Upvote Upvoted 8 Downvote Downvoted
1 2
Account Hijack
1
#1
0 Frags +

Hi, xlr8 here,

I was recently hijacked so you may receive a phishing link or a description about a tournament and the need for a stand-in. Go ahead and ignore that message. Avoid the site royalcsgo(dot)com. It prompts you to download an *fake anti-cheat in order to gain access of the server. Any help would be great.

I already submitted a ticket to steam.

Updated list of hacked people:
*got their accountback
psyche*
xlr8* :]
antwan
meemat*
yoshi
patrick
ross
arbingordon
dflame*

Hi, xlr8 here,

I was recently hijacked so you may receive a phishing link or a description about a tournament and the need for a stand-in. Go ahead and ignore that message. Avoid the site royalcsgo(dot)com. It prompts you to download an *fake anti-cheat in order to gain access of the server. Any help would be great.

I already submitted a ticket to steam.

Updated list of hacked people:
*got their accountback
psyche*
xlr8* :]
antwan
meemat*
yoshi
patrick
ross
arbingordon
dflame*
2
#2
10 Frags +

list of people hacked atm:
psyche
antwan
meemat
yoshi
patrick
dflame

hope everybody gets their stuff back :<

list of people hacked atm:
[s]psyche[/s]
antwan
meemat
yoshi
patrick
dflame



hope everybody gets their stuff back :<
3
#3
7 Frags +

:((((((((

The file you need to remove is called KMSpico.. I ran my anti virus about 4 times before it stopped finding it on my computer.

:((((((((

The file you need to remove is called KMSpico.. I ran my anti virus about 4 times before it stopped finding it on my computer.
4
#4
3 Frags +

Funny to see this thread cuz i got this exact same thing like 2days ago.
Long time steam friend asking to play cs really in a hurry needed a stand-in for a match this guys english was my first alert then the urgency in joining the sv and then the prizepool of 5asiimovs and the final nail was the download the client to join.
Hope people become aware of this and dont get caught.

Funny to see this thread cuz i got this exact same thing like 2days ago.
Long time steam friend asking to play cs really in a hurry needed a stand-in for a match this guys english was my first alert then the urgency in joining the sv and then the prizepool of 5asiimovs and the final nail was the download the client to join.
Hope people become aware of this and dont get caught.
5
#5
3 Frags +
Psyche23:((((((((

The file you need to remove is called KMSpico.. I ran my anti virus about 4 times before it stopped finding it on my computer.

I scanned using malwarebytes, what anti virus are you using? Anyone know good (free) anti-virus software?

[quote=Psyche23]:((((((((

The file you need to remove is called KMSpico.. I ran my anti virus about 4 times before it stopped finding it on my computer.[/quote]

I scanned using malwarebytes, what anti virus are you using? Anyone know good (free) anti-virus software?
6
#6
3 Frags +

Malwarebytes is good to run a few times.

Norton Power Eraser is something I run on computers at my work to get the really nasty preboot stuff removed. Try it.

https://security.symantec.com/nbrt/npe.aspx

Malwarebytes is good to run a few times.

Norton Power Eraser is something I run on computers at my work to get the really nasty preboot stuff removed. Try it.

https://security.symantec.com/nbrt/npe.aspx
7
#7
-8 Frags +

I dont understand how you can fall for these. Check their profile, how many hours they have on games, if its private, whats in their inventory, whats their steam level and how many friends they have (if you need to even go that far.)

To put it simply dont click on links sent to you by people youve just added and dont even know.

I dont understand how you can fall for these. Check their profile, how many hours they have on games, if its private, whats in their inventory, whats their steam level and how many friends they have (if you need to even go that far.)

To put it simply dont click on links sent to you by people youve just added and dont even know.
8
#8
9 Frags +

the people who are sending the links are friends that have been hacked.

the people who are sending the links are friends that have been hacked.
9
#9
1 Frags +

make sure to run mbam in safe mode, hold f8 while booting up your computer

make sure to run mbam in safe mode, hold f8 while booting up your computer
10
#10
3 Frags +

Hey xlr8... I used AVG

What's your alt act so we can chat? Mine's currently called Astrid with a pic of a leopard

Hey xlr8... I used AVG

What's your alt act so we can chat? Mine's currently called Astrid with a pic of a leopard
11
#11
-7 Frags +
phobiathe people who are sending the links are friends that have been hacked.

And how did they get hacked, probably by clicking the links.

[quote=phobia]the people who are sending the links are friends that have been hacked.[/quote]

And how did they get hacked, probably by clicking the links.
12
#12
5 Frags +

Meemat's alt here. Yeah this kinda blows, and it was a bit foolish. Psyche's account messaged me, asking to ring, which isn't unusual since we've played together, I download the thing, it gives an "installation error," my account is drained, PW and support email changed.

I downloaded MBAM and Spybot S&D, neither of which found anything. Decided to just reformat since I'd be paranoid anyway.

So yeah, if my account (brid) sends you guys any messages, it's not me, until proven otherwise.

And Shoosh, obviously you don't understand how people fall for these because you're too stupid to read the OP. Thanks for the generic advice m8.

Meemat's alt here. Yeah this kinda blows, and it was a bit foolish. Psyche's account messaged me, asking to ring, which isn't unusual since we've played together, I download the thing, it gives an "installation error," my account is drained, PW and support email changed.

I downloaded MBAM and Spybot S&D, neither of which found anything. Decided to just reformat since I'd be paranoid anyway.

So yeah, if my account (brid) sends you guys any messages, it's not me, until proven otherwise.

And Shoosh, obviously you don't understand how people fall for these because you're too stupid to read the OP. Thanks for the generic advice m8.
13
#13
1 Frags +

Sorry Meetmat... : / It was the same for me

I'm not sure how they were able to bypass steamguard by logging into my email account. My passwords aren't the same and I hadn't logged into my email before my account was stolen. Any ideas?

Sorry Meetmat... : / It was the same for me

I'm not sure how they were able to bypass steamguard by logging into my email account. My passwords aren't the same and I hadn't logged into my email before my account was stolen. Any ideas?
14
#14
4 Frags +

^ Don't sweat it, it was pretty sneaky. (Wasn't trying to call you out btw, just saying it was a well-known friend's jacked account that sent me the bait in the first place, not some level 0 random)

^ Don't sweat it, it was pretty sneaky. (Wasn't trying to call you out btw, just saying it was a well-known friend's jacked account that sent me the bait in the first place, not some level 0 random)
15
#15
0 Frags +
Psyche23Hey xlr8... I used AVG

What's your alt act so we can chat? Mine's currently called Astrid with a pic of a leopard

I added you under the name Igriega

[quote=Psyche23]Hey xlr8... I used AVG

What's your alt act so we can chat? Mine's currently called Astrid with a pic of a leopard[/quote]

I added you under the name Igriega
16
#16
0 Frags +

yoshi got hacked too apparently

yoshi got hacked too apparently
17
#17
0 Frags +

I got messaged by both Psyche and Antwan, whoever has antwans account is still going at it except it isn't the same generic saying this time. Be aware.

Sunday, July 12, 2015
6:03 PM - Antwan: hey
6:06 PM - darkstar: hi
6:08 PM - Antwan: we need stand in again, can you help?
6:08 PM - Antwan: in tournament game
6:10 PM - darkstar: whats the prize
6:10 PM - Antwan: 5 awp asiimov
I got messaged by both Psyche and Antwan, whoever has antwans account is still going at it except it isn't the same generic saying this time. Be aware.

[quote]Sunday, July 12, 2015
6:03 PM - Antwan: hey
6:06 PM - darkstar: hi
6:08 PM - Antwan: we need stand in again, can you help?
6:08 PM - Antwan: in tournament game
6:10 PM - darkstar: whats the prize
6:10 PM - Antwan: 5 awp asiimov
[/quote]
18
#18
0 Frags +
Psyche23Sorry Meetmat... : / It was the same for me

I'm not sure how they were able to bypass steamguard by logging into my email account. My passwords aren't the same and I hadn't logged into my email before my account was stolen. Any ideas?

Presumably they didn't steal the actual account info, but rather the key that your client uses to validate that it is you. The same way that you don't have to enter your username and password and validate with steamguard every time you log in they don't need your username or password or steamguard verification.

Also if you saved your passwords through chrome or firefox they are stored in plaintext. A keylogger is also possible.

[quote=Psyche23]Sorry Meetmat... : / It was the same for me

I'm not sure how they were able to bypass steamguard by logging into my email account. My passwords aren't the same and I hadn't logged into my email before my account was stolen. Any ideas?[/quote]

Presumably they didn't steal the actual account info, but rather the key that your client uses to validate that it is you. The same way that you don't have to enter your username and password and validate with steamguard every time you log in they don't need your username or password or steamguard verification.

Also if you saved your passwords through chrome or firefox they are stored in plaintext. A keylogger is also possible.
19
#19
8 Frags +

 

 
20
#20
0 Frags +

From arbingordon, who also got hacked:

Never tell your password to anyone.
Sunday, July 12, 2015
10:47 PM - ~~~~: whats up
10:48 PM - arbingordon1: i got hacked too :(
10:48 PM - arbingordon1: was gonnna say though
10:48 PM - ~~~~: :((((
10:48 PM - ~~~~: this blows
10:48 PM - arbingordon1: people NEED to reformat and retain the old windows install
10:48 PM - ~~~~: how come
10:48 PM - arbingordon1: then go check in %appdata%
10:48 PM - arbingordon1: and u will see
10:48 PM - arbingordon1: it sent way more passwords
10:48 PM - ~~~~: oh really?
10:48 PM - arbingordon1: than just steam and email
10:48 PM - arbingordon1: yea
10:48 PM - ~~~~: shit
10:48 PM - arbingordon1: fucking change ur shit for EVERYTHING man
10:48 PM - arbingordon1: theres a password dump file thats in there
10:48 PM - ~~~~: hmm ok ty for the heads up
10:49 PM - arbingordon1: please repost this to tf.tv

From arbingordon, who also got hacked:

Never tell your password to anyone.
Sunday, July 12, 2015
10:47 PM - ~~~~: whats up
10:48 PM - arbingordon1: i got hacked too :(
10:48 PM - arbingordon1: was gonnna say though
10:48 PM - ~~~~: :((((
10:48 PM - ~~~~: this blows
10:48 PM - arbingordon1: people NEED to reformat and retain the old windows install
10:48 PM - ~~~~: how come
10:48 PM - arbingordon1: then go check in %appdata%
10:48 PM - arbingordon1: and u will see
10:48 PM - arbingordon1: it sent way more passwords
10:48 PM - ~~~~: oh really?
10:48 PM - arbingordon1: than just steam and email
10:48 PM - arbingordon1: yea
10:48 PM - ~~~~: shit
10:48 PM - arbingordon1: fucking change ur shit for EVERYTHING man
10:48 PM - arbingordon1: theres a password dump file thats in there
10:48 PM - ~~~~: hmm ok ty for the heads up
10:49 PM - arbingordon1: please repost this to tf.tv
21
#21
9 Frags +
Snowshoeyou have to be an idiot to fall for this shit more than once seriously
[quote=Snowshoe]you have to be an idiot to fall for this shit [b]more than once[/b] seriously[/quote]
22
#22
4 Frags +

greed strikes once again just for an awp skin

greed strikes once again just for an awp skin
23
#23
1 Frags +

?? If I'm ringing for one match I don't expect to get the skin - was just looking to play a game and help out

?? If I'm ringing for one match I don't expect to get the skin - was just looking to play a game and help out
24
#24
-5 Frags +

 

 
25
#25
3 Frags +

It seems a lot of ppl here are either friendless or total assholes.
This is not random private profile accs its your steam friends which most prolly know for a long time (or even irl) and play with them on a regular basis.
In my case i had a lot of small things tipping me off but maybe some other people didnt and sadly got caught the usual "only retards get caught" comments are easily dispensable.

It seems a lot of ppl here are either friendless or total assholes.
This is not random private profile accs its your steam friends which most prolly know for a long time (or even irl) and play with them on a regular basis.
In my case i had a lot of small things tipping me off but maybe some other people didnt and sadly got caught the usual "only retards get caught" comments are easily dispensable.
26
#26
-2 Frags +

im like 99% positive that someone who u never played csgo with would as you to play a tournament right out of the blue regardless if you talk to them regularly or not

im like 99% positive that someone who u never played csgo with would as you to play a tournament right out of the blue regardless if you talk to them regularly or not
27
#27
0 Frags +

add dflame' main to the list of hacked lol. hope everyone gets their stuff back, valve is usually pretty good about it :]

add dflame' main to the list of hacked lol. hope everyone gets their stuff back, valve is usually pretty good about it :]
28
#28
4 Frags +

sorry to hear, guys.
can't express how much of a bummer it is that we have assholes like this on our tiny planet :-/

hope you all get your stuff fixed

sorry to hear, guys.
can't express how much of a bummer it is that we have assholes like this on our tiny planet :-/

hope you all get your stuff fixed
29
#29
5 Frags +

Hi all. I got my account back.. it took 36 hours from when I first reported it so you should get yours back soon.

Any tips on how to get items back?

Hi all. I got my account back.. it took 36 hours from when I first reported it so you should get yours back soon.

Any tips on how to get items back?
30
#30
0 Frags +
PsycheHi all. I got my account back.. it took 36 hours from when I first reported it so you should get yours back soon.

Any tips on how to get items back?

Unless you have literally EVERY steam account protection (email confirmation on trades, steam guard, things of that nature) steam will not help you. They get too many requests I imagine so they do this to save themselves loads of manpower

[quote=Psyche]Hi all. I got my account back.. it took 36 hours from when I first reported it so you should get yours back soon.

Any tips on how to get items back?[/quote]

Unless you have literally EVERY steam account protection (email confirmation on trades, steam guard, things of that nature) steam will not help you. They get too many requests I imagine so they do this to save themselves loads of manpower
1 2
Please sign in through STEAM to post a comment.