Spam Campaign Abuses Atlassian Jira, Targets Government and Corporate Entities ==================================================================================================================================================== Domains ==================================================================================================================================================== Atlassian instances used to send spam in December 2025 and January 2026 20fdssadsad[.]atlassian[.]net 3traveonkun[.]atlassian[.]net 5ameyowin[.]atlassian[.]net 5juelrnlt[.]atlassian[.]net 99juelrnlt[.]atlassian[.]net caszxcmial1964[.]atlassian[.]net caszxcmial2354[.]atlassian[.]net caszxcmial5613[.]atlassian[.]net caszxcmial31235[.]atlassian[.]net faciniancu2[.]atlassian[.]net goutiermathea2[.]atlassian[.]net goutiermathea4[.]atlassian[.]net goutiermathea5[.]atlassian[.]net goutiermathea7[.]atlassian[.]net goutiermathea8[.]atlassian[.]net goutiermathea9[.]atlassian[.]net jananialigato3[.]atlassian[.]net jananialigato4[.]atlassian[.]net jananialigato6[.]atlassian[.]net jananialigato7[.]atlassian[.]net jananialigato8[.]atlassian[.]net jsldifjzxu3015[.]atlassian[.]net norawfzkwn7[.]atlassian[.]net norawfzkwn8[.]atlassian[.]net norawfzkwn9[.]atlassian[.]net norawfzkwn10[.]atlassian[.]net norawfzkwn55[.]atlassian[.]net norawfzkwn66[.]atlassian[.]net yandzxkc6135[.]atlassian[.]net yandzxkc8354[.]atlassian[.]net yandzxkc9135[.]atlassian[.]net yandzxkc71338.atlassian.net zavicevaa72212[.]atlassian[.]net Domain in spam emails ambiguityserial[.]site annamediumsmotretgo[.]online autsorsserialbdk[.]online autsorsserialoue[.]online autsorsserialtyr[.]online autsorsserialyuu[.]online barankiny-serial[.]online besplanto[.]online besprincypnievpiterenovyeserii[.]online blackjackonlineplay[.]com 1winapps2[.]site zimorodoktv[.]online turok1990-one[.]online adrinal[.]com natsukage[.]jotakoxi[.]cyou dotime[.]ru barankinyserialxud[.]online audrey-reid[.]online autsorsserialkhy[.]online autsorsserialrpv[.]online autsorsserialyuu[.]online chikatiloserialsxe[.]online toprapes[.]com besprincypnievpiterenovyeserii[.]online [many more, 100+] ==================================================================================================================================================== Subject lines ==================================================================================================================================================== Заявка № Требуется Ваше подтверждение. Заявка № Необходимо Ваше подтверждение. Срочно: 12 часов на участие в акции.Заявка № Una nuova opportunità di gioco è disponibile Il gioco è ora disponibile Aggiornamento della piattaforma e offerta: № A new year gift from us: id A holiday note for you: id Notification №. Haven`t you picked up your gifts yet? Hurry up. Get your first bonus now: id Special Gaming Opportunity: No ==================================================================================================================================================== IP addresses hosting landing pages ==================================================================================================================================================== 85[.]239[.]37[.]79 89[.]105[.]217[.]94 80[.]89[.]237[.]99 188[.]137[.]251[.]154 ==================================================================================================================================================== SHA256 ==================================================================================================================================================== Email samples 73052241b2bc103e19db2096608d686a266964d952944d3de12adc415c22927a 38ceb6fed0a2bcfd627469305b81b7e2f4eb7564768f7e103645dab849940aba e9785ec2f27fc97cd57552c484dc34b650e116d090a98fc48f957c48e440ba7d bac38e5d38782e33dd995b9822228f88e06157ab8d9fd1fe20a31a550db0d354 8574f1be0740ee6480f220d590d0eddb2bd02c0b30875daa943cbd2de8553cd1 43bc0b395cc53490c7cf43be348890241ca8bee07cbddc3062fe5822866657e4