The "Hide.Me VPN" TROJAN SPREADS TO DISCORD!

Malware Discord
, , , ,
1

[color=#FF00]Link (Dangerous): http://hideme-vpn.tech/?promotion [/color]

Registered in the Russian Federation via Beget LLC on February 16, 2022 (Updated February 24, 2022) - Whois hideme-vpn.tech

image
image1242×1222 97.8 KB

VirusTotal - VirusTotal - File - 408370efbed53f8a1e3c02dce26ed9c46eba4aaefbfd775d4fd19816432f94ec

image

Any.Run - HideMe VPN.rar (MD5: F34B41BB16C89FCDC8D3CDB37B92FBFC) - Interactive analysis - ANY.RUN

image
image496×216 19 KB

Associated IP Address - 45.130.41.23

image
image859×395 40.6 KB

Program contains the Redline Tracker

2

I put a lot of cybercrime forums into Intelx.io and find stuff leaked from the Redline stealer. The guy who makes it has a Telegram contact for customer support - I just shitposted into it and got blocked, but we could scambait him if we like.