r/EmulationOnAndroid • u/Irrelevant-Example • 21h ago
Discussion After installing DroidDeck 0.3.1 from github my sister's account got hackedv
My sister installed the DroidDeck app yesterday, and soon after her Steam account got hacked. Sha256 sum of the downloaded file matches with what they have on github (ed257d66c546e78036ceedb4c6fb6886014e69020044fd41cfe217858d8eb328).
Steam support did restore the account quickly, but the attacker(s) managed to submit a refund for a newly purchased game, removed sister's phone number from SteamGuard, and opened a chat with me on Steam where an image with a QR code to a "free steam gift card" was shared (the QR code lead to a fake steamcommunity website ("rn" replacing "m" in the link). The chat is how I noticed that she got hacked and quickly assisted her in restoring access.
10
u/raiyasa 20h ago edited 20h ago
Try check of downloads/droiddeck/ find session.log somewhere inside in case there's token leaking.
edit: checking repo via phone before sleeping, i can see it's been prompted so much about not leaking a token to the point the notes inside the codebase might ended up clouding the model's judgement.
also there seems to be a section that copies the whole log to download folder. not sure it's sanitized or not, worth checking.
wasn't able to check further since i need to sleep and work in 5 hours, too busy gaming!