DeRedPanda Posted November 15, 2014 Share Posted November 15, 2014 (edited) This may be a little late, just wanted to post it for some people who perhaps didn't know. A recent exploit which seems to be from Windows 8.1 allows information like passwords, emails and other personal data to be stolen. Right now, the primary target of this is Steam users. If you have any friends that are sending this, http://imgur.com/i9YOCwG http://imgur.com/6qGH0e6 http://imgur.com/Wr7M3sN (censored usernames for privacy) , do not click on it! Please warn the friend that their account has been compromised and that they should switch their password. Check out the top comments here about this issue: Apparently it has been patched, but users should still switch their password if their account information has already been accessed. Edited November 15, 2014 by DeRedPanda 4 Quote Link to comment Share on other sites More sharing options...
Weeman Posted November 15, 2014 Share Posted November 15, 2014 So wait just clicking on the link steals your password or do you have to click on it and download something? Quote Link to comment Share on other sites More sharing options...
youthedog Posted November 15, 2014 Share Posted November 15, 2014 You have to download it and execute. Someone already posted this too. Quote Link to comment Share on other sites More sharing options...
DeRedPanda Posted November 15, 2014 Author Share Posted November 15, 2014 So wait just clicking on the link steals your password or do you have to click on it and download something? The exploit is a way to remotely access certain files through Windows. Right now, this exploit is being used to access Steam accounts. Through their Steam accounts, it sends messages using their accounts to all their friends looking to attempt to show a SS of an inventory item. If you click on the link, it pings to Russian servers which switch the file to an executable. Then you whole PC is full of viruses and malware. If you are having these types of messages sent through your account, switch your password which should stop it. If a friend sends it to you, tell them ro switch their password. TL:DR B4 patch for windows, passwords were taken without knowledge. Switch all passwords to fix it. Link tries to download an executable that fucks your whole pc up. Quote Link to comment Share on other sites More sharing options...
Short Posted November 15, 2014 Share Posted November 15, 2014 This seems like a non issue, it's not like a java exploit that auto runs the executable, this just downloads the .scr and you need to run it like anything else for anything to happen... Quote Link to comment Share on other sites More sharing options...
Shot Posted November 15, 2014 Share Posted November 15, 2014 This seems like a non issue, it's not like a java exploit that auto runs the executable, this just downloads the .scr and you need to run it like anything else for anything to happen... People can be stupid sometimes. Quote Link to comment Share on other sites More sharing options...
DeRedPanda Posted November 15, 2014 Author Share Posted November 15, 2014 (edited) This seems like a non issue, it's not like a java exploit that auto runs the executable, this just downloads the .scr and you need to run it like anything else for anything to happen... This was also focused to the people who's accounts have been compromised and do not know what to do. People can be stupid sometimes. ^ Edited November 15, 2014 by DeRedPanda Quote Link to comment Share on other sites More sharing options...
TestingM Posted November 20, 2014 Share Posted November 20, 2014 Looks familiar. I however did not complete the download of the scr file, nevermind executing it. 1 Quote Link to comment Share on other sites More sharing options...
DeRedPanda Posted November 21, 2014 Author Share Posted November 21, 2014 Looks familiar. I however did not complete the download of the scr file, nevermind executing it. Glad you didn't run it xD. Steam is seeing a lot of scammers as of recent. Here was another. Same bot, (or possibly bots), friended me and said the same thing as this: http://m.imgur.com/a/Q4BVz I just hope no one tries to download these and open it thinking it is an image. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.