Yeah, that's him. Not sure if he's still making any addons, let alone backdoored addons. Why exactly are you concerned about him?

Originally posted by The Rookie:

http://gtm.steamproxy.vip/app/4000/discussions/1/144513524086631030/
Someone uploaded another backdoored addon to the workshop.

http://gtm.steamproxy.vip/groups/somaliateam

Here's something that was posted very recently, I can confirm it's linked to cheater.team because some of the people in it are members.

Originally posted by Robo7988143:

Originally posted by Gene Worm:

I don't think the addon itself can do anything like that, but if it does things like link you to sketchy websites or if it can send your IP address to somewhere the coders can read it (which is part of what the cheater.team backdoors did) then I suppose they could run a program from there to mess you up, like DDOSing, etc.

Yeah, it does. I've seen recent reports of being forced to join another server and strange advertisements occuring at a random event or everytime you die in-game.

Yeah, but that's really easy to do. It just takes one easy line of code to send players to servers or kill players constantly, etc.

Originally posted by REDACTED:

Originally posted by Gene Worm:

Download the addon and run through the Lua code in it, using GMad Extractor. If you don't know Lua, then I suppose you can just mess around with it and see if it does anything, or give the addon to someone who does know Lua like me or Hackcraft.

I plan to learn Lua, but I am unable to do this at this time. Are gmod exploits limited to damaging gmod playing expereince only, or can they cause issues in the rest of the system?

I don't think the addon itself can do anything that's harmful to the PC, but if it does things like link you to sketchy websites or if it can send your IP address to somewhere the coders can read it (which is part of what the cheater.team backdoors did) then I suppose they could run a program from there to mess you up, like DDOSing, etc.

Originally posted by REDACTED:

Originally posted by Gene Worm:

The cheater.team addons were frequently either an unoriginal "hack" type of addon, like "Wallhack" or "Aimbot" sort of addon or a reupload of someone else's addon with a description full of broken English and a giant wall of tags at the bottom.

For backdoored addons in general, mostly just watch out for addons that don't have too many ratings, addons with no clear description or information, or sketchy server content addons.

How can someone test if an addon has a backdoor?

Download the addon and run through the Lua code in it, using GMad Extractor. If you don't know Lua, then I suppose you can just mess around with it and see if it does anything, or give the addon to someone who does know Lua like me or Hackcraft.

Originally posted by REDACTED:

Thank you for outlining what a suspicious addon looks like. Those type of addons already looked weird to me but could have also been explained away as someone just dumping their personal addon into the workshop or someone has english as a second language not wanting to write out a thing. All the signs together is a red flag. I think unless someone provides a description and makes the thing presentable it should be avoided on principal.

The cheater.team addons were frequently either an unoriginal "hack" type of addon, like "Wallhack" or "Aimbot" sort of addon or a reupload of someone else's addon with a description full of broken English and a giant wall of tags at the bottom.

For backdoored addons in general, mostly just watch out for addons that don't have too many ratings, addons with no clear description or information, or sketchy server content addons.

Originally posted by Robo7988143:

Just noticed something, the group owner got recently VAC banned. Maybe the group owner WAS the hacker.

Senator's one of cheater.team's top guy's lol. In fact, I think he's their leader. He's even got an edgy YouTube channel, so do some of the others. Just look up "cheater.team" on YouTube and see what comes up.

Originally posted by Robo7988143:

Originally posted by Gene Worm:

They have a subgroup called "BMW Squad" where the people associated with the backdoored addons hang out I guess. Except for some reason Dark Byte isn't in there, and "Cheater" (Blaspha, Senator? Idk) left recently.

I tried looking for the related group, sadly I didn't finded any results related.

This is it.
http://gtm.steamproxy.vip/groups/BMW-Squad

The guy "Stealth" and "jumpy" were the uploaders of some of the first backdoored addons that we missed, but the Facepunchers didn't.

Originally posted by Robo7988143:

Originally posted by Gene Worm:

http://gtm.steamproxy.vip/sharedfiles/filedetails/?id=753182591

This addon was published by one of the many cheater.team members, so it's not completely paranoid to suspect it for including a backdoor.

Should be removed from the workshop. Many people may have accidently had this on and they visited a public server with VAC and got VAC banned.

Does Garry's Mod even have VAC? I know it has anti-piracy, but that's about it.

Originally posted by Robo7988143:

Originally posted by Gene Worm:

Eh, I doubt it's anything from the developers. I can confirm that it was indeed cheater.team that was behind it though. The threats were just a bunch of cheap backdoors that displayed such threats in the form of a poorly edited video or 3D text.

Strange that Cheater.Team is a very inactive group. All of it's members have been offline for a year.

They have a subgroup called "BMW Squad" where the people associated with the backdoored addons hang out I guess. Except for some reason Dark Byte isn't in there, and "Cheater" (Blaspha, Senator? Idk) left recently.