Warning! Do not open any files sent by users

[SocialTuber]

I would be worried about that in general, having that information in your notes is a big security risk😅

[bravocapitan]

Sounds like swapd is going to need its own virus scanner because now y’all got me paranoid can’t even trust a .txt file

[SXI]

Anti Virus can not detect most basic malware that is crypted let alone advanced tools

[Forest]

@SXI

There are .txt droppers where you can attach back doors to .txt files and they are FUD (fully undetectable to antivirus)

Interesting claim but not accurate. A .txt dropper is not a true plain text file, but a disguised executable (.exe). It is possible to attach back doors to such files, but they are not FUD. Antivirus software can detect and block such files based on their behavior, signature, or heuristic analysis. Therefore, one should not trust any file that claims to be a .txt file without verifying its extension.

[SXI]

There really is no way to protect against malware. Your best shot is using IOS because Mac malware is sold on the exploit forums for 6 figures. Most hackers don’t have access to that level of tool.

[SXI]

Anything crypted can be FUD lol

[Forest]

@SXI

There really is no way to protect against malware. Your best shot is using IOS because Mac malware is sold on the exploit forums for 6 figures. Most hackers don’t have access to that level of tool.

You clearly have no idea what you are talking about.

[SXI]

Show me your source?

[Forest]

Swapd should allow .txt file. Moreover, when you upload any file on Swapd, it verifies the extension first. You cannot upload any .exe files in disguise.

[Allii]

I got the email but didn’t get it in the inbox I guess he mass send to everyone. Prompt action taken by swapd.

[SXI]

I’d be more then willing to provide a demonstration

[Rayman]

@SXI

If you downloaded this I would recommend you check these folders and also Google “How to remove a RAT, Keylogger, Stealer”

@sxi so just this would do?

Or Would a wipe all data, pc reset is needed?

[SXI]

No, you don’t have to do all of that.

[smmv]

I was having time of my life when I read about 100 clients haha

[SXI]

Creating a .lnk dropper file with your payload the file mimics the following formats: folders, .zip, .jpg, .avi, .png, .txt, .mp3.
The final file when issued is FUD(0-2/26) is guaranteed to bypass WD, Smartscreen. On startup the file DOWNLOAD and decoy file, if needed.

-a beginner hacking forum service

[Rayman]

@SXI

A common misconception is that if you’re on IOS you are safe. Utilizing Java script coded malware you can easily infect IOS. These xcel droppers are only something people use to drop their virus into so that it doesn’t say .exe (no one will open that).

@SXI what steps do you recommend for iPhone/iOS/MacOS users then? Who opened or download the file in their phones etc?

[sirmaw]

@SXI was just giving an example, you’re safe if you’re on iPhone/iOS/MacOS, from what we know the virus didn’t have a coded malware to penetrate through OS.

[mediarush]

You won’t be infected on IOS

[Rayman]

@sirmaw

was just giving an example, you’re safe if you’re on iPhone/iOS/MacOS, from what we know the virus didn’t have a coded malware to penetrate through OS.

Okay I understand and @sxi like you said, checked the AppData folder and found 1 file in Local folder to be suspicious, which I sent you a PM about.

Currently, searching “to remove, RAT, Keylogger, stealer etc”

Won’t be wiping out my pc as I’ve photos and videos that I need and can’t wipe all data.

[Santan]

ok finished with dinner

figured i’d leave my final thoughts on how to secure yourself and reduce the chances of being infected in the future.

1. Make backups regularly of your machine, so in the case of having to wipe your PC you can recover your photos/files. (can do this with windows, or even just saving things to the cloud or a USB drive)
2. Having an AntiVirus always helps. malwarebytes/kaspersky… but remember, a competent hacker will have the malware encrypted and will bypass these antiviruses at first glance.
3. Get a password manager. Chrome saves your sensitive information in plaintext and any malware will instantly grab all your passwords, cookies and more. Get a password manager like dashlane, only login during use and disconnect when logged into said website. (or just write them down in a book or something)
4. Get a 2FA device such as a yubikey, or even authy on your iphone. (don’t use a 2FA software like authy on your computer, as a compromised computer means a compromised 2fa tool)
5. don’t download things unless its a program from an official website that you verified, its opensource and you know how to check the code. someone needs to show you a pdf/spread sheet? have them send you a non password protected google sheet link. IF YOU HAVE TO DOWNLOAD SOMETHING, use a virtual machine… either vmware or just load up aws/vultr and host a $0.02/hour server while you look through the file.

and most of all, just slow down… people get hacked because they instantly click something, the idea of securing a client, or getting paid in some sort of way will make you lose focus. slow down, think about things and make sure you protect yourself.

TLDR.
Backup Machine Regularly, Get a password manager, Physical 2FA device, and If you MUST download something, do it on a virtual machine.

I’d also recommend to just watch/look at cybersec/malware hunter blogs or youtube videos every now and then, familiarize yourself with common attack vectors (.doc/pdf/lnk spreaders… phishing… fake programs… sim swaps, HVNC) if you understand how most of the common malware works and what they do/how they ‘FUD’ them it really helps you keep your wits about you