nohman Posted March 30, 2015 Posted March 30, 2015 I know at least a handful of people in the community use puush for taking screenshots, so I thought it would be good to give you guys a heads up in case you don't already know: https://twitter.com/puushme If your puush was updated to r94, you got infected. They recommend changing any password that are important to you because it seemed to access your locally stored passwords. They don't seem to think it was transmitted anywhere. Quote
solidbatman Posted March 30, 2015 Posted March 30, 2015 It was transmitted. The malware seemed to have taken the passwords, and then the location where they were uploaded was disconnected before puush got on top of it from what I understand Quote
Yuuko Posted March 30, 2015 Posted March 30, 2015 RIP ME. I downloaded puush yesterday D: I don't even know if I was infected but better change all passwords Quote
Ceris Posted March 30, 2015 Posted March 30, 2015 AVAST killed it before the update happened, but I still uninstalled it after AVAST gave me a warning. A shame, because I like the convenience of puush. Quote
LinovaA Posted March 30, 2015 Posted March 30, 2015 Well... shit. xD I had been wondering why puush didn't want to work today. Welp, time to go through the long process of changing every single password I have. Quote
GetterEmperor Posted March 30, 2015 Posted March 30, 2015 Damn it sucks to have this happen. Well I guess it's time to change some passwords. Quote
Darklord Rooke Posted March 30, 2015 Posted March 30, 2015 whew, thank god i don't use puush Ditto. All this password hacking is a little scary, I'm going to regret my lax security measures one day... Quote
CryingWestern Posted March 30, 2015 Posted March 30, 2015 Ditto. All this password hacking is a little scary, I'm going to regret my lax security measures one day... If anything, someone on their side was the one who put the malware into the program before they uploaded the update, or someone else has access to their site and uploaded a modified version of their program that contained a virus. Quote
Down Posted March 30, 2015 Posted March 30, 2015 Storing passwords on your browser or computer sounds like a terrible idea anyway. Quote
Down Posted March 30, 2015 Posted March 30, 2015 If you're worried about memory issues, use cryptic hints stored in a txt file or a physical paper haha. Quote
Yuuko Posted March 30, 2015 Posted March 30, 2015 AVAST killed it before the update happened, but I still uninstalled it after AVAST gave me a warning. A shame, because I like the convenience of puush. Quote
CryingWestern Posted March 30, 2015 Posted March 30, 2015 If you download the newest update they have, it'll tell you if you've been infected, it also eliminates the malware as well... or so they say. Quote
solidbatman Posted March 30, 2015 Posted March 30, 2015 If you download the newest update they have, it'll tell you if you've been infected, it also eliminates the malware as well... or so they say. Quote
CryingWestern Posted March 30, 2015 Posted March 30, 2015 that's just it, i have no idea either, mine never came up with anything... i guess it was only if you uploaded something in that time period, would it do that. Quote
solidbatman Posted March 30, 2015 Posted March 30, 2015 Someone decompiling the malware informed puush on twitter that their remover does nothing but remove the dropper for the virus. Apparently the virus drops into the RAM and writes itself a rootkit. So it is likely that any computers that got the fake update are still infected. Puush says they have completed analysis of the virus and will post more details tomorrow. You know, because a malicious programs hijacking their software is enough reason to make users wait another day for details. Quote
CryingWestern Posted March 30, 2015 Posted March 30, 2015 I believe i was only on r93 so i should be fine. Quote
Lewycool Posted March 30, 2015 Posted March 30, 2015 I'm still on 93. DC-ed from internet when I got home to check and to uninstall it Quote
solidbatman Posted March 30, 2015 Posted March 30, 2015 They went back and deleted that tweet, along with a tweet correcting themselves saying the virus was capable of doing so, but they had no evidence that it had done so. Quote
Abyssal Monkey Posted March 30, 2015 Posted March 30, 2015 It's the internet guys, you really expect any privacy? I use 2 step authentication for anything that is valuable, like my email, and a throwaway master password for everything else, including Fuwa (makes things easier to remember). My line of thought is that if you don't want people to know things, don't store them in the first place, and anything that is actually important probably has a secondary method nowadays to protect you. Hell, Twitch just emailed me saying I had unauthorized access to my account, and I laughed, as I haven't used the thing since I created it. I actually did run a thorough virus check last night while I slept as a regular maintenance measure to prevent slowdowns, followed by a defrag, and the only shady thing my avast! quarantined to the virus chest was the patched Koi ga Saku Koro Sakura Doki launcher. Quote
Funyarinpa Posted April 1, 2015 Posted April 1, 2015 I do not even use Puush but well, fuck, I probably have like 6515 different malware on my computer and browser by now and my passwords are probably familiar to the community of hackers like the pussy of the most experienced whore in the only brothel of a mostly male-dominated small coastal city Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.