Dark Web analiza minrzs.gov.rs

[VincaSec]

   

   

Infected Device - Accounts for "minrzs.gov.rs" were observed for sale on the Russian Market, On Dec 25, 2023

{
    "country": "RS",
    "date": "2023.12.22",
    "files": "archive.zip",
    "id": "13923996",
    "isp": "TELEKOM-SRBIJA",
    "links": [
        "zr.trezor.gov.rs",
        "spiri.mfin.trezor.rs",
        "isib.mfin.trezor.rs",
        "informator.poverenik.rs",
        "sr.aop.minrzs.gov.rs",
    ],
    "outlook": "-",
    "price": "10.00",
    "province": "Central Serbia",
    "size": "0.09Mb",
    "stealer": "lumma ",
    "vendor": "Mo####yf [Diamond]"
}

Infected Device - Accounts for "minrzs.gov.rs" were observed for sale on the Russian Market, On Aug 18, 2023

{
    "country": "RS",
    "date": "2023.08.17",
    "files": "archive.zip",
    "id": "11856373",
    "isp": "Serbian BroadBand",
    "links": [
        "mojsbb.rs",
        "secure.limundo.com",
        "ccpokloni.rs",
        "t1x2.net",
        "limundo.com",
        "novogodisnjapromocija.coca-cola.rs",
        "sbb.rs",
        "login.yahoo.com",
        "philips.hr",
        "nalog.infostud.com",
        "linkedin.com",
        "mail.minrzs.gov.rs",
        "tanjug.rs"
    ],
    "outlook": "-",
    "price": "10.00",
    "province": "Belgrade",
    "size": "0.05Mb",
    "stealer": "Vidar ",
    "vendor": "Hy####ad [platinum]"
}

Neke žrtve stealer logs - a koje sam uspeo da identifikujem su:

[email protected] (https://mail.minrzs.gov.rs/ i ima tu zanimljiv sajt )

[email protected]( https://mail.minrzs.gov.rs/)

[email protected](https://irweb.minrzs.gov.rs/login)