Remote Access Hacked

[MiamiMarlin]

Hey I don't know if this has affected anyone else but so far both me and my friend in my group that plays the Finals have been remote Accessed hacked and based on our gaming patterns both instances have occurred while playing The Finals.

Its would first start with us playing the game for a bit then one of use would crash and then that's when the remote access hack would occur when a eyeball icon would appear on our taskbar and then we would lose control of our own mouse cursor in which it would try to access our cmnd console for windows to do who knows what. At first I thought it was just me getting hacked and it was unlucky but then it happened to my friend the day after in which it also happened while playing The Finals and same story as mine it first crashed his game and then the eyeball icon popped up and then he lost control of his mouse cursor.

Overall, I just want to know if anyone else has has this issue while playing The Finals. Or this can be a warning for anyone that is playing The Finals that your computer may be at risk to a crappy anti-cheat software that lets crap like this happen to its players.

[iTurnip]

can attest. this sucks. anybody else had this happen to them? trying to get to the bottom of whats causing it

[Gamefreak]

Got any actual evidence of this?

[Silverlight]

Originally posted by Gamefreak:

Got any actual evidence of this?

Don't really care myself.

I just nuked the entire OS and game install forever.

Not taking any chances. I'll try it again if they ever allow it to run on Linux so I can monitor access myself.

Stuff like this is disturbingly real these days

[iTurnip]

Originally posted by Gamefreak:

Got any actual evidence of this?

We are trying to. Im doing something dumb and running the game again. Its a pink/blue eyeball icon facing right and we are trying to get it recorded on OBS

[InnCognito]

I'd download glasswire and run it on a laptop connected to your network to see where it is coming from. And then if the connection is SuS (and you can verify it).

You can determine where your legalities lay within closing the connection down such as using ICMP flooding against the malicious address. With that being the very worst case scenario you need to counter disrupt the attacker. Or just use a hardware based firewall with stateful packet inspection.

its one thing for people to game, but its another for people to be ultra malicious in order to disrupt this game at a much greater level. its very abusive behavior.

I'd also make certain to purge the Modem / router and do an ip release, renew from your ISP. you can also see about hardware limiting the IP address itself and closing the ports it is using , unless its port 80. which would really suck to deal with.

[Silverlight]

Originally posted by InnCognito:

I'd download glasswire and run it on a laptop connected to your network to see where it is coming from. And then if the connection is SuS (and you can verify it). You can determine where your legalities lay within closing the connection down such as using ICMP flooding. Or just use a hardware based firewall with stateful packet inspection.

its one thing for people to game, but its another for people to be ultra malicious in order to disrupt this game at a much greater level. its very abusive behavior.

I have a hardware firewall sitting on the table but the DC power puck got lost during cleaning

I'm so behind.

[MiamiMarlin]

Originally posted by Gamefreak:

Got any actual evidence of this?

we're working on that, when it happened I was more concerned for my computer than recording the ordeal.

[InnCognito]

been there done that. Typically finding the right power supply for a pix or watchguard is no fun thing to do. unless you got sonic or smoothwall. IDK . its just getting so out of hand with player vs player gaming this day in age. The industry is dying because of this behavior.

If you think its a Remote access trojan. i'd just take a look for someone that still has MBAR.exe like Malwarebytes Anti Rootkit. its difficult to find. but unplug it from the ethernet cable. run it, and if you think its just not worth it. nuke the OS and reset your Router fully.

[Myztkl©-Kev]

oof, that sounds scary. I would definitely contact their eggmail support and give them all the information.

[Arise Chicken]

sounds like someone bought some really cheap cheats.

[MiamiMarlin]

Originally posted by IINTOMA:

Sounds like phishing. Did you clicked on any links or downloaded anything recently?

Or did someone recently used your pc?

When something like this happens, it's usually someone you know or recently met.

At first that's what I chalked it up to but then it happened to my friend and we don't usually do the exact same thing with our separate pc's on separate networks. We know about not going around and doing stupid stuff with our computers, cause we know what could happen to them if exposed like that, that's why we're confused on how this whole situation happened.

Overall, phishing is unlikely and sense both occurrences on separate devices on separate networks happened while playing The Finals we are currently assuming that's the issue sense other possible cause such as phishing or clicking a risky link because we're usually on top of stuff like that.

[Myztkl©-Kev]

Originally posted by MiamiMarlin:

Originally posted by IINTOMA:

Sounds like phishing. Did you clicked on any links or downloaded anything recently?

Or did someone recently used your pc?

When something like this happens, it's usually someone you know or recently met.

At first that's what I chalked it up to but then it happened to my friend and we don't usually do the exact same thing with our separate pc's on separate networks. We know about not going around and doing stupid stuff with our computers, cause we know what could happen to them if exposed like that, that's why we're confused on how this whole situation happened.

Overall, phishing is unlikely and sense both occurrences on separate devices on separate networks happened while playing The Finals we are currently assuming that's the issue sense other possible cause such as phishing or clicking a risky link because we're usually on top of stuff like that.

its possible you got infected from interacting with your friend or vice versa, don't discount it.

[Myztkl©-Kev]

Originally posted by Arise Chicken:

sounds like someone bought some really cheap cheats.

this is probable too, most if not all subscription based cheats have root kits, just watch that video of that guy who exposed the cheating problem in tarkov, the cheat maker nuked his machine.

[MiamiMarlin]

Originally posted by Myztkl©-Kev:

Originally posted by Arise Chicken:

sounds like someone bought some really cheap cheats.

this is probable too, most if not all subscription based cheats have root kits, just watch that video of that guy who exposed the cheating problem in tarkov, the cheat maker nuked his machine.

Well if it makes it any better I don't use cheats due to that be highly cringe. So that probability was easily ruled out.

[iTurnip]

Originally posted by Myztkl©-Kev:

Originally posted by Arise Chicken:

sounds like someone bought some really cheap cheats.

this is probable too, most if not all subscription based cheats have root kits, just watch that video of that guy who exposed the cheating problem in tarkov, the cheat maker nuked his machine.

we don't cheat bro. I use heavy with sledgehammer and c4 nukes. somebody probably got mad :(