"Game Download" websites being used to spread malware

[jhendrik89]

games-pc-download.com
gamesofpc.com

The above websites are used to distribute malware but do no't have a rating on here?

[A440]

The first one listed has out of date software (wordpress), the second listed site has a ton of http transactions but appears to be free of malware. Do you mean you found malware distribution on "gamesofpc.com"?
Can you detail what you found?

[jhendrik89]

<quote user="a440">
The first one listed has out of date software (wordpress), the second listed site has a ton of http transactions but appears to be free of malware. Do you mean you found malware distribution on "gamesofpc.com"?
Can you detail what you found?
[/quote]

Hi, click on the "Download" button on one the pages of this website, it installs malware on your PC

[Site-rater]

Both domains are currently red. Even if there is no malware, both sites cannot at all legally offer the games they do for free; it is illegal to do so.
Neither domain is listed on hpHosts (hosts-file.net) so I gave the hpHosts admin a message referencing this thread.
I have rated both domains; even if the games are not actually downloadable through those sites what the site owner is doing is still very much illegal.

[HamburglarMan]

Free game downloads attract A LOT of people, making it easier to spread viruses. Including piracy is already illegal so that's even worse than a virus, you could get in trouble with police even if you downloaded a virus. Just use steam.

[jhendrik89]

To be honest, I don't care much about piracy, there's always going to be a pirate site. What I do have a problem with is these sites pretending to give the games in order to spread malware and illegally make themselves money scamming people.

[Site-rater]

<quote user="jhendrik89">
To be honest, I don't care much about piracy, there's always going to be a pirate site. What I do have a problem with is these sites pretending to give the games in order to spread malware and illegally make themselves money scamming people.
[/quote]

Does that mean you will rate "clean" pirate sites green even though "Potentially illegal" is a Red category on WOT?

[jhendrik89]

It depends on the site and their intentions I think. What I really have a problem with are websites like those listed, which have fake download buttons sending you to viruses, surveys and installing malware on your computer just to make money. If pirate websites are doing that then of course they deserve a red WOT rating.

By the way, if anyone has the time please go through my last couple of ratings and rate those websites as well. Many of them are illegal/malicious but do not have a rating on here.

[c۞g]

Indeed this domain does attempt to infect unsuspecting visitors with malware via a 3rd-party site.

Example URL:
_http://gamesofpc.com/hitman-download-2016/

Download link redirects to:
_http://www.heydown.com/s1/dgams/Hitman.2016.zip

The archive .ZIP file contains: Hitman 2016.exe

VirusTotal:

• URL scan: https://www.virustotal.com/en/url/777dab7e7003d766b64d33a9914230c543a2f558abc1b309407128731da5dbf0/analysis/1460280248/
• .ZIP scan: https://www.virustotal.com/en/file/246f5d02afeaac4d32084669ab348508f0c543740aff3211544f61ddf3934008/analysis/1460280253/
• .EXE scan: https://www.virustotal.com/en/file/688c99e92c2b800ec772655cda9ad5dfb8eb92c4591dca583d6c729bda8bc7aa/analysis/1460280609/

I've down-voted all 3 submissions on VT, as well as submitted samples to both:

• Avira: https://analysis.avira.com/en/submit
• Microsoft: https://www.microsoft.com/en-us/security/portal/submission/submit.aspx

Rated:

List of domains/hosts

gamesofpc.com
heydown.com

[Guest]

Heydown.com was blocked by my anti-virus.
Clicking a download button on gamesofpc.com set off my anti-virus.

Needless to say, I've rated both as untrustworthy.