+- Bezbedan Balkan (https://bezbedanbalkan.net)
+-- Forum: Bezbednost privatnih resursa (https://bezbedanbalkan.net/forum-12.html)
+--- Forum: Phishing / Scam / Spam kampanje (https://bezbedanbalkan.net/forum-16.html)
+--- Thread: Yettel phish - Imate problem sa platnom karticom (/thread-1102.html)
Yettel phish - Imate problem sa platnom karticom - milos_rs - 01-02-2024
verovatno kompromitovan kontrolni panel kod provajdera da se doda subdomen yettel.unisam.rs i odatle šalje sa servera pod kontrolom spamera, i to je verovatno kompromitovano.
Code:
envelope-from="[email protected]";
x-sender="[email protected]";
Received: from ip212-227-189-122.pbiaas.com (HELO yettel.unisam.rs) ([212.227.189.122])
yettel.unisam.rs has address 212.227.189.122
yettel.unisam.rs mail is handled by 10 yettel.unisam.rs.link je ipfs.eth.aragon .network/ipfs/bafybeid7aewdoagawmg434msp74d4cehseqrsdmjkngxk4bvf6m7z23bey
u iframe pokušava da otvori wallet.corvus.pay.customercaresservice .com/yettel/ ali trenutno ne radi
Code:
wallet.corvus.pay.customercaresservice.com has address 172.203.81.100RE: Yettel phish - Imate problem sa platnom karticom - maxxa - 01-03-2024
Isti sam mail dobio, isti je i datom, samo nikako da ga okačim...