ETF2L – Latest activity in “New scam?” https://staging.etf2l.org/forum/general/topic-23445/ Reply by Pasta https://staging.etf2l.org/forum/general/topic-23445/page-2/?recent=418783#post=418783 Quoted from Casual
So I got bored... Affected page: http: //www .share-screen.org/124124115-jpeg/ First I looked up the whois data, didn't get lucky. The html loads some (obfuscated) javascript which was very easy to unpack... Just some ads or w/e... The interesting part is the Java.jar applet, I googled for 'jar decompiler' and got this. Source. It has some shitty string obfuscation, all it does is download "http: //ge.tt/api/1/files/9DdTmjQ/3/blob?download.exe", save in your temp directory and run it. At this point, err, I fail to download that... So yeah if anyone can figure out how to dl that, would be nice. EDIT: http://ge.tt/9DdTmjQ/v/0 <- file appears to have been removed :(
Casual detective on work]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418783 Fri, 16 Nov 2012 09:13:26 +0100 Reply by Gubbins https://staging.etf2l.org/forum/general/topic-23445/page-2/?recent=418783#post=418775 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418775 Fri, 16 Nov 2012 04:24:20 +0100 Reply by CursedGhost https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418769 whois data, didn't get lucky. The html loads some (obfuscated) javascript which was very easy to unpack... Just some ads or w/e... The interesting part is the Java.jar applet, I googled for 'jar decompiler' and got this. Source. It has some shitty string obfuscation, all it does is download "http: //ge.tt/api/1/files/9DdTmjQ/3/blob?download.exe", save in your temp directory and run it. At this point, err, I fail to download that... So yeah if anyone can figure out how to dl that, would be nice. EDIT: http://ge.tt/9DdTmjQ/v/0 <- file appears to have been removed :(]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418769 Fri, 16 Nov 2012 02:51:19 +0100 Reply by Mr.Ch3Vy https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418724 Quoted from FUN POLICE RUINS TF2
It's been floating around unusual traders for a while, some guy says "A friend of mine has an offer on your unusual, here's what he has for trade and the offer is circled" which is why it ends in jpg.
^ Exactly]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418724 Thu, 15 Nov 2012 20:20:29 +0100 Reply by Severyo https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418721 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418721 Thu, 15 Nov 2012 20:00:52 +0100 Reply by Hildreth https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418711 Quoted from Le meme arrows
What's the point of these threads? If you aren't an utter retard you will figure out it's a scam.
It's always nice to let people know, you never know when a new member to the community who isn't very experienced using Steam or the dangers/risks of internet scamming joins and reads it. Thank you for reporting it.]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418711 Thu, 15 Nov 2012 19:01:03 +0100 Reply by Mr.Ch3Vy https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418708 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418708 Thu, 15 Nov 2012 18:46:24 +0100 Reply by Regen https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418705 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418705 Thu, 15 Nov 2012 18:37:28 +0100 Reply by croaton https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418696 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418696 Thu, 15 Nov 2012 17:54:04 +0100 Reply by Bean https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418682 understands the irony of posting links in a thread about bad links]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418682 Thu, 15 Nov 2012 17:23:30 +0100 Reply by Mr.Fear https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418676 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418676 Thu, 15 Nov 2012 17:11:17 +0100 Reply by Wiper https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418663 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418663 Thu, 15 Nov 2012 16:43:39 +0100 Reply by krap92 https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418662 Quoted from Trane
[...] Harsh, but true.
I was originally going to use "If you aren't CommanderX..."]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418662 Thu, 15 Nov 2012 16:41:32 +0100 Reply by Trane https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418661 Quoted from Le meme arrows
What's the point of these threads? If you aren't an utter retard you will figure out it's a scam.
Harsh, but true.]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418661 Thu, 15 Nov 2012 16:39:46 +0100 Reply by krap92 https://staging.etf2l.org/forum/general/topic-23445/page-1/?recent=418783#post=418659 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=23445&post=418659 Thu, 15 Nov 2012 16:37:11 +0100