Reply to thread

Message

<blockquote data-quote="Achdad" data-source="post: 1198903" data-attributes="member: 130521">Thanks for the detailed feedback — that matches very closely with what I found during the investigation.The account-security steps have already been completed from a separate trusted device. I changed the passwords for the important accounts, revoked suspicious/old sessions where possible, reviewed recovery options, and enabled MFA on the main services.I agree that there is no benefit in trying to reproduce the infection just to obtain a malware-family name. My main concern now is simply making sure there are no remaining persistence mechanisms or artifacts that I missed.I’ll open a separate thread in the Malware Removal Assistance section and include the relevant hashes, task names, timeline, and the remediation already performed, together with a link back to this discussion.Thanks again for the clarification and for confirming that the current cleanup results are encouraging.</blockquote>

[QUOTE="Achdad, post: 1198903, member: 130521"] Thanks for the detailed feedback — that matches very closely with what I found during the investigation. The account-security steps have already been completed from a separate trusted device. I changed the passwords for the important accounts, revoked suspicious/old sessions where possible, reviewed recovery options, and enabled MFA on the main services. I agree that there is no benefit in trying to reproduce the infection just to obtain a malware-family name. My main concern now is simply making sure there are no remaining persistence mechanisms or artifacts that I missed. I’ll open a separate thread in the Malware Removal Assistance section and include the relevant hashes, task names, timeline, and the remediation already performed, together with a link back to this discussion. Thanks again for the clarification and for confirming that the current cleanup results are encouraging. [/QUOTE]

Verification