Announcement Attention: Avoid getting hacked

RogueOps

EGO Zealot
Joined
Mar 3, 2012
Messages
1,519
To all members, I am posting this here in hopes of saving a few accounts. This was also posted in the DoD:S division discussion, but I know not everyone goes to other divisional forums to read their every day threads. There is another hacking attempt going on like the boom in 2009.

Basically, someone on your friends list who has already fallen victim to this scam sends you a message in steam chat saying something along the lines of, "WTF dude?" or "Will you exchange this with me?" with an added link that looks like it's just an image, but in reality is a virus. Even if your anti-virus picks it up and blocks it, someone rather quickly tries to make an attempt to invade your computer. You may lose more than your steam account if you fall for this. Please be careful everybody.

Anyone who comes face to face with this will be best off blocking their hacked friend from steam and never clicking on any random links like that. Happy gaming.
 
Damn..... I got like 3 of these messages earlier. I ignored the messages because I never open links through Steam. Glad I didn't! It sucks because a few of those friends are/were eGO members too...
 
People who play CSGO, accounts add you and ask you to trade a knife and send you a link. The link looks like a Steam community like but it has miss-spellings in the link
 
I click all the links cause im so good

3a5.jpg
 
I didn't think this was still a thing. Well, use common sense when people send you links and may the odds be forever in your favor
 
This has been happening in Teamspeak as well, where users will join, go to a room, and spam the link. Be aware there as well.
 
Mentioned this in the other thread already, but if you do fall prey and click the link or go to it, even if you think you're safe, as Rogue mentioned, it's best to change your password(s) just as a safety precaution and, if you haven't already, run a virus scan - best to be safe then sorry.
 
Last edited:
It's sad that people are like this.

Thank you for spreading awareness Rogue.

+1
 
Gotten like 6 of these messages already. I copy and pasted it into an incognito page. It doesn't even paste as a link lmao. It types out some kind of M4A4 skin.
 
Guys, this really is a serious issue. These people really will steal your information. In CS:GO matchmaking this man was trying to "sell his knife" and he would add people on steam, being the curious bug I am, I added him. He sent me a link and it didn't look right. Immediately, I removed him and exited the server. I swear people will stop at nothing, but please be aware that they will try to get you in trading. Play it safe guys, and go ahead and heed RDK's advice.
 
The link is usually masked as an 'image'. (myknife.scr, etc)

It downloads an executable with the .scr extension, which on windows is a screensaver extension, but runs like an executable.(exe)

A majority of the time these are steam stealers, which run while your steam in open, and it auto-sends trade offers for your entire inventory to bot accounts the sender has setup, which then in turns sends the items to his account.

I've decompiled one or two of these and they seem to delete themselves after execution, which help them keep the build FUD to anti-viruses ( fully undetected) . If you ran one of these and it force logged your steam and made you relog, then they have your User/Pass for your steam as well.

However, these .scrs can in fact be RATs or keyloggers, which enable the host to continuously keep you infected and steal much more than your steam inventory and login info. If you think you've fallen victim to one of these, don't hesitate to drop me a PM and I can help you remove it or post on many of the whitehat forums out there.
 
Last edited:

Similar threads

Back
Top