Malwarebytes blocks connections by Wemod to possible trojan and phising website

WeMod App Support
1

Why is Wemod connecting to malware sites?

When i use a trainer i notest wemod is connecting to possible skumy websites in the background.
Luckely these get blocked before doing harm but still maybe someone can clear this out?

posting the log from malwarebytes below

Malwarebytes

-Logboekdetails-
Datum beveiligingsgebeurtenis: 01-11-2024
Tijd beveiligingsgebeurtenis: 02:50
Logbestand: b51128e4-97f3-11ef-874c-00d8612dd5fb.json

-Details van geblokkeerde website-
Kwaadaardige website: 3
, C:\Users\spank\AppData\Local\WeMod\app-9.10.7\WeMod.exe, Geblokkeerd, -1, -1, 0.0.0, ,

-Websitegegevens-
Categorie: Non Specified
Domein: h7mzk9dlb.puzztake.com
IP-adres: 162.243.168.73
Poort: 443
Type: Outgoing
Bestand: C:\Users\spank\AppData\Local\WeMod\app-9.10.7\WeMod.exe,

-Details from blocked website-
, C:\Users\spank\AppData\Local\WeMod\app-9.10.7\WeMod.exe, Geblokkeerd, -1, -1, 0.0.0, ,

-Websitegegevens-
Categorie: Phishing
Domein: r.secprf2.com
IP-adres: 18.202.86.139
Poort: 443
Type: Uitgaand
Bestand: C:\Users\spank\AppData\Local\WeMod\app-9.10.7\WeMod.exe

, C:\Users\spank\AppData\Local\WeMod\app-9.10.7\WeMod.exe, Geblokkeerd, -1, -1, 0.0.0, ,

-Websitegegevens-
Categorie: Trojaans paard
Domein: hob9zeclb.puzztake.com
IP-adres: 157.230.91.126
Poort: 443
Type: Uitgaand
Bestand: C:\Users\spank\AppData\Local\WeMod\app-9.10.7\WeMod.exe

Is there someting i can do to prevent this?

2

Yeah i have the same issue aswell
i don’t think much of it while gaming but i’m not exactly sure how to get rid of it from doing all that, it can randomize from Malware, Trojan, Phishing, and all that
i’d take it as a false positive but i haven’t got much info further on what it is.

3

It’s been answered many (many many many) times that they are false positives. @Ravenfyer had a really detailed reply on why it happens in this post (which I found using the search function for this site):

1 Like