Author Topic: Just had my first run-in with a phisher (Read 1690 times)

MoltenKitten · March 05, 2015, 05:41:40 PM

Don't have a screencap so I'm just gonna make a quote of it

Quote

Hi, I need this item
http:screenshoots.net/screen_2583
Are you trading it?

Seems legit

If anyone has some sort of safe way of seeing what the link is I kind of want to know

Ad Bot · Advertisement

Satan From Wreck-It-Ralph · March 05, 2015, 05:42:58 PM

dont bother
its a download to an .exe or some equivalent

Pie Crust · March 05, 2015, 05:44:03 PM

It's a windows screensaver with a file that deletes your Steam library.

Silly file, my local disk is F:\ and not C:\ and my steam library is on my external drive.

Ipquarx · March 05, 2015, 05:44:28 PM

All the link does is download a file like this:

People, not knowing that .scr is actually an excecutable file type, try to open it. This leads to their computer being infected. Visiting the link itself will not harm you unless you run the file.

Juncoph · March 05, 2015, 05:46:57 PM

Quote from: Pie Crust on March 05, 2015, 05:44:03 PM

It's a windows screensaver with a file that deletes your Steam library.

Silly file, my local disk is F:\ and not C:\ and my steam library is on my external drive.

false; .scr files and .exe files execute very similarly and thus an executable can be disguised as a screensaver file

also it doesn't delete your library, it logs in as you on a separate computer and trades all of your items to the main phishing account, then it spams everyone on your friendslist with the phishing message

Quote from: Ipquarx on March 05, 2015, 05:44:28 PM

All the link does is download a file like this:

People, not knowing that .scr is actually an excecutable file type, try to open it. This leads to their computer being infected. Visiting the link itself will not harm you unless you run the file.

this is true