Nightqueenallie
| EpicMember Upgrade A member that has upgraded their account. |
- Country
- United States
- Multiple Accounts
- 2
WARNING! Off-site contact information posted. Most scams occur off-site. Please contact members directly via EpicNPC chat. We do not investigate disputes if you communicate off-site.
(I'm doing this on my phone since no computer anymore atm while I backup certain files and wipe my system)
Information
######################
Purchase Date: 1/27/22
Date the problem began: 1/27/22
Method of Contact Used (chat program): Discord
Instant Messenger username of the person you're accusing: Tazsa#2917 (499405846959095809)
Your Instant Messenger ID:
Other information:
DISPUTE Information
######################
Link of transaction thread (URL, Epicnpc thread): https://www.epicnpc.com/threads/swords-of-legends-power-leveling-boosting-service.1995206/
Approximate value of property: $0 USD
Was Trade Guardian used? NO
If yes, what is the Trade Guardian ID? NO
What is the dispute about?
This isn't a typical dispute. You just don't have a category for it. This member has been going around on discord messaging an extremely sophisticated & malicious .exe to previous buyers on the pretense that it's for school. Honestly since it was Javascript I thought nothing of it at first since the game (snake) could be built on Javascript. Also thought nothing of it because this person is incredibly respected in here and I only had good interactions with them in the past.
Upon usage of the .exe: It forcefully logged me out of Discord, closed it, then reopened to try and get me to type in my password. That was a faux process. After immediately disconnecting my internet I attempted to figure out what it was doing.
Upon indepth examination of the .exe it is potentially backdoor built on axios, building its own http client, and using that to package and send itself data.
Why is this worth mentioning? Virustotal won't detect anything nor will any major av software that's not on VirusTotal. Backdoors don't get detected that well. And with how sophisticated this was and how it almost tricked me entirely into thinking it was only after discord (which it didn't want in the first place).
Other details / notes:
This is more like a comment. I've spent my entire day so far figuring out what this was to figure out if any sensitive material (work related) was affected.
I've also reported it to the discord safety team as well as Google, and every server I share with this person.
Proof
######################
You MUST provide proof or your claim will not be valid!
Screenshots (make sure the accused email is visible):
Account Recalls
######################
N/A
-------------------------------------------------------------------------------------------------------
If you are not involved, please do not post in the thread.
Here you can find information about our Dispute rules and how we investigate disputes.
https://www.epicnpc.com/threads/90442-Dispute-FORUM-RULES
Information
######################
Purchase Date: 1/27/22
Date the problem began: 1/27/22
Method of Contact Used (chat program): Discord
Instant Messenger username of the person you're accusing: Tazsa#2917 (499405846959095809)
Your Instant Messenger ID:
Other information:
DISPUTE Information
######################
Link of transaction thread (URL, Epicnpc thread): https://www.epicnpc.com/threads/swords-of-legends-power-leveling-boosting-service.1995206/
Approximate value of property: $0 USD
Was Trade Guardian used? NO
If yes, what is the Trade Guardian ID? NO
What is the dispute about?
This isn't a typical dispute. You just don't have a category for it. This member has been going around on discord messaging an extremely sophisticated & malicious .exe to previous buyers on the pretense that it's for school. Honestly since it was Javascript I thought nothing of it at first since the game (snake) could be built on Javascript. Also thought nothing of it because this person is incredibly respected in here and I only had good interactions with them in the past.
Upon usage of the .exe: It forcefully logged me out of Discord, closed it, then reopened to try and get me to type in my password. That was a faux process. After immediately disconnecting my internet I attempted to figure out what it was doing.
Upon indepth examination of the .exe it is potentially backdoor built on axios, building its own http client, and using that to package and send itself data.
Why is this worth mentioning? Virustotal won't detect anything nor will any major av software that's not on VirusTotal. Backdoors don't get detected that well. And with how sophisticated this was and how it almost tricked me entirely into thinking it was only after discord (which it didn't want in the first place).
Other details / notes:
This is more like a comment. I've spent my entire day so far figuring out what this was to figure out if any sensitive material (work related) was affected.
I've also reported it to the discord safety team as well as Google, and every server I share with this person.
Proof
######################
You MUST provide proof or your claim will not be valid!
Screenshots (make sure the accused email is visible):
Account Recalls
######################
N/A
-------------------------------------------------------------------------------------------------------
If you are not involved, please do not post in the thread.
Here you can find information about our Dispute rules and how we investigate disputes.
https://www.epicnpc.com/threads/90442-Dispute-FORUM-RULES
Last edited:
