Originally posted by Gene Worm:

Originally posted by The Rookie:

http://gtm.steamproxy.vip/app/4000/discussions/1/144513524086631030/
Someone uploaded another backdoored addon to the workshop.

http://gtm.steamproxy.vip/groups/somaliateam

Here's something that was posted very recently, I can confirm it's linked to cheater.team because some of the people in it are members.

I saw another sign, all of their profiles are offline and private. Wonder why?

Originally posted by REDACTED:

Originally posted by Robo7988143:

I will explain in the most simple terms in the best possible way I can. There are two types of Safe modes, Safemode with Permissions and Emergency Safemode. Safemode with Permissions is useful for several purposes, it serves as a 2nd defend before the malware get's worst. You can do a couple of things, like searching the web and OBVIOUSLY modifying your PC's system files. It serves as a battery saver as well when it's a laptop. Very useful if you want to get rid of Malware or revert back in time in settings if you did something wrong. Emergency Safemode serves as a very last defense that your PC will have, if it fails then your PC will croke. Emergency mode disables internet usage, tunes RAM down to the lowest in a effort to slow down the Malware from spreading and damaging your internal PC drives. Emergency mode also gives the ability to modify all files *including the internal system files*. Can't type all of this out as my fingers are starting to hurt and I am reaching the reply comment word limit, hope this helps you further explain what is the Safemode system.

Thank you! Yes I believe I am used to the emergency version and was dimly aware of the other sort. This is a good starting point for learning how to use the Safemode with Permissions, thank you very much

My pleasure to help.

Originally posted by REDACTED:

Originally posted by Robo7988143:

If i'm not mistaken, there are two ways to defend yourself against viruses. One way is scanning your PC with Windows Defender for viruses after testing a infected addon. Try doing this when you founded a infected addon. If it does find one, first send the link of it to us and we'll inspect it. Then delete the virus. Another way is more complex yet ten times more safer, you'll have to be a Computer expert or Scientist for this. Safe mod, safe mode is a very good way of downloading and testing viruses, as when they are founded, they will be deleted instantly.

I am learning as fast as I can go about security and computer science. This may be quite involved and still advanced for me, or more than you can concisely explain how to do. I have some expereince working in safe mode. Do you have a link or explanation of how to use it for this particular thing?

I will explain in the most simple terms in the best possible way I can. There are two types of Safe modes, Safemode with Permissions and Emergency Safemode. Safemode with Permissions is useful for several purposes, it serves as a 2nd defend before the malware get's worst. You can do a couple of things, like searching the web and OBVIOUSLY modifying your PC's system files. It serves as a battery saver as well when it's a laptop. Very useful if you want to get rid of Malware or revert back in time in settings if you did something wrong. Emergency Safemode serves as a very last defense that your PC will have, if it fails then your PC will croke. Emergency mode disables internet usage, tunes RAM down to the lowest in a effort to slow down the Malware from spreading and damaging your internal PC drives. Emergency mode also gives the ability to modify all files *including the internal system files*. Can't type all of this out as my fingers are starting to hurt and I am reaching the reply comment word limit, hope this helps you further know what is the Safemode system.

Originally posted by REDACTED:

Originally posted by Gene Worm:

I don't think the addon itself can do anything that's harmful to the PC, but if it does things like link you to sketchy websites or if it can send your IP address to somewhere the coders can read it (which is part of what the cheater.team backdoors did) then I suppose they could run a program from there to mess you up, like DDOSing, etc.

The ip thing is concerning as that would seem to open up a lot of other issues. Is there any way to guard against that? Either some script written specifically for gmod or firewall/system settings/security software to prevent this?

Besides that, I am mainly concerned about the installation of things like trojans, malware, and remote access. As since I do not know Lua and how garry's mod operates, I do not know what they are capable of, nor what sort of security measures are built into garry's mod and /how well they actually work. Since this is a small nitche community it is very hard to research this and I am thrilled to have found this little group.

If i'm not mistaken, there are two ways to defend yourself against viruses. One way is scanning your PC with Windows Defender for viruses after testing a infected addon. Try doing this when you founded a infected addon. If it does find one, first send the link of it to us and we'll inspect it. Then delete the virus. Another way is more complex yet ten times more safer, you'll have to be a Computer expert or Scientist for this. Safe mod, safe mode is a very good way of downloading and testing viruses, as when they are founded, they will be deleted instantly.

Originally posted by Gene Worm:

Originally posted by Robo7988143:

Yeah, it does. I've seen recent reports of being forced to join another server and strange advertisements occuring at a random event or everytime you die in-game.

Yeah, but that's really easy to do. It just takes one easy line of code to send players to servers or kill players constantly, etc.

Welp, I've saw your chat histories with Baretaka and he did mentioned in three months that he'll do something. This is another tip. I suggest people to look out for addons created by Baretaka or a alt that acts and looks like them. This guy does seem mysterious, I tried searching him on the Steam Community search bar but no results. Unfortunatly, I haven't founded any suspicous, infected or strange looking addons just yet.

Originally posted by Gene Worm:

Originally posted by REDACTED:

I plan to learn Lua, but I am unable to do this at this time. Are gmod exploits limited to damaging gmod playing expereince only, or can they cause issues in the rest of the system?

I don't think the addon itself can do anything like that, but if it does things like link you to sketchy websites or if it can send your IP address to somewhere the coders can read it (which is part of what the cheater.team backdoors did) then I suppose they could run a program from there to mess you up, like DDOSing, etc.

Yeah, it does. I've seen recent reports of being forced to join another server and strange advertisements occuring at a random event or everytime you die in-game.

Originally posted by REDACTED:

Originally posted by Gene Worm:

Download the addon and run through the Lua code in it, using GMad Extractor. If you don't know Lua, then I suppose you can just mess around with it and see if it does anything, or give the addon to someone who does know Lua like me or Hackcraft.

I plan to learn Lua, but I am unable to do this at this time. Are gmod exploits limited to damaging gmod playing expereince only, or can they cause issues in the rest of the system?

They simpily cause issues, such as forcing you to join a random server.

Originally posted by REDACTED:

Originally posted by Gene Worm:

The cheater.team addons were frequently either an unoriginal "hack" type of addon, like "Wallhack" or "Aimbot" sort of addon or a reupload of someone else's addon with a description full of broken English and a giant wall of tags at the bottom.

For backdoored addons in general, mostly just watch out for addons that don't have too many ratings, addons with no clear description or information, or sketchy server content addons.

How can someone test if an addon has a backdoor?

Look for signs of a backdoor. Advertisements are a good sign of a backdoor. Do not mistake lag for a backdoor, most addons will cause weak PCs to lag. Check the console through time to time when testing the addon, should tell you all information and including suspicous scripts running as well. When you find a suspicous or infected addon, send it to me, Hackcraft or any other GMod veteran in this group and we'll check it.

Originally posted by Hackcraft:

VAC can't work on Garry's Mod because it wouldn't be able to tell whether you should be running that Lua script or not.
Garry made GAC but then that got removed/doesn't do anything. There are a few really old cheats like Seth hack which might get you banned though, but that's about it.

If VAC/GAC worked in Garry's Mod then there wouldn't be so many Lua anti-cheat addons.

Wonder why VAC is so poor in Garry's Mod. I may sound like i'm ruining the fun for everybody that uses cheats that are not console-related but it should be fixed so people who are coding GMod might code scripts that I call "Global Scripts". Global Scripts mean that they are scripts and effect addons and will cause everyone to get a message, advertisements, warning and more. Not only that, servers should be moderated by Steam moderators and the ones who developed GMod. This may sound bad but it may stop those terrible things from happening and interrupting our gameplay.

Originally posted by Gateway:

Post your advertisement addons:
1. Lazmod's advertisement for server
2.
3.
4.
5.
6.
7.

Just a note and a very important fact/tip. What I have seen is that Star Wars addons are prone to having advertisements in them. Now, I am not saying that Star Wars addons are the only addons that have this and I apologize to all those innocent Star Wars addon makers for saying this but they have to be checked. This is my theory.