Post

Another day, another phishing site protected by @cloudflare.social. This one is totally ripping through my kids’ school. Thanks CloudFlare, for the useless reply to my abuse report! Toxs[.]digital for the threat hunters

Alex Stamos

@stamos.org

29 Jan

Just don’t try to fetch it with curl or run it in a sandbox, CloudFlare will protect the malware authors from your evil bot!

Alex Stamos

@stamos.org

29 Jan

Here is the MSI it downloads: www.virustotal.com/gui/file/6f2...

virustotal.comVirusTotalVirusTotal

Alex Stamos

@stamos.org

The full URL shows up clean on VT, likely because they have Cloudflare's anti-bot protections turned on and it defeats all these security vendors fetching and analyzing, so they are only getting Cloudflare's Javascript and marking it clean.

29/1/26, 6:17 am1 repost12 likes

No replies yet.