[Jovica.Lekić]

Infostealer leakovi datiraju jos od 2021, a posljednji je krajem Aprila ove godine.

Neki od domena poveznaih:
- hxxps://webaccess.airserbia.com/owa/auth/logon.aspx
- hxxps://webaccess.airserbia.com/owa/auth/expiredpassword.aspx
- hxxp://mail.airserbia.com/iwc_static/c11n/alldomain/layout/login.html
- hxxps://webaccess.airserbia.com/owa
- hxxps://webaccess.airserbia.com/ecp/PersonalSettings/Password.aspx
- hxxps://webmail.airserbia.com/owa/auth/logon.aspx
- hxxps://webaccess.airserbia.com/owa/auth.owa
- hxxp://mail.airserbia.com/iwc_static/c11n/allDomain/layout/login.html

- hxxps://login.microsoftonline.com
- hxxps://login.microsoftonline.com/common/oauth2/authorize
- hxxps://aircraftcommercevirtualexpo.com/registration-2
- hxxp://mail.open.telekom.rs/iwc_static/c11n/alldomain/layout/login.html
- hxxps://login.microsoftonline.com/common/login
- hxxps://login.microsoftonline.com/
- hxxps://www.dropbox.com
- hxxps://bluemix.net
- android://7fmduhktdhhrlmvldleqailsfii1tl35bxj1oxn5ve8c4lu6urvu4xtshc3bvzxs6wwjnxmdhifqn0n0k2ndjg==@com.google.android.gm
- android://oez1goxo71n06mbjkequeuofbfcvsklfnatby7p1rfogoqbtyzsbcqd77ie7p8erno3iieed7wd8qyhs2bmimw==@us.zoom.videomeetings/
- android://ipulph0pq8ms1qy7cozgsvrqn7_zw4ibw-ukcajvtrtrzm5o5vcaghnea1ho4wq7ay0efqqjcalxa8ehxvnhka==@com.microsoft.office.lync15/