Reporting RSPS OS-Scape (BEWARE)

[noremac]

Hi,

@Hahanerd said this was the correct place to put this.

I would advise anyone who has installed any version of OS-Scape to uninstall and change any passwords immediately.

I downloaded the JAR file and ran it using the linux command `java -jar launcher.jar`. This means that when I was playing on the client, I also had to keep my linux terminal open so that the process was not interrupted.

Essentially, the OS-Scape developer was dev-logging activites to do with the client, but also printing stack traces for any Java exceptions being thrown. This includes an IOException (java exception for file handling) for me, where OS-Scape attempted to copy locally cached Google Chrome passwords (I don't use chrome, so I have none) and steal them - the client definitely connects to a remote database (how stats/game data is stored), so it could be stored in the same database or file bytes sent over sockets.

Bare in mind OS-Scape could be a fully-armed trojan, if other stealing isn't throwing exceptions then it is likely we will never know what other things OS-Scape is trying to steal (the source code is most probably obfuscated, haven't tried decompiling but I will at a later stage).

Here's proof:

The file cannot be found because the path doesn't exist ^. You can also see UnixCopyFile and Files.copy as evidence for an attempt to copy the file.

Tldr; OS-Scape is a Trojan. Delete and change passwords.

 

[noremac]

The screenshot is of OS-Scape in the background and my linux terminal I used to run it (`java -jar launcher.jar`) with the exception stack trace as proof of credential stealing.

 

[Kaascouse]

An ex- Senior moderator told me something like this didnt play oss for like 3months now he told me that the server wont be up for much longer 2!

 

[noremac]

@Shin

 

[Shin]

My goodness.

 

[Mister Slyther]

This is 100% fake, stop lying and bullshitting op. Fuck off.

You probably made the output to print something like that, since they never made it to do that. A dev also mentioned that this post is completely false as your only trying to cause problems for their community.

 

Closing this as it's no scam report, just a warning. Everyone should always use and install all programs with caution.