Topic: [Beware] Microsoft found a malicious html file on Kobe Bryant wallpaper (Read 240 times)
February 02, 2020, 12:30:21 AM
Looks like the image has a javascript script that will run when a user loads it(?). Using a no script plugin or disabling javascript might help them avoid this attack if they don't use SmartScreen. I wonder who they will end up on this image in the first place.
February 01, 2020, 09:03:09 PM
They really take those opportunities where they can spot vulnerability even just being sympathetic to someone else, never had an idea that this scheme may come up. By the way cryptoaddicthie, you don't have to "code" that post from Twitter as it doesn't directly go onto the malicious html file as well as the post from Microsoft.
February 01, 2020, 06:35:39 PM
Well, this bastards have no moral. Using death of famous and people beloved personality for personal gains is very cynical. But it's nothing surprising that such people exist. Just look how news media are making money from Kobe Bryant death...
But as I understand, this thing isn't stealing funds. It's coin miner script which use CPU resources to mine coins. It's not most malicious thing. It's not very popular thing now, as it was year or two ago, but it's still good to use addons which block these scripts.
But as I understand, this thing isn't stealing funds. It's coin miner script which use CPU resources to mine coins. It's not most malicious thing. It's not very popular thing now, as it was year or two ago, but it's still good to use addons which block these scripts.
February 01, 2020, 01:23:21 AM
Indeed the passing away of Kobe Bryant gained a lot of attention on the mass community. This tragic event is likely used by some hackers and cybercriminal to steal funds.The website hats been blocked already check out Microsoft defense over this matter.
Source
Reference:
Quote
Microsoft Defender SmartScreen blocks the website hosting the coin miner. Microsoft Defender ATP detects the malicious HTML file as Trojan:HTML/Brocoiner.N!lib (SHA-256: 86031a7d35968a1ff1f20441afce6eee504cdb98c1fbee9a4708ad989a5f2269)
Reference:
Code:
https://twitter.com/MsftSecIntel/status/1223032390555033600
Jump to: