Spam maili

[robi]

Zadnji mesec dobivam po nekaj 10 mailov , ki izgledajo poslani iz mojega naslova meni. Spremenil sem vsa gesla in ne pomaga. Večino mi jih gre direkt v neželjeno pošto, a nekaj jih dobim med prejeto. Kako to ustavit?
Prilagam fotografijo, kako to izgleda.

[VolkD]

Človek bi še pomislil, da imaš okužen računalnik.

[robi]

Bit defender, licenčni, ni našel nič, prav tako ne Malware bites

[robi]

Received: from psrvmta24.zcs-production.pri (LHLO mailhub.siol.net)
(172.28.167.47) by psrvmbs11.zcs-production.pri with LMTP; Mon, 22 May 2023
22:06:29 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mailhub.siol.net (Postfix) with ESMTP id 615A9421456
for <15245120@users.siol.net>; Mon, 22 May 2023 22:06:29 +0200 (CEST)
X-Virus-Scanned: amavisd-new at psrvmta24.zcs-production.pri
X-Spam-Flag: NO
X-Spam-Score: 3.884
X-Spam-Level: ***
X-Spam-Status: No, score=3.884 tagged_above=-10 required=6.6
tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001,
HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.723,
RCVD_IN_BL_SPAMCOP_NET=1.347, RCVD_IN_MSPIKE_H2=-0.001,
RCVD_IN_SBL=0.141, RCVD_IN_XBL=0.375, T_DKIM_INVALID=0.01,
T_REMOTE_IMAGE=0.01, UNPARSEABLE_RELAY=0.001] autolearn=disabled
Authentication-Results: psrvmta24.zcs-production.pri (amavisd-new);
dkim=fail (2048-bit key) reason="fail (message has been altered)"
header.d=gmail.com
Received: from mailhub.siol.net ([127.0.0.1])
by localhost (psrvmta24.zcs-production.pri [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 4UEneeT4_jsp for <15245120@users.siol.net>;
Mon, 22 May 2023 22:06:29 +0200 (CEST)
Received: from inxmx195.inxserver.de (vps-0e40cd98.vps.ovh.us [15.204.232.243])
by mailhub.siol.net (Postfix) with ESMTP id 9AFDE421458
for <ro-bi@siol.net>; Mon, 22 May 2023 22:06:28 +0200 (CEST)
Received: from 10.196.241.228
by atlas203.aol.mail.bf1.yahoo.com pod-id NONE with HTTPS; Mon, 22 May 2030 12:49:53 +0000
X-Originating-Ip: [209.85.167.47]
Received-SPF: pass (domain of gmail.com designates 209.85.167.47 as permitted sender)
Authentication-Results: atlas203.aol.mail.bf1.yahoo.com;
dkim=pass header.i=@gmail.com header.s=20221208;
spf=pass smtp.mailfrom=gmail.com;
dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;
X-Apparently-To: ro-bi@siol.net; Mon, 22 May 2030 12:49:53 +0000
X-YMailAVSC: rfFQMcI3bBtrMADpW0nPhaYXkfGPlF0G2v7tkjFtu0oB56O
0Ex55ApFYA2darqZUqDJjq2o10.8DQpl2bSQwVDq9Y3.tV7DHGYd0mhqxlfF
F0HNUXjjulYseznUJPztTniBuqgqAhFD_dDr26brRfZ6UFIOAkuJ_qPttrpD
MG7lLOZguncY7ECsqrG73TjwiCJiLFVLIB.tBY6rMcEWp2YfwzAFFXTTjvRn
o2xccyc0kq9e6CnRL0jrhWnKPVlWIk6aSXgQtNiWEP_x8VUVVOClWkSa0pxi
DxTduw9qC4N1IjJ6WCOAFPxiWbj_R8HybEGstSLAJpIltF.eWQyC8PbS2jZY
JSly2U6nURIFvawQzhUkI40IIKiTNwcAaUbZvH17V68ZK7h09G95bp93IYg7
Q6jJn5w54_RlnHZk4cx1r2fO7c_ovGe5ggZZAcwzqUpk96UOKXXfDgdC_0x7
7xoCw01v8BKMh7I9AWpkyImt_mLSfrH.WpQxq1nQ7O4p_.xyS8Hmky3n9tAV
RPMxlAnvIsORU_Rd4.j8b_Dek.0NHAheFbqa55EudBV6LWc.43rLJkEP_SKX
EYl6vZPikVrGbK6TzwD0fic5puKEgtZhSRqtcaDdk1zdoEjwQEbhgEM3udNq
B_xQD8aLdNHW1HL5SN637OVq5b0CCfDtHZR0gNekmLVYBJR_ul1aM3w9qV97
RVQoYC0armHPnm7WTlFkPAji88uasU5XlAISXCL0_2oNx1Sg5goOVDGa.dW_
.5IDEEzFp4HWtiCiluj4Jr6b4dmOFdPvkegv43dFP.bUi.3o9LrHV4BUsOTO
kcBcDoeSw5bL1AuiYnUwqBTlhPRwZIkI_Nzbbi1SdCxWV8nHRE8sp.4UqvUP
i1oiGALA9m4sKm4KBitXCLqE8DHWHmF57sxS9EK8rhl85bVzbMAJ_b2pbCA.
sQ8CeGKZ3PVb06wFSNRCtIHsZBW3OlK3uekSA9.3uz_q62S61ywaxv_Sa5UW
JoZsjppyBRI8AJYJdHab.jurUM3gTMh.1xSDwoHh8_QblzvYfbmQrAxd6q9l
ySoo10hKgyqU-
X-YMailISG: _q9G_wIWLDtdctBIlV5S8dXi9qrggCXjhjerEqdVtYBga_tq
BoELGMBcv6PyqTQ4BcjkHRBMvlQB83wsY4IJji_zTiScxViHV0zl6DIUgF5T
C64f_3lz4QvWjK8xb5X9mtzsf7kMsN3FOtNvK36HLZuzbHiXMNCp06sUVmIQ
J9xgF2gW.rbXfXBuRh6G9Neg81fpNwZkx6gKjcfIQWvHwacsM_QYA53Rt82x
XrqKLwGy5VeX7.bbAkamTAYMxv28_eslzPQwq.hu08p.pOtuQHQHNB2aW12v
vwtMac4Cbx5IExLwLqya3HYioovbjsxjooywRg2W.9Zmwve6WuAlb_tUS1fX
QLLUjYFqP2OZ_xYGPz9rmHsrsNMp13wQdyvVYw.89bNBire3la6t79NHOFqw
dHjN.AtNKYMklmBRlowAWYEkdXjjZ5_kQ0MYVu6qmbqJkfss.8VXIrxRzLzi
ahcznEdyV6VLlkdiaWWjMWmTxpYUibMkHqEFITy3DIkQbCQj28cfAJpq0r_g
6TZ8jt37BD1sg5Bkc.e5YSb21AomRWK7hpBbWPDSY__dAvc_RoLeYXP4.jZA
Ky1_UoDJSWEh8D0eVJKVzb_wCJAiv0AcdxX7Rx77nzA9exzpoaT6VheCkH9A
TsSQZJtpN5Xp8cq7yXDbg27.jfxlipX45bU1rhB7It2t7OiC74Ed1BGUFB0J
zkhXzCCsadWyKifaTtlu.a1AqlC_S3jkhm_yxJFltLm74uFPfuo0xkWlc2lh
E3KWXn_PJfb5Ik.078hFJodWksGYNmlBSQcLYOrGLWlI_ojkUU.Yf5BG34cU
EPdZAekadHCFdJSNtf8CZcxYdTLdI7cDjveVD98UunbwdJfIDooAkkNvpOsx
9XAVpXXuR9nO3lLSBrShIBVL15KIVuihilCmU3I4st3fPS5FfojJ5DGHGZ49
5Ly4KUH9iUB923MeRIdn87Rq7KIALHVUtf9uFpXIxwmlFALQG9oxGP68TW.S
no4PDUNJpsWmiDMeKH61BA6GGuJ3Q7ImweCFh2FxSrIu_.7sbQPNBIYRvb.7
_tjArAVGGp16UGwNA1K7YsbSmEg053Kh
Received: from 209.85.167.47 (EHLO mail-lf1-f47.google.com)
by 10.196.241.228 with SMTPs
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256);
Mon, 22 May 2030 12:49:53 +0000
Received: by mail-lf1-f47.google.com with SMTP id 2adb3069b0e04-4f3b337e842so3068399e87.3
for <ro-bi@siol.net>; Mon, 22 May 2030 05:49:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1684759792; x=1687351792;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=TwCOAzspywzr3kEdmBwSIrDgQLjuHTnzYJJ3LYN8PtM=;
b=LpQXVrCzjQ3Q2gddbueJ9Q2f19UPfj67/kXUQl6yxct6IJbCiO1g6kB11fCsHkyUrk
nt1aSUBvEZQAbHLvhELPvwJQZ8duHrsyjTjsZCVN42AypXOlL+bIUdHxZAGSLYfyxOu7
cjZJPZ4KuqnCYr1G0OAbRSRJ6w2OYtgmyCBxUIrYC9aFiEWusGf7bxnHDUD6LGWojEC4
SkZFxWYiU1oc6nVTUwENwX2ul/rML69MfwQ3Ejdo5nnaM37ka6KC2r456i5OfHL1FL7w
r1hiWIbSVvVtREjbk+yefwj0bA54B/FD+5AEu2hOuxi2o6K8QB0m+HjzTm9xxjWDAd4x
PSyQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1684759792; x=1687351792;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=TwCOAzspywzr3kEdmBwSIrDgQLjuHTnzYJJ3LYN8PtM=;
b=htsHLjD/d3Xe3xgYS36hyWgesfsx2SujeYTqdZauTIp0SdTDQS28G6wHev+8ACmCwa
Nze8iZdzTAI/rNIQ8BbnUK+Aqy8KSWY6AUahINbJbLFls+atLIBKZQJbAjZ6hmpdnrVE
gwlLo4KRxMcS7xWKLYQL2V3t9HN6MS8SD+X8DMzQvV36XEVqFvvqbOEXkZqBaYvaggOT
0sINrqdpsOyD2kMIZvkJvNB28sdUrcYjQhOIU7zfSBXwNshy3Xmsu7ug2lBt3Ft1+OfG
e+qOVwA7buVuQdoD5iuCqi4qSP7KoPKzgwRgJRdWKB9XW1Akegppe5OuUVTlBO0RLVYI
4w0w==
X-Gm-Message-State: AC+VfDx3MBaQWFws6Uk8NYHRebSbAX3WnOO71I7GL0BQujt2qI3Oi3j6
i+3aH5XjfyDT77wisx2KPDmZYGKcWm0V/75u2OkgDruK
X-Google-Smtp-Source: ACHHUZ4dqb8+CNwv5o1D9kjRkWpEWDJcwp+TKNra+bPj6Ua6WeSvUqipV1/14xbjdVzdOb5KRim0tKnhV8lI+4FGbjU=
X-Received: by 2002:ac2:4315:0:b0:4d5:a689:7580 with SMTP id
l21-20020ac24315000000b004d5a6897580mr3349228lfh.47.1684759792433; Mon, 22
May 2030 05:49:52 -0700 (PDT)
MIME-Version: 1.0
From: Tupi Tea Promo Partner <ro-bi@siol.net>
Date: Mon, 22 May 2030 14:54:41 +0100
Message-ID: <CAPrzedUGkb5k2AKYqVdm=s6UXrDctMxc9ImnzB7CWnbNyt4Yhw@mail.gmail.com>
Subject: Strange shrub boosts more than just libido
To: ro-bi <ro-bi@siol.net>
Content-Type: text/html;

<p><span style="font-weight: 400;">Hey,&nbsp;</span></p>
<p><span style="font-weight: 400;">An unusual discovery changes everything we thought we knew about getting rigid.</span></p>
<p><span style="font-weight: 400;">Researchers studied a tribe deep in the mountains of Brazil&hellip;</span></p>
<p><span style="font-weight: 400;">Where the people have no modern meds like blue pellets.</span></p>
<p><span style="font-weight: 400;">And they discovered that the elders &ndash; guys in their fifties, sixties, seventies and beyond &ndash; were still banging the young chicks in the tribe every day.</span></p>
<p><span style="font-weight: 400;">And I&rsquo;m talking for hours on end, without any chemical stimulation whatsoever.</span></p>
<p><span style="font-weight: 400;">Researchers couldn&rsquo;t work out how these men were still so virile, when so many men in America struggle.</span></p>
<p><span style="font-weight: 400;">Until they saw the elders drinking a strange &ldquo;twig tea&rdquo;.</span></p>
<p><br /><a href="https://storage.googleapis.com/1b1cc374aeb6fb12e8a6/28ead50359fd29bfd862#K2xGM1BPaU0wRnhMbXdkTHg4Z3hKaWpXd3FibFkwSFRIaHNvaDM2UTF5cHh5eTBSN1hzdjZFMTgyYlV1R1lCdjRVc3U4WXJ1RDlLb1FQVGVkL2l3WkhlTlhQVWN0Wkp6ZG1zUmp4NnNrNDV2Y3ZVVStmR0tFMU9QMUZmSjN0R01RdFo3Tit5RlhXWklBcHFrS2JZWERnPT0_"><img src="https://pbs.twimg.com/media/FwwfZ3MXsAEzMSP?format=png&name=small" /></a></p>
<p><span style="font-weight: 400;">It turns out the tea works in a way that&rsquo;s unlike anything guys normally use&hellip;</span></p>
<p><span style="font-weight: 400;">Because it targets the root cause of floppy jalopy, instead of being a bandaid for the symptoms.</span></p>
<p><span style="font-weight: 400;">One doc was so blown away by this discovery that he shared the recipe for the tea in </span><a href="https://storage.googleapis.com/1b1cc374aeb6fb12e8a6/28ead50359fd29bfd862#K2xGM1BPaU0wRnhMbXdkTHg4Z3hKaWpXd3FibFkwSFRIaHNvaDM2UTF5cHh5eTBSN1hzdjZFMTgyYlV1R1lCdjRVc3U4WXJ1RDlLb1FQVGVkL2l3WkhlTlhQVWN0Wkp6ZG1zUmp4NnNrNDV2Y3ZVVStmR0tFMU9QMUZmSjN0R01RdFo3Tit5RlhXWklBcHFrS2JZWERnPT0_"><strong>a short video</strong><span style="font-weight: 400;">.</span></a></p>
<p><span style="font-weight: 400;">The tea is completely natural, and it&rsquo;s made out of ingredients that might even be growing in your backyard.</span></p>
<p><span style="font-weight: 400;">It takes less than a minute to knock together, then you just take a sip and feel your loins stirring almost straight away.</span></p>
<p><span style="font-weight: 400;">Some guys are saying it&rsquo;s the first time in 20 years that they&rsquo;ve been at full mast.</span></p>
<p><span style="font-weight: 400;">I suggest you mix a little of this tea if you want to see similar results.</span></p>
<p><a href="https://storage.googleapis.com/1b1cc374aeb6fb12e8a6/28ead50359fd29bfd862#K2xGM1BPaU0wRnhMbXdkTHg4Z3hKaWpXd3FibFkwSFRIaHNvaDM2UTF5cHh5eTBSN1hzdjZFMTgyYlV1R1lCdjRVc3U4WXJ1RDlLb1FQVGVkL2l3WkhlTlhQVWN0Wkp6ZG1zUmp4NnNrNDV2Y3ZVVStmR0tFMU9QMUZmSjN0R01RdFo3Tit5RlhXWklBcHFrS2JZWERnPT0_"><strong>&rArr;</strong><strong> Brazilian twig tea = wood in 30 secs</strong></a></p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p><span style="font-weight: 400;">P.S. This vid is upsetting some people in high up places, so it could be taken down at any moment. If you think it could help you, I&rsquo;d watch it and scribble down the recipe before that happens.</span></p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<br/><br/><span style="color:#888;font-size:11px;font-family:verdana;display:block;text-align:center;margin-top:10px">click <a href="https://storage.googleapis.com/1b1cc374aeb6fb12e8a6/28ead5

[DusanK]

Mogoče imaš v datoteki hosts vpisane kakšne IP-je, ki kažejo na okužene serverje.
Z beležko (notepad) editiraj hosts datoteko, pokukaj vanjo, če so poleg vrstice 127.0.0.1 localhost vpisani še kakšni drugi IP-ji ali pa kar daj vsebino sem gor.
Lokacija hosts datoteke je na:
C:\Windows\System32\drivers\etc\

Podobna tema, kjer se je pojavil naslov "psrvmta24.zcs-production.pri (LHLO mailhub.siol.net)" kot ga imaš tudi ti.

[Dorijan]

Kdo je email ponudnik ?
Imaš kontrolo nad mail serverjem ?
Google te 3 kratice: dkim spf dmarc records in preveri kako so ti rekordi nastavljeni (je pa možno, da če jih daš na Strict, da bo šel kak pravi email v karanteno)

To ni nujno, da pošiljajo mail iz tvojega računa, je precej bolj verjetno da uporabljajo "email spoofing".
Možno, da je neka skripta prišla do tvojega maila. Preveri da nimaš še nekje na netu objavljen mail v obliki (a href="mailto:someone@yoursite.com") skripte take rade pobirajo

pri email serverjih z neurejenimi recordi ali pa takih ko grejo mesece in leta brez varnostnih posodobitev se hitro zgodi, da spustijo skozi maile brez pravih podpisov.
Pa tudi pri kakem gmailu jih včasih moraš nekaj prijaviti, da se spam filter nauči.

[robi]

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost

[DusanK]

Datoteko hosts imaš OK.
Bo moral še siol spam filter posodobiti.
Ali lahko posamezno neželeno pošto označiš in daš kak ukaz kot: Blokiraj pošiljatelja, Mark as spam, Add sender/domain to blocked list ...?

[robi]

Kako se posodobi siol spam filter? Ne najdem v nastvitvah.
Je pa zanimivo, da na laptopu in telefonu mi piše da je pošiljatelj" Robi", na stacionarcu so pa različni naslovi

[s56rga]

Očitno Siolov strežnik sprejme pošto tudi ko SPF pregled spodleti.

Test Result
Status Problem SPF Alignment Domain not found in SPF
Status Problem SPF Authentication SPF Failed for IP - 209.85.167.47

Siolovih storitev ne poznam, bi pa preveril, če imaš možnost na nivoju uporabnika spreminjat SPAM score.
V tvojem emailu je bilo: X-Spam-Status: No, score=3.884 tagged_above=-10 required=6.6tests=.............

[booxco]

Poučno, letnice spodnjih (spoofnjenih) headerjev so tam nekje 2030... Pošta iz prihodnosti Hekerčki kar znajo zmest strežnike.
Kot izgleda, je vir nek kompromitiran VPS v US (OVH hosting) in ne tvoj računalnik.
From naslov je pa itak enostavno ponaredit, saj ga vpiše pošiljatelj in se ne preverja. Briši, ne moreš kaj dosti pomagati, ni pa razloga za sekiranje.

[kobranka]

Oja meni je tudi nekdo zlorabil mail, ime, priimka in naslova hvala bogu še ne. Ta budala je z njim odprla račun PlayStation trgovino in vsake toliko časa se ji nekaj zaželi naročiti iz Cilinder.si.

Vprašanje. Kako si lahko sam pomagam, da pobrišem za seboj sledi, ker mi je očitno še nekje nekaj ostalo?

[kobranka]

Bom drugače vprašal. Ali si kdo pomaga uspešno zbrisati sledove z DeliteMe oz. podobnimi meni nepoznanimi ponudniki?

[miharix]

Si pogledal če je tvoj naslov del vdorov v kak sistem? https://haveibeenpwned.com/
Si sličajno uporabil isto geslo še kje drugje? -> Spremeni tam TAKOJ.

ps: DeliteMe jaz ne zaupam, ker
preveč intenzivno vlagajo v reklame(dobra roba se sama hvali)
še ena stran kjer imajo vse tvoje osebne podatke na kupu(zanimiv cilj za napadalce).

[MadMax]

Si pogledal če je tvoj naslov del vdorov v kak sistem? https://haveibeenpwned.com/

Nekdo bi lahko pomislil, da linkana stran potihem zbira mejle in "predloge" za bazo gesel (source za brute-force)...

[miharix]

Si pogledal če je tvoj naslov del vdorov v kak sistem? https://haveibeenpwned.com/

Nekdo bi lahko pomislil, da linkana stran potihem zbira mejle in "predloge" za bazo gesel (source za brute-force)...

Kot za vsako spletno stran je tudi tu je vprašanje zaupanja. Lahko pa snameš par GB hash tabelo in pri sebi iščeš svoj podatek. (ne vem sedaj točno kje je link, nek github boš našel)
Lahko greš s to bazo tudi tako daleč, da onemogočiš v sovji domeni uporabo gesel ki so v preneseni hash tabeli.(Preverjetno deluje )

[kobranka]

Si pogledal če je tvoj naslov del vdorov v kak sistem? https://haveibeenpwned.com/
Si sličajno uporabil isto geslo še kje drugje? -> Spremeni tam TAKOJ.

ps: DeliteMe jaz ne zaupam, ker
preveč intenzivno vlagajo v reklame(dobra roba se sama hvali)
še ena stran kjer imajo vse tvoje osebne podatke na kupu(zanimiv cilj za napadalce).

Problem je, da ne vem kje in kdaj tako kot je MadMax predvideval. S tem si ne morem kaj preveč pomagati.

Cit0day (unverified): In November 2020, a collection of more than 23,000 allegedly breached websites known as Cit0day were made available for download on several hacking forums. The data consisted of 226M unique email address alongside password pairs, often represented as both password hashes and the cracked, plain text versions. Independent verification of the data established it contains many legitimate, previously undisclosed breaches. The data was provided to HIBP by dehashed.com.

Compromised data: Email addresses, Passwords

iPmart logo
iPmart: During 2015, the iPmart forum (now known as Mobi NUKE) was hacked and over 2 million forum members' details were exposed. The vBulletin forum included IP addresses, birth dates and passwords stored as salted hashes using a weak implementation enabling many to be rapidly cracked. A further 368k accounts were added to "Have I Been Pwned" in March 2016 bringing the total to over 2.4M.

Compromised data: Dates of birth, Email addresses, Passwords, Usernames

Not SOCRadar logo
Not SOCRadar: In August 2024, over 332M rows of email addresses were posted to a popular hacking forum. The post alleged the addresses were scraped from cybersecurity firm SOCRadar, however an investigation on their behalf concluded that "the actor merely utilised functionalities inherent in the platform's standard offerings, designed to gather information from publicly available sources". There is no suggestion the incident compromised SOCRadar's security or posed any risk to their customers. In total, the data set contained 282M unique addresses of valid email address format.

Compromised data: Email addresses

[miharix]

Cit0day
https://gist.github.com/gvolluz/dd0df2b ... 5de3dde1da

Pomojem tebi ni več ostalo le tvoji podatki so zdaj del ukradenih podatkov, ki jih prodajajo na črnem trgu oz so nekje razobešeni.

Jaz bi za začetek poizkusil kontaktirat PlayStation store ali pa https://www.cert.si/prijava-incidenta/ bodo še bolj točno vedeli če je Microsoft na take stvari odziven.