Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
Pa katastrofa, ne znam šta drugo da kažem... arhivirano:
https://archive.ph/Yv8e1.
![[Image: attachment.php?aid=543]](https://bezbedanbalkan.net/attachment.php?aid=543)
![[Image: attachment.php?aid=544]](https://bezbedanbalkan.net/attachment.php?aid=544)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
(This post was last modified: 02-03-2023, 01:49 AM by
1van.
Edit Reason: Typo.
)
Posts: 74
Threads: 7
Joined: Nov 2022
Reputation:
57
nekako kada bismo sabrali sve.... uz cinjenicu da se mailovi sa mojdoktor.gov.rs domena zlupotrebljavaju preko godinu dana pre bih rekao da je u pitanju neki vid spoofinga, mada bilo bi korisno kada bismo imali zvanicnu potvrdu da su mailovi validni i da su u zvanicnoj upotrebi.
nekako mi nije logicno da neko ima pristup bazi ili nekolicini mail adresa vise od dve godine i ih "samo" koristi za slanje mailova cilju sirenja malware... da imaju pristup DB verovatno bi okacili odredjene podatke na neki od foruma...
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
Da, čudno je da sve tako dugo traje, ali IP adresa je sa njihovog mejl servera. Možda ima još nešto što izlazi preko te IP, ili je neka aplikacija kompromitovana.
Ali i da je spoofing u pitanju, i da adrese/nalozi ne postoje, svakako je ogroman problem, jer su u pitanju izuzetno osetljivi podaci koji se mogu pribaviti ovim tehnikama.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
Mejl
[email protected] i IP 212.200.253.238 se spominju 2020. godine i ovde (CSIRT Čile):
https://www.csirt.gob.cl/media/2020/12/1...083-01.pdf.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
(This post was last modified: 02-03-2023, 11:29 AM by
1van.
Edit Reason: Typo.
)
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
Još jedna zanimljivost je da kada se Googla "
[email protected]" sa još nekim terminima, može se doći do više test url-ova (sub domena) gde je dostupan ovaj isti web sajt a na sorsix.com domenu (firma koja je izradila sistem). Verovatno slično postoji i za API-e mobilne aplikacije. Možda su oni kompromitovani.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
(This post was last modified: 02-03-2023, 03:38 AM by
1van.
Edit Reason: Typo.
)
Posts: 334
Threads: 86
Joined: Sep 2022
Reputation:
111
koliko je suludo da to traje par dina, vise bih voleo da je neko svesno ovo omogucio i da odrzava pristup za takve stvari nego da je toliki bol u ....
Nemoguce da niko za ove godine nije prijavio, primetio da je adresa na spam listama, da ima neko salje na abuse i td.
Imao bih razumevanja da je u pitanju par meseci.....
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
Čudni rezultati Google pretrage:
![[Image: attachment.php?aid=558]](https://bezbedanbalkan.net/attachment.php?aid=558)
![[Image: attachment.php?aid=557]](https://bezbedanbalkan.net/attachment.php?aid=557)
Na ovim domenima (movimientolaola.es i restaurantlepetitchaudron.fr) ima gomila random generesanih sub domena sa raznim vrstama prevara.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
(This post was last modified: 02-05-2023, 04:16 PM by
1van.
Edit Reason: Ubačeni detalji.
)
Posts: 1,731
Threads: 666
Joined: Sep 2022
Reputation:
134
Analiza zaglavlja mejla koji je stigao sa
[email protected], izgleda da mejlovi stižu kroz kompromitovane WebMail naloge:
![[Image: attachment.php?aid=561]](https://bezbedanbalkan.net/attachment.php?aid=561)
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
