hxxps://getyourpages[.]com/downloads/bravo.zipURL
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 19 months ago
What the reports say
1 report, newest first · the exact sentence from each-
ClickFix: The Social Engineering Technique Hackers Use to Manipulate Victims“…f it exists in %TEMP% and if not the script decodes the remote URL hosting this file and downloads it via (Web.Client hxxps://getyourpages[.]com/downloads/bravo.zip) and store it in %TEMP% to uncompress it and execute the first file in the folder which is the executable containing…”
Indicators reported together
named in the same reports- hxxps://getyourpages[.]com/downloads/brv%E2%80%9Din 1 report
- getyourpages[.]comin 1 report
- police-am[.]infoin 1 report
- hxxps://finalstepgo[.]com/uploads/il2.txtin 1 report
- finalstepgo[.]comin 1 report
- hxxps://finalstepgo[.]com/uploads/il222.zipin 1 report
- 03ac191b235b3a86…e6ca1108b4f2in 1 report
- unblocked[.]watchin 1 report
- mp3fromlink[.]comin 1 report
- hisotv[.]comin 1 report
- www.portalmovies.com[.]arin 1 report
- sfrom[.]netin 1 report
- tagalogdubbed[.]comin 1 report
- www.youtubepp[.]comin 1 report
- ssyoutube[.]comin 1 report
- www.y2mate[.]comin 1 report
- multicanais[.]lovein 1 report
- nx.oribichitra[.]comin 1 report
Copy these 18 indicators · defanged
Thanks — we review every report.