Bitcoin Forum
May 27, 2024, 02:17:15 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [Beware] Microsoft found a malicious html file on Kobe Bryant wallpaper  (Read 220 times)
cryptoaddictchie (OP)
Legendary
*
Online Online

Activity: 2086
Merit: 1317


CoinPoker.com


View Profile
February 01, 2020, 06:23:21 AM
 #1

Indeed the passing away of Kobe Bryant gained a lot of attention on the mass community. This tragic event is likely used by some hackers and cybercriminal to steal funds.The website hats been blocked already check out Microsoft defense over this matter.

Source

Quote
Microsoft Defender SmartScreen blocks the website hosting the coin miner. Microsoft Defender ATP detects the malicious HTML file as Trojan:HTML/Brocoiner.N!lib (SHA-256: 86031a7d35968a1ff1f20441afce6eee504cdb98c1fbee9a4708ad989a5f2269)

Reference:

Code:
https://twitter.com/MsftSecIntel/status/1223032390555033600

LTU_btc
Legendary
*
Offline Offline

Activity: 3066
Merit: 1337


Slava Ukraini!


View Profile WWW
February 01, 2020, 11:35:39 PM
 #2

Well, this bastards have no moral. Using death of famous and people beloved personality for personal gains is very cynical. But it's nothing surprising that such people exist. Just look how news media are making money from Kobe Bryant death...
But as I understand, this thing isn't stealing funds. It's coin miner script which use CPU resources to mine coins. It's not most malicious thing. It's not very popular thing now, as it was year or two ago, but it's still good to use addons which block these scripts.

rhomelmabini
Hero Member
*****
Offline Offline

Activity: 2002
Merit: 578


View Profile
February 02, 2020, 02:03:09 AM
 #3

They really take those opportunities where they can spot vulnerability even just being sympathetic to someone else, never had an idea that this scheme may come up. By the way cryptoaddicthie, you don't have to "code" that post from Twitter as it doesn't directly go onto the malicious html file as well as the post from Microsoft.
joniboini
Legendary
*
Offline Offline

Activity: 2198
Merit: 1792



View Profile WWW
February 02, 2020, 05:30:21 AM
 #4

Looks like the image has a javascript script that will run when a user loads it(?). Using a no script plugin or disabling javascript might help them avoid this attack if they don't use SmartScreen. I wonder who they will end up on this image in the first place.

███████████████████████████
███████▄████████████▄██████
████████▄████████▄████████
███▀█████▀▄███▄▀█████▀███
█████▀█▀▄██▀▀▀██▄▀█▀█████
███████▄███████████▄███████
███████████████████████████
███████▀███████████▀███████
████▄██▄▀██▄▄▄██▀▄██▄████
████▄████▄▀███▀▄████▄████
██▄███▀▀█▀██████▀█▀███▄███
██▀█▀████████████████▀█▀███
███████████████████████████
.
.Duelbits.
..........UNLEASH..........
THE ULTIMATE
GAMING EXPERIENCE
DUELBITS
FANTASY
SPORTS
████▄▄█████▄▄
░▄████
███████████▄
▐███
███████████████▄
███
████████████████
███
████████████████▌
███
██████████████████
████████████████▀▀▀
███████████████▌
███████████████▌
████████████████
████████████████
████████████████
████▀▀███████▀▀
.
▬▬
VS
▬▬
████▄▄▄█████▄▄▄
░▄████████████████▄
▐██████████████████▄
████████████████████
████████████████████▌
█████████████████████
███████████████████
███████████████▌
███████████████▌
████████████████
████████████████
████████████████
████▀▀███████▀▀
/// PLAY FOR  FREE  ///
WIN FOR REAL
..PLAY NOW..
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!