• Log in or sign up for an account here: https://www.sythe.org/login

To all Swift Kit users

Laptop65

Hero
Joined
Dec 19, 2010
Sythe Gold
459
Messages
7,938
Location
Texas, United States
To all Swift Kit users
The Swift Kit website has been hacked as screened here:

xLSS


Apparently the Swift Kit client has also been hacked by a member of Bug Abuse and a RAT is automatically downloads and run upon running the program. I don't have exact proof of this yet but I advise EVERYONE to stop using it and scan their PCs for any malicious files.

I also advise staying away from their website in the event that you may receive a Java drive by or something similar upon visiting it.

For those who don't know, a RAT is a malicious program that screenshots or even records exactly what you see on the screen to the person who made the RAT, so say you are looking at your desktop that is what would be sent back to the hacker.

Again, the website has been hacked and I'm getting reports of people being RATed, I don't have proof of this yet but I seriously advise anyone and everyone to stop using it immediately and scan your PC with a good virus scanner.

I would not post this if I didn't think there was a threat, for all we know this may be the first place on the net with this warning.

EDIT:
The website appears to have a Java drive by installed on it, I advise everyone stay away from it.

EDIT #2: Just because your Antivirus doesn't bring anything up, does not mean you are not infected. If the people who took over the domain, the site and the client are smart to do all this, I would not put it past them to make the RAT an FUD (Fully Undetectable) virus.

Stay safe guys.
 
To all Swift Kit users
Thanks for the heads up. I scanned my computer and everything seems fine, but I am avoiding using the client for now just to be safe.
 
To all Swift Kit users
Thanks for the heads up. I scanned my computer and everything seems fine, but I am avoiding using the client for now just to be safe.

Simba client ftw.

I used to use Swiftkit, I stopped and I just never got around to DLing it when I started using a new laptop.

Thanks for the heads up though laptop, you're always the first one to notify me about whatever news on MSN :p
 
To all Swift Kit users
Wow, this has just seriously saved me...
I don't know how to thank you laptop65, you're amazing.
 
To all Swift Kit users
Simba client ftw.

I used to use Swiftkit, I stopped and I just never got around to DLing it when I started using a new laptop.

Thanks for the heads up though laptop, you're always the first one to notify me about whatever news on MSN :p

Swiftkit is my #1 client usually, but I also use Quantum Kit. It's got some awesome features :cool:
 
To all Swift Kit users
Thanks for the heads up. I scanned my computer and everything seems fine, but I am avoiding using the client for now just to be safe.
Watch out if you have opened SwiftKit, zerkerfist, it might be FUD (Fully Undetectable).
I suggest you to open taskmanager and go to the processes tab.
Look for something strange like 'IM4gH3H8.exe' and delete it if you find it.
Just to be 100% safe ;P
 
To all Swift Kit users
A rat is not a screen recorder, or anything of the sort.

It's a Remote Administrative Tool

Basically, he has complete control over your computer. Files, mouse, keyboard, data. Your computer pretty much becomes his. Most RATs are paired with things like keyloggers and such, but keep in mind a RAT is much much more serious. If the guys smart enough to hack the website and put in an auto update command to the client including a RAT, he will be smart enough to encrypt his file - you wont be catching anything with your antivirus. If you ran the client, just restore your computer to the closest point in time available before you ran the client update.
 
To all Swift Kit users
This needs to be made a sticky untill the problem is resolved i think. Hope nobody from sythe has gotten hit hard from this whole thing, glad i don't use this program.
 
To all Swift Kit users
A rat is not a screen recorder, or anything of the sort.

It's a Remote Administrative Tool

Basically, he has complete control over your computer. Files, mouse, keyboard, data. Your computer pretty much becomes his. Most RATs are paired with things like keyloggers and such, but keep in mind a RAT is much much more serious. If the guys smart enough to hack the website and put in an auto update command to the client including a RAT, he will be smart enough to encrypt his file - you wont be catching anything with your antivirus. If you ran the client, just restore your computer to the closest point in time available before you ran the client update.

^ Exactly this.
Btw, rat stands for Remote Administration Tool ~ not Adminitrative ;P
 
To all Swift Kit users
Thanks for the heads up Laptop.
 
To all Swift Kit users
Watch out if you have opened SwiftKit, zerkerfist, it might be FUD (Fully Undetectable).
I suggest you to open taskmanager and go to the processes tab.
Look for something strange like 'IM4gH3H8.exe' and delete it if you find it.
Just to be 100% safe ;P

Thanks for the advice mate ^_^

I think that I am in the clear, mainly because I haven't actually started up Swiftkit for days. The last time I loaded the client was 3-4 days ago, and at the end of the night when I am done using my laptop I just close the lid and Swiftkit remains minimized. I'm not sure whether it makes a difference or not, but because I haven't actually loaded up the client today I am hoping I am safe.

I also checked out all running processes earlier before I ran AVG & Malwarebytes scans. There were no funny things running from what I could see, and there was not an extra winlogon process running. I am going to be keeping a close eye on it though.
 
To all Swift Kit users
Oh shit. Thanks so much for the heads up. Better warn BSGPseller about this, I know he uses it alot:s
 
To all Swift Kit users
luckily i uninstalled it after the bot nuke lol :D and being lazy pays off sometimes... coz i was too lazy to download it after it started working again :p
 
To all Swift Kit users
I'm avoiding using the client, but wouldn't the client be safe? The runescape browser on there isn't correlated at all to the site and I use the admin swiftkit as I am an admin on there.

Also it should be down and back up and running within the week if not already but don't check.
 
Runescape Gamblingrunescape gambling
Back
Top