Do not click PNG links or JPEG

[EndZiiel]

If some random adds you with 1 game in their inventory and sends you a PNG link or some kind of link DONT CLICK IT!!. Dont be so F***ing stupid!.

It doesnt open a picture it opens a downloadable file and for any moron that actually downloads it, congrats you now have a keylogger in your PC and will most likely lose your inventory in 24 hours.

Also if your friend sends you that link and he says he didnt even send it THEN DONT CLICK IT!. They have a auto send bot thing that once your friend downloads it, it sends through all his friends.

Just morons with no life that want to steal from hardworking more fortunate people with money or they are just still mad they live in a 3 world country.

[Hopper]

I wasn't aware that .png or .jp(e)g files were capable of running executable code...

[EndZiiel]

引用自 mindcraftvic1：

i have clicked the link but norton ♥♥♥♥♥♥ them

Iv clicked it the first time my friend sent it but i didn't download it because yeah, Its kinda strange that instead of just showing a URL picture it wants you to download it.

Luckily my friend told me he didnt even know he sent it then i knew what it was.

Iv got around 30 friend requests in the last few days from these morons, Nearly all of them with 1 free game in their account. Accepted 2 because of their 10 year badge but as soon as i accepted they sent me a PNG link

[EndZiiel]

引用自 Ericrct：

I wasn't aware that .png or .jp(e)g files were capable of running executable code...

You can compress a keylogger into a picture/folder or anything really with programs like winzip.
Most advanced keyloggers people download are being watched by admins anyway and can backfire on the keylogger user.

[Splash Colour]

It's a traced link that traces a ip, then activates a auto download direct onto someones pc for them to then keylog every key pressed on your keyboard, such as passwords, and even valued data of your bank details can be traced.

[Splash Colour]

Never take any action upon clicking any random link, only click on links that are very trusted ones which have https and are fully correct on the domain.

[punchobastardo]

Even if you click it it will download a .scr file that you don't have to double click it, because

.SCR ≠ .PNG or .JPEG, so it is pretty obvious it is a phishing attempt.

Learn a thing or two about computers and their files, they are not tablets or iphones.

[dachieo]

how do i get rid of it

[Dagnabbit]

引用自 Ericrct：

I wasn't aware that .png or .jp(e)g files were capable of running executable code...

Images and screensavers are some of, if not, the oldest malware vectors. This is nothing new and works today on the same people it always worked on: stupid ones.

[dachieo]

evey one of my friends is pissed at me and i didn't do didly dick

[EndZiiel]

引用自 ホモFragget：

evey one of my friends is pissed at me and i didn't do didly ♥♥♥♥:orb:

You clicked it obviously and downloaded it OR that so called friend is still in your list. I wouldnt be entering any passwords till you done a full system scan

[wuddih]

引用自 Ericrct：

I wasn't aware that .png or .jp(e)g files were capable of running executable code...

they are not capable of executing code, the last exploit with those files was on internet explorer 10 years ago. but webservers are capable of redirecting you to something else, just a matter of configuring stuff.

so server.com/screenshot.png will direct you to {链接已删除}server.com/badfile.scr

in normal cases this will just start a download but that is already enough for some people to fall for.