Skip to main content

Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
TagsGame Engines

How about you check files BEFORE they are uploaded

A topic by Indie Game Nerd created Jan 19, 2023 Views: 398 Replies: 4
Viewing posts 1 to 5
(+1)

This is the second malware I got from a game I've downloaded from this site, and it is not any malware, a crypto miner combined with a key logger.

I had to edit the registry and windows services to get rid of it.

Why I'm sure? Because I double checked it, I ran the .exe again and Malwarebytes gave a warning, I did a TotalVirus scan and it confirmed it's a trojan.

I've tried to search for the game (siren head) to post the link but didn't find it, it was added in the last 24 hours.

Fix your shit, it seems any 5 y/o kid can upload a picture of his ass here.

Moderator(+2)

That's true of any website where people can upload things. Please report any such project so staff can take care of it.

(+1)

While it is true that more  and better scanning should be done for uploaded files, it is also true, that I recognised lots of  scams almost immediatly here. Real game sites just look different in the lower part after the fake description.  And they do not get promoted by comments in other games with look here, free game.   And they are not polished looking with only a few hours/days in age on the site. Or published by an account that was dormant for a year or is  new.

Did the malware ask for admin rights? I am just curious, because that would be the final straw for any  supposed game that I downloaded. Sadly Microsoft did a very, very, very bad design decision to make installing user level programs (like games)  in the  Progams Folder an action that requires admin rights, training users to just click yes, when installing stuff. (Though, practically all games I downloaded here are not installed in the classical way, but only extracted and run from wherever.)

That's why I like to use Windows 11 Pro -- it has Windows Sandbox where you can do things in a safe environment. If there's anything malicious you can end the session and go back to your normal desktop. 

But in general you can stay safe by making sure the game you're downloading meets the following criteria:

-- The game should have multiple screenshots and/or gifs. 

-- There should be comments or ratings for the game (unless it just came out). 

-- Legit creators are going to have better creator pages -- a gallery of their other projects, a nice bio, links to their social media, etc. 

-- File size should be representative of what you're downloading. If you see a 1GB  download of a Space Invaders clone . . . unless the graphics are really good, that'd be a huge red flag.

The screenshots and the description do not help. Those are copied from real games. Even the name can be copied.

Disabled comments  on a recently uploaded game are a red flag. It would enable users to warn others for the time span it takes an admin to delete the stuff.

And there seem to be stolen accounts. If the user page is dormant for months and not creating games, but commenting like a player,   and suddenly a good looking game is published... not very plausible. Better double check other  hints.