1. Trash_Bandatcoot

    OP Trash_Bandatcoot Your Local Random Internet Geek
    Member

    Joined:
    Jul 14, 2018
    Messages:
    1,082
    Country:
    Netherlands
    Post trashed. It's time to stop giving this guy what he wants:
    ATTENTION.

    Just don't install garbage onto your Wii from people you don't know. Let alone, the mods from Wiibrew, RC24, anything you can name are already informed. Little to no precausion is needed.
     
    Last edited by Trash_Bandatcoot, Sep 9, 2019
  2. UltraSUPRA

    UltraSUPRA President Elect of the United States of Reality
    Member

    Joined:
    May 4, 2018
    Messages:
    1,246
    Country:
    United States
    What do people have to gain from doing this?
     
    scroeffie1984 and dreamymario521 like this.
  3. ROllerGuy

    ROllerGuy Newbie
    Newcomer

    Joined:
    Sep 29, 2018
    Messages:
    3
    Country:
    Antarctica
    Nothing other than attention.
     
  4. UltraSUPRA

    UltraSUPRA President Elect of the United States of Reality
    Member

    Joined:
    May 4, 2018
    Messages:
    1,246
    Country:
    United States
    Then I'll make a homebrew Zelda fan game for the Wii that replaces Priloader with a static image that says "Please subscribe to Fish activation for memes and junk.", if all publicity is good publicity like Frutre3 thinks. </sarcasm>
     
    BetterDuck likes this.
  5. The Real Jdbye

    The Real Jdbye Always Remember 30/07/08
    Member

    Joined:
    Mar 17, 2010
    Messages:
    20,060
    Country:
    Norway
    Looking through the dol file for "suspicious code" is easier said than done. You need to be pretty skilled at reverse engineering for that.
     
  6. Trash_Bandatcoot

    OP Trash_Bandatcoot Your Local Random Internet Geek
    Member

    Joined:
    Jul 14, 2018
    Messages:
    1,082
    Country:
    Netherlands
    The brickers we found had, no joke, all the text and code into the .dol file, and it could be shown with a hex editor. So while this was just a poorly written bricker, the other ones have more up their sleeves.
     
  7. EmulateLife

    EmulateLife GBAtemp Psycho!
    Member

    Joined:
    May 30, 2016
    Messages:
    3,985
    Country:
    United States
    lol trying to brick people out of a console that was two generations ago. If they succeed you're out $20-$30 to replace it.
     
    jesus96, BetterDuck and Thiaggus like this.
  8. MaeseJesus

    MaeseJesus GBAtemp Advanced Fan
    Member

    Joined:
    Apr 3, 2013
    Messages:
    592
    Country:
    Searching for "frutre3" doesn't show anything besides this post and a bunch of strange pages, so that's weird, but thanks for the warning.

    I can't fathom how sad one must be to do this in the first place, but reading this has created in my head a mental image that of an enraged nerd saying to itself "I'LL SHOW THEM!" while monkey-coding bricking software for a bunch of old hardware as early 2000's edgy music blasts off in a dark room; so at the very least I got a chuckle out of this.

    Sort of like Hackers, but with less cheese and more embarrassing.

    Is there anything that can be done to help? How widespread this could realistically be?
     
    BetterDuck likes this.
  9. Trash_Bandatcoot

    OP Trash_Bandatcoot Your Local Random Internet Geek
    Member

    Joined:
    Jul 14, 2018
    Messages:
    1,082
    Country:
    Netherlands
    Maybe 1 or 2 Wii hacking websites according to him, Wii Bricker 9000 was shared on 2 Discord servers, but just by opening it up in hex, people were able to see what's going on.
    However, don't be scared, because of this poor programming we can easily identify a bricker and a legit homebrew application. Plus, it won't take long to get the MD5 and CRC32 hashes before the brickers get taken down.
    At this point, we aren't even sure if we should take this guy serious, he looks like a huge troll who wants attention, but other people did try to make brickers themselves, so Frutre3 has what he wanted: Bricked consoles.
     
  10. TimPV3

    TimPV3 Member
    Newcomer

    Joined:
    Jul 12, 2019
    Messages:
    28
    Country:
    United States
    Well at least it's disguised as Wii Pong and not something anyone will actually give a shit about downloading.
     
    jesus96 and zfreeman like this.
  11. MaeseJesus

    MaeseJesus GBAtemp Advanced Fan
    Member

    Joined:
    Apr 3, 2013
    Messages:
    592
    Country:
    Well, as much as I'd like to think otherwise, I don't think most people would use a hex editor to see if whatever they downloaded, in case is something shady.

    Most of my worries were on how easily files can be spread nowadays, and how certain places (not just homebrew related, but in general) just grab everything they see and let them be downloaded without checking first or may accidentally host one of these files that will cause problems, more than this subject's "abilities".

    Sort of like bad ROM dump that's floating around for years and years, sometimes without even pointing out it's a faulty dump.
     
  12. Dimensional_Grape

    Newcomer

    Joined:
    Aug 12, 2019
    Messages:
    1
    Country:
    United States
    To be honest, I'm kinda surprised something like this didn't pop up sooner. Like Trash_Bandatcoot said, the brick it causes is pretty simple to recover from if you have any sort of brick protection installed (it just corrupts the theme files for the Wii Menu). Looks like Frutre3 is shaping up to be a Nintendo version of Leurak (guy who made MEMZ, among other things, at least he only made them as a joke).

    EDIT: Worth noting, Frutre's GitHub is only 5 or 6 hours old
     
    Last edited by Dimensional_Grape, Aug 12, 2019
  13. Trash_Bandatcoot

    OP Trash_Bandatcoot Your Local Random Internet Geek
    Member

    Joined:
    Jul 14, 2018
    Messages:
    1,082
    Country:
    Netherlands
    Bricker announcement: New possible bricker found.

    Name: NoConnect24
    Disguise Name: RiiConnect24 Patcher
    Description: Contains differences between a real RiiConnect24 patcher, malicious contents currently unknown.
    MD5: 0CFC7204D909C4502D7D931F41486FA0
    CRC32: f287cfab
     
    MaeseJesus likes this.
  14. ROllerGuy

    ROllerGuy Newbie
    Newcomer

    Joined:
    Sep 29, 2018
    Messages:
    3
    Country:
    Antarctica
    That's not NoConnect24, but it is malicious. He changed the download link for the mail patcher to a dol file hosted on dmca.gripe, which seems to be Wii Bricker 9000.

    But another actual Wii bricker has been spotted. Wii Bricker 9000 - dhtdht020 edition (by Frutre3) with the SHA1 hash of 9c81f3e8cbd129f5c4d28bfa8f5e621dca05b989. It does the Wii equivalent of rm -rf /, along with displaying some ASCII art and telling you to not turn off the Wii or your Wii will be bricked.
     
  15. tech3475

    tech3475 GBAtemp Addict
    Member

    Joined:
    Jun 12, 2009
    Messages:
    2,010
    Country:
    It’s still $20-30 and people may have had saves, etc. They hadn’t backed up yet.
     
    alexander1970 likes this.
  16. BetterDuck

    BetterDuck I am truly remarded
    Member

    Joined:
    Aug 15, 2017
    Messages:
    180
    Country:
    United States
    Limp Bizkit playing so loud that the basement dwelling 30 year old can't hear his mom knocking on the door to tell him his pizza rolls are done.
     
  17. ichichfly

    ichichfly GBAtemp Advanced Fan
    Member

    Joined:
    Sep 23, 2009
    Messages:
    619
    Country:
    Gambia, The
    please use yara and not MD5. The MD5 can be changed by changing one Value for example in the dol padding. Creating thousands of Files that do the same but have different MD5.

    for example

    rule WiiBricker9000Dhtdht020EditionV1
    {
    meta:
    description = "Bricks the Wii by syscall"
    thread_level = 1
    in_the_wild = true

    strings:
    $a = "Wii Bricker 9000"

    condition:
    $a
    }

    rule WiiBricker9000Dhtdht020EditionV2
    {
    meta:
    description = "Bricks the Wii by overwriting 0000009a.app"
    thread_level = 1
    in_the_wild = true

    strings:
    $a = "/title/00000001/00000002/content/0000009a.app"
    $b = "OwO UwU OwO UwU OwO UwU OwO UwU OwO UwU OwO UwU OwO UwU OwO UwU"

    condition:
    $a and $b
    }
     
    Last edited by ichichfly, Sep 4, 2019
    Trash_Bandatcoot and Dartz150 like this.
  18. Alex4nder001

    Alex4nder001 Part-time thug
    Member

    Joined:
    Jul 28, 2017
    Messages:
    444
    Country:
    United Kingdom
    It would probably be an encrypted binary
     
  19. SnackJr

    SnackJr Member
    Newcomer

    Joined:
    May 5, 2019
    Messages:
    41
    Country:
    Japan
    I just want to know why? Are you that bored that you have to stoop to being malicious to entertain yourself? C'mon, man.
     
Draft saved Draft deleted
Loading...

Hide similar threads Similar threads with keywords - Attention, brickers, popping