• virus alert

    From MRO@VERT/BBSESINF to All on Thu Mar 12 04:36:11 2026
    So i don't know why someone would do this but there IS
    a rez2ans clone on github and on github.io
    And i'm pretty sure it's a virus.
    https://i.imgur.com/KeZmPnO.png

    it also has a bunch of files from grymmjack's github and then they
    have other suspicious files mixed in which appear to be the same kind of dangerous executable with some script file it runs. https://i.imgur.com/tP1F8Kj.png

    I was thinking of posting the url so we could report it but i doubt
    anybody will ever find this unless they look hard enough.

    I don't think anybody will find it but i'll report it myself.


    --
    "Before using Wildcat....This Company did not have a convenient way of
    looking after some of the richest clients in the world...Now we do!"
    ---
    ■ Synchronet ■ ::: BBSES.info - free BBS services :::
  • From fusion@VERT/CFBBS to MRO on Thu Mar 12 06:43:00 2026
    On 12 Mar 2026, MRO said the following...

    So i don't know why someone would do this but there IS
    a rez2ans clone on github and on github.io
    And i'm pretty sure it's a virus.
    https://i.imgur.com/KeZmPnO.png

    it also has a bunch of files from grymmjack's github and then they
    have other suspicious files mixed in which appear to be the same kind of dangerous executable with some script file it runs. https://i.imgur.com/tP1F8Kj.png

    I was thinking of posting the url so we could report it but i doubt anybody will ever find this unless they look hard enough.

    I don't think anybody will find it but i'll report it myself.

    definitely a good idea.. it shows up in BBS and ANSI ART (auto-generated?) topics on github..

    the readme.md edits are weird. you can tell they're trying to hide that it's from that weird git username and make it look like it's from grymmjack's

    --- Mystic BBS v1.12 A47 2021/12/25 (Windows/32)
    * Origin: cold fusion - cfbbs.net - grand rapids, mi
  • From DaiTengu@VERT/ENSEMBLE to MRO on Thu Mar 12 08:12:02 2026
    Re: virus alert
    By: MRO to All on Thu Mar 12 2026 04:36 am

    So i don't know why someone would do this but there IS a rez2ans clone on github and on github.io And i'm pretty sure it's a virus. https://i.imgur.com/KeZmPnO.png

    it also has a bunch of files from grymmjack's github and then they have other suspicious files mixed in which appear to be the same kind of dangerous executable with some script file it runs. https://i.imgur.com/tP1F8Kj.png

    I was thinking of posting the url so we could report it but i doubt anybody will ever find this unless they look hard enough.

    I don't think anybody will find it but i'll report it myself.

    I dug through the repo a bit, most everything is stripped out (source code, etc.) and the README just contains a link to a zipfile, which appears to contain obfuscated malware.

    I also reported it. They updated the README/zipfile an hour ago (from the time of this message), so they're still active

    ...A fail-safe circuit will destroy others.

    ---
    ■ Synchronet ■ War Ensemble BBS - The sport is war, total war - warensemble.com
  • From Phillip Taylor@VERT/MEGABBS to MRO on Thu Mar 12 22:46:42 2026
    Re: virus alert
    By: MRO to All on Thu Mar 12 2026 04:36:11

    So i don't know why someone would do this but there IS
    a rez2ans clone on github and on github.io
    And i'm pretty sure it's a virus.
    https://i.imgur.com/KeZmPnO.png

    it also has a bunch of files from grymmjack's github and then they
    have other suspicious files mixed in which appear to be the same kind of dangerous executable with some script file it runs. https://i.imgur.com/tP1F8Kj.png

    I was thinking of posting the url so we could report it but i doubt
    anybody will ever find this unless they look hard enough.

    I don't think anybody will find it but i'll report it myself.

    I am sure there is either email address or link to report it.

    ---
    ■ Synchronet ■ themegabbs.ddns.net 6400
  • From MRO@VERT/BBSESINF to DaiTengu on Fri Mar 13 02:39:33 2026
    Re: virus alert
    By: DaiTengu to MRO on Thu Mar 12 2026 08:12 am


    I also reported it. They updated the README/zipfile an hour ago
    (from the time of this message), so they're still active

    yep the readme gets updated hundreds of times.
    I gave github grymmjack's email address and i contacted him about it.

    weird stuff.


    --
    "Before using Wildcat....This Company did not have a convenient way of
    looking after some of the richest clients in the world...Now we do!"
    ---
    ■ Synchronet ■ ::: BBSES.info - free BBS services :::
  • From MRO@VERT/BBSESINF to Phillip Taylor on Fri Mar 13 02:40:14 2026
    Re: virus alert
    By: Phillip Taylor to MRO on Thu Mar 12 2026 10:46 pm

    I don't think anybody will find it but i'll report it myself.

    I am sure there is either email address or link to report it.

    nope. not possible. it's not like it's a big website.


    --
    "Before using Wildcat....This Company did not have a convenient way of
    looking after some of the richest clients in the world...Now we do!"
    ---
    ■ Synchronet ■ ::: BBSES.info - free BBS services :::