User gloriousbach spreading malware through PM

Title is pretty much explanatory. I think I'm not alone who got PM's from him.


First of all url is broken(404). But when you open website it drops file from "http://www.34wp.org/jquery.js" which is malware domain, based on VirusTotal & this tweet https://twitter.com/gwillem/status/1035540793547796480?lang=en



So be careful guys
@Zwielicht @BassTrackerBoats @MisterF

Could be he's using a nulled theme infected with malware..
@gloriousbach, care to comment?

Thanks for raising. We'll handle it. As always, be weary of opening any domains from randomers and do your own due diligence. You can scan files/URL's here.

If you think you're already infected, consider raising your own thread and someone will be able to help! (Too many possibilities and options to list them all here).