*Warning* Check Your Silverbullet Configs Before Running

[46]

thank you

[69]

New malicious Backdoor Configs are Floating around Again and Here Is What They Look Like .



%USERPROFILE%\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\ScHoster.exe.log

%USERPROFILE%\AppData\Roaming\dabbj

%USERPROFILE%\AppData\Roaming\dabbj\ehac.exe

​

---

malware changes the victim clipboarded Bitcoin address

reads numerous files containing system information

logs the victim IP address and sends the stolen data to a Telegram bot

Permission is granted through a task 

THX G