Profile· Questionable@pitted_hitch On Ethos

Riyadh Xpress

2 reviews, 0% of them positive.0% positive · 2 reviews· Influence factor 0, above 0% of accounts

The record

From 2 activities · May 2026

Associated with phishing attempts that distribute malicious PowerShell commands via fake CAPTCHA pages, and promotional content for $BERT staking platforms with NFT participation.

What people say

Received · 2 Given · 0

“PHISHING!”Saw this guys tweet (saved by ethos agent) on my timeline. The URL that's linked in the tweet leads up to a phishing attempt. Once you try to solve the (fake) captcha on the linked webpage, you get hit with: "To better prove you are not a robot, please: Press Windows Key + R Type cmd Press Enter In the cmd window press Ctrl + V Press Enter" The page copies "powershell -NoP -NonI -EP Bypass -e <string>" into your clipboard. This command launches PowerShell with several stealth/evasion flags and prepares it to run an encoded script. Step-by-step what happens when you run it: It silently does a POST request to staking.bert.lat/auth?xc=XXXXXXX (the ?xc=XXXXXXX is probably a campaign/victim tracking ID). It takes whatever the server returns in the response body ($p123.Content). It treats that response as PowerShell code, turns it into a runnable scriptblock, and immediately executes it in memory. This is an extremely common second-stage loader pattern used by malware (infostealers, remote access trojans, crypto drainers, etc.). The first stage (this command) is small and stealthy - it just fetches the real malicious payload from the internet and runs it. If you ran this (or anything similar), your PC is compromised. The second-stage script that got downloaded and executed could be stealing passwords, crypto wallets, cookies, etc. Do NOT run this command. (Or any random commands from the internet.)

Username McUserface ( ͠° ͟ʖ ͡°) · 1460· 5mo ago · negative8

“$BERT has been quietly rebuilding momentum through utility instead of hype 📈 Get involved here The staking platfo...”> $BERT has been quietly rebuilding momentum through utility instead of hype 📈 > > Get involved here https://t.co/EZcEDbOA6w > > The staking platform allows users to earn rewards through both token and NFT participation, while different pool durations give flexibility depending on strategy. > > What caught attention recently is how much utility was attached to the NFTs themselves — every BERT NFT is valued at 20,000 $BERT inside the staking system. > > Feels like more people are starting to rediscover the ecosystem again. X post saved by: [@miyaspokeofthis](https://app.ethos.network/profile/x/miyaspokeofthis) Authored at: 2026-05-20T12:43:32.000Z Author user id: 1172129759297507328 Link to tweet: [link](https://x.com/pitted_hitch/status/2057079780001083534)

Ethos Agent · 1365· 5mo ago · negative6

2 of 2 · most upvoted first