Author

Topic: Infecting people with fake "Darkwallet" (Read 1964 times)

legendary
Activity: 1512
Merit: 1028
January 30, 2016, 03:59:20 AM
#14
It's much better to just go after the resources of the person directly.

The registrar of the .co TLD is:
http://www.cointernet.com.co/

Their US parent company is:
https://www.neustar.biz/services/domain-name-registry

I'll bet you can get the domain pulled for abuse of the registrar's policies.

http://www.cointernet.com.co/politicas-procedimientos - 4.4 of Política de Administración del Dominio .CO states that the domain shall not be used for any illegal purposes.

Then go after the hosting, the cloud proxy account, etc. Get them to turn over account details.
staff
Activity: 3472
Merit: 6129
January 30, 2016, 02:54:25 AM
#13
It seems like they are back . See this user : https://bitcointalksearch.org/user/darkwalletdevs-748438 , he is spamming in different sections .
staff
Activity: 3472
Merit: 6129
January 10, 2016, 03:28:45 AM
#12
Nothing special when it comes to malware. Just report and we will nuke them on sight. I've already nuked several myself.

Posts were already removed by mods already , I posted something else related to that . I suppose you can only nuke someone on the forums and not on blogs and newspaper websites .



Just got a message from them on twitter, the article was updated to show the proper link.

Post on reddit was removed as well.


I'm going to close scam accusations topic for now then , In case they come back with that kind of stuff I will open it once again .
copper member
Activity: 1498
Merit: 1499
No I dont escrow anymore.
January 09, 2016, 05:54:07 PM
#11
Just got a message from them on twitter, the article was updated to show the proper link.

Post on reddit was removed as well.
legendary
Activity: 2674
Merit: 2965
Terminated.
January 09, 2016, 05:45:11 PM
#10
Nothing special when it comes to malware. Just report and we will nuke them on sight. I've already nuked several myself.
hero member
Activity: 2025
Merit: 528
❤ Bitcoin Garden
January 09, 2016, 06:35:18 AM
#9
Stay safe and don't download it or even visit the website .

Thanks for the alert. A similar post appeared on Bitcoin Garden, too: http://bitcoingarden.tk/forum/index.php?topic=6054.0

I did not delete the original post, I just deactivated the link and moved the topic in the scam board, adding a comment. When I saw that something immediately let me think there's was something wrong there. I think it could be educative leaving that post alive to show how a scam post looks like.

This is not the first time somebody try to post a fake op to convince people downloading malware. It is very common to see this kind of posts for software claiming to be super bitcoin miners (allowing to solo mine btc on normal pc) or bitcoin private key generators (from public addresses). Needless to say this kind of software cannot exist.

My suggestion is to mentally count from 1 to 1,000,000 before downloading binary files from a source you don't know. Do some google research instead, the truth will emerge in short time.
full member
Activity: 124
Merit: 100
January 09, 2016, 05:56:45 AM
#8
I just wanted to give you a heads up guys , we all know that Darkwallet is not fully funded and developers dropped the project , I noticed since yesterday that there is few posts about it but it's not the same wallet obviously ...

Someone probably bought the domain (fake) just to scam and infect people : Darkwallet.co while the real domain is : Darkwallet.is
Darkwallet.co executable : https://www.virustotal.com/pt/file/3a5474cdc3bd26746686f11c67e9b008911d8f1e4432cb746564969082b3745a/analysis/1451326638/ (thanks to pedrog for checking)

Here are few posts :

https://bitcointalksearch.org/topic/--1305921
https://bitcointalksearch.org/topic/--1306144
https://bitcointalksearch.org/topic/--1307436
https://bitcointalksearch.org/topic/--1307430
https://bitcointalksearch.org/topic/--1306144

Stay safe and don't download it or even visit the website .

why not post also in scam accusation board? is a scam attempt!
No all users read this forum section Sad
copper member
Activity: 1498
Merit: 1499
No I dont escrow anymore.
staff
Activity: 3472
Merit: 6129
January 09, 2016, 05:23:20 AM
#6
Best "news" money can buy, I yelled at them on twitter, maybe it will do something. Does "themerkle" have a thread and/or account here?

Yes It seems like they do :

Signature campaign : https://bitcointalksearch.org/topic/the-merkle-signature-campaign-earn-004-btc-a-week-closed-1249297
User : https://bitcointalksearch.org/user/themerkle-534999
copper member
Activity: 1498
Merit: 1499
No I dont escrow anymore.
January 09, 2016, 05:14:51 AM
#5
Best "news" money can buy, I yelled at them on twitter, maybe it will do something. Does "themerkle" have a thread and/or account here?

Edit: they also have a mail, can anyone inform the reddit sheep? -> https://www.reddit.com/r/Bitcoin/comments/404hg4/dark_wallet_new_amazing_updates_2016_most/
staff
Activity: 3472
Merit: 6129
January 09, 2016, 04:37:22 AM
#4
copper member
Activity: 1498
Merit: 1499
No I dont escrow anymore.
December 29, 2015, 08:13:23 AM
#3
-snip-
Thanks for the warning(even though I don't use altcoins). Another thing that I might add is report such posts to the moderators using the (similarly named) feature, with the comment as "Malware , virustotal link: LINK", as any posts containing malware are not accepted in the forum.

I usually report them as well, I didnt get around to it yet.

Darkwallet is no alt coin though, its a chrome plugin wallet for bitcoin that focused heavily on anonymity (build in stealth addresses (can be reused without compromising privacy) and coinjoin sending). One of the main devs has vanished a while back, I honestly though the wallet is back. Either with a fork or the original dev team. Didnt have the time to check though.

hero member
Activity: 924
Merit: 1003
4 Mana 7/7
December 29, 2015, 07:59:51 AM
#2
-snip-
Thanks for the warning(even though I don't use altcoinsseems bitcoin related, haven't used it anyway). Another thing that I might add is report such posts to the moderators using the (similarly named) feature, with the comment as "Malware , virustotal link: LINK", as any posts containing malware are not accepted in the forum.
staff
Activity: 3472
Merit: 6129
December 29, 2015, 07:55:21 AM
#1
I just wanted to give you a heads up guys , we all know that Darkwallet is not fully funded and developers dropped the project , I noticed since yesterday that there is few posts about it but it's not the same wallet obviously ...

Someone probably bought the domain (fake) just to scam and infect people : Darkwallet.co while the real domain is : Darkwallet.is
Darkwallet.co executable : https://www.virustotal.com/pt/file/3a5474cdc3bd26746686f11c67e9b008911d8f1e4432cb746564969082b3745a/analysis/1451326638/ (thanks to pedrog for checking)

Here are few posts :

https://bitcointalksearch.org/topic/--1305921
https://bitcointalksearch.org/topic/--1306144
https://bitcointalksearch.org/topic/--1307436
https://bitcointalksearch.org/topic/--1307430
https://bitcointalksearch.org/topic/--1306144

Stay safe and don't download it or even visit the website .
Jump to: