dafthack/MFASweep

This script contains malicious content and has been blocked by your antivirus software.

Opened this issue · 2 comments

Hey!

Loving the script, but I have started getting the error below when trying to run it.
I suspect Windows Defender doesn't like the base64 encoded EWS DLL binary that is inline.

image

Has anyone else seen this?

Suggestions for verifying the script is still safe?

image

This is what Defender recognised it as.

Trojan:PowerShell/Mailsniper.B

@dafthack I'm seeing this as well can you explain more why this would be expected?