https://zonehmirrors.org/defaced/2025/04...index.html
Mirror saved on: 2025-04-21 07:54:57
IP address: 93.188.2.55
   

Sumnja se da je medicinska ustanova podelila spisak sa MUP-om koji je dalje prosledio tabloidu radi targetiranja građana. Mada je moguće i da je medicinska ustanova sama to uradila, ne možemo potvrditi.

Sa mreže X:

   

originalni link je informer .rs/politika/vesti/1012992/napad-na-dekana-dif-osumnjiceni

prva verzija vesti je imala samo inicijale za ime i puno prezime, arhivirano ovde https://archive.is/Iylui :

   


promenjena vest je dodala i puna imena, a vreme objavljivanja članka nije promenilo, arhivirano ovde https://archive.is/9AthC :

   

U odvojenoj vesti su ranije imenovali Miloša K kao "predvodnika linča i napada"

originalni link: informer .rs/politika/vesti/1012963/milos-kodzo-napad-na-dekana
arhivirano: https://archive.is/ckjSL

Spominjem jer su očigledno dodali njegovo ime na onaj gornji spisak naknadno i nije bio u originalnom navodno dobijenom spisku, jer je jedini napisan kao IME PREZIME dok su ostali napisani kao PREZIME IME

Quote:An active scam campaign is active on Facebook targeting Macedonian users with an offer of 2 year old HP laptops for only 123 MKD (approximately $2 USD).

The scam starts via Facebook, where attackers are impersonating Setec, a legitimate Macedonian technology retailer, to trick victims into providing personal data and  credit card information. The scam is being distributed as a fake Setec Facebook page is promoting "damaged packaging" laptops at the symbolic price of 123 MKD. 

If a victim clicks on the the linke in the Facebook Page, they are taken to Victims click on Facebook posts leading to a page on a site miracledat.com.

Obviously, that site has nothing to do with Setec, and even more - the domain is registered on January 14, 2025 - only 99 days old. A company that exists for over 20 years won't be using a 3 months old site for a giveaway.

The site presents a fake "lottery" claiming the visitor was selected to win an HP 15 laptop and implies urgency through a countdown timer (common manipulation tactic)

The victim is then requested to enter their name, surname, phone and address. After pressing 'submit' the browser is redirected through two web sites 

This redirect technique is used to avoid stopping the scam if the fake credit processing page is shut down. The second website can be configured to return a different address for the payment site, and the second website is not malicious by itself to be immediately blocked.

After entering card details, the payment site tries to charge money immediately. 

Spam stigao sa državnog mejl servera:

   

   

• Izvor samog mejla je IP adresa 196.251.92.43 koja je registrovana na AFRINIC-u na firmu sa Sejšela ali se koristi iz Holandije, odatle se neko povezao na državni mejl server koristeći validne kredencijale i dalje slao mejlove.
  

• Putanja mejla dalje prolazi kroz državni mejl server i izlazi sa njega preko smtp2.gov.rs (195.222.96.34)
  
• Dodao bih da ima malo misterije ovde, nije baš jasno kako je mejl dospeo na smtp1int.gov.rs jer ta adresa nema nikakav DNS zapis niti je u ovom trenutku dostupna niti hostuje mejl server.
  

• Header Return-Path otkriva verovatno kompromitovan nalog: [email protected]
  

   

među podacima:

59 mejla sa .rs nacionalnog domena
45 sa .si
32 sa .hr
10 sa .mk
8 sa .ba

   


   

https://www.virustotal.com/gui/file/7a52...b926a4fc81


više info na https://www.cert.hr/upozorenje-sirenje-m...-edozvola/

https://casopis.fimek.edu.rs/public/site...shelby.gif
IP address: 104.21.8.67
Mirror saved on: 2025-04-17 00:19:28
https://www.zone-h.org/mirror/id/41347225
   

https://publikacije.uninp.edu.rs/public/...shelby.gif
IP address: 93.188.2.53
Mirror saved on: 2025-04-17 00:19:32
https://www.zone-h.org/mirror/id/41347227

   

RDP (Remote Desktop Protocol) je protokol razvijen od strane Microsoft-a koji omogućava korisnicima da se povežu na udaljeni računar ili server putem internetske veze.