A Dangerous Crypto Scam is Targeting YouTubers

Yesterday, a pretty blatant #crypto #scam reached out to me via Discord to coordinate a promotional video. Obviously, I would never do a promotional video for a crypto game, so I decided to have a little bit of fun with them. However, what I uncovered was instead a very sophisticated and scary piece of malware.
I decided to perform a little bit of malware analysis on this and break their scam down to help raise awareness. While a scam like this may seem obvious if you have a strong technical background, this specific example was much more convincing than some of the others I've seen in the past.
They asked for a promotional video, I delivered!
Thanks for watching!
Subscribe:
/ @jauwn
Buy me a Coffee:
ko-fi.com/jauwn
Follow me on Twitter:
/ jauwnio
Join our Discord!:
/ discord

[@asteroidrules]

I guess it makes sense that crypto scammers didn't think to hide from people inspecting elements on their site, they know cryptobros can't right click.

[@MSOGameShow]

Lmao!

[@BewegteBilderrahmen]

lol cryptobros unable to right click is probably my favourite example of a modern geas.

[@AngelusNielson]

To be fair, the kind of person who falls for a crypto scam is too stupid to check.

[@vizthex]

lmfao

[@migueeeelet]

This joke's going over my head, can someone explain?

[@hayberdasher8625]

"Oh you're getting a virus alert from our software? Try disabling the anitvirus, that should get rid of the alert."

[@firestalker11]

💀💀💀

[@marcotruschel9427]

Works for me every time, that was until i lost my anti virus subscription due to my bank being drained

[@paranoiaproductions1221]

Some game engines legitimately give antivirus alerts. Specifically older RPGMaker versions and Ren'py.

[@neoqwerty]

@@paranoiaproductions1221 Depends on where you launch them from in a newer Windows install, most times. (protip, don't install anything but the RTPs in their default positions if you can, put everything in a folder on disc root (C, D, or whatever else the drive uses) instead.) Source: I've just fought with RPG Maker 2000, 2003, and XP to get them on Win11, the RTP is fine on default path and my habit of putting the actual editors and games in a dedicated set of folders to remember what's using which engine has stopped antiviruses from whining (also stopped admin prompt and saves failing).

[@artsyscrub3226]

@@paranoiaproductions1221 Yes but you can tell when they are legit, also not every anti virus is the same I'd run something detected as a virus through at least one other program to check what kind it is

[@annieshavingthoughtsagain]

Wow, a scam that pretends to be a different scam. It's scamception!

[@Xylophytae]

I love that movie!

[@MilesProwerTailsFox]

It's like when you tryna tell your friend is not gunna explode in Minecraft and you end up setting him on fire instead

[@anomonyous]

​@@XylophytaeI loved the part where Georgia Cloonèy scammed 200 dying children, jiggled her tits and started morbing all over the place.

[@anomonyous]

​@@MilesProwerTailsFoxTryna? Yeesh. That sounds bad, you might want to see a doctor about that.

[@MatthewCampbell765]

It's more like a scam that pretends to be a recruitment for scammers, but the would-be recruits are actually the marks.

[@cicadaseance]

I have an Aunt Nancy, and it's good to finally know she isn't real. Thanks, Jauwn

[@AlexPBenton]

We wouldn’t happen to be related, would we?

[@avgredditmod]

Same, except mine is my Uncle Nancy. Yeah, my grandparents were sadistic

[@snakewithapen5489]

​​@avgredditmod Boy named Sue situation. Did uncle Nancy meet his dad later on and start a barfight?

[@Aurelius_Official]

lol what a reference@@snakewithapen5489

[@Grayson-tk5hn]

@@avgredditmod what is "sadistic"

[@jf6944]

Reminds me of that GameStop NFT creator who made tons of sloth NFTs. They opened some malicious file to "collab" with someone, and ended up losing his seed phrase. This resulted in all the existing NFTs that had been sold to become worthless because the scammer had control of the wallet and could theoretically create more NFTs (although he just stole his money). Then the Sloth had to re-mint every single NFT with a new wallet and send the NEW, REAL nft to the old holders

[@valivali8104]

🤣

[@brandontoates]

Ah yes, another huge benefit of blockchain tech. Getting robbed blind with zero recourse. Future of finance for sure.

[@prettyevil6662000]

@@brandontoates Decentralization is so important though! For thieves and scammers.

[@williamdrum9899]

So much for non-fungible

[@SuburbaniteUrbanite]

If that can happen, why can’t they just assign randomized prices and worth the NFT since they can just ChatGPT new ones for free?

[@pyroman7196]

Amazing quality breakdown, as a cyber security person I love to see advanced topics broken down into human basic English for those less tech literate. I wish I had the production skills you have to be able to help build this bridge of awareness and avoidance for vulnerable people. Keep up the spectacular work

[@jauwn]

glad you found it interesting as a security person! I have no formal cyber security training, so everything I shared was just stuff I taught myself over the years

[@B.L.U.S]

​@@jauwnthe best school is good logical thinking

[@michaeltylerstewart]

Not only was this entertaining, this was also educational.

[@orangetabby7122]

I guess you could say that this content is called... Edutainment.

[@Ariamaki]

My favorite goof-up in their chain of stupid steps here was the 760M file magically coming out of a 26M zip along with several other directories "worth" of files. That implies the data was trivially compressed (IE, like you said mostly 0 bits) or self-springing, because there's no way in the nine hells an actual proper program, not even a launcher, scrunched that effectively.

[@abdou.the.heretic]

Unless it's Kkrieger which it's not.

[@someguy4915]

Heck they could've just sent a small program without malware as a launcher and have it start to download the actual '700MB' file to make it look far more realistic.

[@tardistrailers]

@@someguy4915 Exe files downloading and then executing other exe files usually get detected by heuristic anivirus.

[@williamdrum9899]

The classic "billion laughs attack"

[@PandoraStratos]

That's pretty normal compression.

[@drdiabeetus4419]

Hey! You forgot about the other places that style of ASCII art appears. Old all-text game walkthroughs and mod readmes.

[@youtube-kit9450]

Yeah, was gonna say so. I remember seeing that kind of stuff on old forums like gamefaqs frequently for guides.

[@mauricioalvarezpino1818]

Gamefaqs my beloved

[@wombatpandaa9774]

GameFAQs! Just thinking about that takes me back. I used to read stuff on that site for hours as a kid.

[@LepidoliteMica]

I remember printing out and stapling together a walkthrough for Lego Star Wars 2; that thing got tattered from near-constant use.

[@TrueBruceTube]

Yeah I've seen those when playing FNF moods.

[@medea27]

Great video! 👍 Just wanted to point out @ 10:32 that reporting these scams is _very important,_ even if no-one responds to your specific complaint. You might not notice any immediate action being taken, but that doesn’t mean the report doesn’t achieve anything. Scammers rely on people's reluctance to report, knowing it's not feasible for cybersecurity teams & law enforcement to investigate small numbers of incidents… so reporting “near-misses” or attempts like this one always provides valuable info while helping the issue reach critical mass to prompt action by authorities. “Near-miss” data is also incredibly valuable for big-picture analytics & being proactive with security, _especially_ when there’s a significant social engineering element to it. If I get a scam text or email for a company I’m a customer of, I always report it to them because I know how useful that info is from the other side of the equation. Cybersecurity whack-a-mole is much easier to play if you can work out which hole they’re likely to pop out of next!

[@migueeeelet]

Every report gives every other report validity. One report is a false positive, a hundred reports is a matter of concern.

[@fuilli]

@@migueeeelet and a million reports is hopefully someone in jail (or at least fined, which I guess is... *fine.* ... yea that was a bad joke)

[@ginger-ale7818]

Yeah, the place I work for does this funny thing where THEY send you spam/fishing emails. Like, the cybersecurity team is the one sending them. If you report the spam you get a little “Good Job!” pop-up. I don’t know how well it works in general, but now MY first response at seeing something even slightly Sus is to report it as spam.

[@pantallahueso]

8:15 It's also worth noting that a stealer malware can also steal your cookies, which allows them to bypass your 2FA because they don't need to actually sign in.

[@Mario583a]

Yup. Just changing your password is enough to make this not work as well as unchecking the [Remember this location/this pc]

[@williamdrum9899]

Cookie Monster: "And I took that personally"

[@TheBigQQ69420]

@@Mario583a You don't need a password for cookies, though. You can change it all you want if the site doesn't de authenticate that session, the cookie gives you access to the already logged in session. The "Remember this pc" also has nothing to do with saving session data in cookies which are stored in a trivially accessible database locally by your browser.

[@_crowfisher]

i think this is the video where I realized this guy knew way more than I thought he did about tech stuff

[@jauwn]

Eh im still no expert though I just pretend I am

[@Doomerang01]

@@jauwnHow do I know that you're just pretending to pretend that you know, and actually DO know?

[@theor3472]

Yea I was genuinely impressed. My man's out here with fancy softwares all over the place when I thought he was only for the funny nft gaming. Keep up ur right work !

[@lesslighter]

@@theor3472 if you have been through scam baiting vods some of these tools and info are infact out in the open also security researchers are in the tube which is also a good thing watching LPL led me to some pen testing channels which then led me to tech security pen testing related channels

[@tokorikam1936]

​@@jauwn😂

[@esuelle]

Great work, Jauwn. Their website and art actually look quite decent which is surprising. Still, the scam falls apart if you look closer. Or if you're not in the habit of downloading and running shady NFT games from the web. I guess that's an occupational hazard for you now. 🧐

[@jauwn]

Just another day out working in the mine field

[@asteroidrules]

I do have to wonder how much of the art was plagiarized, since clearly the text is.

[@prettyevil6662000]

@@asteroidrules Since it wasn't detected as AI made, I'm betting it wasn't and was just snagged off little known websites or sites that aren't cached by Google image so you can reverse search. (Such as pixiv). Just like was done with those articles. Easy to get professional quality material when you just steal it. No AI even needed.

[@mrprogamer96109]

I think they just booted up Inkarnate, a tool mostly used by Tabletop RPG GMs to quickly make fantasy worlds.

[@blankityblankblank2321]

I'm not in cyber security but seeing the breakdown of the virus, what it does on a virtual machine, and everything else was very educational. Much better than repeating "don't download weird things" again and again. You did a good job.

[@Axcille]

"there are no real people with the name nancy" -got me laughing

[@ZeroPlayerGame]

One thing you didn't mention but is a HUGE red flag is a password-protected archive next to a password in a text file. The only reason I've ever seen that done is so that your antivirus cannot snipe the file dead as you're downloading it, as it has no way to decrypt the archive and access the contents. You ever see a password-protected archive like this, it should go directly to trash, no matter what it claims to be.

[@faawks]

Mate, I like to think I'm pretty up to date with all the scams going on, but this was mostly new to me, I firmly believe that EVERYONE should watch this video, super informative, I hope it can somehow go viral, I'll do my part.

[@SHDW-nf2ki]

Fun fact, Magical World is a D&D slang term for a campaign or setting that revolves around the DM's sexual fetish(es)

[@coltonlong7562]

You mean "Dare you enter my Magical Realm?"

[@ZorotheGallade]

@@coltonlong7562 All bow before the Whizzard

[@ZKtheMAN]

Would this magical world have anything to do with putting on a robe and wizard hat?

[@toby818]

@@ZorotheGallade wizhard

[@z0w0z.]

what the helllllll 💀💀

[@mysticyam4109]

I looked it up and saw that there are people named Nancy😱

[@jauwn]

Fake (real)

[@bwarrent]

I bet they stole the assets of an old failed crowdfunding game to make theirs look legit.

[@nathangamble125]

When I saw it, I immediately thought of concept art from nightmareworld (a game prototype created entirely for the sake of demonstrating the incompetence of the developers of "dreamworld", an NFT scam game). I don't think it is from nightmareworld, but some of it looks similar.

[@sinty0x]

J, excellent video showcasing how easy it is to create a fully fleshed out profile online that appears legitimate at the surface level, and we could all use the refresher regardless of how experienced we are! P.S. I know gosh darn well you didn't just pronounce 1337 as thirteen thirty-seven.

[@jauwn]

If you think I'm going to say the word "leet" out loud in 2023 you're dead wrong

[@Unnamed86]

@@jauwn it's "one thousand three hundred and thirty-seven"

[@hand13932]

LOLOLOLO 1053R @@jauwn

[@williamdrum9899]

​@@Unnamed86 You forgot "In The Year of Our Lord" at the beginning

[@trouty7947]

​@@Unnamed86no it's one thirty three seven

[@Pipkiablo]

My guess is that the art and gameplay clips look legitimate because it is. They probably stole it from another crypto project or a failed kickstarter.

[@hi-friaudioman]

I came across a facebook bot today, i posted something with the word "hacked" in a public post and almost immediately i had someone with no posts and an obviously fake account comment with a link to someone who is her "computer wiz" and then the fishy link. I instantly blocked the user, took the post private and deleted the comment.

[@QuanticBlob]

After that ASCII art I thought there would be an installer playing a royalty free song.

[@asteroidrules]

All things considered the level of polish they put in to their fake website and social media should have been a red flag, it looks way too good to be a crypto game.

[@nolife874]

you should of cobbled together a game launcher for the game and sent them a screen shot of that

[@bobroberts2581]

Dude seriously tried to Bioshock you? “would a you Kindly to be turning off your abitivrus software please now kindly.”

[@jauwn]

That game must've trained me to never listen to anyone saying "kindly" do anything

[@qwerty_artist]

Dang, now Jauwn is getting into investigative videos? I can only like a video once my dude! Also, I would so enjoy a video just going over the cringe email offers you get ngl

[@teamworm5932]

Probably worth noting that SMS 2FA is usually considered one of the least secure 2FA types

[@jauwn]

😅 everyone keeps commenting this lol, I pinned my response. But SMS 2FA is miles better than Email 2FA, which is what I was trying to get at in the video. Guess it wasn't very clear

[@theuncannyalex]

obsessed with the way you systematically deconstructed their whole deal, informative ~and~ satisfying

[@crowcoregames1785]

its not entirely pointless math its a enlarge prompt, its entire purpose is basically to fill the code with pointless data, it basically is a bunch of math that is designed to increase its own file space, with the malware attached to it basically what happens is the code runs and gains the same error over and over wile secretly running the malware in the background. at least as far as i know

[@jauwn]

Yuuuup you are right I learned that after making the video

[@crowcoregames1785]

yeh malware coding is like a whole thing, use to do stuff about f12 coding at collage and what applications binary can have@@jauwn

[@MandrakeFernflower]

CIH did a similar thing back in the 1990's

[@crowcoregames1785]

yerp@@MandrakeFernflower

[@dicedoomkid]

Running a virtual is crazy useful to protect your pc I wish I understood more about this kind of stuff

[@kenirainseeker539]

It could just be stolen art, do a reverse image search

[@brandontoates]

Awesome work Jauwn. And, just for the record, I believe March 28rd will be the day of the MOASS. Buckle up.

[@-Siknakaliux-II]

I like the explanations and programs featured to give a deeper look at things. Would a list of the sites used be put in the description or via text on screen for reference?

[@crispx19]

This is the most clean and simple exposition of a real scam , i see now how little one has to know to "hack" people... All you could do with just money and almost none computer knowledge. Thanks for this video

[@anum4776]

Immediately after this video I got an ad from (legit) bank warning about opening links that pretend to be postal service, your bank, IRS etc. and to stay safe online

[@emmajane7055]

i watched this and expected your subscriber count to be like 500k wtf, this video was awesome + you’re definitely gonna grow very quickly :))

[@jakeh2034]

Man...... You are tickling my fancy making me feel internet savvy and unscammable in this video. The ASCII art brought me back to TPB glory days.

[@TWDub]

I love watching videos wherein which scammers are exposed. Well done! Hopefully the report you sent in was able to get them taken offline, if even only temporarily.

[@shrug_shrugsly]

Best. Thumbnail. Ever. Thumbnailed.

[@cccapuno]

i've taken down a couple of websites like these, the scammers are always from countries where the police don't even care even when you send them their address and full name of the scammer, they just open another website and continue stealing money

[@holyhelga]

well NFTS are always a scam the way i see it

[@Kalel_The_Protogen]

still hard to believe people like this can exist, it’s great how there are websites to handle these viruses

[@yesmynameisgamecube]

the “no real people are named Nancy” made me actually have to stop and think, because i actually know no one, family, friend or celebrity, named Nancy. my mind just kept going to Nancy Wheeler. i know that people named Nancy exist, but I don’t know any

[@vamuse]

The sheer amount of tools and techniques you used to pick this malware apart is what really impressed me. I consider myself pretty computer savvy but have not heard of 2/3 of these applications. Thanks for the detailed breakdown, inspired me to look into how some of these tools work so I can at least feel like I can browse more safely.

[@jerryf5528]

I know this will sound stupid but I actually ran the exe on my PC. Took me 20 mins to realize what happened and I wiped my drives clean, reinstalled windows and did a ton of scans. This was about 7 days ago and I had text docs with some semi-important info. Nothing has happened so far though. And I safe now or can this thing survive even a clean reinstall?

[@jauwn]

Not stupid at all! Like I said this is a very convincing scam. As far as I know, there are very few pieces of malware that can persist through a full system wipe, and I wouldn’t think this one would be an exception. I would make sure to change every single password you have, starting with you email. You also want to make sure that you have 2FA enabled for all accounts. If they didn’t steal anything yet, there’s a chance that either you simply didn’t have anything interesting for them to steal, or they haven’t gotten around to it yet. If you had any seed phrases stored on the computer, those are probably compromised though, so I would get all of your crypto out of their ASAP. If they do manage to steal any of your crypto (if you have any) then it would be interesting to see what wallet they sent it to

[@jerryf5528]

@@jauwn Thanks for the reply. Already did all of that. FWIW I also played with the exe file in a controlled environment and malwarebytes found nothing. I also managed to scan it online (can't remember which one allowed the upload of such a large file) nothing was found. Avast picked it up and from your video I see that NOD did too. Did you manage to discover which files does it scan for?

[@jauwn]

Not sure I understand your question. What files does what scan for?

[@frag0638]

Consider all your browser passwords sold

[@Elvan-Lady]

Thanks for the reminder to set up 2FA. I have it on a lot of my stuff but I had forgotten to set up non-email version on one of my more important passwords.

[@mattb8075]

Great analysis! I am particularly interested in your knowledge of the intricacies of this. Are you just a power user, or did you go to school for InfoSec? I did myself, so it feels to me like you did too, or you just do a lot of good self research. I'm curious to the case. I'd like to see more content of dissecting scam attempts, they are fun to watch the scammers fail spectacularly

[@jauwn]

Just a power user! Nothing I learned in school really helped me learn this sort of stuff. I learned way more just from being a PC power user since the early XP days, and was even more pushed to learn by my father who used to be a big PC enthusiast in the late 90s-early 2000s. I think the best way to learn this sort of stuff is to take an honest interest in it and start teaching yourself. School is great and all but your passion to learn will teach you far more in the long run.

[@mattb8075]

@@jauwn Thank you for the response, yeah I've been an early PC power user myself since the early Win 2000 days. Interesting to hear your perspective. Like I mentioned, I hope you might do more of these scam attempt investigation videos they are fun to watch. I'm pretty much watching anything you put out though lately

[@BobLu]

I am wondering if the scammer got the assets of some abandoned project to make their website looks legit?

[@rickywalters7717]

Hey, they wanted to see a short recording of you launching the "game", right? Why not take a quick recording of you launching the .exe, asking "huh, it didn't open up. Did I do something wrong?" And then wait for them to notice they didn't even get any real info.

[@Violetstainn]

Jauwn you did it again, this video is extremely entertaining, well put together AND informative. Your content is getting better and better with every upload :') Can't wait for the next crypto scam XD

[@zantanzuken]

i feel like that website is probably built off someones school project, which is why it looks so good... they likely WANTED to make a game at some point but dropped off because they realized it was more difficult than they expected. files fall into the internet cracks, some random shmuck rebrands it as a web3 project, bam boom scam time.

[@nitiratp]

Fantastic video Jauwn!

[@MrMeowstic7]

Yeah this whole thing just screams "scam"

[@jauwn]

The funniest part is that it still exists and people are still falling for it. Someone just messaged me saying he lost $10,000+ of crypto from downloading it.

[@MrMeowstic7]

@@jauwn damn

[@oliver_twistor]

@@jauwn I partly blame legitimate developers of Windows software who teach users to allow privileged access for every little thing. That way, when a malicious software comes along and asks for access, most users will click Yes without a second thought. I also blame Microsoft for making it seem like not a big deal to let software run as administrator and even higher privilege than that. That's what I like with Linux. Running a software as root is scary, as it bloody well should be.

[@Sopsy_Hallow]

@@oliver_twistor i think its a double issue ngl, on one hand, making it so easy/the norm to run things as admin or allow admin privileges is bad, but it's not helped that a suprising amount of normal stuff just often doesnt run without them.

[@stickyfox]

"Crypto Scam" Next time someone asks you for an example of a tautology.

[@kessiniktange8861]

"If something seems too good to be true, it probably is." I learned a slightly different version studying business in college: "If something seems too good to be true, it is."

[@attilamagyar91]

I love this IT investigation arc.

[@Fadsy]

I appreciate getting to see how scams like this work There's been a few times that this kind of knowledge came in handy when helping my parents with certain situations

[@theworkshopwhisperer.5902]

I guess that's the art to it. Don't download suspicious files... Unless a generally trustworthy youtuber happens to recommend it after they sound slightly strange in a video.

[@maddhistorian_jil1464]

No reference to old Gamefaqs with the ASCII art smh.

[@tylern6420]

It must be good that i'll like never interact with this blockchain stuff then

[@tylern6420]

but if i change my mind and start using basic crypto (like Bitcoin) then i'll simply mine it and trade it as that seems much less volatile than buying a digital asset and hoping it doesnt crash in price

[@jauwn]

Nah it’s not worth it you’re not missing anything by just ignoring anything crypto

[@tylern6420]

@@jauwn fair enough

[@tylern6420]

@@jauwn if i HAD to choose between mining or these nft games tho, i would choose mining because if you have hardware, you only really gotta pay the electricity used by the rig

[@Hifuutorian]

@@tylern6420You cannot possibly mine efficiently enough to pay for the electricity you are using to mine in the first place. Maybe if this were 10 years ago.

[@lethalee]

Oppa Gangnam style. Elite haxxzor defending skills on display. Good vid!

[@chucklesdeclown8819]

man, the website looks so good too. they should have made an actual game XD

[@Splashzone263]

I had my discord almost stolen by this type of scam and trust me it is ALWAYS smart to have 2FA, if i didn’t have discord support help me i would had been done for I had to completely restart my PC and that was always my most embarrassing moment, and to be honest seeing that scam being shown still scares me

[@anon9469]

It says something about the quality of crypto games when you get better website design and more effort from direct scam attacks then the actual 'triple-A' games.

[@malkavcandy]

excellent breakdown of the scam! knowing how these things look and work is super helpful

[@erwynnipegerwynnipeg8455]

You'd be a great malware investigator, Jauwn. I'd watch the fuck out of that.

[@PlatonistAstronaut]

This was a really interesting video; educational and funny. Loved it.

[@deezulboy]

This is great. Awesome video man.

[@koridic3188]

My childhood remembers ascii artwork at the start of walkthrough guides back in the day for games.

[@StefanoAgrotis]

8:18 Please remember that token stealing will bypass MFA.. that's the truly scary part. Also, SMS 2FA is among the weakest type, as your phone number is a fairly easy target for social engineering.

[@Atsumari]

You are a gift to humanity; thank you.

[@skeletonBOI-wn4lw]

i declare marshall law against crypto scams

[@batchampa]

2FA that sends a code to your phone is actually pretty bad these days. Too easy to Sim swap people if they think you're worth it. An authenticator app is a better option

[@delusionaut]

explaining it like i was 5 was Very good and i rly liked this vid. Educational , simple 2 follow and quite Funny tbh

[@miso-ge1gz]

These 27 megabyte zip files that extract into a full game-like size are real funny. They are usually just endless downloader links and download an insane amount of bloatware programs and add toolbars to your browser. The only reason they can be compressed so much is because the file is padded with a bunch of zeroes/ones.

[@Tydusis1]

I've taken a reverse engineering course as part of cybersecurity coursework, and worked with debuggers like IdaPro. Windows defender probably couldn't scan it for at least a couple reasons. One, it is novel, and lots of scanning is signature based, and perhaps the file definition table wasn't up to date, especially if you are using an unpatched windows VM. Two, and probably the biggest one, is that lots of malware is packed, that is compressed, in such a way as to obscure its intentions, and make it harder to analyze. The unpacking program will decompress the actual instructions before running those. It's possible the program was packed, though having at least one scanner successfully figure out what it was tells me that it wasn't THAT novel, as most malware worth their salt will use a custom packer (variants of UPX packer are common) and require manual analysis of some kind to reverse engineer. The inflated filesize is a separate issue which I think you covered well.

[@kyuboxincubox7556]

...The antivirus thing reminds me, I've been using the default microsoft one this whole time. You seem like a tech savvy guy, got any recommendations for anti virus programs?

[@bobbobber4810]

Imagine when bots are going to become sentient. OnlyFan bots and crypto bots are going to rule the world.

[@Sunscreen723]

Your videos are entertaining ,continue making content plz

[@TheLastYnzy]

I think the most depressing thing to me is that (assuming not everything on the site is stolen) they have what could be an interesting looking game. Like drop the NFT thing and make it some kind of Card Battler or Darkest Dungeon style game out of it and they'd probably actually make money off it.

[@northropi2027]

"Our new game engine, a program ran on a local device, uses Blockchain Technology, a means of intercommunication between a set of devices!" What Does That Even Mean

[@thepieguyinthesky2363]

5:24 I would like to add that I see ascii text like that commonly in emulators and the such as well (which is well, borderline hacked/cracked software, but still)

[@imaplaygames633]

In the event that I was a part of a crypto game I would ask you to review it, in part because at the very least I wouldn't let it be crap.

[@Cleric4521]

The most suspicious part of this was seeing the ASCII art without hearing some banger of a chiptune song blaring.

[@DisinformationAgent]

ASCII art like that is a safety blanket for people for the real people of the Internet, seeing it being used to steal money from real people and not corporations breaks my heart.

[@asj3419]

9:35 I think they took a working polynomial solver and made it loop over a array of 10 (probably random) unsolvable polynomials multiple times. That's really weird, but I assume it's just another thing they just put in there as a distraction.

[@TonySpike]

Thats some nice detective work their Nancy Drew

[@Rae-Rudi2357]

that ending is taking me out XD

[@flizzycat]

You can open the exe in a hex editor and just remove those null characters

[@jacobn8509]

Thanks to this video, I could tell a friend-of-a-friend was hacked when they asked me to test an indie game "she" and "some friends" were "working on." They had an actual KZbin of fake game footage and a fake website, too.

[@jauwn]

Hell yeah!

[@venichen1]

Guess this is how LTT got hacked lol

[@jauwn]

Haha most likely

[@ajaxmaxbitch]

I know I'm 4 months late but you're basically right. What happened was I guess one of the employees received a email for a fake sponsorship and sent a pdf file. But it actually wasn't a pdf and was actually malware

[@PROdotes]

another important thing... exe files are generally small... if you have an exe that's 100s of MBs, that's a red flag in general... a lot of the real work is done in other files...

[@Mako-rh6tl]

Only recently discovered your channel and been binging the content. Didn't ever expect to see VT, Triage, and Ghidra referenced. Love it.

[@atheist_addict]

These are my favourite of your videos.

[@mightylinsomniak3464]

@Jauwn i know you literally said in the video to not ask you to play nft games. But what if i'm trying to build a legitimate game and wish to get constructive criticism from you or a similar "scam review" channel? How would you shake off the bad reputation that nft games currently have if you had to make one? Your videos are cool btw, I have no doubt you will grow in subs rff.

[@jauwn]

If you wanted to get constructive criticism then I'm sure me or any other similar channel would have no problem providing that as a paid consultant, and giving that feedback in private. But I wouldn't expect a channel of this sort to do a promo / partnership video on a type of game that they have a history of making fun of, it wouldn't be a good look for your game, or for their channel.

[@valivali8104]

Is it possible to make nft-games, when nfts are scam to sell crypto? What nfts can give which nothing else can, in way which justifies all problems nfts cause?

[@brandontoates]

One of the points this channel frequently makes is that video games should not be "P2E" or any variant thereof. Some of the reasons for this are 1) it takes the fun out of video games. They're supposed to be fun, not be a job. 2) "P2E" is associated with many scams, and most of the time is just a front for P2P. 3) "P2E" has been proven to take advantage of people in developing nations to the point of absolute absurdity. So besides the whole "P2E" scam, crypto provides absolutely nothing of value to the gaming industry. There are videos that explain very, very well that virtually any theoretical use case for NFT's in video games that isn't inherently evil not only will not work, but aren't necessary; not to mention they often attempt, and fail, to solve problems they create. After all that being said, what could you possibly be creating that will change any of the aforementioned? If you like to make video games just make video games. Leave the NFT's out of it.

[@mightylinsomniak3464]

@@brandontoates I get what you're saying. What is your opinion on RMT in video games ? i clearly remember playing D3 and having fun with it without spending anything on the RMT auction house. If the game addressed thoses concerns (regarding currencies power imbalances and p2p) would you consider looking at it? Mostly i'm interested in the smart contract side-effects that can be applied to owners of specific nfts (and i do think there are video games applications to it that would not involve scamming or paying bagillions of dollors for simple items). But the common sentiment seems to be: "if NFTs are involved then it is a scam and there is no way around it"

[@brandontoates]

@Mighty L'Insomniak The reason the sentiment you mentioned is common is because it's literally the only thing we've seen thus far. As far as RMT, if you had fun playing a game that utilizes it without using it yourself, you're just proving the point that it's totally unnecessary. Also, from my understanding, there are games out there that have these auction houses without using crypto to do it, so once again crypto is unnecessary right? There are all sorts of payment systems that are more secure, cheaper, and far more efficient than blockchain. As far as the "smart contract side," I'd need you to elaborate. I see absolutely no benefit to implementing smart contracts in video games. Once again, blockchain in video games utilizes the premise of fixing things that aren't broken, all the while being a huge opportunity for scammers. When it comes down to it, I suppose I wouldn't be totally against checking out a game you've made that utilizes NFT's, but I'm quite skeptical that they would add any value to your game, and would be a giant waste of your time when you could just build a fun game, probably for cheaper, without all that nonsense.

[@Atzy]

There's a darker aspect to this interaction, considering your anti-crypto stance and the possibility that a worm like that could be used to capture the credentials of say, your youtube account. It could have been a targeted attack

[@hamburger_eatspie]

I find it funny how crypto games keep asking to be sponsored and end up getting completely exposed

[@Meepb]

My mom’s name is Nancy and our last name starts with B. Suspicious.