Se7en 10,762 #1 Posted September 9, 2014 (edited) The site opens to an apparently safe environment, a web video format for which you lack the plug-in support to play. If you click on the install plug-in it will download a malicious file to your machine which after installing it will fuck your shit up. I have blocked communication with Sparky's profile and reported the account to steam as hijacked with the above proof. Edited September 9, 2014 by BigBadWoulf 4 Quote Share this post Link to post Share on other sites
+Skaila 5,462 #2 Posted September 9, 2014 Thanks. We also have a thread in the lounge, but meh. Poor guy Did the same now. 1 Quote Share this post Link to post Share on other sites
Harlequin 2,975 #3 Posted September 9, 2014 same. thanks for headsup, shame I did not see it earlier. tho I did not download that exe. hope he gets his acc back soon. 1 Quote Share this post Link to post Share on other sites
+Skaila 5,462 #4 Posted September 9, 2014 They got to Chilly too Quote Share this post Link to post Share on other sites
luop90 4,400 #5 Posted September 9, 2014 They're stepping up their game. I've gotten a lot of scammers recently as well. Quote Share this post Link to post Share on other sites
Se7en 10,762 #6 Posted September 9, 2014 List of activities the executable performs when installed. https://anubis.iseclab.org/?action=result&task_id=106f033509e755834c1e6294258ed0e9f&format=html If you are interested in removing it and cleaning your machine this will help. 1 Quote Share this post Link to post Share on other sites
+JB. 4,800 #7 Posted September 9, 2014 I feel bad for laughing so hard at the "How many sisters you have?" 3 Quote Share this post Link to post Share on other sites
Se7en 10,762 #8 Posted September 9, 2014 I feel bad for laughing so hard at the "How many sisters you have?" I don't know much about Sparky, but he did mention having 2 sisters, so it was a pretty sure bet to check. Quote Share this post Link to post Share on other sites
+Dr. Obvious 14,606 #9 Posted September 9, 2014 Thnx for the info. Will use that later to clean Chilly's laptop. Quote Share this post Link to post Share on other sites
fever 9,884 #10 Posted September 9, 2014 Sparky just sent me an image showing all his swag being traded out of his hacked account in the trade history Quote Share this post Link to post Share on other sites
Domino 3,168 #11 Posted September 9, 2014 So wait what... that wasnt Sparky I spoke to about highlander games earlier? Quote Share this post Link to post Share on other sites
+Dr. Obvious 14,606 #12 Posted September 9, 2014 So wait what... that wasnt Sparky I spoke to about highlander games earlier? He's got his account back. Maybe you did. Ask him. Quote Share this post Link to post Share on other sites
Domino 3,168 #13 Posted September 9, 2014 He's got his account back. Maybe you did. Ask him. Well the hacker knew Sparky played medic last season if not. Quote Share this post Link to post Share on other sites
FiercePhoenix 106 #14 Posted September 9, 2014 I clicked the link earlier too, thinking it was indeed sparky. But I thought it was odd really because we havent even spoken to each other for 2 months or something so it was really odd to have him suddenly talking to me. However, I didnt trust the plugin to watch the video so, luckily, I hadnt installed anything. I hope both chilly and sparky are getting their stuff back 8< 1 Quote Share this post Link to post Share on other sites
LjubicaZubica 5,610 #15 Posted September 9, 2014 Thnx for the info. Will use that later to clean Chilly's laptop. what happened? Did she get acc back? So wait what... that wasnt Sparky I spoke to about highlander games earlier? Is that him or? I see him online :s We should have some secret word/question/answer to check are we talking to hacker or not. Quote Share this post Link to post Share on other sites
+Dr. Obvious 14,606 #16 Posted September 9, 2014 what happened? Did she get acc back? She had to leave before we could go through this, but at least she already collected all the stuff she needs for the reclaim. Guess that shouldn't be a problem Getting her items back, though, might be. 1 Quote Share this post Link to post Share on other sites
fever 9,884 #17 Posted September 9, 2014 The image of stuff leaving Sparky's account (seen from his trade history) was taken when he'd got his account back. I've been talking to him on and off for most of the afternoon. Quote Share this post Link to post Share on other sites
--- 691 #18 Posted September 9, 2014 That sucks about the items. Sorry to hear that. Quote Share this post Link to post Share on other sites
paulr 270 #19 Posted September 9, 2014 How does Steam support deal with this when you lose items ? I know in wow when you get hacked you always get all your stuff back and carry on pretty much as if nothing had happened. Quote Share this post Link to post Share on other sites
Domino 3,168 #20 Posted September 9, 2014 Bad news on that one. From the steam support pages: What is Steam's policy on returning items that were taken while my account was hijacked? The use and security of the Steam account is your responsibility. It does not matter if you let someone use the account, or if the account was being used without your knowledge. It is your responsibility to safeguard your account against such activities. https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003#hijackpolicy Quote Share this post Link to post Share on other sites
Domino 3,168 #22 Posted September 9, 2014 I would still try anyway. Quote Share this post Link to post Share on other sites
Se7en 10,762 #23 Posted September 9, 2014 Bad news on that one. From the steam support pages: What is Steam's policy on returning items that were taken while my account was hijacked? The use and security of the Steam account is your responsibility. It does not matter if you let someone use the account, or if the account was being used without your knowledge. It is your responsibility to safeguard your account against such activities. https://support.steampowered.com/kb_article.php?ref=9958-MJDG-3003#hijackpolicy They dupe the items and you get them back. What it says there is just to intimidate people and make them be careful. 1 Quote Share this post Link to post Share on other sites
Amd0n 56 #24 Posted September 9, 2014 WE'LL BE BACK! Feel sorry for you Quote Share this post Link to post Share on other sites
luop90 4,400 #25 Posted September 9, 2014 They dupe the items and you get them back. What it says there is just to intimidate people and make them be careful. That's the annoying part. Why not just reverse the trades? The item is tracked, and they'd prefer to dupe it than reverse the trades. The Holiday Headcase I used to own had been duped nearly 10 times. It's fucking stupid. Quote Share this post Link to post Share on other sites