Pages:
Author

Topic: Invoice from CoinTerra? (Read 2924 times)

legendary
Activity: 2198
Merit: 1000
September 14, 2014, 10:48:23 PM
#24
I just received a jar_357 file lol,,,,,, its deleted, but first I checked all my CCards and paypal to make sure nothing was missing... I am most certain its a virus,,, when I saw the jar file  Grin
newbie
Activity: 3
Merit: 0
September 10, 2014, 07:02:38 AM
#23
Interesting. I received one too.

Nearly downloaded it to see what it was about until I saw that it was a jar file. Jeez.
newbie
Activity: 32
Merit: 0
August 22, 2014, 04:09:01 PM
#22
hey guys, yesterday i clicked that jar file ( yes I am an Idiot)  Sad Good thing I have last line of defenses (2-Factor Authentication, encryption) on every coins related programs and websites. I deleted the file right away, but I am still worried something hidden/ program is still there on my pc. could you guys please help me how to scan and remove it? i ran anti-virus programs like malware bytes and AVG and they showed that file is "clean".  I am confused now. please help me find it.
member
Activity: 112
Merit: 10
August 19, 2014, 02:13:56 PM
#21
VIRUS....delete the email...move on...DON'T EVEN DARE to download that file.
hero member
Activity: 728
Merit: 500
August 19, 2014, 02:04:29 AM
#20
Seriously though a Jar attachment?


I'm going to guess that this is targeting mobile users to empty their wallets.


It's targeting regular desktop/laptop users. Mobile phones can't run straight up jar files. Even though Android apps are Java-based, there's some additional steps involved to make Java code into something that can run on an Android smartphone. WP and iOS can't run the .jar either.
legendary
Activity: 1946
Merit: 1035
August 18, 2014, 10:51:54 PM
#19
Did you register an account at Bitmine.ch by any chance? Not even talking about an order, just an account i.e. registered e-mail address

See this thread

As a matter of fact I do have an account with bitmine.ch although I dont know why I set it up??? I never bought anything from them.

I highly suspect that registered user accounts have been leaked, for the reasons stated in the thread linked above.

I have no proof but many hints that make me believe so, and your answer is yet another one Undecided
sr. member
Activity: 440
Merit: 250
August 18, 2014, 10:37:12 PM
#18
Two weeks in a row I've received an invoice from them but I've NEVER ordered anything from them. Odd thing too is that the invoice is a .jar which makes me suspect the file to be some sort of trojan or virus.

Anyone else getting these?

Did you register an account at Bitmine.ch by any chance? Not even talking about an order, just an account i.e. registered e-mail address

See this thread

As a matter of fact I do have an account with bitmine.ch although I dont know why I set it up??? I never bought anything from them.
newbie
Activity: 15
Merit: 0
August 18, 2014, 10:29:23 PM
#17
Yeah anything which is a .jar extension is a virus of some sort.
legendary
Activity: 1456
Merit: 1018
HoneybadgerOfMoney.com Weed4bitcoin.com
August 18, 2014, 10:29:14 PM
#16
I would only open it in a previewed mode on my web based email - not on a local email client and only if it was a pdf file - nothing else. Not even HTML nor a Word doc nor ppt.

edit - and also I was expecting it from them.  I wouldn't even bother opening it if it was just solicited to me.
sr. member
Activity: 440
Merit: 250
August 18, 2014, 10:26:18 PM
#15
Seriously though a Jar attachment?


I'm going to guess that this is targeting mobile users to empty their wallets.


Yup, .jar attachment.

I bet if one were to click on it and had Java installed it would install something bad. Theres no way in hell its legit.
legendary
Activity: 1946
Merit: 1035
August 18, 2014, 10:24:04 PM
#14
Two weeks in a row I've received an invoice from them but I've NEVER ordered anything from them. Odd thing too is that the invoice is a .jar which makes me suspect the file to be some sort of trojan or virus.

Anyone else getting these?

Did you register an account at Bitmine.ch by any chance? Not even talking about an order, just an account i.e. registered e-mail address

See this thread
legendary
Activity: 1456
Merit: 1018
HoneybadgerOfMoney.com Weed4bitcoin.com
August 18, 2014, 10:23:56 PM
#13
Seriously though a Jar attachment?


I'm going to guess that this is targeting mobile users to empty their wallets.
sr. member
Activity: 440
Merit: 250
August 18, 2014, 10:22:37 PM
#12
FWIW, I did send CoinTerra some emails last year. They could very well have been hacked....
sr. member
Activity: 440
Merit: 250
August 18, 2014, 10:18:42 PM
#11
There is no way anything bad could happen if you were to open that (sarcasm). Someone likely got your email from some leaked list of emails that are associated somewhat with bitcoin. If you ignore it and/or report it as spam and/or delete it then you will likely stop receiving attacks via email.

I'm just going to delete them when I get them.
sr. member
Activity: 476
Merit: 250
August 18, 2014, 09:56:03 PM
#10
It all looks fairly legit (the body of the email anyway) and if the return email is a spoof from the surface it looks like its going to cointerra.com.



I'm on a Mac and I dont think I've got anything Java installed but I'm still not clicking on it.
There is no way anything bad could happen if you were to open that (sarcasm). Someone likely got your email from some leaked list of emails that are associated somewhat with bitcoin. If you ignore it and/or report it as spam and/or delete it then you will likely stop receiving attacks via email.
sr. member
Activity: 440
Merit: 250
August 18, 2014, 05:55:52 PM
#9
lol OPEN IT !!!!11

/sarcasm

Thought about opening it on a rig that I test hardware on. If I fry the OS I've got an image I use to restore it from.

Of course I'd disconnect the machine from the network after I saved the .jar file... A guy I know recently had a friend get the cryptolocker virus... Wouldn't want that sort of thing to spread around my office.
sr. member
Activity: 440
Merit: 250
August 18, 2014, 05:53:05 PM
#8
no java installed here.
sr. member
Activity: 381
Merit: 250
August 18, 2014, 05:45:27 PM
#7
It all looks fairly legit (the body of the email anyway) and if the return email is a spoof from the surface it looks like its going to cointerra.com.

I'm on a Mac and I dont think I've got anything Java installed but I'm still not clicking on it.

I know around 2012 Mac dropped Java being included on the machine by default: http://www.reuters.com/article/2012/10/19/us-apple-java-idUSBRE89I1A920121019

If you opened your terminal on the mac and typed:
which java

If that returns no path then your cool.
sr. member
Activity: 440
Merit: 250
August 18, 2014, 05:42:09 PM
#6
It all looks fairly legit (the body of the email anyway) and if the return email is a spoof from the surface it looks like its going to cointerra.com.



I'm on a Mac and I dont think I've got anything Java installed but I'm still not clicking on it.
sr. member
Activity: 381
Merit: 250
August 18, 2014, 05:34:09 PM
#5
Two weeks in a row I've received an invoice from them but I've NEVER ordered anything from them. Odd thing too is that the invoice is a .jar which makes me suspect the file to be some sort of trojan or virus.

Anyone else getting these?

Yeah that was almost certainly a virus, that is a common method to send someone a jar file, some people might not understand the executablity of the .jar file-type and just double click it. (Only if Java is installed and the paths are set correctly) If you have any other details it might be helpful for other users, don't bother posting the jar here.
Pages:
Jump to: