Pages:
Author

Topic: Electrum 'we now have proof Electrum Pro is malware' (Read 300 times)

copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
25 BTC is really a lot.

according to that linked reddit thread the (real) electrum guys said that the electrum.com domain owner was asking the price of a house in 2012. 25 btc wouldn't buy much of a house in many places these days. i'd be very interested to know how this guy got his hands on the domain especially since it should be worth more than it was in 2012, not less.

There are houses that are on the market for $200000 which is probably about 25 bitcoin. I wouldn't be annoyed if someone were to tip me that amount either Cheesy...
legendary
Activity: 1288
Merit: 1087
25 BTC is really a lot.

according to that linked reddit thread the (real) electrum guys said that the electrum.com domain owner was asking the price of a house in 2012. 25 btc wouldn't buy much of a house in many places these days. i'd be very interested to know how this guy got his hands on the domain especially since it should be worth more than it was in 2012, not less.
copper member
Activity: 1442
Merit: 529
Quote
Due to false accusations from electrum.org, they have ruined our reputation and brand of Electrum Pro. They managed to trick several news outlets to slander us.
If they were false accusations... and it was truly slander... wouldn't they just take Thomas (and/or "Electrum Technologies GmbH") to court? Huh Ohhhhh that's right... it would actually have to be a factual claim... not the desperate claims of a scammer who got caught red-handed Tongue Roll Eyes

I love how they think deliberately stealing seeds is the same as a security flaw in code... Roll Eyes

also... 25BTC for a domain? BARGAIN! I'll take two! Tongue

That's true. If it came from Thomas himself it would be cryptographically signed and he could therefore be prosecuted for false advertising and producing malware. However, this is OBVIOUSLY NOT the case here.

And 25btc for a phishing domain is quite pricey especially since it will probably be blacklisted by a lot of people.


Anybody have the public keys, IPs, companies they used like things for anti-ddos and any registrar info.

There is a good comment in the reddit false accusation against the real Electrum which caught my attention. Some guy was replying that why are you blatantly scamming or did your fake scam investment got out too soon and you missed even ROI because .com domain and DDOS.
25 BTC is really a lot.
What I wonder though is how far can a human being go to scam other human beings. That is the real sad part of our society.
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
Quote
Due to false accusations from electrum.org, they have ruined our reputation and brand of Electrum Pro. They managed to trick several news outlets to slander us.
If they were false accusations... and it was truly slander... wouldn't they just take Thomas (and/or "Electrum Technologies GmbH") to court? Huh Ohhhhh that's right... it would actually have to be a factual claim... not the desperate claims of a scammer who got caught red-handed Tongue Roll Eyes

I love how they think deliberately stealing seeds is the same as a security flaw in code... Roll Eyes

also... 25BTC for a domain? BARGAIN! I'll take two! Tongue

That's true. If it came from Thomas himself it would be cryptographically signed and he could therefore be prosecuted for false advertising and producing malware. However, this is OBVIOUSLY NOT the case here.

And 25btc for a phishing domain is quite pricey especially since it will probably be blacklisted by a lot of people.


Anybody have the public keys, IPs, companies they used like things for anti-ddos and any registrar info.
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
So this story ended pretty fast, at least as to the fact that the page is no longer online which is actually the most important thing.Now it's just a matter of domain, who will buy it and for what purpose.

I have to admit that it is a little strange that someone is investing significant resources in project like this, and that he did not consider that he will be very quick discovered and in just a few days to finish like this.Is it only the ignorant and amateur work or it may be something else?
HCP
legendary
Activity: 2086
Merit: 4361
Quote
Due to false accusations from electrum.org, they have ruined our reputation and brand of Electrum Pro. They managed to trick several news outlets to slander us.
If they were false accusations... and it was truly slander... wouldn't they just take Thomas (and/or "Electrum Technologies GmbH") to court? Huh Ohhhhh that's right... it would actually have to be a factual claim... not the desperate claims of a scammer who got caught red-handed Tongue Roll Eyes

I love how they think deliberately stealing seeds is the same as a security flaw in code... Roll Eyes

also... 25BTC for a domain? BARGAIN! I'll take two! Tongue
legendary
Activity: 1288
Merit: 1087
https://www.reddit.com/r/Bitcoin/comments/8ig4bh/electrum_pro_is_not_bitcoin_stealing_malware_as/

Looks like they've exit scammed and blamed the real electrum for it too. Classy guy.
HCP
legendary
Activity: 2086
Merit: 4361
I like how they attempt to legitimise their fork:
Quote
IMPROVE YOUR BITCOIN EXPERIENCE
Electrum has been securing payments since 2011 and is one of the most popular Bitcoin wallets. ElectrumPro is free software, released using the MIT license. Anyone can run an Electrum server. No single entity controls the network.

Electrum v. ElectrumPro... Technically accurate... But a bit misleading. Less savvy users likely to think ElectrumPro has been around since 2011 Undecided
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
Let's go on a journey through time, since it was asked in a pervious post.
Previous uses of electrum.com:

08-05-1999
26-03-2003 - I don't think that site was ever fully constructed
18-08-2007
13-10-2008
26-09-2012 - an energy drink!
03-10-2016 BITCOIN!!!
FAKE ELECTRUM
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
It is interesting that domain is created back in the year 1996, since then there was no BTC I wonder what was purpose of that name domain?I check

https://www.google.com/search?q=electrum+definition
Electrum as the word is a composite containing gold or silver. Probably a cheap jewelry market or something as it does come from that origin.

legendary
Activity: 3682
Merit: 1580
If you read that thread I posted above you will see that the domain was in use by a legit company in an unrelated industry. It is only in the last few weeks that the scammer acquired it from them.
legendary
Activity: 1288
Merit: 1087


It is interesting that domain is created back in the year 1996, since then there was no BTC I wonder what was purpose of that name domain?I check Whois service and this domain is registered on GoDaddy, one more way to take down this site is report to their abuse service.


Electrum has been a thing since alloys have existed, nothing to do with btc.

I guess it was bought up during a domain splurge. Those early adopters must be making millions from leasing their domains.
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲

Thanks for the direct link Lucius... I probably wouldn't be rejoicing merrily right now if it wasn't just a "point and click" exercise Wink

For all the other Electrum "fans"... please do click the link and report this domain as a scam.

You're welcome, I hope report will be of some help to remove the page as soon as possible, although Google is not exactly fast when it comes to these things.

It is interesting that domain is created back in the year 1996, since then there was no BTC I wonder what was purpose of that name domain?I check Whois service and this domain is registered on GoDaddy, one more way to take down this site is report to their abuse service.

Any info for how much is this domain sold?I see Thomas say back in 2012 owner ask price of one house...

Quote
electrum.com is already registered*
Domain Name: ELECTRUM.COM
Registry Domain ID: 24034_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.godaddy.com
Registrar URL: http://www.godaddy.com
Updated Date: 2017-05-11T02:50:04Z
Creation Date: 1996-05-15T04:00:00Z
Registry Expiry Date: 2018-05-16T04:00:00Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: 480-624-2505
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Name Server: NS1.HOSTRESOLUTION.COM
Name Server: NS2.HOSTRESOLUTION.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-02-21T15:56:57Z <<<
HCP
legendary
Activity: 2086
Merit: 4361
Thomas & Co have released their full write-up (with instructions on how to replicate) on decompiling the "ElectrumPro" Windows binary which shows how they're stealing your seeds Undecided

Very interesting that this code is NOT in the Linux version... as mentioned in the write-up, this would have been in "plainsight" and easily detected.

ElectrumPro = Confirmed Scam
legendary
Activity: 3024
Merit: 2148
What is this "electrum dot com" that you speak of? Tongue


That's the first site I've actually had this pop up on... good to know that things are working as intended Smiley

This is actually pretty cool, I guess there are some anti-phishing addons, but they are probably not very popular. So maybe a good solution would be if addons like Adblock or Ublock that are used by almost everyone, would offer additional anti-phishing feautres to report malicious site like this fake Electrum site.
legendary
Activity: 2590
Merit: 3015
Welt Am Draht

Interesting.

I guess it would've been difficult to foresee the potential stakes in the future. Back then it would've been a cool little project and nothing else.

If I were setting something up these days I'd adjust the name until I found all the necessary domains even if you wound up with Electerrrum.com.

I'm regularly seeing doubts about domains these days and whether people are winding up on legit sites or not. And it's doubly odd that some of these services have to be poked into saying which is their domain and which isn't.
legendary
Activity: 3682
Merit: 1580
https://twitter.com/ElectrumWallet/status/993819715855405056

I had no idea there were differing Electrums battling it out. Be careful out there, kids. In this day and age I'd be buying up every major domain imaginable before launching my project but that's often horribly expensive.

It cost too much: https://www.reddit.com/r/Bitcoin/comments/8a1drz/psa_electrumcom_bought_by_scammers_to_distribute/dwv3k10/

HCP
legendary
Activity: 2086
Merit: 4361
Report Sent

Thanks for sending a report to Google. Now that you've done your good deed for the day, feel free to:

1. Take a second to rejoice merrily for doing your part in making the web a safer place.
...
Thanks for the direct link Lucius... I probably wouldn't be rejoicing merrily right now if it wasn't just a "point and click" exercise Wink

For all the other Electrum "fans"... please do click the link and report this domain as a scam.
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲
I think this page should be removed as soon as possible because otherwise many users will stay without theirs BTC.The site looks pretty good and the fact that there is a com domain will deceive many potential users of Electrum.I do not know if reporting this site to Google Safe Browsing can help,but it is better to report then do nothing.


Stay away from this site-it is fake Electrum and you BTC will be stolen!
legendary
Activity: 3472
Merit: 10611
... or better yet you have to compile Electrum from its source code.
Last time I tried that... the Windows version just wouldn't run. No errors or anything, the .exe just failed to launch. Undecided

Is compiling the Windows version any easier now with V3+ or is it still relatively complicated requiring you to use Linux and Wine to compile?

it is not easy at all specially when you are not familiar with the code and the tools used (python in this case, which i am not), i have encounters the same issues too and finally gave up!
haven't tried with V3+ though. maybe i give it a go this week if i had time.
Pages:
Jump to: