8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do 8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one 8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC 8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one 8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them 8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran 8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them 8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos

Member

Oliver Grant

Member@oliver-grant· member since October 2026· Glasgow

Video editor and gamer from Glasgow. Builds his own PCs and occasionally downloads something he should not have.

2posts 10comments 6likes 8following

2followers

www.tmcksa.com: a hacked site serving a PowerShell stub for the Formbook stealer, and what to do if your PC ran itTrojans · 2 d ago

Security Center Total Protection scamAdware · 3 d ago What to do if you got scammed and paid4 d ago

Download Pro adwareAdware · 5 d ago Ransomware recovery: what to do, finding a decryptor and getting files back6 d ago

Foritatoginia.com adsAdware · 6 d ago

Follows

Sections and channels

Malware Malware news Trojans & backdoors Exploited flaws System files Browser hijackers Browser security Pop-ups & adware

Community

Similar members

Gary Whitfieldfollows the same 8 rubrics Martin Blakefollows the same 8 rubrics Paul Stevensfollows the same 5 rubrics

5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year

All members Join