MAJOR Password Logging Scheme

[InuTrunks]

Re: MAJOR Password Logging Scheme

Starving, to me, from studying keyloggers, it seems to be a self extracting zip, meaning, it extracts as soon as it's downloaded no matter what.

I don't even think the zip is a zip, I think it's got a hidden extension. I'll look into it when I get home, more updates comming later, but for now, I got class.

[InuTrunks]

Re: MAJOR Password Logging Scheme

Apperently the website ended in .zip.

How. In. Gods. Stupid. Name....

/wow

[Ameroth]

Re: MAJOR Password Logging Scheme

And website address ending in .ZIP? Are you fsking joking? That means that, not only did they let their computer download something extremely obviously, but they also apparently opened it.

That's the part that gets no sympathy from me. You brought this all upon yourself when you went to an untrusted/unknown URL ending in .ZIP and then proceeded to download and open said file. I hope these people that actually went to these URLs learn something; they won't though. >.>

[Olorin401]

Re: MAJOR Password Logging Scheme

This happened on Fairy server too, last week. At least a couple people I know of lost their accounts.
The tells were sent by a couple different names, and the website address ended with .zip.
There's a thread on KI here
edit: I hope its ok to post the link there; I've never posted a link before. -_-;

It's fine to post a link, though it wasn't posted right so I fixed it for you.

Reading that thread is a real heads-up. Seems like they caught the guy who was running the scheme too (if it's only one person that is)...

[Alshandra]

Re: MAJOR Password Logging Scheme

I had a guy send me a tell the other night in Al Zhabi, saying he was quitting FFXI and to check out his website <insert obvious virus link here> and i sent a tell back telling him to **** the hell off and he was set to away so i got the auto reply lol.. This was just before beseiged, three of my friends in my party in Al Zhabi also got the same tell.

pshhh.

How rude.

[Feba]

Re: MAJOR Password Logging Scheme

third'd. If you're stupid enough to be using an insecure browser AND not run a good antivirus, it's your own damn fault.

Hell, you deserve it for using IE at all. It's just asking for problems.

And website address ending in .ZIP? Are you fsking joking? That means that, not only did they let their computer download something extremely obviously, but they also apparently opened it. Honestly, not only do I not have pity for them, but if this is as insanely obvious as you're claiming it, I actually find this hilarious. You wouldn't let some random guy on the street mess with your car, why would you let some random guy on the internet mess with your computer?!

[Murphie]

Re: MAJOR Password Logging Scheme

Anyone who is honestly that stupid deserves to have their account hacked. It would teach them a valuable lesson about the internet, and maybe life in general.

I agree. Not that warning people not to fall for this is a bad idea, but seriously, if they don't already know not to visit/download any links that some complete stranger suggests, then they are probably already beyond help.

[Legal Fish]

Re: MAJOR Password Logging Scheme

Anyone who is honestly that stupid deserves to have their account hacked. It would teach them a valuable lesson about the internet, and maybe life in general.

[Chveya]

Re: MAJOR Password Logging Scheme

This happened on Fairy server too, last week. At least a couple people I know of lost their accounts.
The tells were sent by a couple different names, and the website address ended with .zip.
There's a thread on KI :link

edit: I hope its ok to post the link there; I've never posted a link before. -_-;

second edit: fixed link

[MisterCookie]

Re: MAJOR Password Logging Scheme

...or just use Firefox/Opera/Konqueror/Safari/ANYTHING OTHER THAN IE to prevent these problems.

Anyways, thanks for the warning, you can never be too careful.

[Olorin401]

Tonight on Ramuh Server, there must have been hundreds of people who received a /tell from a user named Tenthmoonlight telling them to check out a game-related website. This link was also passed around by secondary users, so just in case if you have a grudge with anyone be careful.

Going to that link will install a password logging trojan horse into your Playonline software and your account WILL be hacked. Do NOT go to ANY website unless you know the person well.

If you have been victimized by this incident, you need to call the Information Center IMMEDIATELY to have your password changed and you probably will also need to reinstall & reupdate your entire POL and FFXI installation.

If anyone has any other information in regards to this (file names, users to watch out for), or news that it has occurred on another server please post it here.