Bitcoin Forum>Other>Meta
Author

Topic: A Network of fake accounts bumping threads, attempting to spread malware. (Read 293 times)

alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
A Network of fake accounts bumping threads, attempting to spread malware.
June 16, 2018, 01:35:43 PM
#14
Quote from: alani123 on June 15, 2018, 05:48:06 PM
Phishing has begun again:

https://bitcointalksearch.org/topic/--4476829
https://bitcointalksearch.org/topic/--4476823
https://bitcointalksearch.org/topic/--4052923
https://bitcointalksearch.org/topic/--4052988

Mods should nuke all those accounts that post in those threads. They seem hacked.

Edit:
To clarify, the official domain is margin.de as seen in their official thread:
https://bitcointalksearch.org/topic/margin-terminal-over-25-spot-and-futures-exchanges-bots-and-more-1467939


See real vs. fake whois here:
https://imgur.com/a/lk0pvvx
Mods should purge those threads/accounts pls. I've already reported them and some responses were deleted but the OPs and accounts were left untouched.
alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
Re: A Network of fake accounts bumping threads, attempting to spread malware.
June 15, 2018, 05:48:06 PM
#13
Phishing has begun again:

https://bitcointalksearch.org/topic/--4476829
https://bitcointalksearch.org/topic/--4476823
https://bitcointalksearch.org/topic/--4052923
https://bitcointalksearch.org/topic/--4052988

Mods should nuke all those accounts that post in those threads. They seem hacked.

Edit:
To clarify, the official domain is margin.de as seen in their official thread:
https://bitcointalksearch.org/topic/margin-terminal-over-25-spot-and-futures-exchanges-bots-and-more-1467939


See real vs. fake whois here:
https://imgur.com/a/lk0pvvx
athanz88
sr. member
Activity: 476
Merit: 359
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 19, 2018, 03:11:36 PM
#12
Quote from: alani123 on April 19, 2018, 02:54:44 PM
Quote from: athanz88 on April 19, 2018, 02:34:29 PM
snip
https://www.virustotal.com/en/file/d801f25c3901950b5b62615c3d95b44ce9bb044315e40cf738620f46d5d8c54e/analysis/1524159308/

This is the file that the website prompts to download.

Well it has some severe virus in there, what ever the malware is, i guess it can do some serious things like stealing information or making your computer as a miner like some malware back then. Damn there are so many crimes everywhere.
alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 19, 2018, 02:54:44 PM
#11
Quote from: athanz88 on April 19, 2018, 02:34:29 PM
What kind of malware? Any idea? I guess we really need that new bitcointalk sooner, with some updated security and other things that can prevent this kind of botting and spamming.
https://www.virustotal.com/en/file/d801f25c3901950b5b62615c3d95b44ce9bb044315e40cf738620f46d5d8c54e/analysis/1524159308/

This is the file that the website prompts to download.
athanz88
sr. member
Activity: 476
Merit: 359
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 19, 2018, 02:34:29 PM
#10
What kind of malware? Any idea? I guess we really need that new bitcointalk sooner, with some updated security and other things that can prevent this kind of botting and spamming.
alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 19, 2018, 01:53:44 PM
#9
I got a response from the official team behind the actual service:

Quote from: leonArdo@margin on April 19, 2018, 11:43:34 AM
Quote from: alani123 on April 19, 2018, 11:00:02 AM
Are you aware of the spamming related to a supposed promotion posing as "margin bot"?

The spammers are using your intellectual property, including your name and logo as well as a 1 to 1 copy of margin.de in a different domain. I don't know if those operations are linked to the original service (the one here) but they're using a domain registered on 2018-04-05 which I couldn't find to have any connection to the legitimate service here. Could probably be an attempt to get users to download malicious software.

Here's my documentation of this:
https://bitcointalksearch.org/topic/a-network-of-fake-accounts-bumping-threads-attempting-to-spread-malware-3311619

If this is a scam you should take appropriate action as the original holders of the intellectual property.



Thanks for reporting this! We reported them to the moderators. We would appreciate if other would, too!

All the best,

  Rene

I think we can say with certainty that this is an attempt to spread malware!

I've PMed Theymos so hopefully we'll see this addressed soon.
alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 19, 2018, 11:03:22 AM
#8
I'm starting to believe that this might be an attempt to spread malicious software. The domain linked does not seem to be connected to the original service in any way. It's registered on 2018-04-05.
alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 19, 2018, 10:46:42 AM
#7
This is now carried over to local boards:

https://bitcointalksearch.org/topic/--3346156
https://bitcointalksearch.org/topic/--3346174
https://bitcointalksearch.org/topic/--3346137

Responses are of the same low quality as before and all in English in spite of the OPs being posted in local boards. Mods should take the time to ban the bot/hacked accounts. This is very frustrating.

This seems to be the account of the perpetrating OP:
https://bitcointalksearch.org/user/dforthster-867859
Lunarics
copper member
Activity: 168
Merit: 34
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 13, 2018, 05:38:02 AM
#6
Quote from: hilariousetc on April 13, 2018, 05:27:00 AM
They're probably hacked accounts as well. Look at the registered dates of them:

https://bitcointalksearch.org/user/alex1736-398174     alex1736 November 26, 2014
https://bitcointalksearch.org/user/darkcapitan-368869     DARKCAPITAN August 20, 2014,
https://bitcointalksearch.org/user/bobsat-879567     bobsat July 19, 2016
https://bitcointalksearch.org/user/mantavy4-391361     mantavy4 November 01, 2014
https://bitcointalksearch.org/user/konishua-765018     konishua February 11, 2016

All of the above ones except two have zero posts until recently. The other two have one post back in 2016 then nothing until they start bumping that thread.
The Japanese are something bad conceived. It is necessary to observe the activity of the local topic https://bitcointalksearch.org/topic/--3163031 There's probably all bots
hilariousetc
legendary
Activity: 2828
Merit: 3038
Join the world-leading crypto sportsbook NOW!
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 13, 2018, 05:27:00 AM
#5
They're probably hacked accounts as well. Look at the registered dates of them:

https://bitcointalksearch.org/user/alex1736-398174     alex1736 November 26, 2014
https://bitcointalksearch.org/user/darkcapitan-368869     DARKCAPITAN August 20, 2014,
https://bitcointalksearch.org/user/bobsat-879567     bobsat July 19, 2016
https://bitcointalksearch.org/user/mantavy4-391361     mantavy4 November 01, 2014
https://bitcointalksearch.org/user/konishua-765018     konishua February 11, 2016

All of the above ones except two have zero posts until recently. The other two have one post back in 2016 then nothing until they start bumping that thread.
alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 13, 2018, 04:27:00 AM
#4
The OP of that thread (now removed) has posted the same thing all over the forum.

Profile: https://bitcointalksearch.org/user/joejoemister-1429927

Duplicate threads:
https://bitcointalksearch.org/topic/--3301750
https://bitcointalksearch.org/topic/--3301763
https://bitcointalksearch.org/topic/--3301792
https://bitcointalksearch.org/topic/--3301797

Duplicate thread by different OP:
https://bitcointalksearch.org/topic/--3295757
alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 12, 2018, 07:44:39 PM
#3
Quote from: max2607 on April 12, 2018, 07:25:32 PM
It surely isn't organic but what kind of bot is this now posting with new accounts every single time it's weird there has already been 9 pages of reply but no moderators has taken any action against it

Also here's a link to one of the newbie profile : https://bitcointalksearch.org/user/darkcapitan-368869
This clearly proofs they were only created to bump the thread

I have archived the whole post for future reference : https://web.archive.org/web/20180412232507/https://bitcointalk.org/index.php?topic=3301773.0;all
The posts feel like they have a human touch to them. Perhaps this is some sort of paid promotion where users are incentivized to make those posts for some sort of a reward. Either way, it is very much against the rules so I hope mods will take action promptly.
max2607
member
Activity: 135
Merit: 22
Need a nice avatar, can someone help :-)
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 12, 2018, 07:25:32 PM
#2
It surely isn't organic but what kind of bot is this now posting with new accounts every single time it's weird there has already been 9 pages of reply but no moderators has taken any action against it

Also here's a link to one of the newbie profile : https://bitcointalksearch.org/user/darkcapitan-368869
This clearly proofs they were only created to bump the thread

I have archived the whole post for future reference : https://web.archive.org/web/20180412232507/https://bitcointalk.org/index.php?topic=3301773.0;all
alani123
legendary
Activity: 2422
Merit: 1451
Leading Crypto Sports Betting & Casino Platform
Re: A Network of fake accounts bumping threads, attempting to spread malware.
April 12, 2018, 06:47:46 PM
#1
Look at this thread:
https://bitcointalksearch.org/topic/--3301773

EVERY single response to it comes from a Newbie. Doesn't that look suspicious? Most of those accounts seem to have responses to just that thread along with another one promoting a trading bot.

This thread has been kept to the top position of the trading discussion board all day, but they way this was achieved doesn't appear to be organic.

Bitcoin Forum>Other>Meta
Jump to: