Forum
New scam?
Created 15th November 2012 @ 15:31
Add A Reply Pages: 1 2 Next »
16:20 – [K] Ch3Vy: Omfg,my friend just got an unusual tyrants helm hearts,here is the method how to get some unusuals with glitch [link removed]share-screen.org/124124115-jpeg/
DO NOT ENTER LINK
is this a new scam? He went offline immediately after, and it was Ch3vy’s real account
Last edited by Wiper,
Somone trying to get you to click a link. What part of it is new?
What’s the point of these threads? If you aren’t an utter retard you will figure out it’s a scam.
Quoted from Le meme arrows
What’s the point of these threads? If you aren’t an utter retard you will figure out it’s a scam.
Harsh, but true.
Quoted from Trane
[…]
Harsh, but true.
I was originally going to use “If you aren’t CommanderX…”
Well, about 2 month random impeseronator was using my name, avatar and all the other shit.He was adding my friends and giving some “forum” link and was saying:”have u heard about this forum, there is thread about u”.And yeah some of friends opened the link and registered, after that they lost every single shit, like:items, achivments and stats.
Yeah it’s kinda “NEW SCAM” and it’s very retarded :(
I go googling anything someone pastes me, and I found this! http://pastie.org/5379248
understands the irony of posting links in a thread about bad links
Last edited by bean,
Old scam, they’ve been doing this for months.
The site tries to run a javascript on your pc of some kind.
Last edited by crouton,
Well I was originally the retard who opened the link. And yes, it’s a scam.
Quoted from Le meme arrows
What’s the point of these threads? If you aren’t an utter retard you will figure out it’s a scam.
It’s always nice to let people know, you never know when a new member to the community who isn’t very experienced using Steam or the dangers/risks of internet scamming joins and reads it.
Thank you for reporting it.
It’s been floating around unusual traders for a while, some guy says “A friend of mine has an offer on your unusual, here’s what he has for trade and the offer is circled” which is why it ends in jpg.
Quoted from FUN POLICE RUINS TF2
It’s been floating around unusual traders for a while, some guy says “A friend of mine has an offer on your unusual, here’s what he has for trade and the offer is circled” which is why it ends in jpg.
^ Exactly
So I got bored…
Affected page: http: //www .share-screen.org/124124115-jpeg/
First I looked up the whois data, didn’t get lucky.
The html loads some (obfuscated) javascript which was very easy to unpack… Just some ads or w/e…
The interesting part is the Java.jar applet, I googled for ‘jar decompiler’ and got this. Source.
It has some shitty string obfuscation, all it does is download “http: //ge.tt/api/1/files/9DdTmjQ/3/blob?download.exe”, save in your temp directory and run it.
At this point, err, I fail to download that… So yeah if anyone can figure out how to dl that, would be nice.
EDIT: http://ge.tt/9DdTmjQ/v/0 <- file appears to have been removed :(
Last edited by Casual,
Add A Reply Pages: 1 2 Next »
content rss