SBB phishing sa eunet.co.rs, inbox.rs, online.rs
#1
Izvor 1: https://twitter.com/nklmilojevic/status/...6558873608
Arhivirano 1: https://archive.ph/ncAiT
Phishing Link vodi na: hXXp :// bib.2118681097.eway2pay.wmpvt[.]com/SBB/auth/index.php

Izvor 2: https://twitter.com/shkabo_tm/status/161...3684531203
Arhivirano 2: https://archive.ph/owcUQ
Phishing Link vodi na: hXXp :// bib.584883775.eway2pay.wmpvt[.]com/SBB/auth/index.php

[Image: attachment.php?aid=358]


Attached Files Image(s)
   
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply
#2
Evo i svih headera


Attached Files
.txt   sbb.txt (Size: 33.52 KB / Downloads: 154)
Reply
#3
hahha, a dje logika da phishujes "u ime" konkurencije?! :S

inace aknut: artificialgrassbradford.co.uk
i: We could not find a DMARC record for domain eunet.co.rs
Reply
#4
Da, i SPF im je ne baš sjajno podešen, ~all umesto -all.
Reply
#5
Još malo detalja, izvor: https://twitter.com/shkabo_tm/status/161...4595507200, arhivirano: https://archive.ph/OMaNA. Javascript na Pastebin: https://archive.ph/FwHuY.

[Image: attachment.php?aid=360]

[Image: attachment.php?aid=361]


Attached Files Image(s)
       
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply
#6
Dobio sam informaciju da kampanja sada ide i sa online[.]rs i inbox[.]rs domena.

Izvor za online[.]rs: https://archive.ph/9AZWi, čekam hedere za oba.

Uglavnom pogrešno podešen SPF i DMARC dovode do toga da je moguće zloupotrebiti ove domene.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply
#7
Evo još hedera za eunet.co.rs. Izgleda da šalju na INFO i OFFICE email adrese.


Attached Files
.txt   SBB Обнављање услуга - jz.rs.eml-OFFICE.txt (Size: 31.14 KB / Downloads: 2,012)
.txt   SBB Обнављање услуга - jz.rs.eml-INFO.txt (Size: 31.31 KB / Downloads: 115)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply
#8
Hederi za inbox.rs.


Attached Files
.txt   SBB Обнављање услуга - mk.in.rs.eml-OFFICE-INBOX.txt (Size: 33.16 KB / Downloads: 121)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)