OnionPoison: infected Tor Browser installer distributed through popular YouTube channel
SecureList
OCTOBER 4, 2022
In our case, a link to a malicious Tor installer was posted on a popular Chinese-language YouTube channel devoted to anonymity on the internet. Visual Studio 2003 – 7.10 In response to the POST request, the C2 server returns a blob containing an encrypted second stage payload. 2021-Sep-25 21:56:47.
Let's personalize your content