Just a heads up...
Heads up to the staff of this forum, I can't send PM's so I'm typing this here. I'm staff on a different forum, and wish to let you guys know about some steam stealers going around, particularly one with the sha256sum of: f0fba9992dc3fbddba68bb01d87692cfb085b5aa1b2a2b729e 9d66043e806202.
Virustotal link: virustotal.___/pt/file/f0fba9992dc3fbddba68bb01d87692cfb085b5aa1b2a2b729e 9d66043e806202/analysis/
(I can't post links, but you should be able to figure out what goes in the underscores)
It steals info from the user and uploads it to a ftp server at swag-yolo.eu5.org (I shit you not). I disabled this stealer yesterday, however I wanted to give you guys a heads up about variants and such. The one that was uploaded to our site was put in a thread with the title "Trigger bot updated 08/2014 without Injector" and was posted in the csgo section (hence I am posting this here). If you look, it isn't hard to figure out that it's a steam stealer, but considering there were no hits on virustotal until today and the stealer has been up since 6/1/2014 (January) and there were over 240 accounts that I saw...
Virustotal link: virustotal.___/pt/file/f0fba9992dc3fbddba68bb01d87692cfb085b5aa1b2a2b729e 9d66043e806202/analysis/
(I can't post links, but you should be able to figure out what goes in the underscores)
It steals info from the user and uploads it to a ftp server at swag-yolo.eu5.org (I shit you not). I disabled this stealer yesterday, however I wanted to give you guys a heads up about variants and such. The one that was uploaded to our site was put in a thread with the title "Trigger bot updated 08/2014 without Injector" and was posted in the csgo section (hence I am posting this here). If you look, it isn't hard to figure out that it's a steam stealer, but considering there were no hits on virustotal until today and the stealer has been up since 6/1/2014 (January) and there were over 240 accounts that I saw...
