SRL Archive - Help

There's a malicious Script or bot or whatever that hacked me all my bank


Xyssor

2012-02-02 07:56:44

MSI updated so i had to log out (i was sleeping) logged back in and i'm suddenly at ge with no bank, like they even disassembled my Slayer helm and everything..Lost a shitload of Millions. Watch out people!

I know it was a person from here as it happened just as i logged out and they had bank pin and name and everything…

*sigh* Oh well..I hope someone hits them really hard, with a truck :)

Harry

2012-02-02 07:58:31

What scripts did you use?

Chances are it's no one from here and just a drive-by virus or other RAT caused by former Java bots.

Main

2012-02-02 08:00:51

Sorry bud:(

Next time enable the security.sex, it can prevent any script from hacking you through sending your user information to the internet via simba.

Xyssor

2012-02-02 08:03:22

From: Harry
What scripts did you use?

Chances are it's no one from here and just a drive-by virus or other RAT caused by former Java bots.


I tend to try out those pesky new scripts and stuff.. guess i won't be doing that anymore

From: Main
Sorry bud:(

Next time enable the security.sex, it can prevent any script from hacking you through sending your user information to the internet via simba.


How do i enable that?

Thanks for all the help and support guys :)

PatDuffy

2012-02-02 08:05:55

I really get the feeling it wasn't even one of our scripts

Markus

2012-02-02 08:08:13

View, Extensions, double click security.sex so it becomes green. After that it will complain at first about connection to SRL Stats. Allow that and then it should never complain again :)

Kyle Undefined

2012-02-02 09:14:54

Sucks to hear, but I guarantee it wasn't by one of us. What scripts did you use?

P1nky

2012-02-02 09:20:42

Reason why most of us are saying, wasn't from us is because MSI is highly viewed and will never be used as a phishing script, and second of all, most scripts are usually viewed by users everyday… Please state the scripts you have used for the past 2-3 days.

Thank You and Sorry for your Loss.

Er1k

2012-02-02 10:08:10

Is there a way for him to find out the IP of the guy who cleaned him so that we can tell whether it's because of a possible malicious script lying around here?

Spiker

2012-02-02 10:26:16

From: nosaj.421
Is there a way for him to find out the IP of the guy who cleaned him so that we can tell whether it's because of a possible malicious script lying around here?


No?… Or someone would attack him worse. His ip(even if it was 1 in a million, not masked) and any trace of him is long gone.

I can almost guarantee it wasn't from a script. Run TDSSKILLER, a rootkit scanner and killer. A "RAT" probably got you.

Good Luck

m3gaman3g3nd

2012-02-03 14:50:14

he said msi script ? i highly doubt that

Markus

2012-02-03 15:02:28

From: nosaj.421
Is there a way for him to find out the IP of the guy who cleaned him so that we can tell whether it's because of a possible malicious script lying around here?


Only at first login after hack (Last logged in from..). Checking those IPs isn't a problem for us.

codeice

2012-02-03 15:04:59

same…lost all my valuable items..

Rezozo

2012-02-03 15:06:23

Have a feeling he is trolling…?

No reply since the beginning of thread…

wister1

2012-02-03 15:27:33

seems legit, everything that ends with .sex just makes me wanna turn it on :p

Rezozo

2012-02-03 18:19:57

From: wister1
seems legit, everything that ends with .sex just makes me wanna turn it on :p


…

Er1k

2012-02-03 20:22:44

From: Markus
Only at first login after hack (Last logged in from..). Checking those IPs isn't a problem for us.


Thanks Markus, I will take a mental note of that. I was wondering if there's only one chance.

Inception

2012-02-03 20:28:18

From: Xyssor
MSI updated so i had to log out (i was sleeping) logged back in and i'm suddenly at ge with no bank, like they even disassembled my Slayer helm and everything..Lost a shitload of Millions. Watch out people!

I know it was a person from here as it happened just as i logged out and they had bank pin and name and everything…

*sigh* Oh well..I hope someone hits them really hard, with a truck :)


I had something similar happen to me a while back. After further investigation I discovered that it was from using RsBot a few months ago.

I've never had a problem from a script from this site. If you really think that it was a script from MSI, do some investigating and check all of the instances where your username, password, and pin are used. You will find that they aren't being sent anywhere, only used in the script to log you in.