Bioxan7 is sending virus by md

[Nickax]

The user bioxan 7 is sending virus by md saying that he has had a problem with any of your products, if he sends you something you do not download it!

 

[Steampunk]

Wow what a low life that they are sending viruses to honest resource creators.

 

[yiukia]

Thanks for the warning!

 

[Donut]

I was dumb enough to open it[DOUBLEPOST=1575734049][/DOUBLEPOST]They got my discord token, reinstalling my PC rn to be sure they didnt/cant take any of my files and just got my discord token

 

[Steampunk]

I was dumb enough to open it[DOUBLEPOST=1575734049][/DOUBLEPOST]They got my discord token, reinstalling my PC rn to be sure they didnt/cant take any of my files and just got my discord token

Change all your passwords fast they maybe trying to steal banking information as well.

 

[Donut]

Change all your passwords fast they maybe trying to steal banking information as well.

Yeah first thing I did haha

 

[Cold]

This deeply saddens me :/

 

[Donut]

Funny thing is, after he sent it I reported his to mc-market, who declined the report :tup:

 

[Tommy W]

I was dumb enough to open it[DOUBLEPOST=1575734049][/DOUBLEPOST]They got my discord token, reinstalling my PC rn to be sure they didnt/cant take any of my files and just got my discord token

Relog from discord, that will reset your token.[DOUBLEPOST=1575734703][/DOUBLEPOST]Wait, nvm, change your discord pass, otherwise they'll be able to use the token for 1 week.

 

[Donut]

Relog from discord, that will reset your token.[DOUBLEPOST=1575734703][/DOUBLEPOST]Wait, nvm, change your discord pass, otherwise they'll be able to use the token for 1 week.

I reset my password

 

[Tommy W]

Then your discord is fine.

I reset my password

[DOUBLEPOST=1575734803][/DOUBLEPOST]

The user bioxan 7 is sending virus by md saying that he has had a problem with any of your products, if he sends you something you do not download it!

Could you send it to me? I'll decompile and see what it steals.

 

[Donut]

Then your discord is fine.
[DOUBLEPOST=1575734803][/DOUBLEPOST]
Could you send it to me? I'll decompile and see what it steals.

Add me on Discord I shall send it Rowan#2019

 

[Tommy W]

Add me on Discord I shall send it Rowan#2019

Added.[DOUBLEPOST=1575734951][/DOUBLEPOST]LMFAOOOOOOOOOO

It's HDDCrypt ransomware.
http://tommyw.hasno.faith/i/GIckxJOt.png

 

[Macaw]

What a cruel, sad man. Bioxan7 are you good in the head?

 

[styx]

I hope MCM staff can be him already, he's just as worst as scammers.

 

[Nickax]

I am having problems reinstalling the PC I hope nothing happens

 

[MarkElf]

This makes me glad I was too lazy to even read the 'log' he provided. I usually read error messages and stuff even if people don't buy my resources to fix them before someone else complains but I was also aware that my latest version of ncp is very stable.

Did no one else notice him join today and ask for product support? That was the first thing I noticed and I assumed he was a ban evader so I reported him but the report was rejected an hour ago.

 

[Tommy W]

https://hybrid-analysis.com/sample/a037a6f966103c8c17884fa073d0f12e8363e9b67628e50eee81d86031b9b8d8
https://www.virustotal.com/gui/file...12e8363e9b67628e50eee81d86031b9b8d8/detection

Scan results.

 

[Donut]

I hope MCM staff can be him already, he's just as worst as scammers.

I dont think MCM care because they declined my report

 

[Tommy W]

the file content is so funny tho
http://tommyw.hasno.faith/i/FsFdsTDu.png

its the most obvious malware i've seen for a while