• Log in or sign up for an account here: https://www.sythe.org/login

Warning about URLS/Programs in posts

tom jr

Forum Addict
Joined
Jun 28, 2008
Sythe Gold
0
Messages
408
(Note to the know-it-alls: Just because this is obvious to you doesn't mean that it's obvious to everybody.)

This routine is getting old. I've seen it happen several times.

I call it the Delayed Switch Scam, and you need to watch out for it.

Here's how it works:

Somebody (usually a leecher with less than 10 posts) puts an URL (website address) to something people want, such as: a supposedly hot program, a direct URL to Jagex world 2, a free guide, a cracked pay-for program, Free Pins, etc.

2) 10 people immediately ask "Can somebody verify this?"

3) Somebody trusted verifies that it's okay, and in fact, it is (at that time) a legitimate website, a legitimate guide, the program is fine and doesn't do anything wrong, etc.

So far so good. But........

4) In a few days, or however long it takes the thread to fall off the first page, the original poster then CHANGES the link/URL in the first post to a keylogger, a phisher site, etc.

5) Down the road, people do searches and find the thread with the keylogger/phisher. They read the thread and see that a trusted person verified it. They click on the link, follow directions, and get a keylogger on their machine, phished out of their Runescape account (or worse), etc.

How to defend yourself against this:

1) Don't do anything that a leecher, particularly one with only a few posts (doh) asks you to do. Generally speaking, the fewer posts a person has, the less you should trust anything being offered.

2) Don't download any exectutable file directly from a link here on Sythe, unless you totally trust the person who put the link up (i.e. a Sythe moderator or admin).

3) Don't download anything that's hosted on a fileshare site such as Rapidshare.

4) When you click on an URL and go to a new site, check the site address in your browser's address window. What appears to be legitimate on the webpage may be something else. Here's an example:

http://www.runescape.com/

Looks like Runescape, doesn't it? Go ahead and click on it (it won't hurt anything).

5) If you're doing a search and come up with an old post, be careful about any URL you may click on.

6) In general, use your head. Just because a trusted person said it's okay, that doesn't mean that it is. If the person who POSTED it isn't trusted, don't go for it.

This includes opening posts, posts made later in the thread, sites listed in signatures, etc.
 
Just to clarify about #4...you can right click on the link and click properties.

That will tell you the exact address of the URL.
 
Ok, for all those noobs who say scan please..

YOU should always scan after downloading, i dont get how that is so hard ffs
 
Wow, thanks for telling me about this, it's pretty smart, I've never fallen for this but still, thanks.

EDIT:: should be stickied imo.
 
Runescape Gamblingrunescape gambling
Back
Top