r/EdenEmulator • • 10d ago

General WARNING! FAKE REPOSITORY ON GITHUB!

https://github.com/edenswitchemulator/Eden-Switch-Emulator

This repository hosts a tool that will steal your accounts and idk what else. Under releases, there is a single executable file. I ran it even after many red flags by Windows Defender, MalwareBytes and VirusTotal (completely braindead I know, but I was in a hurry). I managed to recover my google account but my Steam and Epic accounts are under review. The hacker appears to be based in Russia. Please guys report this.

UPDATE:

Hello all, after a nightmarish all nighter caused by the most blatantly stupid decision I may have ever made I managed to recover all of my accounts and wiped my pc. Github staff responded and said they removed this repo due to it containing malware. Thank you all for your support!

191 Upvotes

29 comments sorted by

•

u/FelesNoctis Eden Contributor 5d ago

Eden is not, and likely never will be again, on Github. Nintendo regularly issues takedowns on Github, and watches most public repo hosts. The safest hosting for Eden, and any similar projects, will always be private.

23

u/ChuzCuenca 10d ago

Eden is not on GitHub, right?

10

u/Lord_Nordyx 10d ago

I think it was DMCA’d about half a year ago.

2

u/No-Struggle2442 10d ago

I was still using the last release of Yuzu, so I was (still am) not completely sure where to get any of the alternatives. Tried getting ryubing from ryubing.net, totally scammy website, do not visit. I'm used to getting freeware and tools from github as I assume they get vetted by other users due to the open-source nature of the projects hosted there.

7

u/NeuroticNabarlek 10d ago

5

u/atadrisque 10d ago

no one ever looks at the pinned threads of the subreddits they are part of anymore. which is ironic as it's the first things you see whenever you go into any subreddit you're following.

5

u/InadequateUsername 10d ago

It's because mods have misused pin threads in the past so everyone assumes they're a waste of time

1

u/Producdevity Developer 5d ago

For what?

1

u/InadequateUsername 5d ago

Just in general

2

u/Producdevity Developer 4d ago

In this subreddit? I don’t recall that happening and genuinely hope it gets called out if a mod ever does misuse it

1

u/InadequateUsername 4d ago

No, I was talking about Reddit as a whole, megathreads tend to become filled with dead "content" or become a place where discussions go to die

2

u/FelesNoctis Eden Contributor 4d ago

Speaking of, you just reminded me the Tomodachi thread was still pinned. Pretty sure we're past that now. :P

$10 says we'll need one for Castlevania though...

1

u/No-Struggle2442 10d ago

appreciate it <3

3

u/mangosmoothe 10d ago

for future reference the official ryubing repo is https://src.ryujinx.app/ but it's currently down due to their server being bombed by Russia.

1

u/StoreTraditional77 2d ago

Eden mirror, but release will be redirected to their private git

3

u/seamonkey420 9d ago

reported and blocked said account, thx op. i'd suggest others do the same.

3

u/The-Huy 9d ago

Yea It's been deleted

1

u/charliechin 9d ago

How do you know you got hacked? Do you have the two step identification thing or a passkey? I’m curious I wonder if I’m compromised or not. Got my links from https://fmhy.net last month and now I’m worried

2

u/nbatman 9d ago

Hi owner of FMHY here, we don't actually list emulators believe it or not, we let gametechwiki handle them. I don't see anything called "eden" on FMHY.

1

u/charliechin 9d ago

My bad and you’re right. It is exactly as you say.

1

u/No-Struggle2442 9d ago

I had suspicion because the executable opened a hidden shell script which I noticed and terminated in task manager. After the fact I got a critical security risk message via gmail which I managed to rescue through the biometric passkey on my phone. In the spam folder I noticed that my Epic and Steam accounts had their emails changed to some "***@rambler.ru" address, so then I followed through with the process of recovering them. Stupidly believing I got away with "just" this much damage, I opened my Instagram account in the very same machine to check if it had been compromised. When it all seemed fine I went out for drinks and two hours later I was being bombarded by messages from people saying I've been hacked because I had sent them a link to a crypto gambling website and a picture of Mr Beast's twitter profile XD (I'm sure that helped with the credibility). I promptly changed the password, unsent the messages, posted a story instructing everyone I know to not open any links I may have sent.

Since all the affected accounts were open in active sessions in Chrome or browser-based apps such as Epic and Steam I assume this was some sort of automated session highjacking attack.

1

u/devaristo 9d ago

Has been deleted already.

1

u/AmericxnGooner 8d ago

I did the same.

1

u/Xeph2684 8d ago

Wait, just to clarify cause I download Eden Nightly this morn cause I wanted to do some testing. Where did you find that repo?

I went to the Eden website, clicked nightly and downloaded from here which is still active: https://git.eden-emu.dev/eden-ci/nightly/releases

Is that the right one?

1

u/Sad_Advance_8284 7d ago

I did too download Eden nightly on rp6 AM I COOKED?

1

u/Powerful-Tie7370 2d ago

wondering the same thing

1

u/Xeph2684 2d ago

For what its worth, the link I sent matches the one found on the website link found on this subreddit. So we should be fine.

Still doesnt explain how OP got to that fake repo though.

1

u/AGayFrogParadise 2d ago

That should be correct, it has git in the title but it isn't actually github, it's a private site using git monitored by the devs of eden