One thing that keeps coming up is fake Windows alerts that say your PC is infected and… — Paul Stevens

8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do 8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one 8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC 8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one 8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them 8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran 8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them 8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos

4 Oct· post

One thing that keeps coming up is fake Windows alerts that say your PC is infected and push you to call a number. The usual pattern is the same: browser page, loud message, and pressure to act fast. I’m curious how others handle it on a family PC without making a mess of the browser settings.

Share

4 comments

…

More from this wall

all →

5 Oct· post

Another thing that keeps coming up is the so-called Windows support call scam. The pattern is usually the same: a pop-up or message says there is a serious problem, then pushes you to call someone right away. If you spot one, what do you do first: close the browser, check Task Manager, or just ignore it?

Share

5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year

All members Join