Kompromitovan parlament.gov.rs | rik.parlament.gov.rs, probarik.esolutions.rs

[1van]

Izvor: https://platform.socradar.com/app/threat...ent.gov.rs

Infected Device - Accounts for "parlament.gov.rs" were observed for sale on the Russian Market, On Oct 06, 2023

Code:

{
    "country": "RS",
    "date": "2023.10.04",
    "files": "archive.zip",
    "id": "12546808",
    "isp": "TELEKOM SRBIJA a.d.",
    "links": [
        "192.168.5.37",
        "ljubovija.rs",
        "informator.poverenik.rs",
        "canva.com",
        "accounts.spreadshirt.com",
        "teepublic.com",
        "redbubble.com",
        "pinterest.com",
        "mojaadresa.geosrbija.rs",
        "teespring.com",
        "auth0.openai.com",
        "facebook.com",
        "printify.com",
        "192.168.5.37",
        "auth.linktr.ee",
        "rik.parlament.gov.rs",
        "rik.parlament.gov.rs",
        "instagram.com",
        "teepublic.com",
        "zazzle.com",
        "accounts.amaze.co",
        "redbubble.com",
        "redbubble.com",
        "redbubble.com",
        "pinterest.com",
        "teepublic.com",
        "twitter.com"
    ],
    "outlook": "-",
    "price": "10.00",
    "province": "Macva",
    "size": "0.53Mb",
    "stealer": "risepro ",
    "vendor": "Observer [platinum]"
}

Infected Device - Accounts for "parlament.gov.rs" were observed for sale on the Russian Market, On Oct 04, 2023

Code:

{
    "country": "RS",
    "date": "2023.10.04",
    "files": "archive.zip",
    "id": "12519313",
    "isp": "TELEKOM SRBIJA a.d.",
    "links": [
        "192.168.5.37",
        "ljubovija.rs",
        "informator.poverenik.rs",
        "canva.com",
        "accounts.spreadshirt.com",
        "teepublic.com",
        "redbubble.com",
        "pinterest.com",
        "mojaadresa.geosrbija.rs",
        "teespring.com",
        "auth0.openai.com",
        "facebook.com",
        "printify.com",
        "192.168.5.37",
        "auth.linktr.ee",
        "rik.parlament.gov.rs",
        "rik.parlament.gov.rs",
        "instagram.com",
        "teepublic.com",
        "zazzle.com",
        "accounts.amaze.co",
        "redbubble.com",
        "redbubble.com",
        "redbubble.com",
        "pinterest.com",
        "teepublic.com",
        "twitter.com"
    ],
    "outlook": "-",
    "price": "10.00",
    "province": "Macva",
    "size": "0.33Mb",
    "stealer": "Redline ",
    "vendor": "sm####ez [platinum]"
}

Infected Device - Accounts for "rik.parlament.gov.rs" were observed for sale on the Russian Market, On May 28, 2023

Code:

{
    "country": "RS",
    "date": "2023.05.26",
    "files": "archive.zip",
    "id": "11031096",
    "isp": "TELEKOM-SRBIJA",
    "links": [
        "gpspower.net",
        "serbianforum.org",
        "gpsurl.com",
        "informator.poverenik.rs",
        "informator.poverenik.rs",
        "informator.poverenik.rs",
        "novi.kupujemprodajem.com",
        "accounts.google.com",
        "plan.acas.rs",
        "publicapp.acas.rs",
        "accounts.google.com",
        "rik.parlament.gov.rs",
        "rik.parlament.gov.rs",
        "mojsbb.rs"
    ],
    "outlook": "-",
    "price": "10.00",
    "province": "Belgrade",
    "size": "0.16Mb",
    "stealer": "Racoon ",
    "vendor": "Mo####yf [Diamond]"
}

Infected Device - Accounts for "rik.parlament.gov.rs" were observed for sale on the Russian Market, On Jan 19, 2023

Code:

{
    "country": "RS",
    "date": "2023.01.18",
    "files": "archive.zip",
    "id": "7995179",
    "isp": "TELEKOM SRBIJA a.d.",
    "links": [
        "192.168.1.218",
        "pixplus.ucloudcam.com",
        "asmp.a1.rs",
        "hiseese.ucloudcam.com",
        "rik.parlament.gov.rs",
        "jkpmilosmitrovic.rs",
        "asmp.a1.rs",
        "rik.parlament.gov.rs",
        "moj.esdnevnik.rs",
        "login.yahoo.com",
        "kupujemprodajem.com",
        "a41a.myqnapcloud.com",
        "petlja.org",
        "192.168.2.225",
        "192.168.2.41",
        "prijava.eid.gov.rs",
        "a21a.myqnapcloud.com",
        "velikaplana.rs",
        "reid.apr.gov.rs",
        "account.qnap.com",
        "demarkobend.com",
        "loopia.rs",
        "novi.kupujemprodajem.com",
        "signup.gmx.com",
        "spotify.com",
        "ecommerce.otpbanka.rs",
        "m.facebook.com",
        "192.168.2.100",
        "a11a.myqnapcloud.com",
        "accounts.google.com",
        "jkpmilosmitrovic.rs",
        "warez-v3.org",
        "mojsbb.rs",
        "account.box.com",
        "accounts.google.com",
        "mega.nz",
        "en.wikipedia.org",
        "accounts.google.com",
        "login.live.com",
        "teamos-hkrg.com",
        "teamos.xyz",
        "rutracker.org",
        "idmsa.apple.com",
        "forum.gsmhosting.com",
        "terabox.com",
        "account.live.com",
        "warez-bb.org",
        "puzo.org",
        "instagram.com",
        "eon.tv",
        "asmp.vipmobile.rs",
        "warez-v3.org",
        "192.168.2.234",
        "limundo.com",
        "rutracker.org",
        "appleid.apple.com",
        "sasomange.rs",
        "teamos.xyz",
        "help.steampowered.com",
        "teamos.xyz",
        "mega.nz",
        "forum.mobilism.org",
        "profile.oracle.com",
        "192.168.1.126",
        "mega.nz",
        "accounts.google.com",
        "192.168.2.1",
        "192.168.10.7",
        "192.168.1.230",
        "192.168.2.234",
        "192.168.2.158",
        "petlja.org",
        "192.168.1.216",
        "192.168.2.230",
        "192.168.2.114",
        "192.168.2.91",
        "accounts.google.com",
        "xmeye.net",
        "sr-rs.facebook.com",
        "facebook.com",
        "192.168.1.218",
        "pixplus.ucloudcam.com",
        "asmp.a1.rs",
        "hiseese.ucloudcam.com",
        "rik.parlament.gov.rs",
        "jkpmilosmitrovic.rs",
        "asmp.a1.rs",
        "rik.parlament.gov.rs",
        "moj.esdnevnik.rs",
        "login.yahoo.com",
        "kupujemprodajem.com",
        "a41a.myqnapcloud.com",
        "petlja.org",
        "192.168.2.225",
        "prijava.eid.gov.rs",
        "a21a.myqnapcloud.com",
        "velikaplana.rs",
        "reid.apr.gov.rs",
        "account.qnap.com",
        "demarkobend.com",
        "loopia.rs",
        "novi.kupujemprodajem.com"
    ],
    "outlook": "-",
    "price": "10.00",
    "province": "Rasina",
    "size": "0.12Mb",
    "stealer": "Racoon ",
    "vendor": "Mo####yf [Diamond]"
}