Games @sh.itjust.works nanoUFO @sh.itjust.works 8mo ago

[Reddit] Valheim official discord was taken over and distributed malware

If you came here from the Discord and downloaded the fake game that was posted there, you've DEFINITELY downloaded a virus! I didn't let the thing...

16 comments

The amount of suggestions to try removing the virus instead of performing a full wipe truly amazes me.

Backup known files, scrutinize them, wipe all the disks and clean install
- There are data companies who will throw away $10k server racks if they believe there is a firmware rootkit on it.
  
  Removing firmware rootkit isn't as easy as it sounds, because you can't really be sure the system has been completely flushed after rewriting it all, because you'd need a pretty expensive lab and many man hours to do it properly.
  
  So, if you're dealing with sensitive data, in the pile it goes, and then you write it off on taxes.
  
  Yup, rootkits are a thing.
  
  That said, you probably shouldn't handle sensitive data on your gaming PC. There's a reason a lot of companies require use of a company computer, and this is one of those reasons.
- I thought you were exaggerating, but nope. That thread is really hard to read. I guess if you’re the type to run executables off a discord server you’re not the brightest bulb though lol
- It's very cheap to buy drive and just back it up periodically.
How do you get malware via discord?
- Compromised admin accounts post links to malware.
  
  Simple example:
  
  Hey everyone, download this mod, which integrates with the discord server: http://totally-not-mal.warez
- By downloading/clicking on every link you see without any thinking of what it is, why its being shared, etc.
  
  On a hugely popular discord, you can't expect everyone to have a personal relationship with an admin so they can tell or verify when an official post is less than official.
  
  I would absolutely fake the style of post the admin usually does if I decided to spread something in a server.
  
  That being said, users should think about the source of stuff they do download.
- Click on all the things.
- Here is a detailed explanation how it all went down.
  
  Here is an alternative Piped link(s):
  
  Here is a detailed explanation how it all went down.
  
  Piped is a privacy-respecting open-source alternative frontend to YouTube.
  
  I'm open-source; check me out at GitHub.
  
  That's a really good breakdown, thanks for posting!

16 comments