hxxps://api.smartdriverfix[.]cloud/nvidiawins-updateURL
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Lazarus ClickFake Interview Campaign: ClickFix Malware“…der is built on the NodeJS Framework and fetches a ZIP archive named nvidiadrivers.zip hosted at the following URL hxxps://api.smartdriverfix[.]cloud/nvidiawins-update.”
Indicators reported together
named in the same reports- hxxps://www.archblock[.]comin 1 report
- www.archblock[.]comin 1 report
- all[.]herein 1 report
- hxxps://api.smartdriverfix[.]cloud/nvidiadrivers-kp9s.updatein 1 report
- api.smartdriverfix[.]cloudin 1 report
- scenarios[.]herein 1 report
- hxxps://api.smartdriverfix[.]cloud/coremedia-kp9s.shin 1 report
- driverpackx[.]appin 1 report
- process.parent[.]pidin 1 report
- vid-crypto-assess[.]comin 1 report
- assessiohq[.]comin 1 report
- blockassess[.]comin 1 report
- blockchainjobassessment[.]comin 1 report
- blockchainjobhub[.]comin 1 report
- candidateinsightinfo[.]comin 1 report
- coinbase-walet[.]bizin 1 report
- coinbase-walet[.]mein 1 report
- competency-core[.]comin 1 report
- devchallengehq[.]comin 1 report
- evalassesso[.]comin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.