Let's solve the mystery of the missing gold.

Discussion forum related to PVP Server.

Re: Let's solve the mystery of the missing gold.

by Apinanraivo » Thu Sep 24, 2015 4:41 am

http://i.imgur.com/mhso8aO.png
Lua code for me incase anyone wants to take a look at.
Apinanraivo
Sergeant
Sergeant
 

Re: Let's solve the mystery of the missing gold.

by Arev » Thu Sep 24, 2015 4:43 am

Holy sheeet. I Downloaded the Addon 30 minutes ago and looked it over with a guildmate. AuctionAltBuy.lua did not contain anything suspicious to us.

Looking at what Apinanraivo posted, that is 100% malicious. Also note how the OP edited the main post 11 times with only 2 updates...

this is some industrial tier scamming.....

EDIT:
Here is a pastebin of the "legit" version...
http://pastebin.com/kWhBs3Ux

compare that to what Apinanraivo posted
http://pastebin.com/m6MjvAME

Bazinga wrote:deobfuscated code (more or less):
https://i.gyazo.com/6324f96583cee0051a06c8d7ddc5dadc.png
Last edited by Arev on Thu Sep 24, 2015 5:44 am, edited 3 times in total.
Arevor - <Dankk Budz Collective>
User avatar
Arev
Sergeant Major
Sergeant Major
 

Re: Let's solve the mystery of the missing gold.

by Euronymous » Thu Sep 24, 2015 4:47 am

Y'all went and injected a compiled malicious script to an API function.
User avatar
Euronymous
Grunt
Grunt
 

Re: Let's solve the mystery of the missing gold.

by Overtime » Thu Sep 24, 2015 4:52 am

This is very interesting since I've never seen it happen, but this brings us to one conclusion: Github new addons.
User avatar
Overtime
Sergeant Major
Sergeant Major
 

Re: Let's solve the mystery of the missing gold.

by Guybrush » Thu Sep 24, 2015 5:00 am

Bazinga wrote:the chars where the gold was sent to !!

Alliance = Mailgold
Horde = Goldmail

deobfuscated code:
https://i.gyazo.com/6324f96583cee0051a06c8d7ddc5dadc.png


Mystery solved well done gang.

Pretty ingenious scam. Love how everyone just assumed the gms did it.
Guybrush
Sergeant Major
Sergeant Major
 

Re: Let's solve the mystery of the missing gold.

by Diametra » Thu Sep 24, 2015 5:13 am

Dang, awesome detective stuff here.

...and everyone did not assume it was the GMs. The only people that even mentioned the idea were mindless trolls in the original post.
User avatar
Diametra
Knight-Lieutenant
Knight-Lieutenant
 

Re: Let's solve the mystery of the missing gold.

by Dusith » Thu Sep 24, 2015 5:23 am

Here is the file i got: https://drive.google.com/file/d/0B6unHB ... JoSkU/view

I guess this is it then, atleast the server won back some reputation. However I would love that they actually had a policy that banned scammers, I see way too many still going on, efter after reports.
Dusith
Sergeant Major
Sergeant Major
 

Re: Let's solve the mystery of the missing gold.

by Datruth » Thu Sep 24, 2015 5:27 am

Dusith wrote:Here is the file i got: https://drive.google.com/file/d/0B6unHB ... JoSkU/view

I guess this is it then, atleast the server won back some reputation. However I would love that they actually had a policy that banned scammers, I see way too many still going on, efter after reports.

Viper wrote:E - Permanent ban.: Most serious sanction. Permanent bans are rare but definitive. This sanction is applied in case of multiple violations of the rules, or after multiple account interruption, as well as any of the following:

Examples:

Scamming.
COD Scamming;

I guarantee you that guy will get banned, and hopefully you will get your gold back.
Datruth
Stone Guard
Stone Guard
 

Re: Let's solve the mystery of the missing gold.

by Dusith » Thu Sep 24, 2015 5:35 am

Its another case, I will write about him here on forums, have seen him scamming the last week with no sanctions.
Dusith
Sergeant Major
Sergeant Major
 

Re: Let's solve the mystery of the missing gold.

by Bazinga » Thu Sep 24, 2015 5:47 am

Dusith wrote:Here is the file i got: https://drive.google.com/file/d/0B6unHB ... JoSkU/view

I guess this is it then, atleast the server won back some reputation. However I would love that they actually had a policy that banned scammers, I see way too many still going on, efter after reports.


your version contains the same malicious code
Bazinga
Sergeant Major
Sergeant Major
 

PreviousNext

Return to PVP Server Specific discussion