Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

54476 readers

319 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others

Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):

💰 Please help cover server costs.


Ko-fi	Liberapay

founded 1 year ago

MODERATORS

[email protected]

425

Anyone who downloaded the GOG Baldur's Gate 3 release from 1337x, scan with Malwarebytes asap! (kbin.social)

submitted 1 year ago by [email protected] to c/[email protected]

79 comments fedilink hide all child comments

Originally posted over on /r/piracy (https://www.reddit.com/r/Piracy/comments/15itrip/1337x_admins_allowing_bg3_torrent_with_bitcoin/)

It looks like a bitcoin miner was included in the installer, and the admins on 1337x may or may not give a shit apparently. Scanned my pc and my wifes and found the same stuff the others mentioned.

According to the other comments, don't feel the need to uninstall as the miner was installed separate to the game, just give a Malwarebytes scan to get rid of the junk.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 1 year ago (1 children)

I'm talking about the firewall which is network handling only.

Most host firewalls only block incoming traffic.

All you have to do is get all mining data by making outgoing web connections to some random proxy, which can optionally have a domain to look more legit.

Firewall won't care, and unless you're pouring over the logs or looking at active connections, you won't find it either.

Since it's mining software, the fastest giveaway would be high usage or running an anti-virus to find sketchy executables.

I'm assuming OP is on windows which means the installer asked for admin perms to install to program files which is a really easy way to hide your mining executable assuming it hasn't been fingerprinted by popular anti virus yet.