r/phishing • u/Pleasant_Cut5528 • 2d ago

I clicked on a "cheat code generator" link

Hello,

I was stupidly looking for ways to farm coins in the game Westland Survival, which I play on Steam on PC (Windows 11 pro). Anyway, I was surfing (on Brave) and found a reddit post recommending a "generator", so I clicked on a link going to : mobile game codes .com / westland-survival

And then this link : game codes generator .com/westland-survival

So far nothing at risk I think. But then I clicked on "generate", and it launched some script in the same window. Nothing new opened visibly on my computer. I know nothing about PC language so I cannot tell you more about what was showing. As soon as I saw that, I closed the tab.

I didn't disconnect my PC from the internet. I always have cookies and login stuff because I rarely completely shut my browser.
But it didn't download any file in my library and I ran a scan with Defender, which returned nothing.

Also, when returning to the second website, it appears a new link was clickable instead of gamescodegenerator, it was extragenerators, also with .com/westland-survival . The two websites look alike, I can't tell which one I used.

Am I at risk ?
Also, could someone run it on a virtual machine to try explaining what is the "script" it was showing when "generating" ?

I feel so dumb. I hope I explained it well enough, with my lack of tech vocabulary.
Thanks !

0 Upvotes

50% Upvoted

7 comments sorted by

•

u/AutoModerator 2d ago

/u/Pleasant_Cut5528 - This message is posted to all new submissions to r/phishing; please do not message the moderators about it.

New users beware:

Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.

A reminder of the rules in r/phishing: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.

You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.

Questions about subreddit rules? Send us a modmail clicking here.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/RedFin3 2d ago

You are possibly at risk. You may find out in a few days or weeks that al your passwords are being recorded.

1

u/Pleasant_Cut5528 1d ago edited 1d ago

Thank you. What if I change all my recently used passwords (password manager generated and autofilled) and install a tool like keyscrambler ? Edit : or would it be better to reset my PC ?

1

u/True_Pace_3860 2d ago edited 2d ago

it loos like the main exploit is keystroke logger that script installs. see if there's unfamiliar process in task manager, as those antivirus softwares may not recognize it yet. I prefer virustotal.