Watch out for the "ONTHERIGHTSTUF.BIZ" virus

There is a sneaky virus called ONTHERIGHTSTUF.BIZ that will change the icon of the folder it's in that will say TDS and will change the thumbnail on some of the files in that folder in Linux. If you search for ONTHERIGHTSTUF.BIZ it will try to install an extension in your browser. Make sure you decline to install any extension that pops up when you search for ONTHERIGHTSTUF.BIZ to see what it is. ClamTK couldn't detect it but I searched for it manually and I deleted the infected file to get rid of it. This happened running MX Linux so who knows what will happen with other operating systems if you get infected with that virus. 

Searches only comes back to your post.

Searches only comes back to your post.

DuckDuckGo shows it otherwise.

Which search engine did you use?

Edited by Crippled2013, 10 February 2024 - 11:13 AM.

Searches only comes back to your post.

DuckDuckGo shows it otherwise.
Which search engine did you use?

This is what I get. I won't click on it to go further because I don't want to get reinfected again.

Edited by Crippled2013, 10 February 2024 - 03:14 PM.

No second hand or third hand or more hands information here. Just first hand information on it. I guess fireeye or mandiant don't know about because of how new it is. By the way, thank you for posting about fireeye and mandiant because I never heard about those two.

No Data Found

Looks like the domain name has been taken offline, or has never existed.  Maybe the bad actors have attempted to create a google search buzz from nothing.

I used Google and still get the same result.....only your post.

And your screen shot shows it couldn't be found.

Edited by JohnnyBeeGood, 10 February 2024 - 05:27 PM.

DuckDuckGo shows it otherwise.

Not on my computer. Just your post.

And when I use quotation marks, only one link, Bleeping Computer.

I found bogus removal guides for Obisthatitgi.biz, Testraightphe.biz, Nthisareai.biz on Yandex. ONTHERIGHTSTUF.BIZ appears to be yet another one similar to these but no articles have been written for it yet.