{"id":21269,"date":"2023-02-16T16:11:36","date_gmt":"2023-02-17T00:11:36","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2023\/02\/16\/news-15001\/"},"modified":"2023-02-16T16:11:36","modified_gmt":"2023-02-17T00:11:36","slug":"news-15001","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2023\/02\/16\/news-15001\/","title":{"rendered":"Fake Hogwarts Legacy cracks lead to adware, scams"},"content":{"rendered":"

Hogwarts Legacy<\/a>, the much-anticipated Harry Potter video game, has finally landed on major gaming platforms. But, as with all games like this, it comes with a steep price tag, so it’s no surprise to suddenly see websites peddling “cracked” versions of the game for free.<\/p>\n

These sites are easily accessible via a quick Google search.<\/p>\n

\"\"
“hogwarts legacy crack” sample search result by Google (Source: Malwarebytes | Stefan Dasic)<\/p>\n

Cracked games are games that are rendered playable due to tampering or file modification. They’re also generally available for free. Essentially, they’re pirated games, which is illegal in some states. Malware Intelligence Analyst Stefan Dasic looked into the above websites claiming to share the cracked PC version of the game. <\/p>\n

One website, games-install[.]com<\/em>, asks users for an activation key once they’ve downloaded the “game”. In order to access the key, the site says the user must verify themselves via a survey.<\/p>\n

Everything falls apart at that point. Either the survey leads to a dead end, or ask users to enter their data, such as a phone number. Suffice it to say the website is a survey scam<\/a>.<\/p>\n

\"\"
This is what happens when you try and download a “free” version of Hogwarts Legacy (Source: Malwarebytes | Stefan Dasic)<\/p>\n<\/p>\n

Dasic said the sites from the above screenshot all resolve to gameportpc[.]ru<\/em>, which redirects to changing sites that are seen hosting a file named Hogwarts_Legacy_Setup.exe<\/em>.<\/p>\n

When users click the “Download” button, they find that they have downloaded a copy of the legitimate 7-Zip<\/a> file compression program.<\/p>\n

If you visit the same gameportpc<\/em> URL, however, the downloaded filebecomes a Trojan dropper, which then drops adware.<\/p>\n

\"\"<\/p>\n

Malwarebytes detects the Trojan and adware as Trojan.Dropper<\/strong> and Adware.Agent.Generic<\/strong>, respectively. We also block the websites we’ve seen pushing fake Hogwarts Legacy game cracks.<\/p>\n

\"\"<\/p>\n

Malwarebytes protects all your devices and personal info from threats, including ones you find while gaming. Find out more about our home protection here<\/a>.<\/p>\n

Game on, and stay safe!<\/p>\n

\n

We don’t just report on threats—we remove them<\/strong><\/p>\n

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"\n\n
\n

Categories: News<\/a><\/p>\n

Categories: Scams<\/a><\/p>\n

Tags: Hogwarts Legacy<\/p>\n

Tags: video game survey scam<\/p>\n

Tags: survey scam<\/p>\n

Tags: Trojan dropper<\/p>\n

Tags: adware<\/p>\n

With Hogwarts Legacy becoming the popular game it was expected to be, online criminals have resorted to old tricks to get users clicking.<\/p>\n\n\n
\n

(Read more…<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n

The post Fake Hogwarts Legacy cracks lead to adware, scams<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[10468,28676,32,10574,20508,28678,28677],"class_list":["post-21269","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-adware","tag-hogwarts-legacy","tag-news","tag-scams","tag-survey-scam","tag-trojan-dropper","tag-video-game-survey-scam"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/21269","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=21269"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/21269\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=21269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=21269"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=21269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}