"Cutting-edge photo editor for Mac & PC" TROJAN

Popup - https://ohury.tech/

Registered via Hostinger, UAB on December 19, 2021 (updated December 20, 2021) - Whois ohury.tech

VirusTotal - VirusTotal - File - 4ccf198ea3f84b99491cd1e00dec51d11fde571de195c210006f274381f5433a

Associated IP Address - 193.106.175.48 (taken from https://erlokelieinn.xyz)

Program contains several trojans, including Sabsik, [Wacatac](Wacatac Trojan - Malware removal instructions (updated) & InvalidSig. The download link for the program literally came from the Discord app, likely implying it would be used for the purpose of tokening, and the popup is a direct rip-off of AI Photo Editor: AI Image Editing Software | Skylum

1 Like