28-08-2026
The Video That Plays You: Fake MP4 File Carries Malicious Payload
https://censys.com/blog/fake-mp4-file-carries-malicious-payload/
Report completeness: High
Threats:
Netsupportmanager_rat
Clickfix_technique
Industry:
Telco
Geo:
Russian, Los angeles, Switzerland
TTPs:
Tactics: 3
Technics: 0
ChatGPT TTPs:
do not use without manual checkT1027, T1027.002, T1027.004, T1027.009, T1027.013, T1036, T1036.005, T1059.001, T1070, T1071.001, have more...
IOCs:
Domain: 30
Hash: 40
Url: 14
IP: 13
File: 19
Soft:
Chrome, Windows Defender
Algorithms:
sha256, xor, base64
Win API:
ARC, decompress, BIn
Languages:
powershell