Preuzeto sa: https://forum.dmz.rs/t/cybersecurity-card-game/344/1
Quote:Evo da ostavim info sa radionice:
Igrali smo 3 runde igre sa kartama Backdoors and Breaches koja je osmišljena sa ciljem da na zanimljiv način edukuje ljude i koji nisu u temi o mogućim scenarijima i alatima za sajber napade i odbranu.
Na sajtu se nalazi uputstvo za igru koje možete odštampati (što smo mi uradili), a za igru vam trebaju karte koje možete platiti i poručiti sa sajta ili odštampati sa Github-a 2, I 20-ostrana kocka koju možete i koristiti i iz Google-a.
Igru možete igrati i online sa linka sa glavnog sajta.
Ovo je samo jedna od igara, više različitih možete naći na: https://shostack.org/games.html.
Ovakve igre imaju za cilj da:
Na zabavan način kroz igru edukuju ljude koji nisu u ovoj oblasti.
Dodatno kroz igru ulazu na moguće napade u kompaniji za ljude koji su u svetu CyberSecurity-a.
Meni je ovo bilo korisno jer želim razviti svoju igru po uzoru na ovu i slične sa ciljem promocije open-source alata za napad i odbranu.
Quote:Symantec recently observed one of the largest agri-food exporters in Serbia being spoofed by a threat actor to target various organizations in the country. The malicious emails, written in Serbian (subject: Састанак за заказивање), have been crafted to appear as an invitation to set up a business appointment.
Attached to the email is a malicious .Z archive (Писмо састанка о именовању docx.z) – utilizing the Lempel-Ziv-Welch (LZW) compression algorithm. While this algorithm was commonly used in the past, it has been largely replaced by more efficient compression formats like .zip, .gzip, and .tar.gz. Nonetheless, Symantec continues to observe this type of archive being used by certain groups and individuals.
If users are successfully lured by this social engineering tactic and execute the malicious binary (Писмо састанка о именовању.docx.exe) within the archive, they'll end up running a NullSoft script-driven installer that will deploy a loader and an encrypted payload – Agent Tesla.
Source: https://www.broadcom.com/support/securit...5bf4_en-us
Posted by: 1van
11-17-2023, 11:05 AM
Forum: Seminari, predavanja, radionice, konferencije
- No Replies
11-17-2023, 11:05 AM
Forum: Seminari, predavanja, radionice, konferencije
- No Replies
Quote:The scraped LinkedIn database was leaked in two parts: one part contained 5 million user records, while the second part contained 35 million records.
https://www.hackread.com/hacker-leaks-sc...r-records/
Quote:Povrede privatnosti u medijima postale su deo naše svakodnevnice. Žrtve su neretko najosetljiviji među nama - deca, žrtva nasilja u porodici, socijalno ugroženi..., a institucije do sada ne da nisu imale odgovor na ovaj problem, već su često i same doprinosile povredama.
Nakon višegodišnjeg praćenja stanja u medijima, i zagovaranja za jačanje principa odgovornosti u oblasti zaštite podataka, Partneri Srbija, Balkan Investigative Reporting Network (BIRN) i SHARE Fondacija udružili su snage i već godinu dana rade na projektu Cena privatnosti.
U okviru projekta organizujemo program obuke za medije, predstavnike lokalnih samouprava, policije, centara za socijalni rad i civilnog sektora o pravnim i etičkim standardima zaštite privatnosti u medijima.
Poziv je otvoren do 30. novembra, a svi detalji dostupni su na linku: https://birnsrbija.rs/poziv-za-program-z...standardi/
Quote:The most popular platform for chess players, Chess.com, has had some of its user data leaked in a fresh scraping attempt.
https://www.hackread.com/hacker-leaks-sc...r-records/
Ovaj jeziv sajt iz nekog razloga objavljuje javno privatne podatke ljudi.
Ime, prezime, broj telefona, kućna adresa
Lista subdomena koji su bili ili i dalje pod defacement
https://www.zone-h.org/mirror/id/40649829
Code:
mmc.mef.edu.rs
rusija-media.mef.edu.rs
ispit.mef.edu.rs
beta.mef.edu.rs
in.mef.edu.rs
marketing.mef.edu.rs
kvm.mef.edu.rs
jpmnt.mef.edu.rs
nastava2.mef.edu.rs
nastava.mef.edu.rs
moodle.mef.edu.rs
mef.it.edu.rs
mef-inventar.elektronskoposlovanje.rs
testdevelop.mef.edu.rs
studentapi.mef.edu.rs
student.mef.edu.rs
robotika.mef.edu.rs
nir.mef.edu.rs
is.mef.edu.rs
akreditacija-sp.mef.edu.rs
akreditacija.mef.edu.rs
assets.mef.edu.rs
betaru.mef.edu.rs
djole.it.edu.rsProcureli podaci sajta ilovetravels.net (nickname ,first_name ,last_name , description)
mejl:
Headeri:
Code:
Received: from DB8PR03CA0001.eurprd03.prod.outlook.com (2603:10a6:10:be::14)
by DB8P189MB0828.EURP189.PROD.OUTLOOK.COM (2603:10a6:10:12b::24) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6954.29; Tue, 7 Nov
2023 10:08:48 +0000
Received: from DB5PEPF00014B9A.eurprd02.prod.outlook.com
(2603:10a6:10:be:cafe::7) by DB8PR03CA0001.outlook.office365.com
(2603:10a6:10:be::14) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6954.28 via Frontend
Transport; Tue, 7 Nov 2023 10:08:48 +0000
Authentication-Results: spf=none (sender IP is 94.127.6.167)
smtp.mailfrom=sbarlbaink.com; dkim=pass (signature was verified)
header.d=ipc.rs;dmarc=pass action=none header.from=ipc.rs;compauth=pass
reason=100
Received-SPF: None (protection.outlook.com: sbarlbaink.com does not designate
permitted sender hosts)
Received: from cpanel.ipc.rs (94.127.6.167) by
DB5PEPF00014B9A.mail.protection.outlook.com (10.167.8.167) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6977.16 via Frontend Transport; Tue, 7 Nov 2023 10:08:47 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ipc.rs;
s=default; h=Content-Type:Message-ID:Subject:To:From:Date:MIME-Version:Sender
:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=cZYkLnjNKNjW2c5YJgNtFJml+ZsE54de7jAf44FwRYE=; b=OTlP2ucYm/N8RB5/3y4xWZivWw
Lddyq029fy8rkIi1Wt1NDGQb/JWvLMtymoLsIWhgPQXlNi9ryXFkP2q5/aO1M0Pbl1sqrY8lc3zVL
vt+ji3FrYGrvZh7OT2ibADoUv1WcHq9lglyW1Sme+wzPUGTpmtxBZT2sbuhFAJHzxPg9Tv8DABuP+
CtJxjr4JLBUmoAFjhKxnsU05IA42JcrdQaRwWjosX0GeZ2f3O2GnYGg7WB1TcVllswBygo3/YhKDX
7LR6NIUVUuClWB2hCmQSywDRRzaQyc1t56caZFLsubgjO1i4pRKf+mx/qpwRf3pwxWz8Bk3g/ezK5
v460icpA==;
Received: from [127.0.0.1] (port=35078 helo=cpanel.ipc.rs)
by cpanel.ipc.rs with esmtpa (Exim 4.93)
(envelope-from <[email protected]>)
id 1r0Ivl-00025E-47; Tue, 07 Nov 2023 11:03:33 +0100
MIME-Version: 1.0
Date: Tue, 07 Nov 2023 11:03:32 +0100
From: Sberbank <[email protected]>
To: undisclosed-recipients:;
Subject: =?UTF-8?Q?Mese=C4=8Dni_izvod_za_kreditnu_karticu?=
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.15
Content-Type: multipart/mixed;
boundary="=_a74b6febc5bfd849d1f46873c077ec56"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cpanel.ipc.rs
X-AntiAbuse: Original Domain - XXXXXXX
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - sbarlbaink.com
X-Get-Message-Sender-Via: cpanel.ipc.rs: authenticated_id: [email protected]
X-Authenticated-Sender: cpanel.ipc.rs: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: rewritten was: [[email protected]], actual sender does not match
Return-Path: [email protected]Za attachment virustotal se upalio ko božićna jelka: https://www.virustotal.com/gui/file/9924...a00777ef06