MythicalLTD/MythicalDash

Anyone using HolaClient has gotten their info stolen, we highly advise resetting everything and avoiding HolaClient.

Closed this issue · 9 comments

NaysKutzu commented

Archive Link: https://github.com/nayskutzu/HolaClient/blob/latest/routes/structures/telemetry.js

This was reported by @Nyxalis on the popular discord server called DontAbuse.

Right now what you can do is reset everything that's in your settings.json and settings.yml files and then delete the telemetry.js file
We recommend you switch to another open-source client as soon as possible if you're still using Hola Client

@ItzGeoYT has seized the VM due to this.

This seems to extend to send the following data in addition:

  • Pterodactyl admin key
  • Pterodactyl client key
  • Cloudflare api key (if setup)
  • Email SMTP information (if setup)
  • Bot token (if setup)
  • linkvertise, shareus, linkpays & gyanilinks API keys (if setup)
  • Discord bot application Secret, ClientID & Bot Token
  • Discord log webhooks

We recommend that you switch over to MythicalDash!
https://github.com/mythicalltd/mythicaldash

If you don't want to use MythicalDash here are some more repos for you:
[FREE]
https://ctrlpanel.gg/
https://paymenter.org/
https://github.com/mythicalltd/mythicalclient
https://github.com/openheliactyl/heliactyl
[PAID]
https://www.whmcs.com/
https://www.blesta.com/

ImGeorgiy commented

Avoid using HolaClient.

amogusreal69 commented

isn't heliactyl from another scammer

amogusreal69 commented
  • its no longer maintained
NaysKutzu commented

Does it matter? no it i just so users can see what options there are

Saboreq commented

Cry more fking kids, code is open source so everybody agreed on this telemetry :'D

ImGeorgiy commented
NxyyLOL commented

everyone stfu, holaclient was shitty to begin with lol

boomerangBS commented

thank's for this report

NaysKutzu commented

thank's for this report

No problem it is my job to keep users safe!