full image - Repost: Need Ideas: Playing Dumb with a Hacked Discord "Try My Video Game" Scammer (from Reddit.com, Need Ideas: Playing Dumb with a Hacked Discord "Try My Video Game" Scammer)
Mining:
Exchanges:
Donations:
So a friend of mine had his Discord account hacked; the imposter wants me to try a "video game" he's made, and someone suggested I ask this subreddit for ideas on an interesting, or informative, etc. way to continue the conversation.Progress so far: Out of curiosity, I booted up a Linux VM to investigate. The person linked to a blogspot site (I'd link but the subreddit rules say "no malicious links" and so I'm not sure this counts) with images that, according to their URLs, seemed to be sourced from some random itch.io game, and a downloadable .rar file (hosted on discord.com according to the URL). I tried extracting the .rar and it had a second .rar inside that would not extract (based on further messages, I wonder if that's because it was password-protected and the person forgot to mention that).Anyway, I've been playing dumb trying to see what sort of further information I could gather. Based on further messages, the person said I could use winrar or 7-zip to extract, so I guess it's not a winrar-specific exploit or anything. They said "munalebeta is password if its ask", which suggests it is password-protected (to hide the malware from antivirus scanners?). When I mentioned I was going to try the game on Linux first with wine/proton/etc., they didn't protest but instead said "try".Anyway, I'm out of ideas that interest me or that seem "useful", e.g., gaining more information about this. Any suggestions from anyone here? I'll be sure to update this post as things develop.
Social Media Icons