Posted by: 1van
02-04-2023, 12:55 AM
Forum: Phishing / Scam / Spam kampanje
- Replies (2)

Quote:UniCredit Bank Srbija a.d. ovim putem želi da obavesti svoje klijente i javnost da se na društvenoj mreži Facebook pojavila lažna stranica pod imenom ,,BANKA Unicredit” koja objavljuje sadržaj sa lažnim ponudama keš kredita. Putem aplikacije Facebook Messenger su stizale i poruke sa sumnjivim sadržajem sa ciljem da se građani obmanu da je UniCredit Bank Srbija a.d. pošiljalac istih. UniCredit Bank Srbija a.d. ovim putem poziva sve građane koji dobiju poruke sumnjive sadržine sa pomenute stranice da ih ne otvaraju i da ih odmah obrišu.

Izvor: https://www.linkedin.com/posts/unicredit...05248-m1uh, arhivirano: https://archive.ph/HzPgZ.

E-mail koji se spominje je: [email protected] i WhatsApp: +39 350 952 5874.

[Image: attachment.php?aid=551]



Posted by: warlust
02-03-2023, 01:25 AM
Forum: O Vama
- Replies (2)

Pozdrav svima, ja sam Warlust(nick od vremena CS 1.6 | old habits, they never die). Najpre bih zeleo da kazem da mi je cast da budem deo jedne ovakve zajednice!
Ukratko, diplomirani ETF-ovac i jos po nesto, imam 30 godina, interesujem se za security od kraja osnovne,radio sam na razvoju custom ROM-ova za neke samsung i LG modele. Volim da pisem skripte i automatizujem sve sto me smara. Bavim se cyber securityjem nekih 7 godina. U poslednje vreme sam aktivnije poceo da se interesujem za threat intelligence i zeleo bih da prosirim svoje vidike u tom smeru. Takodje, zeleo bih da prosirim sveukupno cyber security znanje kako bih jednog dana bio odlican (ne dobar) architect. 

Veliki pozdrav,
Warlust



Posted by: y0d4
02-02-2023, 03:52 PM
Forum: Kompromitovani resursi
- Replies (1)

pojavila se poprilicna lista cpanel naloga na prodaju



Posted by: 1van
01-31-2023, 10:07 PM
Forum: Kompromitovani resursi
- Replies (2)

VirusTotal i Sucuri indetifikuju sajt cuvanjedece24h.rs kao maliciozan. Brzim pregledom nisam uspeo da nađem šta je tačno zaraženo.

VirusTotal: https://www.virustotal.com/gui/url/696ef.../detection
Sucuri: https://sitecheck.sucuri.net/results/htt...dece24h.rs

[Image: attachment.php?aid=534]

[Image: attachment.php?aid=535]



Posted by: 1van
01-31-2023, 08:22 PM
Forum: Neadekvatno zaštićeni resursi
- Replies (2)

Već danima čitam kako se po Tviteru žale ljudi da ne mogu da pristupe sistemu eFaktura. I jedino što mogu da zaključim je da infrastruktura ne može da podrži toliki broj korisnika odjednom, tj. da je ranjiva na DDoS napade.

Izvor 1: https://twitter.com/MilanStojkovi6/statu...9933321223, arhivirano: https://archive.ph/zNx7j
Izvor 2: https://twitter.com/SapphosLeap/status/1...2239085569, arhivirano: https://archive.ph/TvoZX

[Image: attachment.php?aid=533]

[Image: attachment.php?aid=532]



Posted by: 1van
01-31-2023, 06:29 PM
Forum: Odgovor na incidente i svest o bezbednosti
- No Replies

Quote:Podatak o ličnosti je informacija koja vas bliže određuje i uz pomoć koje, posredno ili neposredno, može da se identifikuje fizičko lice. Primeri su ime, broj telefona, otisak prsta, političko uverenje ili istorija bolesti. Šta predstavlja zašitita podataka o ličnosti i koje su garancije da se prikupljanje i obrada podataka vrše transparentno i u skladu sa zakonom?

Produkcija: SHARE Fondacija, decembar 2021.

Video: https://www.youtube.com/watch?v=CTKTNiSd...Foundation



Posted by: 1van
01-31-2023, 05:40 PM
Forum: Vesti, zanimljivosti i razno
- No Replies

Ako Vas zanimaju odgovori na pitanja:

- Koliko nas kao građane treba da brinu sajber napadi?
- Koliko to treba da nas brine kao profesionalce?
- Šta su najčešće greške u praksi, a možemo da ih sprečimo?

Pogledajte novu epizodu: "30 minutes developer - Ko nam krade podatke"? Pokušao sam da odgovorim na neka od ovih pitanja.

Link: https://www.youtube.com/watch?v=8KVXRmsD...sdeveloper



Posted by: 1van
01-31-2023, 01:15 PM
Forum: DoS / DDoS / dostupnost
- No Replies

Navodno sd.rs je bio pod DDoS napadom. Izvor: https://twitter.com/dozzcsgo/status/1620214333237231617, arhivirano: https://archive.ph/NIj3p.

[Image: attachment.php?aid=529]



Posted by: Petar
01-30-2023, 07:05 PM
Forum: Kompromitovani resursi
- Replies (2)

Popularan sajt za gledanje domacih filmova i serija online besplatno zarazen je raznim virusima tipa trojan iz JS fajlova
Otkrio ga je moj kucni antivirus (Bitdefender)

https://sitecheck.sucuri.net/results/domaceserije.net
https://www.virustotal.com/gui/domain/domaceserije.net

   

Zanimljivo je i da ga urlqery.net ne detektuje
https://urlquery.net/report/ecbc5015-bb7...38e5ff7b5f



Posted by: y0d4
01-29-2023, 12:25 AM
Forum: Alati, servisi i tutorijali
- No Replies

http.html:"* wp-config"
wordpress http.component:"WordPress"3:
"MongoDB Server Information" port:27017 -authentication
Set-Cookie: mongo-express=" "200 OK"
"\x03\x00\x00\x0b\x06\xd0\x00\x00\x124\x00"
"220" "230 Login successful." port:21
hacked-router-help-sos
"authentication disabled" "RFB 003.008"
"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard"
port:"11211" product:"Memcached"
title:"IPCam Client"
server: VVTK-HTTP-Server
webcam has_screenshot:true
title:"blue iris remote view"
server: "webcam 7"
"Server: Prismview Player"
"in-tank inventory" port:10001
P372 "ANPR enabled"
mikrotik streetlight
"voter system serial" country:US
"Cisco IOS" "ADVIPSERVICESK9_LI-M"
"[2J[H Encartele Confidential"
http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2
"Server: gSOAP/2.8" "Content-Length: 583"
"Cobham SATCOM" OR ("Sailor" "VSAT")
title:"Slocum Fleet Mission Control"
"Server: CarelDataServer" "200 Document follows"
http.title:"Nordex Control" "Windows 2000 5.0 x86" "Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)"
"[1m[35mWelcome on console"
"DICOM Server Response" port:104
"Server: EIG Embedded Web Server" "200 Document follows"
"Siemens, SIMATIC" port:161
"Server: Microsoft-WinCE" "Content-Length: 12581"
"HID VertX" port:4070
"log off" "select the appropriate"
title:"Weave Scope" http.favicon.hash:567176827
"Docker Containers:" port:2375
"Docker-Distribution-Api-Version: registry" "200 OK" -gitlab
"dnsmasq-pi-hole" "Recursion: enabled"
"root@" port:23 -login -password -name -Session
"Android Debug Bridge" "Device" port:5555
Lantronix password port:30718 -secured
"Citrix Applications:" port:1604
"smart install client active"
PBX "gateway console" -password port:23
http.title:"- Polycom" "Server: lighttpd"
"Polycom Command Shell" -failed port:23
"Server: Bomgar" "200 OK"
"Intel® Active Management Technology" port:623,664,16992,16993,16994,16995
HP-ILO-4 !"HP-ILO-4/2.53" !"HP-ILO-4/2.54" !"HP-ILO-4/2.55" !"HP-ILO-4/2.60" !"HP-ILO-4/2.61" !"HP-ILO-4/2.62" !"HP-iLO-4/2.70" port:1900
"x-owa-version" "IE=EmulateIE7" "Server: Microsoft-IIS/7.0"
"x-owa-version" "IE=EmulateIE7" http.favicon.hash:442749392
"X-AspNet-Version" http.title:"Outlook" -"x-owa-version"
"X-MS-Server-Fqdn"
"Authentication: disabled" port:445
"Authentication: disabled" NETLOGON SYSVOL -unix port:445
"Authentication: disabled" "Shared this folder to access QuickBooks files OverNetwork" -unix port:445
"220" "230 Login successful." port:21
"Set-Cookie: iomega=" -"manage/login.html" -http.title:"Log In"
Redirecting sencha port:9000
"Server: Logitech Media Server" "200 OK"
"X-Plex-Protocol" "200 OK" port:32400
"CherryPy/5.1.0" "/home"
"Server: yawcam" "Mime-Type: text/html"
("webcam 7" OR "webcamXP") http.component:"mootools" -401
"Server: IP Webcam Server" "200 OK"
html:"DVR_H264 ActiveX"
"Serial Number:" "Built:" "Server: HP HTTP"
ssl:"Xerox Generic Root"
"SERVER: EPSON_Linux UPnP" "200 OK"
"Server: EPSON-HTTP" "200 OK"
"Server: KS_HTTP" "200 OK"
"Server: CANON HTTP Server"
"Server: AV_Receiver" "HTTP/1.1 406"
"\x08_airplay" port:5353
"Chromecast:" port:8008
"Model: PYNG-HUB"
title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944
"ETH - Total speed"
http.title:"Index of /" http.html:".pem"
http.html:"* The wp-config.php creation script uses this file"
"Minecraft Server" "protocol 340" port:25565
port:17 product:"Windows qotd"
"X-Recruiting:"