hxxps://botshield[.]vu/kFcjldURL
Reported by 1 independent source · first reported by Trend Micro Research · last reported
Last reported 7 months ago
What the reports say
1 report, newest first · the exact sentence from each-
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages“The final decoded command in the VBS script downloads and Base64-decodes a binary executable from hxxps://botshield[.]vu/kFcjld.”
Indicators reported together
named in the same reports- hxxps://github[.]com/Voicemod-Pro-Download-Toolin 1 report
- hxxps://voicemod-pro-download-tool.github[.]io/.github/in 1 report
- voicemod-pro-download-tool.github[.]ioin 1 report
- hxxps://github[.]com/Voicemod-Pro-Download-Tool/.githubin 1 report
- hxxps://kiamatka[.]com/kaiok.kakmanin 1 report
- kiamatka[.]comin 1 report
- hxxps://best-tinted[.]com/github-download.htmlin 1 report
- best-tinted[.]comin 1 report
- hxxps://github[.]com/PassFab-4WinKey-Windows-Password-Resetin 1 report
- hxxps://github[.]com/Yim-Mod-Menu/.githubin 1 report
- hxxps://github[.]com/Arena-Breakout-Infinite-ESP/.githubin 1 report
- hxxps://github[.]com/Graphic-Editor-Krita/.githubin 1 report
- fa767391b99865f8…13c3bd4ae4b7in 1 report
- d295720bc0c1111c…f03e2cc44fe5in 1 report
- 1bd605ef84b6767d…75d5bdcf7d76in 1 report
- botshield[.]vuin 1 report
- 15de71073f44c657…cc1e5b6bcdd5in 1 report
- 4e90d386c1c7d3d1…b4a1dbab9997in 1 report
- 4264a88035aa0b63…5ef36bf8edbdin 1 report
- 433a13cc70396f80…67a77add1476in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.