[RBFU]

As the most of you have probably observed, there has been a sudden rise in spam threads pertaining to this technique.
An exploit of a time zone does not exist. Avoid installing haphazard Tampermonkey scripts.

The script is designed to trick you into sending money to a false address. 
The same individual who is promoting the script is the owner of accounts saying it works.

An official article regarding it can also be found on G2A's Support Hub: 
https://supporthub.g2a.com/marketplace/e...-hack-scam

[Dis]

G2A scams have been around for years, if you see any "G2A exploit" report and ignore

[ThinkingOne]

For those that are even more curious...

It is relatively safe to download a script, if you do not install it... that said, I used wget to get the script from one of these scams that was posted recently. There were 2 scripts, one dealing with time zone changes, and the other that handles the Bitcoin stuff.

I took the one that handles the Bitcoin stuff and cut-and-paste it into a Javascript de-obfuscator. You'd have to be quite decent with Javascript to figure out *exactly* what it does and how, but even if you are clueless "bc1q0xx6p8heecn3sy9fssjcr06gct07kkcs5le8d7" stood out. It looks like it places it somewhere in the webpage, and copies it to the clipboard. I'm assuming that that is the "magic" that sends your BTC to the scammer rather than G2A.

However, I do not feel too bad when a wannabe scammer gets scammed!

[DredgenSun]

Fuck G2A anyway. CDKeys simp right here