cross-posted from: https://programming.dev/post/37902936

For anybody wondering what is going on with $CANCER live stream… my life was saved for whole 24 hours untill someone tuned in my stream and got me to download verified game on Steam

After this I was drained for over 32,000$ USD of my creator fees earned on pumpdotfun and everything quickly changed. I can’t breathe, I can’t think, im completely lost on what is going to happen next, can’t shake the feeling that it is my fault that I might end up on street again or not have anything to eat in few days… my heart wants to jump out of my mouth and it hurts.

I won’t rewatch this myself but I have added a clip from the stream after I noticed what has happened.

also I have succesfully (CTOed) my creator rewards and they have been redirected to safe device.

Source: rastaland.TV on X/TwitterPrivate front-end.

More context:

Yesterday a video game streamer named rastalandTV inadvertently livestreamed themselves being a victim of a cryptodraining campaign.

This particular spearphishing campaign is extraordinarily heinous because RastaLand is suffering from Stage-4 Sarcoma and is actively seeking donations for their cancer treatment. They lost $30,000 of the money which was designated for their cancer treatment. In the steam clip their friend tries to console them while they cry out, “I am broken now.”

They were contacted by an unknown person who requested they play their video game demo (downloadable from Steam). In exchange for RastaLand playing their video game demo on stream, they would financially compensate them.

Unfortunately, the Steam game was actually a cryptodrainer masquerading as a legitimate video game.

Video.

Source: vx-underground on X/TwitterPrivate front-end.

Source: ZachXBT on X/TwitterPrivate front-end.

Rastaland GoFundMe.

Comments
@[email protected]
link
fedilink
English
-519d

That’s what they get for trusting crypto.

@[email protected]
link
fedilink
English
5
edit-2
19d

Your callousness is disheartening

@[email protected]
link
fedilink
English
219d

Look I hate crypto too but I don’t think someone should die a show painful death because they were trying to use it to, like, not die.

@[email protected]
link
fedilink
English
219d

Damn. I hope you never go through something like this.

@[email protected]
link
fedilink
English
-1021d

Jerboa developers, may I kindly ask for an option to disable automatic video preview?

Don’t get me wrong, it’s a nice feature and all, but fuck it eats at my limited cellular data usage and eats my battery…

nocturne
link
fedilink
English
2021d

Might try putting the comment in a jerboa community, or opening an issue on their codeberg or git, in the event none of them come to this thread.

@[email protected]
link
fedilink
English
-521d

I already did, right after the feature dropped.

@[email protected]
link
fedilink
English
420d

I don’t know what Jerboa is or why you commented about it under this post…lol

@[email protected]
link
fedilink
English
1319d

I’m not into crypto. But how can it being stolen just by reading some file in the computer? Isn’t the private key encrypted with some really secure password? It was stolen while the private key was being used?

Sonalder
link
fedilink
English
719d

To keep it short there is two big families of wallets. Hot and cold wallet. Hot wallets are the one that got an internet connection wether it’s a constant one or periodically connecting. Cold wallets are never connected to the internet and often are dedicated hardware devices with the better ones having a Secure Element to store the private key or even sometimes sign transactions directly in it.

Victims of this attacks were using hot wallet on a not-dedicated machine which is consider bad practice. Hot wallets have to be consider more like a physical wallets for daily spends and cold wallet being privilege for long-term saving and monthly or yearly transactions.

I’m not an expert but desktop OS (especially Windows) are not as well contained than phone so I almost never use hot wallet on my computer. Often users are tricked to sign transactions to get stolen but I think if the wallet is unlocked a malware with the right privileges/permissions could easily steals money.

by reading some file in the computer Aren’t Steam games always executable for Windows?

I Cast Fist
link
fedilink
English
1119d

Considering how the malware works, it seems that the criminal managed to copy/steal all the browser data of Rastaland, including open sessions, allowing him to login on any site that had an active session/cookies, including that pumpdotfun where the coin was

@[email protected]
link
fedilink
English
3720d

Crapto is a total scam. Stop putting your money into this damn Ponzi scheme.

ms.lane
link
fedilink
English
720d

I would have agreed a year ago.

But the only clearing houses for online transactions turned out to be a bunch right wing stooges that hate LGBT and Adult Games.

𝚝𝚛𝚔
link
fedilink
English
3620d

Oh crypto, can’t you go five minutes without being a scam?

… How long was that?

@[email protected]
link
fedilink
English
2120d

This isn’t a problem of crypto being a scam. The scam was a video game in this case.

If someone hides $30k in cash in their home, gets robbed, then the robber spends it all and dies penniless? The victim won’t get their money back. Same as this victim.

That’d make cash just as much of a scam as crypto in these two scenarios.

𝚝𝚛𝚔
link
fedilink
English
-220d

If someone hides $30k in cash in their home, gets robbed

That’s not really a comparable scenario though, is it? To be robbed of cash someone has to physically be in the same location, and physically remove an object from your safe keeping (be it a literal safe, or on your person)

To steal crypto someone on the other side of the world can just be like “yo bro click this” and 18 seconds later its gone. Who was it? Who knows. Where are they? No idea! Not even a chance to yell out “omg help help someone help this guy is stealing my stuff” as they do it.

As a side note, I’m not a “cash is king” type person anyway. I much prefer electronic transfers. I just prefer my electronic transfers to be real money handled by financial insitutions where its protected by laws, not magic beans.

@[email protected]
link
fedilink
English
1119d

As others have described, people can steal money digitally the same way. Yes, real money is infinitely more trackable.

That doesn’t mean crypto is a scam. It just means it’s not (as) trackable as traditional currencies.

And I’m not a cryptobro or anything. I just don’t think cryptocurrencies are inherently “a scam”.

@[email protected]
link
fedilink
English
0
edit-2
19d

Yes, real money is infinitely more trackable.

This isn’t even true, unless you’re specifically talking about coins like Monero.

If you think bitcoin is untraceable, then I’ve got a bridge to sell you

@[email protected]
link
fedilink
English
1
edit-2
19d

Yeah, that was a bad description on my part.

Compared to digital transactions of traditional currencies though, my understanding is that traditional currencies are easier to trace

@[email protected]
link
fedilink
English
5
edit-2
19d

You can definitely get your bank account emptied by just “clicking here”. Personally know people that suffered that. And depending on the bank they will refund or not. If they got away with being a user rampant error you will be on your own.

@[email protected]
link
fedilink
English
019d

All the average gamer-intelligence in this thread is reassuring.

Glad I still see no reason to take most of you people seriously on anything related to technology.

@[email protected]
link
fedilink
English
6220d

At this point people should not keep substantial amounts of crypto on their main PC anymore. Either get a hardware wallet or an old smartphone or other device to dedicate to that purpose and not install anything else on it.

@[email protected]
link
fedilink
English
-619d

The crypto was never stored on their PC, that’s not how it works.

Sonalder
link
fedilink
English
619d

The private key was.

Owl
link
fedilink
English
719d

old smartphone

Please don’t use a device without security updates and a shitton of known vulnerabilities as your wallet

@[email protected]
link
fedilink
English
219d

If that’s what’s available I will argue it’s still a better option, because it’s isolated. You can make transactions with QR codes and do nothing with the device except run the wallet app, which removes most options for an attacker, including some that could work on a hardware wallet (ie. more complex transactions where it doesn’t display enough info about what is happening to know not to approve it).

@[email protected]
link
fedilink
English
2620d

Yeah, like 100% not to victim blame, but that is what not to do 101

@[email protected]
link
fedilink
English
319d

Reason why I am hesitant to do online banking on my PC and rather do it on my phone if possible.

Echo Dot
link
fedilink
English
119d

You get that your phone is a PC right? You’re no more secure if you just do it on your phone.

Your security from banking comes from the fact that the industry is regulated and has fraud protection. Crypto is just as wild west of anything goes nonsense.

@[email protected]
link
fedilink
English
1
edit-2
18d

Sure. I could also limit myself to doing it on a separate machine or a VM that has different credentials than my usual PC.
But my phone is more convenient :)

Echo Dot
link
fedilink
English
118d

That wouldn’t protect you either since the risk is fraud not anything digital. None of this would have been able to happen had people not been able to get fraudulent software on his computer. If they can get software on computers that can take malicious actions, then even having it on a virtual machine won’t help you since it still needs to be connected to the internet to be useful.

An active antivirus system would have prevented this. Windows built-in antivirus system is horse dung. I’m pretty sure even the free tier of malware bites would have dealt with this.

@[email protected]
link
fedilink
English
118d

Virtual machine as in: Gapped purposes for different tasks.
For example: I don’t do my taxes on my gaming rig.

@[email protected]
link
fedilink
English
4720d

America is the only country where this could occur, look yourself in the mirror…

HighlandCow
link
fedilink
English
119d

I heard about this but actually watching the video right here… Heartbreaking ):

@[email protected]
link
fedilink
English
16
edit-2
20d

Maybe don’t raise money for your cancer treatment in the form of crypto? Hard lesson to learn for sure

@[email protected]
link
fedilink
English
2620d

I don’t think it’s such a direct lesson since it could’ve been other financial information on there. Instead of a crypto key, the game could’ve installed a keylogger that read the player’s banking password later.

It’s more of a general warning that Steam games are not necessarily safe.

@[email protected]
link
fedilink
English
420d

I believe they were streaming on a platform that is built around cryptos

@[email protected]
link
fedilink
English
2
edit-2
20d

People keep saying $32k was stolen by malware. No, that did not happen. Malware did not reach into someone’s bank account and withdrew $32k. Here is a simple fact. Crypto is not money. If your brain says something like “it works just like money, or it’s worth just as much as money so it’s basically money” then you’re most likely to get scammed at sometime in the future by putting your actual real money into crypto. It’s that simple.

@[email protected]
link
fedilink
English
119d

What is your definition of money then?

@[email protected]
link
fedilink
English
219d

A form of relatively stable currency that is accepted to have value for the trade of goods and services by the majority of locations.

Memecoins from pump fun that are less stable than Trump’s mood and vent be used to buy pretty much anything are definitely not that

@[email protected]
link
fedilink
English
219d

So would you consider a stable coin like USDC (fully backed by USD, and audited) to be “money” then?

@[email protected]
link
fedilink
English
2
edit-2
19d

Do the majority of locations that offer goods and services accept USDC in it’s designated region? Can you buy groceries at basically anywhere with it, watch a movie, pay for a gym subscription etc with it? Can you buy a home or other shelter with it?

If no, then no, I don’t, since it didn’t meet that criteria.

Edit: also, what’s the point of USDC, at least based on your description? Sounds it’s just using more resources to do the same thing a debt card does.

@[email protected]
link
fedilink
English
019d

By that definition the Argentinian Peso is not money because it’s not stable, nor is the dollar since the majority of stores in the world don’t accept it (mostly just the ones in the USA do, and a couple of others here and there, but definitely not the majority worldwide). And if you’re going to start randomly limiting locations, I’m fairly confident you can find a specific neighborhood or city where more stores accept Bitcoin than dollars, and worldwide I’m fairly confident more stores accept Bitcoin than Tuvaluan dollar, does that mean that that is not money?

@[email protected]
link
fedilink
English
3
edit-2
19d

You crypto heads always bring up the Argentinian Peso even though it’s still actually more stable than even Bitcoin. People aren’t buying Argentinian Pesos thinking they might become rich one day, because it’s an actual currency, not a speculative asset, which is what crypto is. It won’t spike in value over 3 months or dive off a cliff by multitudes of thousands. I guess if you’re a 300 year old vampire or a Galapagos tortoise it’s not stable to you, but a currency having a crash but then staying at a crashed value, over the course of decades, is in fact stability. Having crashes and spikes over months if not weeks is not stability.

But ignoring that, most of the world does actually accept US dollars - it’s the most traded currency in the world. It’s also safe to say in nearly every country you can probably exchange USD to the local currency fairly easily.

If you can find me a city where more stores accept Bitcoin rather than the designated currency, then sure. I’m not sure a single one exists.

And that’s bitcoin, which actually is well known and traded. What the person in the article lost wasn’t even that, not any other well known crypto like Ethereum.

@[email protected]
link
fedilink
English
018d

You crypto heads always bring up the Argentinian Peso even though it’s still actually more stable than even Bitcoin.

I bought the Argentinian Peso because I am Argentinian, and lived through the devaluation of our currency, and the Patacones and Corralito, maybe because you haven’t experienced something similar you don’t understand just how much of “money” is based on trust.

People aren’t buying Argentinian Pesos thinking they might become rich one day, because it’s an actual currency, not a speculative asset, which is what crypto is.

You can speculate with anything, the fact that people speculate with crypto has no bearing on it being money or not. Also you might be unaware but people do speculate with dollars/pesos in Argentina, that does not disqualify either of those as money.

But ignoring that, most of the world does actually accept US dollars

No, you’re wrong, outside of Argentina and the US (and a few tourist heavy places) I have never seen stores that accept dollars. This is a misconception Americans have, dollars are not accepted worldwide, you need to exchange it for the location currency, just like how trying to pay for stuff in the USA with Euros or Reais would not work.

it’s the most traded currency in the world.

Bitcoin is more traded than some small countries currency, if that mattered then Bitcoin would be more of a currency than that one.

It’s also safe to say in nearly every country you can probably exchange USD to the local currency fairly easily.

Also possible to exchange Bitcoin, that has no bearing.

If you can find me a city where more stores accept Bitcoin rather than the designated currency, then sure. I’m not sure a single one exists.

Than the designated currency no, but than a specific currency absolutely, I’m 99% sure every city I’ve lived for the past 5 years has more places that accept Bitcoin than Argentinian Peso.

And that’s bitcoin, which actually is well known and traded. What the person in the article lost wasn’t even that, not any other well known crypto like Ethereum.

Still, it’s a problem of definition, money is an abstract concept, one where is very hard for you to find a definition that includes all of the countries currency but doesn’t include Bitcoin.

But here’s the most important thing that goes through everyone’s heads, just because something is money doesn’t mean it has inherent value. People who invest in crypto, be it FT or NFT, are no different from people who invest in gold or art. And scams involving crypto are no different from other scams, you don’t go around saying emails are scam because people use them to scam others.

All of that being said, crypto bros are the other extreme from you, thinking that crypto is a magical solution to everything and can’t see the glaring issues that will make it impossible from being adopted in any meaningful scale (and it boils down to cryptocurrencies having the same attributes than paper money, bit people not taking digital security seriously the same way they do with securing paper currency)

Sonalder
link
fedilink
English
219d

Then what is money? State approved piece of paper backed by oil, weapons, war and slavery?

@[email protected]
link
fedilink
English
219d

I mean down that road you end up at “what is anything? does anything exist? does free will exist?”

Sonalder
link
fedilink
English
119d

And that’s a real question!

@[email protected]
link
fedilink
English
419d

Sat what you will, crypto paid off my student loans and helped me buy a house

@[email protected]
link
fedilink
English
-419d

You’re an actual dipshit.

@[email protected]
link
fedilink
English
2419d

If a collective of people say its worth something then it’s worth something. That’s literally what money is and how it works

@[email protected]
link
fedilink
English
019d

Trust and regulations that are lacking in crypto make it what it is. If a collective of people are willing to offer something in exchange for something else, even just because it is a crowdsourced confidence scam, it doesn’t really ethically exonerate what you are supporting. Every person who participates in crypto is also holding up its underground international market. It was bad enough under normal markets, but the difference is between night and day with crypto. Crypto is far too easy to turn into a bunch of excuses and anonymous pseudonyms.

@[email protected]
link
fedilink
English
419d

Do you realize the scale of illicit trade in us dollars is like 10 orders of magnitude more than crypto?

@[email protected]
link
fedilink
English
2
edit-2
19d

Only because the trade power of US dollars is like 10000madeupbagillionzillioninternetnumber0000 order of magnitude more. Talk in fractions. Preferably in not also made up ones. I know, I know, crypto habits die hard.

@[email protected]
link
fedilink
English
118d

I do realize that, so tell me again what the point of your original statement was?

@[email protected]
link
fedilink
English
118d

Trust and regulations that are lacking in crypto make it what it is. If a collective of people are willing to offer something in exchange for something else, even just because it is a crowdsourced confidence scam, it doesn’t really ethically exonerate what you are supporting. Every person who participates in crypto is also holding up its underground international market. It was bad enough under normal markets, but the difference is between night and day with crypto. Crypto is far too easy to turn into a bunch of excuses and anonymous pseudonyms.

@[email protected]
link
fedilink
English
118d

I honestly don’t even know what to say to that

@[email protected]
link
fedilink
English
-919d

Isnt the difference that money is valued against something tangible. Like gold, oil or data. The strength of a countries currency is based on how much of these things it has.

Whereas crypto isn’t valued against anything other than thoughts and prayers. If people think it has value then it has value. Until people no longer think it does, at which point it tanks and you are no longer rich. It’s the same as those NFTs.

Sure you can make money in crypto, you can exchange it for traditional money if you play the game well. But that doesnt mean crypto has any inherent value.

@[email protected]
link
fedilink
English
619d

The USD is backed only by the “full faith and credit of the United States government”. Nothing tangible whatsoever. It’s fiat.

@[email protected]
link
fedilink
English
1619d

No. It used to be fixed against a physical asset but it hasn’t been for a long time now.

Sonalder
link
fedilink
English
219d

1 USD is worth 1 USD because you can pay 1 USD of taxes. It is backed by political promises, oil, weapons and war. This can’t end well.

Crypto means cryptography. Cryptocurrencies are a variety of things from stablecoin (digital token backed by fiat money often by a private company ), company shares, community projects, scams, scams, ponzi, scams, cool technical experiments and technically bad experiment. In the other hand there is Bitcoin (and Monero to some extent) that is owned by humanity, no foundation, no company, no state. It is backed by a proof of past energy brining the most innovative security system in the history of IT, not based on restricted access and opacity but by economical incentive to play fair with others in a big game theory peer-to-peer network.

Bitcoin is not the money of the internet. It’s the internet of money.

Andreas Antonopoulos

data
tangible

in that case money itself is tangible and can be valued against itself. You are confusing exchange value and use value. Money has an exchange value, so does gold, oil or any other commodity. But unlike money they also have a use value.

@[email protected]
link
fedilink
English
719d

Most currencies today are fiat currency. They only got value because they are the official currency of a nation and their government says so and people have the belief it has value. The US dollar used to be backed by gold but was stopped in the 70’s.

@[email protected]
link
fedilink
English
4319d

Needs to raise money to get cancer treatment. America is a real dystopia.

@[email protected]
link
fedilink
English
2219d

That’s the real story here. Everything else after that is just icing on the tragedy cake.

Why does this guy need to raise 32 grand (a respectable salary in plenty of places) for cancer treatment

@[email protected]
link
fedilink
English
2319d

Because not enough healthcare CEOs have been shot yet

@[email protected]
link
fedilink
English
1319d

I like the cut of your jib

@[email protected]
link
fedilink
English
419d

It’s cooler when americans become drug dealing kingpins because they got lung cancer.

I Cast Fist
link
fedilink
English
25
edit-2
19d

The game in question, Block Blasters, which was free to play, has been removed from Steam, although it seems owners can still try to install it, but antivirus programs may block those attempts.

The GData linked in the post shows that the game was released in July 31 and that the malware update came in August 30, adding a .bat and 2 .zip files within the Engine/Binaries/ThirdParty/Ogg directory. The zip files were password protected, which blocked scanning.

The batch script checks first if the system is running only Windows Defender and does not have any of the listed AV products from AV_PROCESSES as a running process; if these criteria are met, the batch script unpacks the contents of the archive “v1.zip” (…) The script “1.bat” adds the destination folder of the executables found inside the “v3.zip” archive to the exemption list for Microsoft Defender Antivirus. [emphasis mine]

So, yeah, it’s pretty clear how easily it went undetected by Steam, Windows Defender or any other antivirus program - malware inside a password protected zip. I suspect making something similar on Android wouldn’t be much harder, as an app or game that needs access to your internal storage isn’t “too weird”, like something that asks for some music to play in a stage.

@[email protected]
link
fedilink
English
2219d

A password-protected zip file should have been flagged by Steam as suspect before they approved the update, its a very old and very common method for detection bypass.

@[email protected]
link
fedilink
English
119d

deleted by creator

@[email protected]
link
fedilink
English
2021d

With how much money valve makes, just fix it. Its nothing to them and makes them look good.

AwesomeLowlander
link
fedilink
English
33
edit-2
20d

Incentives. If valve did this, the expectation would be for them to cover any and all future breaches. They don’t have the capability of detecting and preventing all attempts, and this would incentivise a wave of new malicious programs. Because hey, if you get one into the store, you can now steal a million bucks from your own sockpuppet account, and valve will cover it.

@[email protected]
link
fedilink
English
2120d

People would do this on purpose to steal their own money and then beg Valve to pay them lol

AwesomeLowlander
link
fedilink
English
620d

Exactly

MyDarkestTimeline01
link
fedilink
English
9
edit-2
21d

Honest to God, this is a PR slam dunk if they do that. They get to write if the pay out as a donation to charity for tax purposes, get the lime light of them doing something generous for a cancer patient, and can show that they take the few breeches of their malware.qall seriously. Hell they could probably double the pay out and they wouldn’t even notice the loss.

AwesomeLowlander
link
fedilink
English
1420d

See other comment for why this would be a horrible, horrible idea

Create a post

Welcome to the largest gaming community on Lemmy! Discussion for all kinds of games. Video games, tabletop games, card games etc.

Rules

1. Submissions have to be related to games

Video games, tabletop, or otherwise. Posts not related to games will be deleted.

This community is focused on games, of all kinds. Any news item or discussion should be related to gaming in some way.

2. No bigotry or harassment, be civil

No bigotry, hardline stance. Try not to get too heated when entering into a discussion or debate.

We are here to talk and discuss about one of our passions, not fight or be exposed to hate. Posts or responses that are hateful will be deleted to keep the atmosphere good. If repeatedly violated, not only will the comment be deleted but a ban will be handed out as well. We judge each case individually.

3. No excessive self-promotion

Try to keep it to 10% self-promotion / 90% other stuff in your post history.

This is to prevent people from posting for the sole purpose of promoting their own website or social media account.

4. Stay on-topic; no memes, funny videos, giveaways, reposts, or low-effort posts

This community is mostly for discussion and news. Remember to search for the thing you’re submitting before posting to see if it’s already been posted.

We want to keep the quality of posts high. Therefore, memes, funny videos, low-effort posts and reposts are not allowed. We prohibit giveaways because we cannot be sure that the person holding the giveaway will actually do what they promise.

5. Mark Spoilers and NSFW

Make sure to mark your stuff or it may be removed.

No one wants to be spoiled. Therefore, always mark spoilers. Similarly mark NSFW, in case anyone is browsing in a public space or at work.

6. No linking to piracy

Don’t share it here, there are other places to find it. Discussion of piracy is fine.

We don’t want us moderators or the admins of lemmy.world to get in trouble for linking to piracy. Therefore, any link to piracy will be removed. Discussion of it is of course allowed.

Authorized Regular Threads

Related communities

PM a mod to add your own

Video games

Generic

Help and suggestions

By platform
By type
By games
Language specific
  • 1 user online
  • 478 users / day
  • 971 users / week
  • 2.2K users / month
  • 6.98K users / 6 months
  • 1 subscriber
  • 7.54K Posts
  • 154K Comments
  • Modlog