Topic: Guide and advice for new Users before you Download anything from the Forum ! (Read 977 times)

I just want to make an friendly reminder for all the New Users but also for the longer Users that havnt readed this Thread.
The reason for that is that i have seen lately more and more new Users that just downloading the Malware things from the Fake Anns that was posted.
Please check everytime the download Links before you downloading something from the Forum or the the posted Links in here.

Friendly bumping this to remember Newbies and other longtime Users to watch out what you click and download !
Specialy for Users that want to update there Mining software or try to download a diffrent one that they are using.
We got a case last week and baaam funds got stolen from Malware and Hacker , so please watch out and what are you doing with Links.
 

Also it's best for newbies to stay away from any new mining softwares, this was how my PC got affected with malware and hashrate stealing trojans, I download the mining software in mining section on this forum, after detecting what went wrong I had to do a factory reset to get rid of the malware and trojans

Well this is new, never for once think that this is possible but all the same I want to say a big thank you to @Lafu for creating this topic, it's 💯 possible to steal people's key and details this way, the question I would like to ask is if this is also unsafe for Android smartphones users?

Friendly reminder and bump and that all the new Users get aware of how they can look into things and posted links on the Forum!

Firstly its for this Forum , dont know how other Forums handle stuff and all.
But in general you always should be doing a research specialy for Links and Software you dont know before you download and install it.

Are you talking about this forum or any forum in general?

I just want to give some reminder to check first the Links before you download anything !

Also i quoted a short part of my Post from my other thread to show the new users and all other users what happend the last year on the Forum with Suspicious Links .

You can find the full post here because the whole post would be to long


Keep your eyes open and just click the report to moderator button if you see something Suspicious !

Little Bump for the new and also old Users and a reminder for watch out what you downloading !
Lately we got some more Fake Miner Software ANNs in the mining board.
Maybe do some research first before you click the download button , helps a lot sometimes to keep you safe!

I have done some research on the Bitbucket Links and posted an update on my other thread Report Malware and Suspicious Links here so Mods can take Action !
So i just want post the Information here too as maybe new Users getting aware of this .
Bitbucket download links mostly or always have Malware and bad software in it .

https_://bitbucket.org/HaLass/  <--- Active
https_://bitbucket.org/taonacoin/  <--- Active
https_://bitbucket.org/walleters/  <--- Active
https_://bitbucket.org/walleters/cryptokill/  <--- Active
https_://bitbucket.org/cryptcorona/  <--- Active

Dont download anything from this Accounts or Links
There are more Bitbucket Accounts and you can read them in my other thread.
Feel free to post in here or in the other thread if you find some new or other bitbucket download links that i dont have listed.
Stay safe

Will Pump this thread for some other new joined Users and that they aware of it and hopefuly read the first post or get remembered .

The whole Fake ANN and Malware problem is going now over nine months if not nearly a year already. And we still fighting this ones and we keep on it.
On this way i would be say a big thank you to all that reporting and looking for some kind of threads and posts and posting in my other thread.
I really appreciate that much !

Thanks to all reporters

Pump for new Users and other Users and a reminder for watch out what you download from the Forum.

Also if you see or find threads like :

[ANN] Sonex . New RandomX coin  or  [CHAN] ChanCoin - Crypto for Imageboards

please report them or let me know and dont download anything in this threads, the last weeks there was many of this 2 and Users that downloaded there Wallets got hacked.

Found something interesting today about Bitbucket !!!!!
There you can read about what is going with Bitbucket.
Sounds like that they have the biggest malware cocktail on the planet.


You can read the whole article and source i has used here:
https://arstechnica.com/information-technology/2020/02/attackers-are-abusing-bitbucket-to-deliver-a-potent-cocktail-of-malware/

pump

Just an short update here!

As the fake github links with Malware and suspicious Links was reduced i have seen in the last week they changed there style of posting !

The Last Week i have seen more and more Ann's and Fake Ann's have now there download link from mega.nz !

I just can advice again for new users:

" Check the download links and if you downloaded the File check it first with Virustotal or any other Antivirus software before you unpack the File or start the *.exe "

This code literally makes it show whatever you want in the statusbar. Just try yourself. Or google "fake link hover statusbar" or similar.

This is in no way a security measure. You just took it like that. It's like saying that having a "100% legit" bolded text in a website makes it legit.

I didn't know that hovering the arrow to the hyperlink would show the real url/site just like what is shown in the image I provide. Does the code you provide would really bypass this security measure I suggest?. I'd like to know more about this bypass since the security measure can be bypass which is a bad sign. Any reference that I can check if you don't mind.

Updated the list i have done here https://bitcointalksearch.org/topic/m.52277784 with newest Fake Github and Source links !

The newest is again from bitbucket but its a new or diffrent bitbucket link as the normal was !

Fake Source : https_://bitbucket.org/cryptoperfeckt

So if you see or find this Link or any other links please report it.

Please, don't count on this. This is a bad behavior to think the URL is legit because the statusbar shows it so (and thus, a terrible suggestion).

Here is a simple workaround to bypass this "security" measure:


Result: you hover the link and it shows realwebsite.com in the statusbar. Click it and you will end up on phishingwebsite.com

There is also another way to know what link is hidden between the URL Bbcodes and it's very easy. When you are using computer and using a firefox browser for example. Let's just say I use firefox or chrome browsers and you saw a link that you think that there is a link behind it, just simply point the arrow at the link and see if there is a link that will be shown at the bottom just like this image.
Image Source: http://www.hyperlinkcode.com/images/hand-pointer-status-bar.gif
When using mobile device same procedure won't do/help you but there's still a way to avoid opening a hidden link. First, you have to tap the link until a pop-up will appear and select "COPY LINK" then paste it somewhere else like a Notepad for example.

Take Note: The mobile procedure in knowing the real url/link behind a hyperlink could also work in PC by copying the link and paste it in Notepad.

It's much more efficient to have installed AV/antimalware software, then to manually check every link or file. But virustotal still has the advantage that user can check the link before visiting a specific page, and fact that virustotal scan sites/files with multiple AV engines, which provides extra security.

In any case, it is good practice to check everything before downloading or installing, too bad that most people think this is a waste of time. Link posted by some Senior/Hero or Legendary member does not mean that anyone should trust it is posted with good intention. Crypto means everything has to be checked several times, even when it seems unnecessary.

People can protect their devices and their digital funds that stored in their devices by using Virustotal.com as well as other AV softwares.
For basic guide on Virustotal.com, please see it there: [Guide] Virustotal scan guideline to detect viruses, trojans, malwares, worms
Creating free account to have more free features to use, rather than use that site as a guest.

i found fake MERO wallets, user just joining github 26 days ago. maybe you can add to your list

If you see or find Fake Anns with some of the links in the List or you see new fake github or bitbucket links
please write them unclickable here in my reporting thread https://bitcointalksearch.org/topic/m.52373139
or when you have time for it write the thread and all information there !

So we have an record for the links and some statistics also .

Update for New Users and other Users too !

Here are the whole List for Malware Links in the last Months on the Forum :

Fake Github : https_://github.com/projectpixel-network/Project-Pixel
Fake Github : https_://github.com/XIROPHT-project/
Fake Github : https_://github.com/gonzo482/MimbleWimble/releases/tag/1.0
Fake Github : https_://raw.githubusercontent.com/QitmeerHLC/Kahf-Wallet/master/Kahf%20Wallet.rar
Fake Github : https_://github-production-release-asset-2e65be.s3.amazonaws.com/
Fake Github : https_://github.com/Qitmeer/qitmeer-cli
Fake Github : https_://github.com/cryptominin/Wallet-QT/raw/master/Wallet-QT.rar
Fake Github : https_://github.com/gonzo482/Goodness/releases/download/1.0/Goodness-CLI.rar
Fake Github : https_://github.com/ANN-Coin/
Fake Github : https_://github.com/ANN-Coin/Deesseel/releases/download/1.0/Deesseel_Windows.zip
Fake Source : https_://bitbucket.org/miningmentor/bluebeasts/downloads/BlueBeasts-Coin-qt_win32_V1.6.5.0.zip
Fake Source : https_://bitbucket.org/miningmentor/delorcoin/downloads/delor-ubuntu-16.04.tar.xz]delor-ubuntu-16.04.tar.xz
Fake Source : https_://bitbucket.org/miningmentor/blastx/downloads/blastx-v1.1.0-win64.zip
Fake Source : https_://bitbucket.org/miningmentor/coldwallet2020/downloads/Coldwallet2020-1.1-win64-setup.rar
Fake Github : https_://github.com/projects-mynt/mynt/releases/download/6.1.2/mynt-6.1.2-win64.zip
Fake Github : https_://github.com/SentinelOffcial/
Fake Source : https_://bitbucket.org/miningmentor/agouti/downloads/agu-win.zip
Fake Github : https_://github.com/CaiexCore/AmityCoinV3
Fake Github : https_://github.com/volta-lm
Fake Github : https_://github.com/Taonacoin/taona/raw/master/taona-2.2.2.0-win64.zip
Fake Source : https_://bitbucket.org/HaLass/pvpcoin/downloads/playervsplayercoin-qt-linux.tar.gz
Fake Github : https_://github.com/CoinMastersGGG/Multi_Currency/releases/download/1.0/mnpro-qt-x32.zip
Fake Github : https_://github.com/quark-projekts/quark
Fake Github : https_://github.com/Durovel/Haven-Protocol/releases/download/1.0/haven-gui-windows-3.0.0.zip
Fake Source : https_://bitbucket.org/tradebotcommunity/rainbowgoldcoin/downloads/rainbowgoldcoin_windows_wallet.rar
Fake Github : https_://github.com/Durovel/Vectorium/releases/download/1/vectorium-2.0.25-linux.tar.gz
Fake Github : https_://github.com/Durovel/BochaCoinMN/releases/download/BochaCoinMN/Bochacoin.Windows.zip
Fake Github : https_://github.com/Dunerous/cbet-coin
Fake Source : https_://bitbucket.org/Derbiz/dorobers/downloads/Pay2c-Windows-qt.zip
Fake Source : https_://bitbucket.org/tradebotcommunity/starnodes-qt/downloads/starnodes.rar
Fake Github : https_://github.com/cryptonexli
Fake Source : https_://bitbucket.org/develsoftware/gcc-coin/downloads/GCCcoin.rar
Fake Github : https_://github.com/cryptomilles/
Fake Source : https_://bitbucket.org/Derbiz/dorobers/downloads/Bochacoin.Windows.zip
Fake Github : https_://github.com/devaulltcrypto/devault/releases/download/1.0.4/devault-1.0.4-win64.zip
Fake Source : https_://bitbucket.org/astingl/resqchain/downloads/resq-3.1.2.1-Win.zip
Fake Source : https_://bitbucket.org/astingl/jmcminer/downloads/JMC.rar
Fake Source : https_://bitbucket.org/severokproject/severok/downloads/severok-1.0.0-win64.zip
Fake Source : https_://bitbucket.org/astingl/yllineum/downloads/Yllineum-qt.rar
Fake Source : https_://bitbucket.org/taonacoin/taonaproject/downloads/taona-2.2.2.0-win64.zip
Fake Source : https_://bitbucket.org/Deviljoes/deviljoe/downloads/GNET-qt.zip]www.gnet.work/GNET-qt
Fake Source : https_://bitbucket.org/astingl/new-jerusalem/downloads/New-Jerusalem_wallet.rar
Fake Github : https_://raw.githubusercontent.com/Fyd-Coin/Wallet-Release/master/Miner.zip
Fake Github : https_://raw.githubusercontent.com/Release-Z/wallet-core/master/Wallet-Qt.zip
Fake Github : https_://github.com/ANN-Join/-MAINNET-/releases/download/1.1.0/Win64GrimmWalletMainnet.rar
Fake Github : https_://raw.githubusercontent.com/AmityCoin/AmityCoinV3/master/Qitmeer.zip
Fake Github : https_://github.com/omotenashlcoin-project/OmotenashiCoin-binaries/releases/download/1.7.0/omotenashicoin-1.7.0-win64.zip
Fake Source : https_://bitbucket.org/miningmentor/vzuh/downloads/VZUH-coin.rar
Fake Github : https_://github.com/Random-Xcoin/random/releases
Fake Github : https_://github.com/CircultBreaker88/Konjungate/releases/download/1.0.0/Konjungate-Qt.zip
Fake Github : https_://raw.githubusercontent.com/CryptoAtlcProject/wallet-Qt-win64/master/wallet-qt-win64.zip
Fake Github : https_://github.com/Sugarchain/sugarchain-project/releases/tag/release
Fake Github : https_://github.com/Light-BitProject/LightBit/releases/
Fake Source : https_://bitbucket.org/diazcoin/diaz/downloads/diaz-window-64bit.zip
Fake Github : https_://github.com/uTip-Coin/Wallet-qt/releases/tag/1.0
Fake Source : https_://github-production-release-asset-2e65be.s3.amazonaws.com/
Fake Source : https_://bitbucket.org/miningmentor/kinkycoins-kink/downloads/kinkycoins-qt%20.rar
Fake Source : https_://bitbucket.org/miningmentor/dilithium_project/downloads/dilithium-1.0.1-win64.zip
Fake Github : https_://github.com/omotenashilcoin-project/OmotenashiCoin-binaries/releases/download/1.7.1/omotenashicoin-1.7.1-win64.zip
Fake Github : https_://bitbucket.org/cryptoperfeckt/masters/downloads/playervsplayercoin-qt-windows.zip
Fake Github : https_://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip
Fake Source : https_://anonymousfiles.io/f/newyorkcoin-1.3.1.21-win-setup.zip
Fake Github : https_://github.com/AdzColn/adzcoin/blob/master/adzcoin-qt.zip
Fake Github : https_://github.com/AVANTAGE-coin/wallets/
Fake Source : https_://mega.nz/#!DOQVxabb!9Pa9Ttsa1vkuQH2GKuQmCbcWUR-hO6Aq0cIQFmz4ogY (SILENTIUM Wallet Windows)
Fake Source : https_://mega.nz/#!NEs00SBb!sYFTrENb_hv7-oZDk2GzuGCm1HD8DZ6X2ioI0FO6nm8 (SILENTIUM Wallet Windows)
Fake Source : https_://mega.nz/#!4E9Uzajb!9Z3HCc6ZglZBm05GGdU5aVjf9QVFesCuAJwbJbaSURU (SILENTIUM Wallet Linux)
Fake Github : https_://github.com/develisoftware/GMinerRelease/releases/download/1.76/gminer_1_76_windows64.zip

If you find or see one of this links please report the thread or post instant to the Moderator !

Thank you for the Link and i have added it to my first post .



Exactly but that has nothing to do with paranoid , it just safe you a lot of action and secure your system for get infected with bad Software if you want test or install it.
I use it often for testing some stuff.

Another tip from me if you are still paranoid even after following the advices given in this thread, use a Sandbox software (Like Sandboxie, the most popular one) When you use Sandboxie to install something you've downloaded, it doesn't install it in your computer, it only installs it 'Sandboxed' which means even if it's a malware it won't affect your computer. Read more here: Sandboxie

Thank you Lafu, this was really needed for the newbies of the forum. Here is an old thread by grue- https://bitcointalksearch.org/topic/beware-of-increasingly-sophisticated-malware-infection-attempts-935898
Add the link in the OP as well, it will be helpful as well for them.

If you find some other Links just let me know and post it here or write it in the Spambusters thread from iasenko !
So we can do at some stage some kind of List for it .

For shortened links, you can check them using the website: https://redirectdetective.com/
Or you can add a plus symbol (+) at the end of links to move to pages at which you can get final destination pages by redirect links.

For suspicious phishing links, you can check links by scrolling computer mouse above the link, then you will see link at the bottom of the web browser (right or left, it depends on browsers, but mostly on the left bottom). You can check this by scrolling computer mouse on the link to my post.

This... or hover over the link before you click on it. You will see, on the bottom of your browser, the original link where you will be redirected. You should make this an habit.
If you are using a smartphone and can't hover links, just click the link and keep holding untill a menu window pops up, select "copy URL link", paste it anywhere and compare it with the link on OP.

@op, thank you for the tips.

The most posted Links are in new created ANNs that you see and its possible that one of them are FAKE ANNs and here i will start my first Advice .

If you see new created ANNs or Threads and you are intressted in them and will follow the Project seriously make the following before you Click any download Link :

- 1  copy the Thread title and do some search on Google or use the search field here on the forum

( This will show you if there are other threads with the same name normaly when there is one )

( If you found another thread with the same Title look at it and maybe check the Dates of creation of the Thread and you will see what thread was created first )


- 2  look at the User that have created the new ANN

( Most created FAKE ANNs are created from newbies with not much activity and you also see it when you check the orginal ANN that there are diffrent Users that created the ANNs)

- 3  Use the quote button to look behind the Links that you can see on the ANNs

( This will show you the real link of what you can see on the ANN and please check it also with the orginal ANN if there is a Difference of the name of the Link )


Thats a Example what i would show you !

On the picture below you can see how it looks


But if you use the Quote button you can see that there is some other Link and that is suspicious

You can see there is a other link hided of what you normal see !

- 4 Check how the Links are written when you looking with Quote on it

( I will use for this example something i have written on the Spambuster thread here : https://bitcointalksearch.org/topic/m.51869997 )

Look exactly how the names and letters are written and below you can see what i mean


You can also use Virustotal to check the links or if you have downloaded the file already you can check the file directly on Virustotal : https://www.virustotal.com/gui/home/upload

The most FAKE ANNs have the download links from Bitbucket or they are wrong written with just a other letter in it , and they have MALWARE in it that steals your Account, Wallets and Emails login details !

Check it a few times before you download anything and i hope that will helps to safe a few Users there Coins and Money and some Action before they get effected .

Also that advice is going out to the Translators also and to everybody , if you find ANNs that are having such things or you think they suspicious , Report them to the Moderators !

---

Thanks to Pffrt for the Link below.

Here you can find another thread about such things from grue  :  https://bitcointalksearch.org/topic/beware-of-increasingly-sophisticated-malware-infection-attempts-935898

---

Pilipinas translation of this thread : [TAGALOG] Gabay at payo para sa mga bagong user bago mag-download mula sa Forum!

---

If you find something like that and you are not sure if its Malware or a Bad Software write in my other THREAD here:

Report Malware and Suspicious Links here so Mods can take Action !