mgsweet / Apex-NoRecoil-2021

Scripts to reduce recoil for Apex Legends. (auto weapon detection, support multiple resolutions)
GNU General Public License v3.0
551 stars 156 forks source link

Beware. #317

Open Herosmeus opened 1 year ago

Herosmeus commented 1 year ago

Neshta File infector in the files. Phished my steam info, sold items on the market and then bought stuff to use my money. Obviously to the phisher.

Garren134 commented 1 year ago

wow

RaphielHS commented 1 year ago

Which file? And mind showing some proof as well?

krampus-nuggets commented 1 year ago

Neshta File infector in the files. Phished my steam info, sold items on the market and then bought stuff to use my money. Obviously to the phisher.

When making accusations like this, please provide proof.

Herosmeus commented 1 year ago

Apologies. Dont have a screenshot and since deleted but if you scan The folder (Specifically the hyde64.dll I believe) it comes up with the Neshta File infector. You can google more info about the virus. I used Malwarebytes.

RaphielHS commented 1 year ago

Apologies. Dont have a screenshot and since deleted but if you scan The folder (Specifically the hyde64.dll I believe) it comes up with the Neshta File infector. You can google more info about the virus. I used Malwarebytes.

VirusTotal: https://www.virustotal.com/gui/file/34a16b5ef96fc1acfcb68c03d4e8b4c430f5ccdd36741467d2ee544d5b662360 CTRL+F Nothing with the query "Neshta"

Funny enough, i am also using MalwareBytes which flagged it as indeed Neshta.Virus.FileInfector.DDS i wont deny that, but on VirusTotal it was flagged as Malware.AI.1142528512

And for your situation, it was probably from other application and not hyde64.dll nor hyde.dll

You could try https://github.com/imm0r/hideProcess but the file size is not as big as the one in this repo OR try this https://www.autohotkey.com/board/topic/78872-hyde-your-process-from-the-task-manager/ But the weird thing is that only you reported of this issue, and knowing that around 500 people minimum (Excluding uc users) AND people have been using this since 2021, i think thats on your end with another program/applications

And the fact that you deleted a crucial screenshot for proof that you got "phished" of your steam info and let me quote this, "Phising is a form of social engineering where attackers deceive people into revealing sensitive information or installing malware such as ransomware" OR "A technique for attempting to acquire sensitive data, such as bank account numbers, through a fraudulent solicitation in email or on a web site, in which the perpetrator masquerades as a legitimate business or reputable person." (Source: Google and Wikipedia)

FYI, Steam has a history for market activities Trade History: https://steamcommunity.com/id//tradehistory/ Market History: https://steamcommunity.com/market/ (On "My Market History" Tab)