Some kind of #obfuscated #JavaScript #exploit targetting G2A users (lol)
PDF linked on PasteBin directs users to install a #Tampermonkey script.
hxxps://textbin.net/raw/awsj07eiit
#Malware
Adam ♿ /
npub1e8…a84us
2024-04-09 09:32:37
Author Public Key
npub1e8pt32dalgakrznwda5473lj84ufz6y3qf06zy9drggd95uxqcvs9a84usPublished at
2024-04-09 09:32:37Event JSON
{
"id": "4c86a612f9e0d633bca4cc15a5380070c13d5474c5ce3f1bbe5d5031966f0273",
"pubkey": "c9c2b8a9bdfa3b618a6e6f695f47f23d78916891025fa110ad1a10d2d3860619",
"created_at": 1712655157,
"kind": 1,
"tags": [
[
"t",
"obfuscated"
],
[
"t",
"javascript"
],
[
"t",
"exploit"
],
[
"t",
"tampermonkey"
],
[
"t",
"malware"
],
[
"proxy",
"https://aus.social/users/voltagex/statuses/112240568388029597",
"activitypub"
]
],
"content": "Some kind of #obfuscated #JavaScript #exploit targetting G2A users (lol) \n\nPDF linked on PasteBin directs users to install a #Tampermonkey script.\n\nhxxps://textbin.net/raw/awsj07eiit\n\n#Malware",
"sig": "054e11eda6cc44da09e70da41d0af8d3b98ce14c77ee58a386425d7f13f68aa7fcddbd9df1f0460fc724096f80b2f30367195aa795e1d8cc89cba08e8a6646aa"
}