Detected #SmartApeSG infection chain
Compromised site
-->
mezcalpro[.]com/scq (injected)
-->
dreniko[.]top/private/admin-serializer.php
-->
dreniko[.]top/private/endpoint-build.js (clickfix)
-->
polnexas[.]com/jj/pop (HTA)
-->
polnexas[.]com/pp/june (ZIP)
573f5dc988e9e25ca3b133e928c0671583029fd048a709944f6c89624a1eeab5 june