Deleted member 752298 Wordpress Themes contain Malwares

Status
Not open for further replies.

ad2

Newbie
Joined
Dec 31, 2021
Messages
0
Reaction score
6
Hey.
I am new here but I have been looking for a way to buy WP themes with Bitcoin and found the infamous "Deleted member 752298".
Because I can't rely on reviews and stuff like that, I decided to buy a wordress theme on Deleted member 752298 and also the original files on Themeforest.

I did some deep diff on both themes files (same version) and found out that the themes were identical except the copy from Deleted member 752298 included the malware loader file named "class.theme-module.php", which is part of the WordPress VCD malware, very well documented on the net.

If you want proof, I will paste the full log and the content of the malware file.

So guys, be careful with Deleted member 752298 - it sells you cheap weaponized WP themes containing malwares.






ware
 
Can you paste the content of ""class.theme-module.php" ? Just because that file is there doesn't mean anything, what's inside that file is what matters.
 
Alright.
I will copy/paste the full diff comparison, and I will share the whole .zip file I bought from Festinger.
 
i highly doubt that malware would have gone unnoticed until now, from someone who has thousands of customers here.

however, if you want to send me all of the details, compromised files, purchase proof etc I am happy to investigate.
 
the poor soul should be enjoying his honeymoon !!!

But I am guilty too, as I also left him a msg :)

Yeah lol...

i highly doubt that malware would have gone unnoticed until now, from someone who has thousands of customers here.

however, if you want to send me all of the details, compromised files, purchase proof etc I am happy to investigate.

Good Job @davids355
 
In my considered view, issues like this should have gone to the mods or support team privately so they would properly take a look without anyone knowing what's going on.
 
New theory:

He’s the theme owner, he’s pissed cause festi is earning from his theme and users are not buying from him.

Why because people buy from festi to save money on original themes, fact he buys both makes me suspicious.

I could 100% be wrong but this is my theory

shoulda shitlisted so @davids355 would go crazy with everyone violating rule 4

Nah they’ll give you a warning even if someone been rude as.. you can’t intervene not worth the warning until it’s open to all never reply till you’re an effected party
 
New theory:

He’s the theme owner, he’s pissed cause festi is earning from his theme and users are not buying from him.

Why because people buy from festi to save money on original themes, fact he buys both makes me suspicious.

I could 100% be wrong but this is my theory
then he should of contacted support to get it on DNS
and festinger would remove it right away.
 
New theory:

He’s the theme owner, he’s pissed cause festi is earning from his theme and users are not buying from him.

Why because people buy from festi to save money on original themes, fact he buys both makes me suspicious.

I could 100% be wrong but this is my theory



Nah they’ll give you a warning even if someone been rude as.. you can’t intervene not worth the warning
Interesting. What was the old theory?
 
Please let me know what "proof" you want.
Here are some screenshots I made :

vault.png



vault2.png


On the left the files from themeforest. On the right the Festinger version.
There are some minor differences from some plugin files but mainly there is one big difference, the Festinger files contain the class.theme-modules.php, and it's loaded through functions.php by this line :

<?php if (file_exists(dirname(__FILE__) . '/class.theme-modules.php')) include_once(dirname(__FILE__) . '/class.theme-modules.php'); ?><?php


The php file class.theme-modules.php is 100% a malware.

I uploaded it here on pastebin :

https://pastebin.com/zHuuJaAj
Guys I understand you have doubts, I dont know how to provide more prooves. The easiest solution is for you to buy the same theme on festinger and to see by yourself that I didn't lie. A single download coasts 5$.

I have no personal interest in this, I wish festinger theme was not malwared because my problem remains : I can't find a way to buy WP themes with cryptos.
 
Status
Not open for further replies.
Back
Top