@Gulfie mastodon.social being garbage as usual
@ChlorideCull they're not even trying make it look real ??
@ChlorideCull it installs a fake chrome, trying to figure out what all it does, but it definitely creates an exe that appears to be a Chrome Updater tool in the startup folder in windows, requires a 64 bit installation to run
@clarjon1 payload is at pixeldrain dot com slash api/file/zhpmb1B9?download
@clarjon1 boringly it seems like it just drops a binary for https://peer2profit.com/ and hides it as well as it can
@ChlorideCull oooh i wonder which wallet account it tries to dump the payments into
@clarjon1 annoyingly all the passwords on dehashed are garbage simple and not correct
@ChlorideCull yikes