To all Swift Kit users

The Swift Kit website has been hacked as screened here:



Apparently the Swift Kit client has also been hacked by a member of Bug Abuse and a RAT is automatically downloads and run upon running the program. I don't have exact proof of this yet but I advise EVERYONE to stop using it and scan their PCs for any malicious files.

I also advise staying away from their website in the event that you may receive a Java drive by or something similar upon visiting it.

For those who don't know, a RAT is a malicious program that screenshots or even records exactly what you see on the screen to the person who made the RAT, so say you are looking at your desktop that is what would be sent back to the hacker.

Again, the website has been hacked and I'm getting reports of people being RATed, I don't have proof of this yet but I seriously advise anyone and everyone to stop using it immediately and scan your PC with a good virus scanner.

I would not post this if I didn't think there was a threat, for all we know this may be the first place on the net with this warning.

EDIT: The website appears to have a Java drive by installed on it, I advise everyone stay away from it.

EDIT #2: Just because your Antivirus doesn't bring anything up, does not mean you are not infected. If the people who took over the domain, the site and the client are smart to do all this, I would not put it past them to make the RAT an FUD (Fully Undetectable) virus.

Stay safe guys.

 

Thanks for the heads up. I scanned my computer and everything seems fine, but I am avoiding using the client for now just to be safe.

 

thanks for the warning <3

 

Simba client ftw.

I used to use Swiftkit, I stopped and I just never got around to DLing it when I started using a new laptop.

Thanks for the heads up though laptop, you're always the first one to notify me about whatever news on MSN

 

I've seen the Video on YT heres link : http://www.youtube.com/watch?v=yQB3E299gSQ&feature=g-all-u

I've told all the dicers that use IRC Swiftkit to be careful how kind of me because that wouldn't be nice for someone to be hacked for there items and GP.

 

Wow, this has just seriously saved me...
I don't know how to thank you laptop65, you're amazing.

 

Swiftkit is my #1 client usually, but I also use Quantum Kit. It's got some awesome features

 

Watch out if you have opened SwiftKit, zerkerfist, it might be FUD (Fully Undetectable).
I suggest you to open taskmanager and go to the processes tab.
Look for something strange like 'IM4gH3H8.exe' and delete it if you find it.
Just to be 100% safe ;P

 

A rat is not a screen recorder, or anything of the sort.

It's a Remote Administrative Tool

Basically, he has complete control over your computer. Files, mouse, keyboard, data. Your computer pretty much becomes his. Most RATs are paired with things like keyloggers and such, but keep in mind a RAT is much much more serious. If the guys smart enough to hack the website and put in an auto update command to the client including a RAT, he will be smart enough to encrypt his file - you wont be catching anything with your antivirus. If you ran the client, just restore your computer to the closest point in time available before you ran the client update.

 

This needs to be made a sticky untill the problem is resolved i think. Hope nobody from sythe has gotten hit hard from this whole thing, glad i don't use this program.

 

^ Exactly this.
Btw, rat stands for Remote Administration Tool ~ not Adminitrative ;P

 

Thanks for the heads up Laptop.

 

I use mIRC; thanks for the heads up though!

 

Thanks for the advice mate ^_^

I think that I am in the clear, mainly because I haven't actually started up Swiftkit for days. The last time I loaded the client was 3-4 days ago, and at the end of the night when I am done using my laptop I just close the lid and Swiftkit remains minimized. I'm not sure whether it makes a difference or not, but because I haven't actually loaded up the client today I am hoping I am safe.

I also checked out all running processes earlier before I ran AVG & Malwarebytes scans. There were no funny things running from what I could see, and there was not an extra winlogon process running. I am going to be keeping a close eye on it though.

 

Oh shit. Thanks so much for the heads up. Better warn BSGPseller about this, I know he uses it alot:s

 

Thank you sir.

 

Updated OP, stay away from the site.

 

luckily i uninstalled it after the bot nuke lol and being lazy pays off sometimes... coz i was too lazy to download it after it started working again

 

Updated OP again, be careful everyone.

 

I'm avoiding using the client, but wouldn't the client be safe? The runescape browser on there isn't correlated at all to the site and I use the admin swiftkit as I am an admin on there.

Also it should be down and back up and running within the week if not already but don't check.