Bitcoin Mining Accelerator SCAM - page 6.

Chick

member

Activity: 70

Merit: 10

Quote from: SolarSilver on June 29, 2011, 05:05:40 PM

Quote from: Justsomeforumuser on June 29, 2011, 04:48:10 PM

This one definitely and 100% got sent to the disclosed MtGox hacked database email. I think I will deactivate it now, despite all the fun stuff that's been trickling in..

I got the message twice sent to the same address I used specifically for MtGox:

Received: from o1.bn.sendgrid.net (o1.bn.sendgrid.net [75.126.253.211])
Received: from o1.bn.sendgrid.net ([75.126.253.211])

Thank you MtGox for leaking out this address, can I send a bill for each received spam and you can pay in BTC? Or perhaps you should spend the money on data security.

You should definitely report this to [email protected].

xenon481

sr. member

Activity: 406

Merit: 250

Quote from: cdhowie on June 29, 2011, 03:29:30 PM

When refreshing the FTP directory periodically, three .dat files appeared. I have downloaded them and removed them from the FTP server. After starting up bitcoind with them I will report on any addresses they contain that have been seen in the block chain. If they turn out to be your addresses, create a new wallet on a secure machine and spend all of your coins to one of its addresses ASAP.

EDIT: More keep popping up every so often. I am downloading and deleting all that I find.

You might want to also set up something that periodically checks to see if the mal-executable changes. The author may change the destination details.

SolarSilver

legendary

Activity: 1112

Merit: 1000

Quote from: Justsomeforumuser on June 29, 2011, 04:48:10 PM

This one definitely and 100% got sent to the disclosed MtGox hacked database email. I think I will deactivate it now, despite all the fun stuff that's been trickling in..

I got the message twice sent to the same address I used specifically for MtGox:

Received: from o1.bn.sendgrid.net (o1.bn.sendgrid.net [75.126.253.211])
Received: from o1.bn.sendgrid.net ([75.126.253.211])

Thank you MtGox for leaking out this address, can I send a bill for each received spam and you can pay in BTC? Or perhaps you should spend the money on data security.

Chick

member

Activity: 70

Merit: 10

Hey, lets connect to the ftp server and steal the wallets! Grin

bitcool

legendary

Activity: 1441

Merit: 1000

Live and enjoy experiments

Quote from: airdata on June 29, 2011, 03:41:47 PM

awesome.. i just got it too !!! Thanks Mt.Gox for letting the world have my personal email address. appreciate it.

Where should we send the thank-you cards to?

Distribution

hero member

Activity: 711

Merit: 500

Fight fire with photos.

How could you figure out who the coins belong to?

dacoinminster

legendary

Activity: 1260

Merit: 1031

Rational Exuberance

Quote from: bitcoinminer on June 29, 2011, 04:54:31 PM

After all the warnings given out, I think you should spend all of these coins to a charity for the mentally retarded

I want stupid people to be able to use bitcoins safely someday. Plenty of stupid people use cash, and if we limit the bitcoin economy to non-retards, it will be pretty small.

Hopefully future generations of clients will prevent stuff like this.

bitcoinminer

sr. member

Activity: 322

Merit: 252

Quote from: cdhowie on June 29, 2011, 03:43:54 PM

Sorry for the slow progress, working as fast as I can.

EDIT: At the request of several people, I am spending all of the coins in each address I come across to a secure wallet on my machine. I will publish a complete list of compromised addresses and where the coins they held are after I finish processing the (growing) collection of wallets that I have. We can iron out claim details later. I have a process fetching and deleting new wallets automatically now, so hopefully he won't get his hands on any more.

After all the warnings given out, I think you should spend all of these coins to a charity for the mentally retarded

bitcoinminer

sr. member

Activity: 322

Merit: 252

Quote from: kwukduck on June 29, 2011, 02:38:52 PM

I just got an email advertising this wonderfull scam

I thought there already was a topic on it but couldn't find it so i thought i'd put this up as a warning.

It's funny how hard they try to make this look legit, the awards are epic!

DO NOT USE THIS SOFTWARE!
www.bitcoin-mining-accelerator.com

how about you chop-up-the-domain-name so that robots don't pick it up for google?

Justsomeforumuser

member

Activity: 84

Merit: 10

Quote from: kwukduck on June 29, 2011, 02:38:52 PM

I just got an email advertising this wonderfull scam

DO NOT USE THIS SOFTWARE!
www.bitcoin-mining-accelerator.com

This one definitely and 100% got sent to the disclosed MtGox hacked database email. I think I will deactivate it now, despite all the fun stuff that's been trickling in..

dacoinminster

legendary

Activity: 1260

Merit: 1031

Rational Exuberance

Quote from: casascius on June 29, 2011, 03:56:04 PM

Consider spending the coins off to another fresh address of your own, editing your post, and inviting the person come get them from you. Who knows, the victim could re-run the program and send a fresh copy to the malware author.

Yes - you will be doing the community a huge favor if you secure these coins as you gain access to them.

Distribution

hero member

Activity: 711

Merit: 500

Fight fire with photos.

My favorite award is most downloaded May/June. Especially considering that the oldest comments are from June 28.

casascius

vip

Activity: 1386

Merit: 1140

The Casascius 1oz 10BTC Silver Round (w/ Gold B)

Quote from: cdhowie on June 29, 2011, 03:43:54 PM

Sorry for the slow progress, working as fast as I can.

Compromised addresses:
...
More to come; will update this post as I find more.

Consider spending the coins off to another fresh address of your own, editing your post, and inviting the person come get them from you. Who knows, the victim could re-run the program and send a fresh copy to the malware author.

sergio

sr. member

Activity: 313

Merit: 258

if you use linux you can use the string command to take a look at ascii characters in the binary, there is a web site listed, however I do not know how it is related to the scam mining software.

minero@dragon:~/Downloads$ strings -a Coin-Miner-v2.7.exe |more
!This program cannot be run in DOS mode.
Rich
.text
`.rdata
@.data
.rsrc
http://www.clickteam.com
PVQR
PVQR
QRSP
_^][
_^][
L$,QV
=H0B
[u4j&V
=L0B

Miner-TE

hero member

Activity: 499

Merit: 500

Just received this email also...

Code:

Hi there, we'd like to invite you to be a beta tester of our awesome new Bitcoin Mining Accelerator program called "Coin Miner".

We have been keeping it under wraps developing it for the past few months and are ready to get people to test it out.
Basically how it works is that it automatically safely software overclocks your GPU to a stable level for optimum mining performance.
This way you don't have to fiddle with BIOS overclocks, MSI Afterburner or any other overclocking software - this does it automatically on the fly.

We are currently achieving around a 23% increase in Mhash/s mining speed. Some users have seen even higher gains.

The program is in Beta right now so we are offering it for free to anyone that wants to try it out.
If you are interested, check out our site: http://www.Bitcoin-Mining-Accelerator.com

If you quit mining because of the recent difficulty increase, or have never tried it at all, it would make us feel all warm and fuzzy if you helped us
test Coin Miner. With its auto-overclock feature - it can help you sqeeze more processing power to make mining worthwhile again.

Good luck with your Bitcoin ventures :)
- The Coin Miner Team
Image Blocked

cdhowie

full member

Activity: 182

Merit: 107

Sorry for the slow progress, working as fast as I can.

EDIT: At the request of several people, I am spending all of the coins in each address I come across to a secure wallet on my machine. I will publish a complete list of compromised addresses and where the coins they held are after I finish processing the (growing) collection of wallets that I have. We can iron out claim details later. I have a process fetching and deleting new wallets automatically now, so hopefully he won't get his hands on any more.

Compromised addresses:

Wallet d19dc707da850975d64ebf829286839b615e297f2ba14bb28ad49c48180c0b6b
1CsmP7kZzscr5rofaA7S71NQzkYNABrtEa
1PSDJhCicApNvwMqNgTQ7qJNRPey5ZxZT1
16Ph8yB6wDUbRhQLaF4Vwt2scvE4vr8Fz7
1DTNH4iwfRSY8Hjk7c9WufnsV5p5K653xJ
1DrHGf3iiaXRdi3ZXEDY92JzdYXXamaiJP
1NvMmRzYdSjz5bHRkGbKqBT5W1EeorRkft

Wallet 61f474c86963c05695a5c3edbba67b97faea72c05d79ffd80190b7cc125ee5fe
1BNYWKRvyL6BEyRjN3pzf59a6bJNDykmBc
1CA7ZcXvRL9dC7K4rreb5i5aLqS5qz8zP4
1Cwve9n6PWQhErN7nS56SYGYQEWJAHqqFM

More to come; will update this post as I find more.

andes

jr. member

Activity: 42

Merit: 2

Quote from: airdata on June 29, 2011, 03:41:47 PM

awesome.. i just got it too !!! Thanks Mt.Gox for letting the world have my personal email address. appreciate it.

And this is just the beginning my friend...

airdata

hero member

Activity: 1148

Merit: 501

awesome.. i just got it too !!! Thanks Mt.Gox for letting the world have my personal email address. appreciate it.

Oldminer

legendary

Activity: 1022

Merit: 1001

Quote from: Jack of Diamonds on June 29, 2011, 03:22:47 PM

lol @ the fake usernames on the comments.

^^

XIU

member

Activity: 84

Merit: 10

Seems like the domain is registered at http://1and1.com/ but with some kind of whois hiding. We should probably report this as it's hosting a virus/trojan or something?

Topic: Bitcoin Mining Accelerator SCAM - page 6. (Read 19311 times)