Further cleanup or a notice
anadius opened this issue · 0 comments
anadius commented
This malware also infects Discord (or at least tries to, currently the page it downloads infected JS from returns error 404) and two crypto wallets (Atomic and Exodus).
In the decrypted code from astor.py look at lines 798-816 and 1791-1834.
Would be nice to at least inform the user about it if they are installed.