Be on the lookout for this scam.. Just got it in my email

walletrecoveryservices

member

Activity: 89

Merit: 21

Quote from: drrussellshane on January 06, 2014, 07:21:31 PM

Isn't there a guy named David who operates a wallet recovery service?

EDIT: Yep http://www.walletrecoveryservices.com/testimonials.html

Yes, I operate a legitimate wallet password recovery service.
I assume that it is only co-incidence that this scammer used the name 'david'. It is certainly nothing to do with me.

FYI, I have received this scam in the last couple of days from 3 different email addresses.

Cheers
Dave Bitcoin
walletrecoveryservices.com

2tights

sr. member

Activity: 308

Merit: 251

I like big BITS and I cannot lie.

Quote from: alexlandonflicksss on January 07, 2014, 12:21:07 PM

I even got this mail this morning. I tried to extract it by right clicking and clicking extract here. I got a error and found that it is a malicious file. HELP ME!

Assume Crash Positions!!

alexlandonflicksss

newbie

Activity: 24

Merit: 0

I even got this mail this morning. I tried to extract it by right clicking and clicking extract here. I got a error and found that it is a malicious file. HELP ME!

FractalUniverse

hero member

Activity: 1034

Merit: 558

yeah. i received this one as well today. i placed it directly to to spam folder without even opening it.
i just hope noone downloaded it

CYPER

hero member

Activity: 812

Merit: 502

I got it too, but while Thunderbird shows the small attachment icon, when I open the email there is no attachment.
I also opened it in my webmail and again - attachment icon present, but no attachment.

I assume the only way to get infected is by opening the attachment, right?
Just loading the email is harmless.

Also this must be from the MTGox leak as the email I use here is different and unique - I only use it for forum registrations.

klenker

member

Activity: 80

Merit: 10

Prospecting on the net, in a rundown old shack..

Quote from: dishwara on January 07, 2014, 02:40:01 AM

I too got that email, checked the files in isolated machine.
The password.txt is a exe file with trojan.
But the wallet.dat file is true & it has 30.28 btc, but the wallet is encrypted.
The coins received from frosty wallet & it has another 3 addresses, which has label assigned to it.

It seems the scammer sent real wallet, encrypted, so that he dont loose coins, but want others to loose coins.

Indeed the person who seems to originally own the wallet is Liquid00 on the forums, also on the litecoin aus website.

he sent 19btc to this wallet at some point.

Wolf Rainer

legendary

Activity: 1960

Merit: 1022

Quote from: MiningBuddy on January 06, 2014, 06:52:03 PM

Quote from: kwoody on January 06, 2014, 06:42:35 PM

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson [email protected] via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.

There´s no way, i don´t have mtgox account, but i recieved the e-mail.

dishwara

legendary

Activity: 1855

Merit: 1016

I too got that email, checked the files in isolated machine.
The password.txt is a exe file with trojan.
But the wallet.dat file is true & it has 30.28 btc, but the wallet is encrypted.
The coins received from frosty wallet & it has another 3 addresses, which has label assigned to it.

It seems the scammer sent real wallet, encrypted, so that he dont loose coins, but want others to loose coins.

BuTaJIu4eK

member

Activity: 115

Merit: 10

Quote from: MiningBuddy on January 06, 2014, 06:52:03 PM

Quote from: kwoody on January 06, 2014, 06:42:35 PM

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson [email protected] via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.

I do not have a MtGox account. Only here.

I hate all scammer! Angry

Antivirus checking
https://www.virustotal.com/ru/file/85083a3cc70d4c38c60c20995f3f82f37bec6de1744cd8d10dea645888c58669/analysis/1389076208/

MiningBuddy

hero member

Activity: 927

Merit: 1000

฿itcoin ฿itcoin ฿itcoin

Quote from: andrewboy44 on January 06, 2014, 06:58:55 PM

Quote from: kwoody on January 06, 2014, 06:56:19 PM

Quote from: MiningBuddy on January 06, 2014, 06:52:03 PM

Quote from: kwoody on January 06, 2014, 06:42:35 PM

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson [email protected] via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.

I do not have a MtGox account.

This is getting weird.. I'm convinced they got our emails from bitcointalk when it was hacked with the man in the middle attack. But in all honesty, I could care less. Just have to educate others (new people to btc) on these spam emails even though common sense says don't download

I use a different email address on this site and haven't received any spam to that address.

TH3xR34P3R

newbie

Activity: 5

Merit: 0

Quote from: franky1 on January 06, 2014, 07:24:45 PM

this scam has been going around for a few months. its supposedly written as a message to a friend of the sender asking them to sort out the issue, and appear like the email was sent mistakenly to the recipients.

a ploy to make the recipients feel that they have won the jackpot because someone (apparently) stupidly sent them their wallet.

this is not the case, its a ploy to get people to download scam software that will risk your own wallet.

do not touch emails with attachments unless you know the recipient personally and can slap them with a wet fish if they mess with your own wallet

Not just your wallet but your entire system and any machines on the network, my gut tells me this is a variation to try get people to run Cryptolocker, I made a psa on r/bitcoinsec and cross posted to r/bitcoin. I will add this thread to the post aswell.

franky1

legendary

Activity: 4410

Merit: 4788

this scam has been going around for a few months. its supposedly written as a message to a friend of the sender asking them to sort out the issue, and appear like the email was sent mistakenly to the recipients.

a ploy to make the recipients feel that they have won the jackpot because someone (apparently) stupidly sent them their wallet.

this is not the case, its a ploy to get people to download scam software that will risk your own wallet.

do not touch emails with attachments unless you know the recipient personally and can slap them with a wet fish if they mess with your own wallet

andrewboy44

sr. member

Activity: 252

Merit: 250

Quote from: TehoM on January 06, 2014, 07:17:35 PM

How exactly did they get your email?
What sites use that email address?

It was sent to my main email which is used for a lot of things including multiple bitcoin related things. If multiple bitcoin users have gotten this is narrows it down to either bitcointalk.org or a bitcoin exchange platform. Only options really

drrussellshane

hero member

Activity: 546

Merit: 500

Isn't there a guy named David who operates a wallet recovery service?

EDIT: Yep http://www.walletrecoveryservices.com/testimonials.html

HappyS

legendary

Activity: 1568

Merit: 1008

I also received it, fucking spamers.

Remember remember the 5th of November

legendary

Activity: 1862

Merit: 1011

Reverse engineer from time to time

Confirmed I also received it, reported it as spam.

TehoM

newbie

Activity: 16

Merit: 0

How exactly did they get your email?
What sites use that email address?

matriculator

newbie

Activity: 56

Merit: 0

Quote from: casascius on January 06, 2014, 06:48:55 PM

I got the same thing, it also called me David, which I thought was weird, since I wonder how someone would get my e-mail address but not my name with it. I mean it's not like I make a secret of it!

It's to create the illusion that you got it by mistake.

mckmuze

member

Activity: 93

Merit: 10

I got this too just today. Pretty annoying.

andrewboy44

sr. member

Activity: 252

Merit: 250

Quote from: kwoody on January 06, 2014, 06:56:19 PM

Quote from: MiningBuddy on January 06, 2014, 06:52:03 PM

Quote from: kwoody on January 06, 2014, 06:42:35 PM

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson [email protected] via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.

I do not have a MtGox account.

This is getting weird.. I'm convinced they got our emails from bitcointalk when it was hacked with the man in the middle attack. But in all honesty, I could care less. Just have to educate others (new people to btc) on these spam emails even though common sense says don't download

Topic: Be on the lookout for this scam.. Just got it in my email (Read 4902 times)