"Your download is ready!" TROJAN

Link (Dangerous): Media Player Update (saveifmad.com)

Registered by Danesco Trading Ltd. on March 13, 2022 (Updated March 21, 2022) - Whois saveifmad.com

VirusTotal - VirusTotal - File - f3c62db7cf174e1cb659c4d33b06da976c117b50361e846951e99d0dd09cee00

I am unable to perform an Any.Run due to network errors while downloading.

Popup will automatically download a dangerous Iso file containing the AdSearch trojan. The company behind this, Danesco Trading LTD, also operates the porn website Aloha Tube - Free Sex Videos & streaming Porn Movies

Associated Phone Number (Cyprus) - +357 95 713635

image

Associated Physical Address - 157, Archbishop Makarios Ave, office 1, Limassol, Cyprus, 3026

1 Like