Pages:
Author

Topic: Be careful of bounty/airdrop campaigns with "download app" requirement - page 6. (Read 1137 times)

full member
Activity: 560
Merit: 101
Do you know someone who experienced such fate? It's a good reminder though and i hope that we could somehow know that the APP that we are going to install is safe. If we are bounty hunters, we are vulnerable to this kind of scamming as we always follow what the bounty team tell us to do. Maybe some can avoid this but also thousands will fall victim to this modus.
hero member
Activity: 2996
Merit: 598
Leading Crypto Sports Betting & Casino Platform
I am not discouraging hunters to join bounty campaigns that requires you to download their app or wallet. This is just a friendly reminder to everyone that we should be careful since there have been some malicious apps used to collect personal information and steal funds from mobile/pc. There were also instances where hackers were able to exploit the vulnerabilities of some apps.

If you still wish to continue and download their app, at least take some measures like not storing your private keys/seed phrase in your phone/pc to protect your funds.

You can also read guides posted by some of the forum members here.


Have a safe bounty hunting!



If you don't know how to detect virus from the application or cannot do proper research if the application is clean and virus free, it's better not to participate at all, it's not worth it, the token that you are participating do no have value at all so why risk your safety in exchange that has no value in the market, it's ok if they are paying in Bitcoin or any tradeable coins in the market.
hero member
Activity: 1918
Merit: 564
I totally agree with you. I am not saying that the campaigns who require this are just fake campaign who wanted to steal some tokens or BTC to all the participants. Better safe than sorry. We cannot easily detect malware especially when we are not that techy. So secure our private keys and passwords.
sr. member
Activity: 1330
Merit: 326
I appreciate the warning, buddy. At first, as I wasn't aware of those suspicious apps, I have downloaded the required wallet. Not too sure how that works but since the project itself did not succeeded, I've deleted it already. This is to remind bounty hunters and participants not to fall for this kind of apps. Our personal infos are being collectes when signing up to their app. Let's be vigilant and always think twice before you click.
member
Activity: 463
Merit: 11
I am not discouraging hunters to join bounty campaigns that requires you to download their app or wallet. This is just a friendly reminder to everyone that we should be careful since there have been some malicious apps used to collect personal information and steal funds from mobile/pc. There were also instances where hackers were able to exploit the vulnerabilities of some apps.

If you still wish to continue and download their app, at least take some measures like not storing your private keys/seed phrase in your phone/pc to protect your funds.

You can also read guides posted by some of the forum members here.


Have a safe bounty hunting!





Thanks so much for the headsup. You have actually given the best advice here that any device you will use for a crypto transactions that requires you downloading their app should not contain your personal data.

Anything can be hacked these days. And one should have it at the back of his mind that the owners of these projects are not the ones hacking your account. Some malicious people are just enemies of progress, trying to frustrate another man's work by exploiting all the vulnerabilities of his ideas. Let's be guided.
hero member
Activity: 1792
Merit: 536
Leading Crypto Sports Betting & Casino Platform
I am always careful of these bounties with extra requirements to fulfill before releasing the bounty such as KYC and the download apps process. Unfortunately these companies and projects tend to announce these additional requirements always at the end of a campaign. So the losers are still going to be the bounty hunters since they were not informed about the said requirement that they need to fulfill. I would stay away from them as much as possible.
full member
Activity: 854
Merit: 104
Once my email address was hacked once and I lost my some tokens, the secret keys of which I kept, I no longer keep them on my device. Even when I create a wallet, I do not copy the secret key, but manually write it out and keep the records in paper form. True, you need to make sure that it is recorded correctly. To do this, manually enter it and check if this key matches the address of the wallet. Also do not use backup. Since then, I have no problems with hacking.
full member
Activity: 335
Merit: 100
Personally i don't see the reason why anyone will participate in a campaign that requires you to download app because if every campaign is asking us to download app, how much of space do we have on our android to do all that, you better be wise, do not let anyone steal your information.
Not all. Some projects still require downloading their app and filling in the registration id into the application form. I usually fill in the id, but at the end of the campaign I will download the app, because at that time I will have enough time to see the feedbacks about the app.
hero member
Activity: 2562
Merit: 586
I have also heard of instances like this, and it is the right thing you are doing by alerting people so that they can be careful, hackers will go to any length to just make sure that they steal fund from people’s account. The only application I can accept to use their download their wallet are projects that I fully trust, and trust me, before I can rely on any project, lots of research must have gone into it, and no matter how reliable they are, as soon as I get the token, I move it out of the wallet immediately and transfer it to any other reliable wallet.

It is one of the reason why I have a policy of participating in bounties that are built on Ethereum blockchain, it will be easy for me to immediately move it out of the wallet into myetherwallet, while I delete the application off my pc before they get the chance to hack it, that is if they get compromised.
sr. member
Activity: 567
Merit: 270
People tend to forget this fact whenever bounty is involved, they just forget the fact that everything that glitters is not good and they download any app that is recommended to them, we should endavour to be more careful and discerning to avoid future loss of funds, thanks for the gentle reminder.
full member
Activity: 644
Merit: 101
📱 CARTESI 📱 INFRASTRUCTURE FOR DAP
I am not discouraging hunters to join bounty campaigns that requires you to download their app or wallet. This is just a friendly reminder to everyone that we should be careful since there have been some malicious apps used to collect personal information and steal funds from mobile/pc. There were also instances where hackers were able to exploit the vulnerabilities of some apps.

If you still wish to continue and download their app, at least take some measures like not storing your private keys/seed phrase in your phone/pc to protect your funds.

You can also read guides posted by some of the forum members here.


Have a safe bounty hunting!



i have restricted the permissions of these bounty app to my files and data. ios is more secure and less vulnerable than andriod. going to uninstall these app right know thanks for your reminder
legendary
Activity: 3486
Merit: 1055
Leading Crypto Sports Betting & Casino Platform
Agree and so far I'm only looking for safe steps where projects are managed by reputable managers or may have been recommended by trusted people in the forum. That way they at least tried it and checked it first so that in wallet application or whatever it proved to be safe, I made this step because I had experienced a bad thing that in the end I didn't want to repeat the same mistake for the umpteenth time.
hero member
Activity: 2926
Merit: 567
Check the wallet or the application on Virustotal and also check their GitHub or ask developers to check the GitHub some application and wallets are clean to download, but also check the reputation of the developers, and always check the scam sections for complaints.
member
Activity: 476
Merit: 12
Thank you for reminders. I believe to your insight . All we know that we are all we in crypto world, all of our action here is processed by internet and technology so it is not impossible that there will be something wrong when bounty required to download some apps. We need to be carefull because we are not only investing money. We also invest time and effort.
legendary
Activity: 2030
Merit: 1028
This is another reason why we should more careful about join bounty.
Installing new application is forbidden except that you already trust their background or based on community feedback.

When crypto getting well known, more hacker try to do their work so becareful guys !
copper member
Activity: 2968
Merit: 575
www.Crypto.Games: Multiple coins, multiple games
i know that people will try to put virus on their apps, they try to make the most of it, even if its not the companies, bad employee also can put virus,trojan, or backdoor on their app without the companies knowing it. but if its on google play store that mean its safe right? i don't really know how that work.
As far as I know, the apps are scanned and made sure they are safe by google before getting it uploaded to their server. But still, they may be able to bypass their security and still infect the application with any kind of virus.
Companies will know if an employee tampers their application. After an application is developed, they go through various testing through different departments (like QA and stuffs - not an expert in this field) and one of them is bound to find out the trap.
member
Activity: 266
Merit: 18
I almost say no to bounty campaigns that require KYC and force to download the app. I will not because of a few bonuses that jeopardize my personal information, it is not worth it. So at this stage I almost rarely participate in bounty campaigns, I hardly find any outstanding ICO and show the possibility of success, perhaps the bounty campaign will gradually disappear with ICO movement.
member
Activity: 216
Merit: 10
Best solution for smart cities
I personally always keep a private key or seed phrase, google auty and a personal email into a different smartphone or device specifically, so I use other smartphones and PCs to work in a bounty. To this day this method is very effective in keeping my assets safer and I am not worried if there are bounty requirements to install their app.
legendary
Activity: 2156
Merit: 2100
Marketing Campaign Manager |Telegram ID- @LT_Mouse
Very true. I have read today as well about a fake wallet of bitcoin. Downloading a fake app can cause you losing all of your private information like password since this app can contain virus which may steal your data.
member
Activity: 532
Merit: 11
♦♦♦♦♦
Also downloading app without knowing well the developer team that too risk. They can steal our data on phone/mobile or pc
. i will skip for sure if there is bounty that asking to download the app unless the developer team trusted well
Pages:
Jump to: