ETF2L – Latest activity in “An explanation of SteamStealer aka "Ebola.scr"”

ETF2L – Latest activity in “An explanation of SteamStealer aka "Ebola.scr"” https://staging.etf2l.org/forum/general/topic-30794/ Reply by quintosh https://staging.etf2l.org/forum/general/topic-30794/page-3/?recent=545929#post=545929 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=545929 Sat, 24 Oct 2015 13:00:37 +0200 Reply by Selektionsfaktor https://staging.etf2l.org/forum/general/topic-30794/page-3/?recent=545929#post=545926 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=545926 Sat, 24 Oct 2015 01:00:54 +0200 Reply by Setlet https://staging.etf2l.org/forum/general/topic-30794/page-3/?recent=545929#post=545925 Quoted from RageInducer

What tools did you use to crack one of these open? I've been sent one of these and I'd like to report the account my items would have gone to. It's currently located on a linux in a virtual machine so it ain't doing anything any time soon. This one is especially on-the-nose since it's called inventory.scr

Did you actually google this problem, find this website and decide to post to a 10 month thread? Also, welcome to competitive TF2!]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=545925 Sat, 24 Oct 2015 00:31:40 +0200 Reply by Rage_Inducer https://staging.etf2l.org/forum/general/topic-30794/page-3/?recent=545929#post=545924 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=545924 Sat, 24 Oct 2015 00:23:03 +0200 Reply by CapTVK https://staging.etf2l.org/forum/general/topic-30794/page-3/?recent=545929#post=521975 Quoted from jx53

[...] Trade offers require public backpack

Ah! Yes, it does make sense if you want to send trade offers to strangers. That makes it very easy to quickly clean out someone's BP once you have access to the local steamclient. (P.S. Excuse my ignorance. I haven't been really active in the steam trading scene for awhile. I usually only trade with people i know or contacted myself. And I ignore invites by anyone with private profiles or a low steamlevel and a profile with only one or two games in it. ) Luckily this piece of malware doesn't seem to do any logging. Scary thing is, someone probably will write something more devious like this eventually. Or already has :/]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521975 Wed, 24 Dec 2014 00:10:15 +0100 Reply by konr https://staging.etf2l.org/forum/general/topic-30794/page-3/?recent=545929#post=521815 Quoted from CHERRY

[...] I still don't see why Steam couldn't store different profiles.

If it did you wouldn't have to relogin when switching, right? Could be true either way but if it just uses cookies then it'll only be what is currently logged in.]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521815 Mon, 22 Dec 2014 18:05:28 +0100 Reply by CHERRY COKE https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521811 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521811 Mon, 22 Dec 2014 17:21:23 +0100 Reply by CHERRY COKE https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521808 Quoted from CapTVK

Thank you for your informative post. I've received several of these sorts of these "friend" invites on a weekly basis for a very long time so i'm om my guard. I'll definitely going to edit my host file. This won't affect any of steam's normal functions? I do have a question about the backpack that's used for storage for stolen items. You mention there are stolen items in it, does that mean it's set to public on steam? It's kind of odd as you would expect it being set to private to prevent someone tracing the items. Or is there some trick to view private backpacks online?

This won't affect how your Steam works since API is intended for 3rd party developers, chances are you'll never need to use it.]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521808 Mon, 22 Dec 2014 17:13:24 +0100 Reply by CHERRY COKE https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521807 Quoted from konr

Good job dude. This should be extremely easy to patch for Valve. Makes me cringe looking at someone doing memory editing so much and still using C#. [...]It should. I haven't read it fully at all but if it's using conventional cookie grabbing it should only affect stuff that is currently logged in.

I still don't see why Steam couldn't store different profiles.]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521807 Mon, 22 Dec 2014 17:12:25 +0100 Reply by joesefff https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521801 Quoted from CapTVK

Thank you for your informative post. I've received several of these sorts of these "friend" invites on a weekly basis for a very long time so i'm om my guard. I'll definitely going to edit my host file. This won't affect any of steam's normal functions? I do have a question about the backpack that's used for storage for stolen items. You mention there are stolen items in it, does that mean it's set to public on steam? It's kind of odd as you would expect it being set to private to prevent someone tracing the items. Or is there some trick to view private backpacks online?

Trade offers require public backpack]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521801 Mon, 22 Dec 2014 15:09:31 +0100 Reply by konr https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521798 Quoted from CHERRY

[...] I don't think it works like that, not 100% sure though.

It should. I haven't read it fully at all but if it's using conventional cookie grabbing it should only affect stuff that is currently logged in.]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521798 Mon, 22 Dec 2014 14:07:48 +0100 Reply by CapTVK https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521797 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521797 Mon, 22 Dec 2014 13:30:51 +0100 Reply by Kengur https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521795 MatchCollection matchs = new Regex("7656119[0-9]{10}%7c%7c[A-F0-9]{40}", RegexOptions.IgnoreCase).Matches(preparedIDs); Untill this shit is fixed there's little to be done elsewhere.]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521795 Mon, 22 Dec 2014 13:05:49 +0100 Reply by CHERRY COKE https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521721 generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521721 Sun, 21 Dec 2014 22:17:03 +0100 Reply by CHERRY COKE https://staging.etf2l.org/forum/general/topic-30794/page-2/?recent=545929#post=521705 Quoted from Flow.

[...] I think Steam creates and saves the hashes only for the current account. So if you switch users, the previous one should be fine. Since I don't exactly know how Steam works, I can't tell for sure. Let's just hope that Valve is aware of this and stops these guys from making profit by selling this stuff to scammers.

I don't think it works like that, not 100% sure though.]]> generator=rsdiscuss&baseurl=https://staging.etf2l.org&feed=forum&forum=general&topic=30794&post=521705 Sun, 21 Dec 2014 20:08:22 +0100