Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

National Agency Programmes and Mobility

na.org.mk

Discovered 2026-11-12 09:50 UTC
Est. attack date 2026-11-11
Country MK
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

na.org.mk The National Agency for European Educational Programmes and Mobility is a government institution in Skopje, North Macedonia, established in 2006 to administer EU education and mobility programs including Erasmus+, Erasmus Mundus and the European Solidarity Corps. Over 20 years it has managed more than 2,500 projects involving 50,000 plus mobile participants and administering over 200 million euro in EU grants. Its activities cover higher education, vocational training, school education, youth and sport through Erasmus+ Key Actions 1, 2 and 3. The agency partners with over 1,000 organizations including universities, schools, NGOs and companies across 33 Erasmus+ countries. It also operates Eurodesk, eTwinning and Youthpass platforms for youth information and certification. Led by a director and board appointed by the Ministry of Education, it serves as North Macedonia's official Erasmus+ national coordinator.

Infostealer activity detected by HudsonRock

Compromised Employees: 1

Compromised Users: 0

Third Party Employee Credentials: 2


External Attack Surface: 1


Exposure Report
by ParanoidLab
59
Passwords
16 critical
23
Cookies
1 critical
Last queried 2026-11-12 09:50 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • re4mre4m.net
  • infona.org.mk
  • dejan.zlatkovskina.org.mk
MX Records
  • na-org-mk.mail.protection.outlook.com. Microsoft 365
TXT Records
  • google-site-verification=FIriZXqHsG2J8ut_J8EDCEzX_xjKSNFZ8Dw4R7ASQtY
  • v=spf1 +a +mx +ip4:185.250.254.3 +ip4:185.250.254.5 +ip4:185.229.24.14 +include:spf.protection.outlook.com -all
  • MS=ms73496686
Cloud / SaaS Services Detected
Microsoft 365

Other recent victims