True. Sometime Kaspersky take samples very lightly...
Investigating a New Click-Fix Variant
- Thread starter Parkinsond
- Start date
- Apr 28, 2015
- 9,512
- 1
- 85,958
- 8,389
When was added? did You send to them? got the confirmation?
Send it but no reply from them. Not added as of now! Kaspersky Customer support is very picky.
- Apr 28, 2015
- 9,512
- 1
- 85,958
- 8,389
If you have only scanned the CMD command line by saving it as a file then it is normal for the file to be not detected by signatures.
- Apr 28, 2015
- 9,512
- 1
- 85,958
- 8,389
This IP looks down: 94 . 156 . 170 . 255 
Yes. The IP's in the IOC are already down.
F
ForgottenSeer 123960
Direct TCP/ICMP requests from your host will log your public IP in the threat actor's server access logs if the server is selectively blocking traffic rather than being fully offline.
u have given the cmd to K?
- Apr 28, 2015
- 9,512
- 1
- 85,958
- 8,389
You may also like...
-
New ClickFix Attack Leverage Windows Run Dialog Box and macOS Terminal to Deploy Malware- Started by Parkinsond
- Replies: 5
-
A Reason to use 3rd-party AV other than Windows defender: Clickfix- Started by Wrecker4923
- Replies: 38
-
-
-
New GootLoader Malware Variant Evades Detection and Spreads Rapidly- Started by silversurfer
- Replies: 0