TOPIC: Warning Steam Keyloggers (MUST READ)

Hello, so you've probably seen your friends sending you links such as - hey bro hahahah look at this /CENSOR / prtn-sc**n /CENSOR / / jokmems jpg. Don't even try to open this link cause it'll download a drive by keylogger. Don't click it. I censored it just you click it accidently. Anyway, if you see a friend sending you this that means he got hijacked by another friend sending him the link for example

John gets hijacked and then hacker sends link to johns friends
Johns friends open it, then johns friend Jack gets hijacked then the hacker sends link to jacks friend
Then jacks friend Eddy opens the link and gets hijacked and hacker then sends links to eddies friends.

This is how it works, they steal everything on your account. Be careful.

Alright, I'll make things right. The current trend of malware targeting steam are steam stealers which do not key log. Their rise to popularity has taken 2 weeks.

They are horribly coded and only 25% of people who run it actually get infected.

Currently the only hope you have is to disable steam guard as this will disable trades.

If you wish not to be infected and still trade you can do either of the following. Get a good Anti virus that stops programs heuristically. Delete your .net framework, don't use steam or use Linux.

Once run the malware is easy to remove, these stealers don't need to retain access to the infected machine and share a similarity with pony (a seriously pro botnet) on that point. Once run you're fucked.

You can be infected many different ways, from EKs, SEing or just good old stupidity. My tip is, DO not use any outdated browser, DO NOT run an executable file of any type without first scanning it on a distrobuting virus scanning site.

I will write a full tutorial when I get on MY PC.

As far as I have been informed by others who studied these links, this attack isn't even "malware", thus, anti-virus won't find it. Some might have virus packed with them, but the application itself is not a virus. It's a .NET application that uses the Steam API to make you trade your items.

It's disguised as a .scr file and because of it's extension, Windows won't warn you for the file (can't tell for sure, just have been told). Either way, scanning your PC multiple times does not make it more effective than scanning once. So that's a waste of time. Even if you download the file, if you don't open it and delete it straight away, there's no harm done to your computer (it never really harms your computer). As long as you don't run it, your Steam inventory is safe and you're good to go.

I think that this whole event is completely ridiculous. You wouldn't accept a random package from an untrusted source IRL so why would you click an untrusted link?

Ruben wrote:
Thanks for your clarification ruben. Exrobite, many friends are falling for this, such as twix gamersfunhouse and many many other zarp members/staff. Ruben, a friend of mine got his account hijacked. So they might take the account and not the items only.

I assure you, I have never been hacked by someone as I have a intelligent mind to not do so.
Now, let me just go to the strange car that's offering me candy. Bye!

I_am_the_Walrus wrote:
Lol well played

Then there must be variations of the tool going around. As far as I am aware, they never even get access to your account, they can only do what they do because you are logged in to Steam on your local PC.

Ruben wrote:
How do they send messages, hmmm..

Chris_Smith wrote:

I_am_the_Walrus wrote:

Do you remember the *COUGH* "virus" on Garry's Mod? It just uses the Steam API to send messages to people, because it allows you to. It doesn't need access to your account, you just have to be logged in.

Ruben wrote:
Yeah was a mess.

Lol. This is how I react to modern day shizzel.