"Get 3 extra monts free" TROJAN

Link (Dangerous): VPN Special Offer | ExpressVPN (myexpersvpn.com)

Registered via NameCheap on May 14, 2022 - Whois myexpersvpn.com

image

VirusTotal - VirusTotal - File - 2e323a890cc559c8c7bb97b9de21fa7eaac6c1e86773db407fccda64c6987546

Any.Run - Expressvpn_5.10.0.zip (MD5: BFEB52E90A98DD83EB31CEBAED2FD981) - Interactive analysis - ANY.RUN

image

Program is a ripoff of ExpressVPN containing an archive bomb and the Kryptik trojan.

Associated Facebook Account - Nação Tradução | Facebook