Lots of JS/Kryptik.BPH on many clients observed today

[Novacom 0]

High number of JS/Kryptik.BPH reported by EMSC this morning on multiple clients Endpoints

They all point to .js files (a few variant have been analysed)

Virus total say all files are clean (by sha1 hash) and by URL scan

 

ESET Malware detected : (station's name) : JS/Kryptik.BPH

An Event Log notification has occurred with the following parameters:
Threat type: trojan
Threat name: JS/Kryptik.BPH
URI : https://acdn.adnxs.com/strikeforce/(added by OP)script.js
Computer name: (station's name)
Logged user: (station's name)\(user)

Time of occurrence: 4/8/20, 9:22:07 AM EDT
Scanner: Script scanner
Action performed: blocked

 

Any confirmation on this ? 

 

[Marcos 3,983]

Please refer to https://forum.eset.com/topic/23196-multiple-computers-reporting-jskryptik-bph-but-completion-dates-in-the-past/

To prevent multiple topics on the subject,we'll draw this one to a close.