Domen azk.gov.rs je kompromitovan. U izvornom kodu se mogu naći reklame za razne teme (kazino, sex), a i klikovi po stranici redirektuju na maliciozne spoljašnje veze.
VirusTotal: https://www.virustotal.com/gui/url/097fc.../detection
Arhivirano: https://archive.ph/6se7t
Maliciozni kod je verovatno u nekom od .js fajlova, pogledaću detaljno čim nađem malo vremena.
Code:
...
ЕОК" target="_blank">Извештај о повезивању Националног оквира квалификација Републике Србије (НОКС) са Европским оквиром квалификација (ЕОК)</a></div></div></div></div></div><div class="vc_row-full-width vc_clearfix"></div><div class="vc_row wpb_row vc_row-fluid vc_custom_1603569138176 vc_row-o-full-height vc_row-o-columns-middle vc_row-flex"><div class="wpb_column vc_column_container vc_col-sm-12"><div class="vc_column-inner"><div class="wpb_wrapper">
<div class="wpb_text_column wpb_content_element " >
<div class="wpb_wrapper">
<p style="overflow: hidden; height: 1px; margin: 0;">If you are the one who likes a spooky atmosphere, then you have to read our top of scary games in the gambling industry. Play something you really like as <a href="https://casinowis.com/buffalo-power-hold-and-win-slot">https://casinowis.com/buffalo-power-hold-and-win-slot</a> and stay in tune with the latest news!</p>
<p style="overflow: hidden; height: 1px; margin: 0;">This online slot game is inspired by the classic horror film of the same name from the 1970s, which starred Michael Myers as the iconic figure. Find scatter symbols to get access to the Trick or Treat Wheel, which has some substantial payouts here <a href="https://joocasinoau.com/bonuses">https://joocasinoau.com/bonuses</a>. The Boogeyman Bonus game is very entertaining since it allows you to look for cash rewards.</p>
</div>
</div>
<div class="vc_row wpb_row vc_inner vc_row-fluid"><div class="wpb_column vc_column_container vc_col-sm-4"><div class="vc_column-inner vc_custom_1603569245778"><div class="wpb_wrapper"><section class="vc_cta3-container"><div class="vc_general vc_cta3 vc_cta3-style-classic vc_cta3-shape-rounded vc_cta3-align-left vc_cta3-color-blue vc_cta3-icon-size-md vc_custom_1639062502285"><div class="vc_cta3_content-container"><div class="vc_cta3-content"><header class="vc_cta3-content-header"><h2>РКиПСВ центар</h2></header><p><a href="http://azk.gov.rs/?page_id=75117">Центар за развој квалификација и подршку секторским већима НОКС-а.</a></p>
...Code:
<div class="row middle">
<div class="col-lg-11">
<aside id="text-28" class="widget header-right widget_text"> <div class="textwidget"><div style="display: none;">
saneleon hot sax vedio <a href="https://its-ross-wp1.ur.rochester.edu/rsrb/Rooms/RoomComponents/LoginView/GetSessionAndBack?_webrVerifySession=637584002324910712&redirectback=//www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> sexgals<br />
zorla sikiş <a href="http://aquaculture.seagrant.uaf.edu/click-thru.html?url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> tu egalore com<br />
cake farts porn hub <a href="http://fishbiz.seagrant.uaf.edu/click-thru.html?url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> kizumonogatari hentai<br />
planetsuzy ava addams <a href="http://cat.sustech.edu/cgi-bin/koha/tracklinks.pl?uri=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> pukejob<br />
abbywintersfree <a href="http://library.sust.edu/cgi-bin/koha/tracklinks.pl?biblionumber=3967&uri=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> hwporner<br />
hrntaihaven <a href="http://openlink.ca.skku.edu/link.n2s?url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> okusama ga seitokaichou! hentai<br />
jinx blowjob <a href="https://research.ece.cmu.edu/protoflex/lib/exe/fetch.php?media=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> lindsey woods anal<br />
gifwithsauce <a href="http://web.stanford.edu/cgi-bin/redirect?dest=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> trash nurses 4<br />
anonib alternative <a href="https://www.ece.cmu.edu/~protoflex/lib/exe/fetch.php?media=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> fnaf bonnie porn<br />
fuckyeahhotcouple <a href="https://ecap.hss.edu/eCap/sd/Rooms/RoomComponents/LoginView/GetSessionAndBack?redirectBack=https://www.indiansexmovies.mobi/&_webrVerifySession=637551295835868790" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> mnfclub updates<br />
barbara borges nude <a href="https://e-irb.jhmi.edu/eirb2/sd/Rooms/RoomComponents/LoginView/GetSessionAndBack?redirectBack=https://www.indiansexmovies.mobi/&_webrVerifySession=637804005339104182" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> jazmine miner nude<br />
dirtyakira porn <a href="https://login.aup.edu/cas/login?gateway=true&service=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> shemale cum while fucked<br />
erome joi <a href="https://m2.capella.edu/mobile-feed/auth/redirect.feed?token=sOnnlFdVN8eBpDXSDHxrqe-sdmY.*AAJTSQACMDIAAlNLABxlR0JyRi9uSmI0Qzhpb0NKMXlqTWZrKzl5Zk09AAJTMQACMDE.*&url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> czech hunter 271<br />
britney amber boobpedia <a href="https://rrp.rush.edu/researchportal/sd/Rooms/RoomComponents/LoginView/GetSessionAndBack?redirectBack=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> tsunade cosplay porn<br />
kaity sun fuck <a href="https://sunysullivan.edu/urlRedir.php?redir=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> cnnamador<br />
trike patrol celine <a href="https://ur.umich.edu/adfix2.php?id=205&url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> teenshoplyfter<br />
tiffany thompson pov <a href="http://games.lynms.edu.hk/jump.php?url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> rachellromeo
</div>
</div>
</aside><aside id="text-3" class="widget header-right widget_text"> <div class="textwidget"><div class="row extra-info center header07-end">
<div class="col-md-1">
</div>VirusTotal: https://www.virustotal.com/gui/url/097fc.../detection
Arhivirano: https://archive.ph/6se7t
Maliciozni kod je verovatno u nekom od .js fajlova, pogledaću detaljno čim nađem malo vremena.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Dobro nisu jos ali work in progress