swiftkit

[Libbie]

I know there were posts about it before being hacked n stuff but since they have been removed as far as I can see, is it fair enough to presume that swiftkit is fine now?

 

[joj0r]

personally i would wait until they give an official statement that they have fixed all errors and the software is ok again

 

[Silent Fang]

do not use it. there is still a warning just not so apperent here on sythe. like prevously stated do not use it until swiftkit themselves confirm that is it free of hacks

 

[Libbie]

ok thanks guys

e/ thanks for the confirmation zerkerfist

 

[Zerkerfist]

Swiftkit is completely fine and has been for days. I've been using it with no problems.

Here is the official statement released by Strider and the folks over there:

One down side to SwiftKit being as popular and successful as it is, means that it has a giant target on its back. Today we unfortunately experienced the effect of that., which is a shame really as we only exist to offer a free helpful tool to players...It really is unfortunate. As always though, we aim to be as transparent about the situation as possible.

At around 3am this morning it came to my attention that someone had gained access to the domain register's account that hosts SwiftKit.net. This allowed them to transfer the SwiftKit.net domain off our account and onto their own. Once they did this they were then able to change the webserver the domain points at, to their own malicious site. The problem was that it took around 5 hours for the domain to be rightfully returned back to us. So during this time the SwiftKit.net domain was pointing to a malicious website. We'll definitely be moving to a different domain registrar in the near future.

How was the intruder able to gain access to our domain account? By using a fake ID, or identity document to convince the domain hosting company to reset the e-mail address to their own. Then all they had to do was perform a simple password reset. We're very concerned that this could even happen in the first place, and that it took so long to re-gain control. We'll be looking forward to getting as far away as possible from this domain host.

So what does this mean for you as a user? Not too much, SwiftKit itself wasn't affected at all, just the domain. However If you were unfortunate enough to click accept or yes on any JAVA popups that came up I suggest do you a virus scan straight away and once clean change your password. You should never accept any JAVA requests from sources you don't trust. (It states the source in the popup)

We have seen this specific malware can be detected and removed by Microsoft Security Essentials. If you believe you have loaded SwiftKit in this small window and accepted any rogue Java confirmations, then it would be a good idea to run a full system scan and perform the steps at the bottom of this post.

SwiftKit itself has several layers of protection built into the updater to prevent anyone from being able to push out bogus updates. The only way you could be harmed is if you download or accept something yourself.

As it stands we now have full control of our domains and have taken temporarily steps to prevent such a situation from occurring again. DNS changes have been successfully apllied to many users and they should now be directed to the right, normal site. If you still are redirected incorrectly, try clearing your browser's history and cache, and also by going to Start > search for "cmd", and type in "ipconfig /flushdns". This will ensure the right DNS address is obtained from the server. In the coming future we will be looking to implement some permanent changes to further prevent such an occurrence, abandoning our current and frustrating registrar is one of them.

We understand our well-earned reputation has been tarnished by this horrible incident, and we understand many are wary using our products in the future. That trust is going to have to be earned back, and I know for some it will be difficult. I want to personally let everyone know the safety and security of all of our users are our #1 priority. The entire SwiftKit staff, including support from our users and Jagex moderators have hopefully showed everyone that we are serious about security

Source: http://swiftkit.net/index.php?subac...24485&archive=&start_from=&ucat=1,8&page=news

Also:

The "killswitch" feature sounds great. Basically if anything ever happened again like the recent hacking/domain hijacking, the Swiftkit guys would be able to hit the killswitch and it would disable the clients for everybody, keeping us all safe

 

Yeah it is safe, I have used it myself recently.

Also:

The "killswitch" feature sounds great. Basically if anything ever happened again like the recent hacking/domain hijacking, the Swiftkit guys would be able to hit the killswitch and it would disable the clients for everybody, keeping us all safe

Love the killswitch feature, will go a long way to keep us safe - several people got hacked as a result of swiftkit.

 

[Dave]

I've been using SK for like 3 days now, it should be fine. You'll be fine to use it, it's been safe since the first of June from what I've been told.

 

[Alma Mater]

its safe now and running better than ever

 

[FCD]

Kind of crazy such a "secure" program has these problems. Most complaints about like Epicbot having viruses are just kids who get hacked and blame it on the software they were using and not the Java drive by the clicked on .

 

[shadowkitsune]

Swiftkit is safe, but it indeed hacked some people in the past weeks.

 

[MarineKingPrime]

I have always used Swiftkit and trust it, That's my opinion and from years of use. Could of been False accusations however there has been a few threads popping up about hacking.

 

[Zerkerfist]

It is disappointing that a lot of people are questioning the safety of Swiftkit. When it comes down to it, it was really their domain host who allowed the "hacker" to take control of the domain so easily. It wasn't that he was able to really breach the security of the website or client itself, it was a result of the lack of a thorough identity check performed by the domain host who handed over control to the hacker.

Either way, it was an unfortunate event and luckily it only lasted a few hours. It sounds like they are now taking every precaution to prevent this from ever happening again, to keeping their loyal users safe from future threats, and taking steps towards earning back the trust of anybody who is unsure of SK after this incident.