U humorističkom izdanju kod Kesića, pogledajte snimke koji se vrte po društvenim mrežama u pokušaju da upecaju ljude da "ulože" u razne veoma lukrativne investicione platforme.
https://www.youtube.com/watch?v=A3jwOGTfvXE
mnoge od ovih prevara su dokumentovane na forumu:
Ivan Ivanović lažni "intervju" - Immediate Byte / Instant Profits AI "kripto" prevara
Opet "Gazprom" finansijska prevara, pojavljuje se i Novak Đoković
Novak Đoković iskorišćen za novu finansijsku prevaru
Na žalost nemam ceo mejl samo headere:
attachment je:
moram primetiti da je ovo poslato sa istog bugarskog mejl servera kao i SPAM - OTP banka malware "priliv"
Završio u karantinu naravno ali da dokumentujem, možda ga neki loše podešen mejl server i pusti da prođe do inboxa...
Neka ona druga temu za pošta prevare bude isključivo za prevare putem SMS-a: https://bezbedanbalkan.net/thread-956.html
A ovde da ide sve što je nađeno a da je preko mejla jer je izgleda to njihov nov način za prevare...
mejl je verovatno kompromitovan, stavljeno je ime Pošta a mejl je zapravo yasutake @ mimasunet.co.jp
link je agersoft .com .ar/CFTRJSXSSJAQFWFEUJWPGDUPSCQVZOONJJEUHCAIOGQSEUKYAX.html koji redirektuje:
sajt na informacijeoverifikaciji .click je iza cloudflare-a
sajt se može otvoriti samo sa mobilnih UA i izgleda ovako sa sve lošim prevodom:
kad se unese broj onda ga preko POST pošalje na informacijeoverifikaciji .click/posta/rs/send.php i vrti nešto:
i traži SMS OTP za verifikaciju nekakve transakcije koju takođe šalje na isti send.php:
posle toga javlja grešku u OTP-u i tu je kraj, da li zaista javlja grešku kada se unesu tačni podaci ne znam, ja sam kao i uvek nabadao.
Dok sam motrio šta radi sajt primetio sam neuspešan pokušaj da se pošalje nešto na 102.165.14.4:5000/receive_token?referrer=loco preko http-a, što browser blokira
guglajući ovu adresu našao sam ovaj članak There's no honour among phishers: free phishing kits with hidden backdoors gde se spominje ta adresa.
Prema primeru nekog drugog sajta u članku, ovaj ovde lažni pošta sajt je napravljen istim besplatnim phishing alatom, a autor tog alata je stavio backdoor da pošalje Telegram tokene sebi, pa da on sam pokrade ono što su ovi phisheri uzeli da kradu, ili šta već radi... a Telegram token se nalazi u HTML fajlu koji dolazi sa ovog fejk pošta sajta :
preko toga sam uspeo da vidim informacije o TG botu :
Na žalost van ovih informacija nema ništa drugo, niti su napravili chat, niti su povezali webhook na bota, ni ništa drugo koliko sam uspeo videti. Sumnjam da najverovatnije podatke sa phishing sajta šalju metodom direktne poruke na neki drugi nalog preko ovog bota, na žalost gde i šta šalju ne mogu da saznam preko ovoga što sam našao, niti sam pronašao nešto online o "Ervi".
As well as the large-scale installation of surveillance systems with facial recognition technology in urban areas, the authorities have sought to monitor opponents, activists and journalists, says a new report by BIRN.
Full report: https://balkaninsight.com/wp-content/upl...Serbia.pdf
Excerpts:
Quote:The Hidden Surveillance Infrastructure
Alongside biometric surveillance, Serbian authorities have been using espionage tools for
more than a decade. Domestic investigative journalists and researchers of the Citizen Lab
at the Munk School of Global Affairs and Public Policy, the University of Toronto, showed
that Serbian law enforcement and intelligence agencies have a history of using big data
analysis tools (Maltego, Mozenda, and Social Links)44 and deploying spyware, such as
Cytrox’s45 Predator, Circles,46 Cyberbit,47 and FinSpy.48
This list is not exhaustive and in October 2023, state-sponsored attackers attempted to
remotely breach the iPhones of the directors of two pro-European civil society
organizations in Serbia. This was verified by three international organizations, Amnesty
International and Citizen Lab in partnership with Access Now, which conducted digital
forensics on the phones and found that attackers attempted to exploit the
PWNYOURHOME vulnerability - a zero-click exploit that was used by NSO Group’s
flagship Pegasus spyware to target iPhones running iOS 15 and iOS 16.49
Quote:The Covert Role of Private Companies
The Serbian government is not inclined to negotiate and buy intrusive technologies
directly from vendors. There were a few exceptions to the rule when Aleksandar Vulin,
then Minister of Defence, and Tatjana Matić, then Minister of Trade, Tourism and
Telecommunications, during their visit to Israel, discussed the possibilities of cooperation
on future projects with representatives of the companies Cyberbit and Cognyte.54
This is why powerful individuals and owners of private companies based in Serbia, such
as Delta Holding, Vlatacom Ltd, IntellSec, and Lanus Ltd (now Devellop Ltd), act as
intermediaries. Private actors are outside public scrutiny, which is why their role in the
proliferation of advanced technologies and cyber intelligence tools is largely unexplored.
However, there is evidence that exposes their connections with politicians in power and
involvement in state affairs. For instance, the Cyberbit software was detected in a business
complex center in Belgrade belonging to Delta Holding, owned by a well-known Serbian
businessman Miroslav Mišković, who is a sponsor of the former and current political elite.
Furthermore, media mogul Željko Mitrović, who ownd pro-government Pink TV,
manufactures AI drones for military purposes on behalf of the defence industry. Others
like Vlatacom Ltd. design and sell their own encrypted technologies at home and abroad.
The founder of the Vlatacom Research and Development Institute and special adviser to
the Ministry of Foreign Affairs, Vladimir Cizelj, actively participated in Serbia’s official
campaign for derecognition of Kosovo’s independence.
Cizelj’s ties with the ruling party go back to the former president of the National Assembly,
Vladimir Orlić, who has been a member of the Vlatacom Scientific Council since 2012.
Furthermore, IntellSec Ltd. which equipped the public utility company EPS with espionage
tools is mentioned in an article by the French portal Intelligence Online from 2021 as a
main entry point to government and industry contracts and is seen as a company that
provides Western cyber-intelligence tools in the Balkans.55