Post #4287509

@hacksilon@infosec.exchange so I thought I did as I'd got it via a VirusTotal rescan of the URL, but I think the most recent hash I had was a few days old. They probably need to invoke incident response as they clearly got pwned.