HIMPDahak Posted November 13, 2015 Share Posted November 13, 2015 (edited) There is a VERY shady looking mod posted by desuccubi (a new ID just created today). It is a nude mod that is FAR too advanced for this point in the game's life, comments are disabled, the pictures look like they are from New Vegas, and the file is password protected with a link to a download site to download the password. Because I like to remain unvirused, I did not attempt to download the password to test my theory that this is a trap. Mod link: http://www.nexusmods.com/fallout4/mods/329/? Edit: And I apparently forgot how to spell Nexus so now my posting about a shady mod looks shady :P Edited November 13, 2015 by HIMPDahak Link to comment Share on other sites More sharing options...
Oubliette Posted November 13, 2015 Share Posted November 13, 2015 Ok, when you find something suspicious about a specific mod - please use the "report" button located on the mod's download page (It's the little triangle with the exclamation mark in the middle directly below the mod images) and fill out the form accordingly. There are hundreds of new threads posted every day, it's easy for the staff to not see a thread aimed at them. Which is why we have the report features for mods, users and threads, which only the staff can see and are sure to look over asap. Link to comment Share on other sites More sharing options...
HIMPDahak Posted November 13, 2015 Author Share Posted November 13, 2015 Oh I did, but this is as much to warn everyone else as best I can. It looks like it has been downloaded around 250 times so far and if I can prevent one person from getting scammed I will count it as a win. Link to comment Share on other sites More sharing options...
falloutboy65 Posted November 13, 2015 Share Posted November 13, 2015 Agreed. I tried to load the pw link in a Sandboxie session with Private Browsing and NoScript on.For a sec you see 'icon' called password.txt before you get immediately re-directed to 'widget.sharecash.org/nojs.php' complaining that JavaScript is disabled. So can't say (and won';t find out) what's there. reported. Link to comment Share on other sites More sharing options...
tonicmole Posted November 13, 2015 Share Posted November 13, 2015 Reported also. It's odd that there is no category for malicious file. Seriously? Just went down as I was typing. We win! Link to comment Share on other sites More sharing options...
yunage Posted November 13, 2015 Share Posted November 13, 2015 It's gone. Good job gentlemen. Link to comment Share on other sites More sharing options...
tomomi1922 Posted January 17, 2016 Share Posted January 17, 2016 Now I am curious what that mod looks like. Spam emails I have seen a lot, spam/malware mod I haven't seen. Link to comment Share on other sites More sharing options...
bben46 Posted January 18, 2016 Share Posted January 18, 2016 It is against Nexus policy to upload password protected files at all. Just because of what this shows - it is too easy to hide malware or stolen mods behind a password. Thanks for reporting this. :thumbsup: Link to comment Share on other sites More sharing options...
TWarrior Posted January 18, 2016 Share Posted January 18, 2016 good job gentleman! thank you for reporting and also posting here! also thank you for moderators to take this down so fast! Link to comment Share on other sites More sharing options...
zanity Posted January 18, 2016 Share Posted January 18, 2016 An old and tedious SCAM that is rarely about 'trojans', but usually gets the conned individual to visit web-pages and complete activities that get the scammer a tiny amount of money for each page 'impression'. But please remember, if you can see 'ads' or 'flash video' (or PDF files on Firefox) on your browser, an attacker can use this fact as a vector to load a trojan on your computer. Given that the most 'respectable' media sites have served MILLIONS of trojans to visitors in the last few years, via ads they illegally claimed to have no responsibility for, everything online must be considered a risk. Funny fact- the password con originally gave people access to a real file, when they jumped through all the password hoops and filled out all the surveys requested. But the criminal scammers then found offering fake files worked pretty much as well. Link to comment Share on other sites More sharing options...
Recommended Posts