This is their reply:
KOTIP does not know 495d1d500afc5ec700a0a15bf34862973e8e0152f9346b322a468cbe6e7c9d1e
KOTIP does not know 495d1d500afc5ec700a0a15bf34862973e8e0152f9346b322a468cbe6e7c9d1e
Sweet Minecraft Mods – The Dark Tale of SugarSMP Scam, Malware & Extortion
- Thread starter Khushal
- Start date
News Archive
68 Replies
5,486 Views
tell them it is intermittently serving malware and send gdata's blog link with iocs. Move it to category of not trusted.
Kaspersky Threat Intelligence Portal
Kaspersky Threat Intelligence Portal allows you to scan files, domains, IP addresses, and URLs for threats, malware, viruses
the detected sample is also not on kotip.
just kaspersky things
christmas tree detection but kaspersky misses
When i run malware with K installed i get this message which is more
Last edited by a moderator:
Why the sentence is interrupted by space after "maybe", and why may be is "maybe"?View attachment 296388
christmas tree detection but kaspersky misses
When i run malware with K installed i get this message which is more
View attachment 296389
Can you pm the sample?View attachment 296388
christmas tree detection but kaspersky misses
When i run malware with K installed i get this message which is more
View attachment 296389
Probably a huge False Positive we often find in VT...View attachment 296388
christmas tree detection but kaspersky misses
When i run malware with K installed i get this message which is more
View attachment 296389
on bazaar
No, not a false positive:
good job i found the sample funny. i never said it was not malware.
That comment was to myself 
A mod that seemed harmless ended up being used as a vehicle for deception and extortion, showing how attackers exploit trust within gaming communities to manipulate users. Several reports in the thread confirm that active defenses (antivirus, DNS blocking) managed to stop the threat, highlighting the importance of keeping these measures in place.
MalwareBazaar | Checking your browser
anyone interested in samples can get them here.
@harlan4096 i hope u do the needful.
Last edited:
I know well that URL, but it's impossible to test and report such a huge amount of new samples a day 
send the url direct to them. They will get the samples themselves. Sending hashes is not your job my friend.I know well that URL, but it's impossible to test and report such a huge amount of new samples a day
Last edited by a moderator:
k1esa
Level 1
Norton safe web is one of the mose efficient against new phishing links
View attachment 296396Safeweb
safeweb.norton.com
View attachment 296397
ESET
Attachments
Recently browsing
Members who viewed this thread in the last 5 minutes