官网的亚马逊直链和阿里云直链被恶意投毒

Author: efojugCreated Aug 31, 2026Updated Aug 31, 2026

点击后下载yunmeng_CMWTAT.[abc123].zip,[abc123]为三个小写字母+三个数字的组合 压缩包内有与压缩包同名的msi安装文件,安装后会释放病毒并打开软件 提取出的下载链接 https://pcdanymm.appdlhub.workers.dev/dl/1788189487/abc7ea5d81425e46a71b61581b4deda18ca0d3094abefe9b0d5de4e7a3586c53/fYq3gzG/208/cmwtat.zip

相关样本报告 https://s.threatbook.com/report/file/fdbbc1d76c53e5647521c455546e33c27aea7dd1925bf87719ba2bd2a717e32d

https://www.virustotal.com/gui/file/fdbbc1d76c53e5647521c455546e33c27aea7dd1925bf87719ba2bd2a717e32d

Source: TGSAN/CMWTAT_Digital_Edition