ Nutzungsbedingungen + Datenschutz & Cookies +
+ + + + diff --git a/community_gesundheitsämter_17_06_2026/qr-code.png b/community_gesundheitsämter_17_06_2026/qr-code.png new file mode 100644 index 0000000..75ca9bf Binary files /dev/null and b/community_gesundheitsämter_17_06_2026/qr-code.png differ diff --git a/community_gesundheitsämter_17_06_2026/signal.png b/community_gesundheitsämter_17_06_2026/signal.png new file mode 100644 index 0000000..68a5f21 Binary files /dev/null and b/community_gesundheitsämter_17_06_2026/signal.png differ