Page 1 of 2

Watch out for key stealing malware

Posted: Wed May 22, 2019 4:16 am
by jlv
Some cheating dead enders are trying to steal keys by sending players malware. You obviously don't want to open anything sent to you unless you know it's legitimate.

When I deactivate keys I make no exceptions, so be careful!

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 5:10 am
by Wahlamt
Thanks for the warning!

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 5:31 am
by Itz Raidox
do we have an idea on what the malware is called/looks like or is it just an .exe?

but also another Question is if it is an .exe why would they need it for sim if it isnt a new snapshot?

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 8:00 am
by Wahlamt
Doesn't have to be an .exe to get that, a bad link is enough.

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 3:34 pm
by SMITH_119
I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 5:36 pm
by broland278
I was informed your information could be stolen via being in a server. With that being the case, it makes me not even want to play with the fact I could lose my key without appeal over some dumb shit.

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 6:07 pm
by MOTOZ293
Here’s the beginning of the end.. why do people think they’re cool

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 6:51 pm
by Shanasman450
Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 7:40 pm
by savage_ryan4
Shanasman450 wrote:Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?
+1

Re: Watch out for key stealing malware

Posted: Wed May 22, 2019 11:28 pm
by Cade328
savage_ryan4 wrote:
Shanasman450 wrote:Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?
+1
+1

Re: Watch out for key stealing malware

Posted: Thu May 23, 2019 2:26 am
by jlv
Itz Raidox wrote:do we have an idea on what the malware is called/looks like or is it just an .exe?

but also another Question is if it is an .exe why would they need it for sim if it isnt a new snapshot?
Doesn't have to be an exe. Could be any kind of script or executable or just data if the software that opens it has an exploitable bug.

As for why the victim would run a random exe, they probably expected it to be cheats. I may as well say it's Cody Dawe doing this. He got a handful of keys yesterday and around half of them were already deactivated for cheating last month, so it's pretty obvious he's spying on his own users. No honor among thieves. He ought to be paying his users back for the keys he lost for them, instead he's stealing more from them.
SMITH_119 wrote:I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..
The server never has your key. It only sees a hash. If I remember correctly, your key was shared in January with someone near Maine. My guess is that's someone you thought you could trust. Around 2 months later the key started getting passed around and found its way to a cheater.
broland278 wrote:I was informed your information could be stolen via being in a server. With that being the case, it makes me not even want to play with the fact I could lose my key without appeal over some dumb shit.
See above. The server never gets your key.
Shanasman450 wrote:Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?
If you run their malware, yes. They could actually do much worse than that since you're pretty much pwned at that point. They could run a keylogger and get any login you have. $40 is pretty much peanuts compared to the worst that could happen.

On the bright side, he's stumbled into criminal actions now. Making cheats isn't criminal but sending malware definitely is.

Re: Watch out for key stealing malware

Posted: Thu May 23, 2019 12:40 pm
by broland278
jlv wrote:Lots of info.
Ah okay, thanks for the clarification!

Re: Watch out for key stealing malware

Posted: Thu May 23, 2019 3:44 pm
by TeamHavocRacing
SMITH_119 wrote:I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..
jlv wrote:The server never has your key. It only sees a hash. If I remember correctly, your key was shared in January with someone near Maine. My guess is that's someone you thought you could trust. Around 2 months later the key started getting passed around and found its way to a cheater.
This is like showing somebody security video of something they absolutely swear they didn't do.

Re: Watch out for key stealing malware

Posted: Thu May 23, 2019 3:56 pm
by Shanasman450
[quote="jlv"]
If you run their malware, yes. They could actually do much worse than that since you're pretty much pwned at that point. They could run a keylogger and get any login you have. $40 is pretty much peanuts compared to the worst that could happen.

On the bright side, he's stumbled into criminal actions now. Making cheats isn't criminal but sending malware definitely is./quote]

Right. Definitely not the worst that could happen, but still a pain in the ol backside.

Thank you for all the info.

Re: Watch out for key stealing malware

Posted: Thu May 23, 2019 3:57 pm
by Shanasman450
RIP my attempt to quote lol