Incident u HR - email poslat sa pmg.med.bg.ac.rs

[milos_rs]

detaljna analiza ove kampanje:

Impersonating Government Agencies To Deliver Infostealers - The HZZO Example

First, the sender: it appears the attacker is leveraging legitimate but poorly maintained email services at regional internet service providers (often bundled with web hosting). These include government institutions and private internet service providers. For example, one such campaign originated from the Faculty of Medicine at the University of Belgrade, in this case the service being run by the Academic research network of Serbia - AMRES