Post
Topic
Board Reputation
Re: Newbie account spreading malware using a fake link.
by
coupable
on 16/06/2020, 19:58:26 UTC
In the meta area there is a thread from Lafu in which such cases are constantly being processed: Report Malware and Suspicious Links here so Mods can take Action !
This what i was looking for before starting this thread. I didn't notice this topic before. Thanks for your suggestion and for your fast response.

How to use it
  • Find the msgID, userID or topicID you need. Let's use msgID 51902990.
  • Remove the last 4 digits from the msgID to get the directory name (if there are less than 4 digits, use 0): 5190.
  • Put everything together behind the (above) URL and add ".html": http://loyce.club/archive/posts/5190/51902990.html.
This is what I do:
  • Copy the userID (2819111) to your clipboard.
  • Click http://loyce.club/archive/members/
  • Put your cursor behind the link
  • Press these keys: CTRL-V Backspace Backspace Backspace Backspace / CTRL-V .html Enter
(the ".html" are 5 separate keys)
It's still a little bit complicated for me as am not that familiar with loyce.club tools. Thank you Loyce for the nice easy guide. I will try it for sure.

I tried it on mobile device, when click on view image it's forced to download multiple file. Unfortunately even I use cancel button but a file was downloaded (I just tried myself for test but deleted file immediately without extract it). Is this users embedded it or force from the website?
I found it strange that the website is called screenshot.net It looks like a legit domain as it's ssl certificated.
I sent the file to a friend of mine who is expert in this kind of malwares. I am waiting for his analysis and i will post the result here.

Thank you all.
I am closing this topic.