« previous next »
Pages: [1]   Go Down

Author Topic: Script Snh-gen trj  (Read 1454 times)

0 Members and 1 Guest are viewing this topic.

Offline Парфенов

  • Newbie
  • *
  • Posts: 2
Script Snh-gen trj
« on: July 15, 2020, 03:46:03 PM »
Hello!
When I open Microsoft office file from desktop, Avast shows alert like in attachment.
When I open same file from any other place nothing happens.
Maintained full check - no viruses.
It started yesterday.
Logged

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: Script Snh-gen trj
« Reply #1 on: July 17, 2020, 12:08:29 AM »
Hello Парфенов,

Consider this malcode detection also in the light of this warning:
Trojan/Win32.Wacatac (MS) a.k.a. Script Snh-gen trj (avast) is being abused in spyware attacks by APT groups,
read CISA's TLP White Report: https://us-cert.cisa.gov/ncas/analysis-reports/ar20-198a on SOREFANG attacks  :D
against SSL VPN servers. (Report was issued yesterday - 16-7-2020)

polonus (volunteer 3rd party cold recon website security-analyst and website error-hunter)
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »