Detected #SmartApeSG infection chain

Compromised site
-->
www[.]ski-snowboardvancouver[.]ca/d.js (injected)
-->
gralino[.]top/realm/throttle-template.php
-->
gralino[.]top/realm/role-asset.js (clickfix)
-->
vexnali[.]com/cc/info (HTA)

Detected #SmartApeSG infection chain

Compromised site
-->
cpajoliette[.]com/q (injected)
-->
gralino[.]top/realm/throttle-template.php
-->
gralino[.]top/realm/role-asset.js (clickfix)
-->
vexnali[.]com/cc/info (HTA)
-->
vexnali[.]com/ss/look (ZIP)

ec7350861106cdb07ea23d9cb39b45221d5979979d4c4727d3e41e866a0778e2 look

Detected #SmartApeSG infection chain

Compromised site
-->
www[.]ski-snowboardvancouver[.]ca/d.js (injected)
-->
gralino[.]top/realm/audit-worker.js
-->
gralino[.]top/realm/throttle-template.php
-->
gralino[.]top/realm/role-asset.js (clickfix)
-->
vexnali[.]com/cc/info (HTA)
-->
vexnali[.]com/ss/look (ZIP)

ec7350861106cdb07ea23d9cb39b45221d5979979d4c4727d3e41e866a0778e2 look

Detected #SmartApeSG infection chain

Compromised site
-->
cpajoliette[.]com/q (injected)
-->
gralino[.]top/realm/throttle-template.php
-->
gralino[.]top/realm/role-asset.js (clickfix)
-->
vexnali[.]com/cc/info (HTA)

Detected #SmartApeSG infection chain

Compromised site
-->
www[.]ski-snowboardvancouver[.]ca/d.js (injected)
-->
munqera[.]top/settings/tenant-core.php
-->
munqera[.]top/settings/login-storage.js (clickfix)

Detected #SmartApeSG infection chain

Compromised site
-->
www[.]ski-snowboardvancouver[.]ca/d.js (injected)
-->
munqera[.]top/settings/tenant-core.php
-->
munqera[.]top/settings/login-storage.js (clickfix)
-->
qeravito[.]com/hj/call (HTA)

Detected #SmartApeSG infection chain

Compromised site
-->
cpajoliette[.]com/q (injected)
-->
munqera[.]top/settings/tenant-core.php
-->
munqera[.]top/settings/login-storage.js (clickfix)
-->
qeravito[.]com/hj/call (HTA)

Detected #SmartApeSG infection chain

Compromised site
-->
www[.]ski-snowboardvancouver[.]ca/d.js (injected)
-->
munqera[.]top/settings/permission-server.js
-->
munqera[.]top/settings/tenant-core.php
-->
munqera[.]top/settings/login-storage.js (clickfix)
-->
qeravito[.]com/hj/call (HTA)

Detected #SmartApeSG infection chain

Compromised site
-->
vorqeni[.]top/settings/tenant-core.php
-->
vorqeni[.]top/settings/login-storage.js (clickfix)
-->
qeravito[.]com/hj/call (HTA)