Watch out for key stealing malware

[jlv]

Some cheating dead enders are trying to steal keys by sending players malware. You obviously don't want to open anything sent to you unless you know it's legitimate.

When I deactivate keys I make no exceptions, so be careful!

[Wahlamt]

Thanks for the warning!

[Itz Raidox]

do we have an idea on what the malware is called/looks like or is it just an .exe?

but also another Question is if it is an .exe why would they need it for sim if it isnt a new snapshot?

[Wahlamt]

Doesn't have to be an .exe to get that, a bad link is enough.

[SMITH_119]

I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..

[broland278]

I was informed your information could be stolen via being in a server. With that being the case, it makes me not even want to play with the fact I could lose my key without appeal over some dumb shit.

[MOTOZ293]

Here’s the beginning of the end.. why do people think they’re cool

[Shanasman450]

Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

[savage_ryan4]

Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

+1

[Cade328]

Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

+1

+1

[jlv]

do we have an idea on what the malware is called/looks like or is it just an .exe?

but also another Question is if it is an .exe why would they need it for sim if it isnt a new snapshot?

Doesn't have to be an exe. Could be any kind of script or executable or just data if the software that opens it has an exploitable bug.

As for why the victim would run a random exe, they probably expected it to be cheats. I may as well say it's Cody Dawe doing this. He got a handful of keys yesterday and around half of them were already deactivated for cheating last month, so it's pretty obvious he's spying on his own users. No honor among thieves. He ought to be paying his users back for the keys he lost for them, instead he's stealing more from them.

I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..

The server never has your key. It only sees a hash. If I remember correctly, your key was shared in January with someone near Maine. My guess is that's someone you thought you could trust. Around 2 months later the key started getting passed around and found its way to a cheater.

I was informed your information could be stolen via being in a server. With that being the case, it makes me not even want to play with the fact I could lose my key without appeal over some dumb shit.

See above. The server never gets your key.

Ive heard rumors of this. So you mean to tell me some little shit can steal my key, get it deactivated, and get away with it while I'm out $40? No appeals for this kind of thing?

If you run their malware, yes. They could actually do much worse than that since you're pretty much pwned at that point. They could run a keylogger and get any login you have. $40 is pretty much peanuts compared to the worst that could happen.

On the bright side, he's stumbled into criminal actions now. Making cheats isn't criminal but sending malware definitely is.

[broland278]

Lots of info.

Ah okay, thanks for the clarification!

[TeamHavocRacing]

I don't even think you have to click on a link for them to get your info, I think they can grab keys just by you being in a specific racing server. When my key was stolen I hadn't clicked any links that I didn't know who created for months. All I downloaded from mx sim was new RF Tracks and Emf Tracks. I also only joined official RF and EMF qualifying and race servers. I would say everyone is at risk..

The server never has your key. It only sees a hash. If I remember correctly, your key was shared in January with someone near Maine. My guess is that's someone you thought you could trust. Around 2 months later the key started getting passed around and found its way to a cheater.

This is like showing somebody security video of something they absolutely swear they didn't do.

[Shanasman450]

[quote="jlv"]
If you run their malware, yes. They could actually do much worse than that since you're pretty much pwned at that point. They could run a keylogger and get any login you have. $40 is pretty much peanuts compared to the worst that could happen.

On the bright side, he's stumbled into criminal actions now. Making cheats isn't criminal but sending malware definitely is./quote]

Right. Definitely not the worst that could happen, but still a pain in the ol backside.

Thank you for all the info.

[Shanasman450]

RIP my attempt to quote lol