Watch out for key stealing malware

Post anything about MX Simulator here. Please. I'm begging you.
jlv
Site Admin
Posts: 13324
Joined: Fri Nov 02, 2007 5:39 am
Team: No Frills Racing
Contact:

Watch out for key stealing malware

Postby jlv » Wed May 22, 2019 4:16 am

Some cheating dead enders are trying to steal keys by sending players malware. You obviously don't want to open anything sent to you unless you know it's legitimate.

When I deactivate keys I make no exceptions, so be careful!
Josh Vanderhoof
Sole Proprietor
jlv@mxsimulator.com
If you email, put "MX Simulator" in the subject to make sure it gets through my spam filter.

User avatar
Wahlamt
Posts: 7219
Joined: Mon Sep 13, 2010 3:15 pm
Team: MLG Compton
Location: Sweden
Contact:

Re: Watch out for key stealing malware

Postby Wahlamt » Wed May 22, 2019 5:10 am

Thanks for the warning!

User avatar
Itz Raidox
Posts: 393
Joined: Wed Jan 11, 2017 11:37 am
Team: WestEffex
Location: Down Under
Contact:

Re: Watch out for key stealing malware

Postby Itz Raidox » Wed May 22, 2019 5:31 am

do we have an idea on what the malware is called/looks like or is it just an .exe?

but also another Question is if it is an .exe why would they need it for sim if it isnt a new snapshot?
Image

User avatar
Wahlamt
Posts: 7219
Joined: Mon Sep 13, 2010 3:15 pm
Team: MLG Compton
Location: Sweden
Contact:

Re: Watch out for key stealing malware

Postby Wahlamt » Wed May 22, 2019 8:00 am

Doesn't have to be an .exe to get that, a bad link is enough.

SMITH_119
Posts: 77
Joined: Sat May 07, 2016 2:25 am

Re: Watch out for key stealing malware

Postby SMITH_119 » Wed May 22, 2019 3:34 pm

I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..
Image

User avatar
broland278
Posts: 1210
Joined: Sat Dec 20, 2008 4:28 am
Team: MotoSavage
Location: Kansas
Contact:

Re: Watch out for key stealing malware

Postby broland278 » Wed May 22, 2019 5:36 pm

I was informed your information could be stolen via being in a server. With that being the case, it makes me not even want to play with the fact I could lose my key without appeal over some dumb shit.
Image

User avatar
MOTOZ293
Posts: 2739
Joined: Wed Mar 06, 2013 7:17 pm
Team: Madcape
Location: Ohio

Re: Watch out for key stealing malware

Postby MOTOZ293 » Wed May 22, 2019 6:07 pm

Here’s the beginning of the end.. why do people think they’re cool
Image

Shanasman450
Posts: 67
Joined: Sun Apr 15, 2018 4:07 am
Team: Privateer (AKA newb)

Re: Watch out for key stealing malware

Postby Shanasman450 » Wed May 22, 2019 6:51 pm

Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

User avatar
savage_ryan4
Posts: 96
Joined: Sun Mar 04, 2018 7:53 pm
Team: hoes mad
Location: SoCal
Contact:

Re: Watch out for key stealing malware

Postby savage_ryan4 » Wed May 22, 2019 7:40 pm

Shanasman450 wrote:Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

+1
Image
you should click that fkn banner

Cade328
Posts: 14
Joined: Tue Aug 28, 2018 12:39 am
Team: Privateer

Re: Watch out for key stealing malware

Postby Cade328 » Wed May 22, 2019 11:28 pm

savage_ryan4 wrote:
Shanasman450 wrote:Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

+1

+1

jlv
Site Admin
Posts: 13324
Joined: Fri Nov 02, 2007 5:39 am
Team: No Frills Racing
Contact:

Re: Watch out for key stealing malware

Postby jlv » Thu May 23, 2019 2:26 am

Itz Raidox wrote:do we have an idea on what the malware is called/looks like or is it just an .exe?

but also another Question is if it is an .exe why would they need it for sim if it isnt a new snapshot?

Doesn't have to be an exe. Could be any kind of script or executable or just data if the software that opens it has an exploitable bug.

As for why the victim would run a random exe, they probably expected it to be cheats. I may as well say it's Cody Dawe doing this. He got a handful of keys yesterday and around half of them were already deactivated for cheating last month, so it's pretty obvious he's spying on his own users. No honor among thieves. He ought to be paying his users back for the keys he lost for them, instead he's stealing more from them.

SMITH_119 wrote:I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..

The server never has your key. It only sees a hash. If I remember correctly, your key was shared in January with someone near Maine. My guess is that's someone you thought you could trust. Around 2 months later the key started getting passed around and found its way to a cheater.

broland278 wrote:I was informed your information could be stolen via being in a server. With that being the case, it makes me not even want to play with the fact I could lose my key without appeal over some dumb shit.

See above. The server never gets your key.

Shanasman450 wrote:Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

If you run their malware, yes. They could actually do much worse than that since you're pretty much pwned at that point. They could run a keylogger and get any login you have. $40 is pretty much peanuts compared to the worst that could happen.

On the bright side, he's stumbled into criminal actions now. Making cheats isn't criminal but sending malware definitely is.
Josh Vanderhoof
Sole Proprietor
jlv@mxsimulator.com
If you email, put "MX Simulator" in the subject to make sure it gets through my spam filter.

User avatar
broland278
Posts: 1210
Joined: Sat Dec 20, 2008 4:28 am
Team: MotoSavage
Location: Kansas
Contact:

Re: Watch out for key stealing malware

Postby broland278 » Thu May 23, 2019 12:40 pm

jlv wrote:Lots of info.


Ah okay, thanks for the clarification!
Image

User avatar
TeamHavocRacing
Posts: 7157
Joined: Thu Nov 19, 2009 5:52 am
Team: Havoc Racing
Contact:

Re: Watch out for key stealing malware

Postby TeamHavocRacing » Thu May 23, 2019 3:44 pm

SMITH_119 wrote:I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..

jlv wrote:The server never has your key. It only sees a hash. If I remember correctly, your key was shared in January with someone near Maine. My guess is that's someone you thought you could trust. Around 2 months later the key started getting passed around and found its way to a cheater.

This is like showing somebody security video of something they absolutely swear they didn't do.
You literally put "literally" literally in front of literally every literal word, literally! Literally assholes!

Nolite Oblivisci per Linteum Adducere

Shanasman450
Posts: 67
Joined: Sun Apr 15, 2018 4:07 am
Team: Privateer (AKA newb)

Re: Watch out for key stealing malware

Postby Shanasman450 » Thu May 23, 2019 3:56 pm

[quote="jlv"]
If you run their malware, yes. They could actually do much worse than that since you're pretty much pwned at that point. They could run a keylogger and get any login you have. $40 is pretty much peanuts compared to the worst that could happen.

On the bright side, he's stumbled into criminal actions now. Making cheats isn't criminal but sending malware definitely is./quote]

Right. Definitely not the worst that could happen, but still a pain in the ol backside.

Thank you for all the info.

Shanasman450
Posts: 67
Joined: Sun Apr 15, 2018 4:07 am
Team: Privateer (AKA newb)

Re: Watch out for key stealing malware

Postby Shanasman450 » Thu May 23, 2019 3:57 pm

RIP my attempt to quote lol


Return to “General Discussion”

Who is online

Users browsing this forum: No registered users and 5 guests