• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

MSI Warns Against Malicious Afterburner Website

btarunr

Editor & Senior Moderator
Staff member
Joined
Oct 9, 2007
Messages
46,669 (7.66/day)
Location
Hyderabad, India
System Name RBMK-1000
Processor AMD Ryzen 7 5700G
Motherboard ASUS ROG Strix B450-E Gaming
Cooling DeepCool Gammax L240 V2
Memory 2x 8GB G.Skill Sniper X
Video Card(s) Palit GeForce RTX 2080 SUPER GameRock
Storage Western Digital Black NVMe 512GB
Display(s) BenQ 1440p 60 Hz 27-inch
Case Corsair Carbide 100R
Audio Device(s) ASUS SupremeFX S1220A
Power Supply Cooler Master MWE Gold 650W
Mouse ASUS ROG Strix Impact
Keyboard Gamdias Hermes E2
Software Windows 11 Pro
MSI is informing the public of a malicious software being disguised as the official MSI Afterburner software. The malicious software is being unlawfully hosted on a suspicious website impersonating as MSI's official website with the domain name https://afterburner-msi.space. MSI has no relation with this website or the aforementioned domain.

The fraudulent website imitates MSI's official webpage appearance and design, and offers downloads for MSI's Afterburner. This webpage is hosting software which may contain virus, trojan, keylogger, or other type of malicious program that have been disguised to look like MSI Afterburner. The Public is warned not to download any software from this website!



Update May 14th: TechPowerUp Forums member silentbogo detected the host and CDN behind the malicious Afterburner app, and reported it to them. In response to these reports, the CDN, Hipolink, has deleted the accounts responsible for this, while the host, timeweb.ru, said that they are investigating this. Our Kudos to silentbogo.

MSI's official Afterburner website is not compromised and is safe to use. The Afterburner Software download link is currently closed due to routine maintenance. The software will be downloadable soon and you can find the latest version of Afterburner at https://www.msi.com/Landing/afterburner/graphics-cards.

MSI is dedicated to providing reliable products that deliver incredible user experiences. As such, we find it our responsibility to protect those who have put their trust into our dedication. We condemn the infringement on our proprietary rights and the damage it has caused to MSI's reputation. Necessary actions to remove the malicious imposter website are underway.

View at TechPowerUp Main Site
 

the54thvoid

Intoxicated Moderator
Staff member
Joined
Dec 14, 2009
Messages
12,552 (2.37/day)
Location
Glasgow - home of formal profanity
Processor Ryzen 7800X3D
Motherboard MSI MAG Mortar B650 (wifi)
Cooling be quiet! Dark Rock Pro 4
Memory 32GB Kingston Fury
Video Card(s) Gainward RTX4070ti
Storage Seagate FireCuda 530 M.2 1TB / Samsumg 960 Pro M.2 512Gb
Display(s) LG 32" 165Hz 1440p GSYNC
Case Asus Prime AP201
Audio Device(s) On Board
Power Supply be quiet! Pure POwer M12 850w Gold (ATX3.0)
Software W10
That's a damn sneaky move. Guaranteed it's a crypto mining scam considering the target is folk dl'ing a GPU tool.
 

AsRock

TPU addict
Joined
Jun 23, 2007
Messages
18,924 (3.05/day)
Location
UK\USA
Processor AMD 3900X \ AMD 7700X
Motherboard ASRock AM4 X570 Pro 4 \ ASUS X670Xe TUF
Cooling D15
Memory Patriot 2x16GB PVS432G320C6K \ G.Skill Flare X5 F5-6000J3238F 2x16GB
Video Card(s) eVga GTX1060 SSC \ XFX RX 6950XT RX-695XATBD9
Storage Sammy 860, MX500, Sabrent Rocket 4 Sammy Evo 980 \ 1xSabrent Rocket 4+, Sammy 2x990 Pro
Display(s) Samsung 1080P \ LG 43UN700
Case Fractal Design Pop Air 2x140mm fans from Torrent \ Fractal Design Torrent 2 SilverStone FHP141x2
Audio Device(s) Yamaha RX-V677 \ Yamaha CX-830+Yamaha MX-630 \Paradigm 7se MKII, Paradigm 5SE MK1 , Blue Yeti
Power Supply Seasonic Prime TX-750 \ Corsair RM1000X Shift
Mouse Steelseries Sensei wireless \ Steelseries Sensei wireless
Keyboard Logitech K120 \ Wooting Two HE
Benchmark Scores Meh benchmarks.
That's a damn sneaky move. Guaranteed it's a crypto mining scam considering the target is folk dl'ing a GPU tool.


Well that was really polite hehe, again down to people clicking any thing.
 

silentbogo

Moderator
Staff member
Joined
Nov 20, 2013
Messages
5,481 (1.42/day)
Location
Kyiv, Ukraine
System Name WS#1337
Processor Ryzen 7 3800X
Motherboard ASUS X570-PLUS TUF Gaming
Cooling Xigmatek Scylla 240mm AIO
Memory 4x8GB Samsung DDR4 ECC UDIMM
Video Card(s) Inno3D RTX 3070 Ti iChill
Storage ADATA Legend 2TB + ADATA SX8200 Pro 1TB
Display(s) Samsung U24E590D (4K/UHD)
Case ghetto CM Cosmos RC-1000
Audio Device(s) ALC1220
Power Supply SeaSonic SSR-550FX (80+ GOLD)
Mouse Logitech G603
Keyboard Modecom Volcano Blade (Kailh choc LP)
VR HMD Google dreamview headset(aka fancy cardboard)
Software Windows 11, Ubuntu 20.04 LTS
So, why is that website still up? First reports are dated may 5th. Took me all of 2 minutes to find their hoster (timeweb.ru) and CDN for malicious files(hipolink, some sort of stupid e-commerce service w/ social network integration, full of holes and potential exploits). Pretty sure MSI has a lot more sway than me writing an angry e-mail to tech support.

UPDATE:
Victory #1. Per my request Hipolink already deleted suspicious accounts.
Victory #2. Timeweb already replied that they're on it.

So, the moral of this story, kids, is - be proactive. Cause from my standpoint it looks like an equivalent of reporters filming a live robbery and telling how bad the crime rate is nowadays, before even calling the police.
 
Last edited:
Joined
Dec 25, 2019
Messages
143 (0.09/day)
System Name Mirkwood
Processor AMD RYZEN 7 3800X
Motherboard ASUS ROG Crosshair VII Hero (Wi-Fi) AM4 AMD X470
Cooling Noctua D15S with additional Noctua NF-A12x25 FLX fan
Memory G.SKILL Flare X Series CL16 3200Mhz 16GB (4 x 8GB)
Video Card(s) GIGABYTE Radeon RX 570 DirectX 12 GV-RX570GAMING-4GD 4GB
Storage Crucial MX500 M.2 2280 500GB SATA III; WD Black 1TB Performance Desktop Hard Disk Drive
Display(s) Philips 246E9QDSB 24" Frameless Monitor, Full HD IPS, 129% sRGB, 75Hz, FreeSync
Case Corsair Graphite Series 780T
Audio Device(s) Klipsch R-41PM powered monitors and SVS SB-2000 sub
Power Supply Corsair HX650
Mouse Logitech Wireless Performance Mouse MX
Keyboard Old Logitech keyboard
Software Windows 10 Pro 64Bit
Because it ends in “.space” it could be a chia crypto scam as one pool for Chia is planning on launching soon using .space moniker but it is a legit pool as far as I know.
 

silentbogo

Moderator
Staff member
Joined
Nov 20, 2013
Messages
5,481 (1.42/day)
Location
Kyiv, Ukraine
System Name WS#1337
Processor Ryzen 7 3800X
Motherboard ASUS X570-PLUS TUF Gaming
Cooling Xigmatek Scylla 240mm AIO
Memory 4x8GB Samsung DDR4 ECC UDIMM
Video Card(s) Inno3D RTX 3070 Ti iChill
Storage ADATA Legend 2TB + ADATA SX8200 Pro 1TB
Display(s) Samsung U24E590D (4K/UHD)
Case ghetto CM Cosmos RC-1000
Audio Device(s) ALC1220
Power Supply SeaSonic SSR-550FX (80+ GOLD)
Mouse Logitech G603
Keyboard Modecom Volcano Blade (Kailh choc LP)
VR HMD Google dreamview headset(aka fancy cardboard)
Software Windows 11, Ubuntu 20.04 LTS
Because it ends in “.space” it could be a chia crypto scam as one pool for Chia is planning on launching soon using .space moniker but it is a legit pool as far as I know.
It has nothing to do with it. Gimmicky domain zones are popular, because they are always on sale or free(bundled with hosting).

UPDATE #2:
Apparently puny silentbogo with his angry emails has more power(or common sense) than multi-billion dollar corpo. Website has been taken off somewhere in-between their first reply and my trip to the office.
 
Joined
Aug 2, 2012
Messages
1,822 (0.42/day)
Location
Netherlands
System Name TheDeeGee's PC
Processor Intel Core i7-11700
Motherboard ASRock Z590 Steel Legend
Cooling Noctua NH-D15
Memory Crucial Ballistix 3200/C16 32GB
Video Card(s) Nvidia RTX 4070 Ti 12GB
Storage Crucial P5 Plus 2TB / Crucial P3 Plus 2TB / Crucial P3 Plus 4TB
Display(s) EIZO CX240
Case Lian-Li O11 Dynamic Evo XL
Audio Device(s) Creative Sound Blaster ZxR / AKG K601 Headphones
Power Supply Seasonic PRIME Fanless TX-700
Mouse Logitech G500s
Keyboard Keychron Q6
Software Windows 10 Pro 64-Bit
Benchmark Scores None, as long as my games runs smooth.
I always download it from Guru3D.
 
Joined
Aug 20, 2007
Messages
20,890 (3.40/day)
System Name Pioneer
Processor Ryzen R9 7950X
Motherboard GIGABYTE Aorus Elite X670 AX
Cooling Noctua NH-D15 + A whole lotta Sunon and Corsair Maglev blower fans...
Memory 64GB (4x 16GB) G.Skill Flare X5 @ DDR5-6000 CL30
Video Card(s) XFX RX 7900 XTX Speedster Merc 310
Storage 2x Crucial P5 Plus 2TB PCIe 4.0 NVMe SSDs
Display(s) 55" LG 55" B9 OLED 4K Display
Case Thermaltake Core X31
Audio Device(s) TOSLINK->Schiit Modi MB->Asgard 2 DAC Amp->AKG Pro K712 Headphones or HDMI->B9 OLED
Power Supply FSP Hydro Ti Pro 850W
Mouse Logitech G305 Lightspeed Wireless
Keyboard WASD Code v3 with Cherry Green keyswitches + PBT DS keycaps
Software Gentoo Linux x64 / Windows 11 Enterprise IoT 2024
Because it ends in “.space” it could be a chia crypto scam as one pool for Chia is planning on launching soon using .space moniker but it is a legit pool as far as I know.
That's really can't be true and most likely just something you heard.

IANA would never go for assigning a zone to a crypto based registrar, at least not yet. There are crypto names, but you need to be running the wallet to view them (like namecoin as an example). This is not the problem at all.

Also Chia doesn't even use GPUs.

It has nothing to do with it. Gimmicky domain zones are popular, because they are always on sale or free(bundled with hosting).

UPDATE #2:
Apparently puny silentbogo with his angry emails has more power(or common sense) than multi-billion dollar corpo. Website has been taken off somewhere in-between their first reply and my trip to the office.
You are a wizzard, Harry!

Or a hairy wizzard, you pick.
 
Joined
Oct 22, 2014
Messages
13,312 (3.78/day)
Location
Sunshine Coast
System Name Lenovo ThinkCentre
Processor AMD 5650GE
Motherboard Lenovo
Memory 32 GB DDR4
Display(s) AOC 24" Freesync 1m.s. 75Hz
Mouse Lenovo
Keyboard Lenovo
Software W11 Pro 64 bit
Nobody questioned the fact the legit source was shut down "for maintenance" ?
Seems too much of a coincidence to me.
 
Joined
Aug 20, 2007
Messages
20,890 (3.40/day)
System Name Pioneer
Processor Ryzen R9 7950X
Motherboard GIGABYTE Aorus Elite X670 AX
Cooling Noctua NH-D15 + A whole lotta Sunon and Corsair Maglev blower fans...
Memory 64GB (4x 16GB) G.Skill Flare X5 @ DDR5-6000 CL30
Video Card(s) XFX RX 7900 XTX Speedster Merc 310
Storage 2x Crucial P5 Plus 2TB PCIe 4.0 NVMe SSDs
Display(s) 55" LG 55" B9 OLED 4K Display
Case Thermaltake Core X31
Audio Device(s) TOSLINK->Schiit Modi MB->Asgard 2 DAC Amp->AKG Pro K712 Headphones or HDMI->B9 OLED
Power Supply FSP Hydro Ti Pro 850W
Mouse Logitech G305 Lightspeed Wireless
Keyboard WASD Code v3 with Cherry Green keyswitches + PBT DS keycaps
Software Gentoo Linux x64 / Windows 11 Enterprise IoT 2024
Nobody questioned the fact the legit source was shut down "for maintenance" ?
Seems too much of a coincidence to me.
If you're a scammer, you don't view that as an opportunity?
 
Joined
Oct 22, 2014
Messages
13,312 (3.78/day)
Location
Sunshine Coast
System Name Lenovo ThinkCentre
Processor AMD 5650GE
Motherboard Lenovo
Memory 32 GB DDR4
Display(s) AOC 24" Freesync 1m.s. 75Hz
Mouse Lenovo
Keyboard Lenovo
Software W11 Pro 64 bit

btarunr

Editor & Senior Moderator
Staff member
Joined
Oct 9, 2007
Messages
46,669 (7.66/day)
Location
Hyderabad, India
System Name RBMK-1000
Processor AMD Ryzen 7 5700G
Motherboard ASUS ROG Strix B450-E Gaming
Cooling DeepCool Gammax L240 V2
Memory 2x 8GB G.Skill Sniper X
Video Card(s) Palit GeForce RTX 2080 SUPER GameRock
Storage Western Digital Black NVMe 512GB
Display(s) BenQ 1440p 60 Hz 27-inch
Case Corsair Carbide 100R
Audio Device(s) ASUS SupremeFX S1220A
Power Supply Cooler Master MWE Gold 650W
Mouse ASUS ROG Strix Impact
Keyboard Gamdias Hermes E2
Software Windows 11 Pro
So, why is that website still up? First reports are dated may 5th. Took me all of 2 minutes to find their hoster (timeweb.ru) and CDN for malicious files(hipolink, some sort of stupid e-commerce service w/ social network integration, full of holes and potential exploits). Pretty sure MSI has a lot more sway than me writing an angry e-mail to tech support.

UPDATE:
Victory #1. Per my request Hipolink already deleted suspicious accounts.
Victory #2. Timeweb already replied that they're on it.

So, the moral of this story, kids, is - be proactive. Cause from my standpoint it looks like an equivalent of reporters filming a live robbery and telling how bad the crime rate is nowadays, before even calling the police.
Kudos! post updated.
 

qubit

Overclocked quantum bit
Joined
Dec 6, 2007
Messages
17,865 (2.96/day)
Location
Quantum Well UK
System Name Quantumville™
Processor Intel Core i7-2700K @ 4GHz
Motherboard Asus P8Z68-V PRO/GEN3
Cooling Noctua NH-D14
Memory 16GB (2 x 8GB Corsair Vengeance Black DDR3 PC3-12800 C9 1600MHz)
Video Card(s) MSI RTX 2080 SUPER Gaming X Trio
Storage Samsung 850 Pro 256GB | WD Black 4TB | WD Blue 6TB
Display(s) ASUS ROG Strix XG27UQR (4K, 144Hz, G-SYNC compatible) | Asus MG28UQ (4K, 60Hz, FreeSync compatible)
Case Cooler Master HAF 922
Audio Device(s) Creative Sound Blaster X-Fi Fatal1ty PCIe
Power Supply Corsair AX1600i
Mouse Microsoft Intellimouse Pro - Black Shadow
Keyboard Yes
Software Windows 10 Pro 64-bit
Joined
Jul 16, 2014
Messages
8,143 (2.25/day)
Location
SE Michigan
System Name Dumbass
Processor AMD Ryzen 7800X3D
Motherboard ASUS TUF gaming B650
Cooling Artic Liquid Freezer 2 - 420mm
Memory G.Skill Sniper 32gb DDR5 6000
Video Card(s) GreenTeam 4070 ti super 16gb
Storage Samsung EVO 500gb & 1Tb, 2tb HDD, 500gb WD Black
Display(s) 1x Nixeus NX_EDG27, 2x Dell S2440L (16:9)
Case Phanteks Enthoo Primo w/8 140mm SP Fans
Audio Device(s) onboard (realtek?) - SPKRS:Logitech Z623 200w 2.1
Power Supply Corsair HX1000i
Mouse Steeseries Esports Wireless
Keyboard Corsair K100
Software windows 10 H
Benchmark Scores https://i.imgur.com/aoz3vWY.jpg?2
It has nothing to do with it. Gimmicky domain zones are popular, because they are always on sale or free(bundled with hosting).

UPDATE #2:
Apparently puny silentbogo with his angry emails has more power(or common sense) than multi-billion dollar corpo. Website has been taken off somewhere in-between their first reply and my trip to the office.
Living close enough is so much better than an email. Thank you very much for this.
 

silentbogo

Moderator
Staff member
Joined
Nov 20, 2013
Messages
5,481 (1.42/day)
Location
Kyiv, Ukraine
System Name WS#1337
Processor Ryzen 7 3800X
Motherboard ASUS X570-PLUS TUF Gaming
Cooling Xigmatek Scylla 240mm AIO
Memory 4x8GB Samsung DDR4 ECC UDIMM
Video Card(s) Inno3D RTX 3070 Ti iChill
Storage ADATA Legend 2TB + ADATA SX8200 Pro 1TB
Display(s) Samsung U24E590D (4K/UHD)
Case ghetto CM Cosmos RC-1000
Audio Device(s) ALC1220
Power Supply SeaSonic SSR-550FX (80+ GOLD)
Mouse Logitech G603
Keyboard Modecom Volcano Blade (Kailh choc LP)
VR HMD Google dreamview headset(aka fancy cardboard)
Software Windows 11, Ubuntu 20.04 LTS
Living close enough is so much better than an email. Thank you very much for this.
I meant trip to my office, not their office... I'm not sure if border patrol would let me go to SPB, or just arrest on the spot :fear:
 
Joined
Dec 26, 2006
Messages
3,595 (0.56/day)
Location
Northern Ontario Canada
Processor Ryzen 5700x
Motherboard Gigabyte X570S Aero G R1.1 BiosF5g
Cooling Noctua NH-C12P SE14 w/ NF-A15 HS-PWM Fan 1500rpm
Memory Micron DDR4-3200 2x32GB D.S. D.R. (CT2K32G4DFD832A)
Video Card(s) AMD RX 6800 - Asus Tuf
Storage Kingston KC3000 1TB & 2TB & 4TB Corsair LPX
Display(s) LG 27UL550-W (27" 4k)
Case Be Quiet Pure Base 600 (no window)
Audio Device(s) Realtek ALC1220-VB
Power Supply SuperFlower Leadex V Gold Pro 850W ATX Ver2.52
Mouse Mionix Naos Pro
Keyboard Corsair Strafe with browns
Software W10 22H2 Pro x64
after.............burnt................
 
Joined
Feb 18, 2013
Messages
2,181 (0.53/day)
Location
Deez Nutz, bozo!
System Name Rainbow Puke Machine :D
Processor Intel Core i5-11400 (MCE enabled, PL removed)
Motherboard ASUS STRIX B560-G GAMING WIFI mATX
Cooling Corsair H60i RGB PRO XT AIO + HD120 RGB (x3) + SP120 RGB PRO (x3) + Commander PRO
Memory Corsair Vengeance RGB RT 2 x 8GB 3200MHz DDR4 C16
Video Card(s) Zotac RTX2060 Twin Fan 6GB GDDR6 (Stock)
Storage Corsair MP600 PRO 1TB M.2 PCIe Gen4 x4 SSD
Display(s) LG 29WK600-W Ultrawide 1080p IPS Monitor (primary display)
Case Corsair iCUE 220T RGB Airflow (White) w/Lighting Node CORE + Lighting Node PRO RGB LED Strips (x4).
Audio Device(s) ASUS ROG Supreme FX S1220A w/ Savitech SV3H712 AMP + Sonic Studio 3 suite
Power Supply Corsair RM750x 80 Plus Gold Fully Modular
Mouse Corsair M65 RGB FPS Gaming (White)
Keyboard Corsair K60 PRO RGB Mechanical w/ Cherry VIOLA Switches
Software Windows 11 Professional x64 (Update 23H2)
silentbogo doing God's work. Kudos to you. The lack of intervention from MSI themselves shows how little they care about their image, like every other corpos. But they only know how to rat out when things get a little too hot.

can't say the word "corporate" with the word "rat" in it.
 
Top