Posts: 415
Threads: 108
Joined: Sep 2022
Reputation:
294
CERT je na zadatku ali ne može da deli nikakve informacije:
Quote:The National Center for the Prevention of Security Risks, CERT, told BIRN that the incident related to EPS was reported to them on December 18. CERT works according to international Traffic Light Protocol, TLP, standards, which also defines how sensitive information should be shared, it explained.
“As the information received, when reporting the incident, is marked as TLP:AMBER+STRICT, it is not possible to share it with the general public” CERT answered.
izvor https://balkaninsight.com/2023/12/21/hac...of-action/
Quote:TLP:Amber+Strict
When should it be used? Sources may use TLP:AMBER+STRICT when information requires support to be effectively acted upon, yet carries risk to privacy, reputation, or operations if shared outside of the organization.
How should it be shared? Recipients may share TLP:AMBER+STRICT information only with members of their own organization on a need-to-know basis to protect their organization and prevent further harm.
izvor https://www.cisa.gov/news-events/news/tr...-and-usage
Posts: 1,728
Threads: 664
Joined: Sep 2022
Reputation:
126
Evo šta možemo možda da zaključimo iz ove email poruke "Delivery has failed to these recipients or groups.":
Quote:A restricted entity is a user account or a connector that's blocked from sending email due to indications of compromise, which typically includes exceeding message receiving and sending limits.
Detalji: https://learn.microsoft.com/en-us/micros...users-list
Quote:Sometimes after sending an email, you may encounter the delivery has failed to these recipients or groups error while using the Exchange Server. The most common reason for this error that your email address is flagged as spam or it is no longer allowed to send messages outside of your organization. Contact your email admin for assistance.
As the error message indicates, it can occur if your account is flagged for sending spam or if it is blocked.
Detalji: https://windowsreport.com/delivery-faile...ts-groups/
Dakle moguće je da su sa EPS naloga krenuli sa šalju SPAM i da su automatski blokirani?
Dalje vidimo da ima više HOP-ova i u internoj mreži pre nego što je mejl odbijen?
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Posts: 415
Threads: 108
Joined: Sep 2022
Reputation:
294
Posts: 330
Threads: 85
Joined: Sep 2022
Reputation:
109
12-27-2023, 01:31 PM
(This post was last modified: 12-27-2023, 03:03 PM by y0d4.)
Imaju CB, Avast, Symantec cak se i javno hvale (2019a god. objava) :>
Радници задужени за ИТ
безбедност су ангажовани и
у другим огранцима, где су
значајно помогли инсталацију
Avast и Carbon black заштите.
https://www.eps.rs/cir/SiteAssets/Pages/...202019.pdf
cak i za ostalo:
https://www.eps.rs/cir/Documents/KD%20JN...-2018.docx
Posts: 288
Threads: 56
Joined: Sep 2022
Reputation:
109
Evo sa zvanicne stranice Qilin rans grupe
Quote:The joint stock company "Electric Power Industry of Serbia" is the largest company in Serbia, the economic and energy support of the country. The main activities of EPS AD are production, supply and trade of electricity. EPS is fully committed to achieving its mission, which is to securely supply customers with electricity, under the most favorable market conditions, with constant raising of the quality of services, improving environmental care and increasing the well-being of the community in which it operates. EPS strives to be a socially responsible, market-oriented and profitable company, competitive on the European market and with a significant impact in the region, recognized as a reliable partner to domestic and international companies. Organization: The founder and sole shareholder of EPS JSC is the Republic of Serbia, and the rights of the founder are exercised by the Government of the Republic of Serbia. The share capital of the Company is 100% share capital and is divided into 36,510,509 ordinary shares with voting rights, each with a nominal value of RSD 10,000.00. All ordinary shares are issued and are owned by the founder. The bodies of the Joint Stock Company "Electric Power Industry of Serbia" are the Assembly, the Supervisory Board and the Executive Board. The Assembly appoints the members of the Supervisory Board, while the Supervisory Board appoints the Director General and Executive Directors who make up the Executive Board. The company "EPS Trading" d.o.o. Ljubljana was founded on July 1, 2014 as the first PD established by EPS abroad for the purpose of trading electricity. EPS is a vertically organized company, which has founding rights in two subsidiaries and three public companies in Kosovo and Metohija. Since June 1999, EPS has been unable to manage its capacities in Kosovo and Metohija. This company was successfully attacked by our forces. This company did not take care of its Internet security and the safety of its customers and partners. The company does not get in touch with us and does not want to resolve the issue quickly, without losses and reputational risks. In addition to the blocked servers, we stole a huge part of the company's private data. Private agreements, contracts with partners inside and outside the country, financial documents, loan agreements, reports, balance sheets, a huge number of private email correspondence. And much, much, much more. In the event that the company does not come to an agreement with us, the entire date will be available for public download after 10 days.
#BudimoSajberSvesni
Posts: 434
Threads: 225
Joined: Oct 2023
Reputation:
156
Jel imaju podatke o potrošačima?
There is no patch for stupidity - Kevin Mitnick
Posts: 330
Threads: 85
Joined: Sep 2022
Reputation:
109
"And much, much, much more." :>
Posts: 415
Threads: 108
Joined: Sep 2022
Reputation:
294
12-27-2023, 07:33 PM
(This post was last modified: 12-27-2023, 07:40 PM by milos_rs.)
Bukvalno sam sinoć gledao qillin stranicu da vidim da li su nešto objavili.
Sad više nema skrivanja, zamisli ni jednu jedinu komunikaciju nisu objavili iz EPSa samo "hakovali nas ništa nije u opasnosti" lol, dopustili su napadačima da vode narativ, koje dileje
Posts: 415
Threads: 108
Joined: Sep 2022
Reputation:
294
12-27-2023, 08:28 PM
(This post was last modified: 12-27-2023, 08:38 PM by milos_rs.)
evo ceo skrinšot
evo jedna od zanimljivijih slika barem sa aspekta naše analize ovde. Ovo je verovatno pretraga fajlova urađena na tom PC-u iz skrinšota za samo MSG fajlove (Outlook Message Item File), kojih ima kao što se vidi na donjem levom delu skrinšota 3696 komada. Nepoznato je da li je ovo računar nekoga iz EPSa ili računar napadača posle prebacivanja svih fajlova.
ostale slike su razni ugovori, fakture, verovatno je sve to već javno jer je javno preduzeće? Možda za javne nabavke je sve javno ali ovi neki ugovori oko kredita sa raznim bankama možda i nije javno? Zaista ne znam
Posts: 415
Threads: 108
Joined: Sep 2022
Reputation:
294
komentar sa reddita
|
