AmarS
30. August 2021, 14:31
1
Domains used: High-Speed, Secure & Anonymous VPN Service | ExpressVPN (expresvpn.site)
A WhoIs lookup reveals the domain was registered in United States via Beget LLC on August 28, 2021 - Whois expresvpn.site
Download link: ExpressVPN.exe
VirusTotal: VirusTotal
1 Synes om
Jer123
30. August 2021, 16:14
2
The malware installer is hosted on the official discord servers. I reported it to them.
Also contacted the host and Expressvpn. The site for sure looks legit.
I saw this one coming. Thanks for reporting it. Site seems to be blocked by the hosting/registrar already.
Jer123
30. August 2021, 20:49
4
The hosting provider of the site has blocked the page.
Lurker
30. August 2021, 22:24
5
Is there really no way to report the malware to Discord?
Jer123
1. September 2021, 08:16
6