{"id":18030,"date":"2021-12-21T19:29:00","date_gmt":"2021-12-21T18:29:00","guid":{"rendered":"https:\/\/ekiwi-blog.de\/?p=18030"},"modified":"2021-12-21T19:29:00","modified_gmt":"2021-12-21T18:29:00","slug":"parsec-download-scam","status":"publish","type":"post","link":"https:\/\/ekiwi-blog.de\/en\/18030\/parsec-download-scam\/","title":{"rendered":"Parsec Download Scam"},"content":{"rendered":"<p>Currrently a new form of Scam is sent in the name of &#8220;Parsec&#8221;.<\/p>\n<p><!--more--><\/p>\n<p>In the last month, it has become very common that YouTuber&#8217;s are getting targeted with scam. Currently, mails in the name of &#8220;Parsec&#8221; are going around. You get an email, which concludes that you may become an affiliate. If you respond, you will get an offer mail like that:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_1.jpg\" alt=\"\" width=\"665\" height=\"506\" class=\"aligncenter size-full wp-image-18031\" srcset=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_1.jpg 665w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_1-300x228.jpg 300w\" sizes=\"auto, (max-width: 665px) 100vw, 665px\" \/><\/p>\n<p>The amount of money is very high, which should make us suspicious immediately. The mail contains a download link, with some instructions how to start the software. The software download is an .exe file.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_2.jpg\" alt=\"\" width=\"841\" height=\"310\" class=\"aligncenter size-full wp-image-18033\" srcset=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_2.jpg 841w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_2-300x111.jpg 300w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_2-768x283.jpg 768w\" sizes=\"auto, (max-width: 841px) 100vw, 841px\" \/><\/p>\n<p>If you unzip the file and start it in Windows, your system will most likely be compromised. The main problem is, that most antivirus solutions do not yet recognize the software. During my first test, only one of the scanners from VirusTotal.com found anything.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_3.jpg\" alt=\"\" width=\"743\" height=\"487\" class=\"aligncenter size-full wp-image-18035\" srcset=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_3.jpg 743w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_3-300x197.jpg 300w\" sizes=\"auto, (max-width: 743px) 100vw, 743px\" \/><\/p>\n<h2>Update: one day later<\/h2>\n<p>Now three vendors flag the file as malicious.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_4.jpg\" alt=\"\" width=\"784\" height=\"445\" class=\"aligncenter size-full wp-image-18037\" srcset=\"https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_4.jpg 784w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_4-300x170.jpg 300w, https:\/\/ekiwi-blog.de\/wp-content\/uploads\/2021\/12\/parsec_4-768x436.jpg 768w\" sizes=\"auto, (max-width: 784px) 100vw, 784px\" \/><\/p>","protected":false},"excerpt":{"rendered":"<p>Currrently a new form of Scam is sent in the name of &#8220;Parsec&#8221;.<\/p>\n","protected":false},"author":1,"featured_media":13596,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1552],"tags":[1590,1602,1591],"class_list":["post-18030","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet-en","tag-scam","tag-security-en","tag-virus-en"],"_links":{"self":[{"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/posts\/18030","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/comments?post=18030"}],"version-history":[{"count":0,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/posts\/18030\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/media\/13596"}],"wp:attachment":[{"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/media?parent=18030"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/categories?post=18030"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ekiwi-blog.de\/en\/wp-json\/wp\/v2\/tags?post=18030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}