Author Topic: Exploit found in source engine causing gmod servers/players to be infected  (Read 114 times)

0 Members and 1 Guest are viewing this topic.

Offline blαh2355

  • Welcome to aperture science!
  • ***
  • League PlayerWindows User
    View More Badges!

  • Posts: 3921
  • Gender: Male
  • May we perform tests on you?
  • Respect: +978
The exploit is already patched but this happened yesterday.

Reddit link: http://www.reddit.com/r/gaming/comments/23epar/gmod_has_been_hacked/

garrysmod.com link: http://www.garrysmod.com/2014/04/19/exploit-fix-released/

As people have said, it's nothing dangerous. It just spams "cough" via in game text or steam message.
« Last Edit: April 19, 2014, 08:00:32 AM by blah2355 »



Offline Alkaline

  • *****
  • Windows User
    View More Badges!

  • Posts: 699
  • Gender: Male
  • Respect: +430
A Man named William Reed's last living testament says that he is going to read his own will.

Will Reed's will will read "Will Reed will read Will Reed's will"

Offline coolzeldad

  • ******
  • OwnerDonatorOld Forum MemberrNd DeveloperLinux UserWindows UserDog LoverLeague PlayerDWO Player
    View More Badges!

  • Posts: 3333
  • I eat ddos for breakfast OMNOMONOM
  • Respect: +2711
    • .:`=-~rANdOm~`-=:. Game Servers
+4
Actually, it was more than just spamming *cough* in game.

The original payload forced changing of steam name, joining steam group chats, crashing gmod, playing sounds, showing images, fetching websites for views and tracking its development, and furthur spreading the payload (and more). Server effects included rebroadcasting the payload, changing server name, exposing the rcon password, and restarting the servers when shutdown (assuming some sort of backdoor) (etc).

The bigger issue was the publicity, which would have allowed any modification of the payload by anybody fairly quickly... which I believe is why Garry's team pushed for a fix in only a few hours.

Anyway, we were not effected, however I have over 10000 lines in logs of people coughing in fretta LOL
« Last Edit: April 19, 2014, 11:46:54 AM by coolzeldad »
 ▲
▲▲Big thanks to Marie for this awesome sprite! :3

Spoiler: Moar Imagez (click to show/hide)
pingaz
Thanks Cryptokid!

Thanks gamefreak!


-- My youtube: http://www.youtube.com/coolzeldad
-- My deviantart: http://coolzeldad.deviantart.com
-- My soundcloud: http://www.soundcloud.com/coolzeldad
-- My ustream: http://www.ustream.tv/channel/coolzeldapingaz
-- My twitchtv: http://www.twitch.tv/coolzeldad

-- rNd Wiki: http://wiki.randomgs.com
-- rNd Youtube: http://www.youtube.com/RandomgsProductions
-- rNd Steam Group: http://steamcommunity.com/groups/r_A_N_d_O_m

Spoiler: rNd Typography (click to show/hide)





Every time you download Garry's Mod illegally, Garry makes a bug.

When people ask me "Plz" because its shorter than "Please" I feel perfectly justified to answer "No" because its shorter than "Yes".

derp herp lerp perp kerp serp zerp - say faiv timez fazt


Offline blαh2355

  • Welcome to aperture science!
  • ***
  • League PlayerWindows User
    View More Badges!

  • Posts: 3921
  • Gender: Male
  • May we perform tests on you?
  • Respect: +978
Actually, it was more than just spamming *cough* in game.

The original payload forced changing of steam name, joining steam group chats, crashing gmod, playing sounds, showing images, fetching websites for views and tracking its development, and furthur spreading the payload (and more). Server effects included rebroadcasting the payload, changing server name, exposing the rcon password, and restarting the servers when shutdown (assuming some sort of backdoor) (etc).

The bigger issue was the publicity, which would have allowed any modification of the payload by anybody fairly quickly... which I believe is why Garry's team pushed for a fix in only a few hours.

Anyway, we were not effected, however I have over 10000 lines in logs of people coughing in fretta LOL
Thanks for clearing that up. I was just skimming through the articles.

*cough*

Uh that wasn't me I swear. I just have a severe case of the cold *cough* *cough* :-X O:-)



Offline Monorail Cat

  • "We do these things not because they are easy, but because they are mlg pro" -JFK
  • *****
  • Windows UserDonator
    View More Badges!

  • Posts: 913
  • Gender: Male
  • PANZERKAMPHWAGON SCHADENFREUDE
  • Respect: +503
+2
I think this is a different hack, but this a recurring hack on another server community I'm a small member in.

Alarmed and Depressed, Hacking Microphones and Webcams


Offline Samo

  • N3RDSLAYA2003
  • *****
  • Windows User
    View More Badges!

  • Posts: 967
  • Gender: Male
  • So smug. So sly.
  • Respect: +158
So they fixed this pretty quickly but when the game itself didn't work they wouldn't care for the next few days. Looks like they care about the game now.

Offline coolzeldad

  • ******
  • OwnerDonatorOld Forum MemberrNd DeveloperLinux UserWindows UserDog LoverLeague PlayerDWO Player
    View More Badges!

  • Posts: 3333
  • I eat ddos for breakfast OMNOMONOM
  • Respect: +2711
    • .:`=-~rANdOm~`-=:. Game Servers
So they fixed this pretty quickly but when the game itself didn't work they wouldn't care for the next few days. Looks like they care about the game now.

heh, we'll see LOL

most would say their hands were tied in this case...
 ▲
▲▲Big thanks to Marie for this awesome sprite! :3

Spoiler: Moar Imagez (click to show/hide)
pingaz
Thanks Cryptokid!

Thanks gamefreak!


-- My youtube: http://www.youtube.com/coolzeldad
-- My deviantart: http://coolzeldad.deviantart.com
-- My soundcloud: http://www.soundcloud.com/coolzeldad
-- My ustream: http://www.ustream.tv/channel/coolzeldapingaz
-- My twitchtv: http://www.twitch.tv/coolzeldad

-- rNd Wiki: http://wiki.randomgs.com
-- rNd Youtube: http://www.youtube.com/RandomgsProductions
-- rNd Steam Group: http://steamcommunity.com/groups/r_A_N_d_O_m

Spoiler: rNd Typography (click to show/hide)





Every time you download Garry's Mod illegally, Garry makes a bug.

When people ask me "Plz" because its shorter than "Please" I feel perfectly justified to answer "No" because its shorter than "Yes".

derp herp lerp perp kerp serp zerp - say faiv timez fazt