FAKE Zoom Taxes MALWARE

Name: FAKE Zoom Taxes MALWARE
Uploaded: 2026-04-27
Duration: 15 min 52 s
Channel: John Hammond
Description: The video analyzes a phishing lure that uses a fake Zoom document and IRS theme to deliver an obfuscated JScript file. It shows how to deobfuscate the script with DE4JS, WebCrack and Humanify, then walks through its behavior, including UAC elevation, disabling SmartScreen and installing ScreenConnect for remote access.

John Hammond · 16 min

The video analyzes a phishing lure that uses a fake Zoom document and IRS theme to deliver an obfuscated JScript file. It shows how to deobfuscate the script with DE4JS, WebCrack and Humanify, then walks through its behavior, including UAC elevation, disabling SmartScreen and installing ScreenConnect for remote access.