Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[PSA] Fake Nyaa

As you all know, the original Nyaa went offline after the owner took it down. Someone has just purchased the domain, and might be up to no good. Do proceed with caution in case you're unaware of this.

TF Wrote:Just a few weeks after the domain names of anime torrent site NYAA were deactivated, one of them is back in action. However, the domain no longer belongs to the old crew, but to scammers who are trying to lure estranged users into downloading.

For years NYAA Torrents was heralded as one of the top sources for anime content, serving an audience of millions of users.

This changed abruptly early last month when the site’s domain names were deactivated and stopped working.

TorrentFreak heard from several people, including site moderators and other people close to the site, that NYAA’s owner decided to close the site voluntarily. However, no comments were made in public.

While many former users moved on to other sites, some started to see something familiar when they checked their old bookmarks this week. All of a sudden, NYAA.eu was loading just fine, albeit with a twist.

“Due to the regulation & security issues with Bittorrent, the Nyaa Team has decided to move from torrent to a faster & secure part of the internet!” a message posted on the site reads.

Instead, the site says it’s going underground, encouraging visitors to download the brand new free “binary client.” At the same time, it warns against ‘fake’ NYAA sites.

“We wish we could keep up the torrent tracker, but it is to risky for our torrent crew as well as for our fans. Nyaa.se has been shut down as well. All other sites claiming to be the new Nyaa are Fake!”

Source

Personally I have not tried to download their binary for a look, but an 'underground client' do sound suspicious as heck.
there is nyaa.si and nyaa.pantsu.cat and various others, but their not malicious imo, their just mirrors of the others. Although their turning into their own sites as time goes on because the original site is down, plus they aren't mirroring that much content that nyaa had.

If you download an exe file from nyaa, you deserve to be hacked lol. But really nyaa and related sites are only for anime related videos, unless your trying to play some foreign hentai games, then virus scan that shit before you run it.

I am very sad that the original nyaa is gone though i used it for many years, best site really. Bakabt is the best but their assholes about ratio, and being private etc,
myanimelist: https://myanimelist.net/profile/fatedblizzard

always down to discuss anime or tech.


[Image: 8bfc16c1b89ef01590c6d5af9d70ec7c.jpg]
(Jun 25, 2017 04:20 AM)CorrosiveBlueberry Wrote:  there is nyaa.si and nyaa.pantsu.cat and various others, but their not malicious imo, their just mirrors of the others. Although their turning into their own sites as time goes on because the original site is down, plus they aren't mirroring that much content that nyaa had.

If you download an exe file from nyaa, you deserve to be hacked lol. But really nyaa and related sites are only for anime related videos, unless your trying to play some foreign hentai games, then virus scan that shit before you run it.

I am very sad that the original nyaa is gone though i used it for many years, best site really. Bakabt is the best but their assholes about ratio, and being private etc,

I see you're kinda underestimating what those videos can do. I've read that recently an exploit was detected in VLC (the well known media player) that results from 'subtitle' files. So yeah, even those videos can be used to harm you right now if you're not careful. And the way they worded it makes it more and more suspicious, if they were legit probably they'd write more info on the techniques used to 'increase security'.
If I were them, I wouldn't go around infecting people right away, they might just wait for a while to gain some more users back then push some 'update' that you 'must' install because old clients won't work.
Have a cool signature? hit me up and I might use it.
Thanks for share. I don't know that original nyaa is down and I was thinking that they move to other adress
(Jun 25, 2017 09:17 AM)severos Wrote:  I see you're kinda underestimating what those videos can do. I've read that recently an exploit was detected in VLC (the well known media player) that results from 'subtitle' files. So yeah, even those videos can be used to harm you right now if you're not careful. And the way they worded it makes it more and more suspicious, if they were legit probably they'd write more info on the techniques used to 'increase security'.
If I were them, I wouldn't go around infecting people right away, they might just wait for a while to gain some more users back then push some 'update' that you 'must' install because old clients won't work.

I never directly open the videos either, i use them in plex to stream them to my tv/ps4. I'm not the type of person to open a shady file type without first scanning it on virus total, if it still seems shady but i may want to run it i may run it in sandbox or something.

Worst comes to worse, i run it because it only scans as like 1/64 detection ratio, and it fucks up my computer so i have to reinstall OS. I haven't lost an account to keylogger or RAT in like 5-8 years, thankfully.

I've never heard of viruses embedded in subtitles, if they were i'd be fucked, although i believe i'd have another layer of security because plex probably wouldnt support playing such items, so i wouldn't open them
myanimelist: https://myanimelist.net/profile/fatedblizzard

always down to discuss anime or tech.


[Image: 8bfc16c1b89ef01590c6d5af9d70ec7c.jpg]
(Jun 27, 2017 04:06 AM)CorrosiveBlueberry Wrote:  I never directly open the videos either, i use them in plex to stream them to my tv/ps4. I'm not the type of person to open a shady file type without first scanning it on virus total, if it still seems shady but i may want to run it i may run it in sandbox or something.

Worst comes to worse, i run it because it only scans as like 1/64 detection ratio, and it fucks up my computer so i have to reinstall OS. I haven't lost an account to keylogger or RAT in like 5-8 years, thankfully.

I've never heard of viruses embedded in subtitles, if they were i'd be fucked, although i believe i'd have another layer of security because plex probably wouldnt support playing such items, so i wouldn't open them

Virtual Machines are awesome for this scenario to be honest. Just create a simple one that can play videos and take a snapshot, player whatever you want then roll back XD
Have a cool signature? hit me up and I might use it.
You guys are really paranoid if you're gonna open a .MP4 on VM :3
I think the bigger issue here is how the domain can possibly be exploited for some drive-by or social engineering.
(Jun 27, 2017 09:54 AM)Elweth Wrote:  You guys are really paranoid if you're gonna open a .MP4 on VM :3
I think the bigger issue here is how the domain can possibly be exploited for some drive-by or social engineering.

I mean the whole torrent thing in a VM, like who the hell makes a VM just to open .MP4 (actually, .MKV since HD)...
Have a cool signature? hit me up and I might use it.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by HappehOct 26, 2018 01:27 PM 5 190 Oct 26, 2018 01:27 PM
Last Post: DerMensch24
by HappehApr 28, 2017 08:03 AM 58 1,805 Apr 28, 2017 08:03 AM
Last Post: Ytube
by TasemuNov 6, 2015 12:58 PM 203 5,653 Nov 6, 2015 12:58 PM
Last Post: fabby2lurd