Report Malware and Suspicious Links here so Mods can take Action ! - page 14.

Lafu

legendary

Activity: 2940

Merit: 3030

And here we go again , they have started again posting Fake Github download links in the Phoenixminer Thread !

Github was created yesterday
Fake Github Account : github.com/PhoenixMiner62 <----- Please report all kind posts with that Link and if possible also on Github
Real download link for PhoenixMiner : https://phoenixminer.info/downloads/

Account : esqueletor <----- Account is already banned and locked and the post deleted
The Account is from March 20, 2020 , possible sold or a hacked account

Quote from: ?? on ??

The new beta version is ready. It is mostly a bugfix release, the more significant upgrades are coming next month. You can download PhoenixMiner 6.2a from here:

[https_://github.com/PhoenixMiner62/PhoenixMiner/releases/download/6.2/PhoenixMiner_6.2a_Windows.zip]PhoenixMiner_6.2a_Windows.zip
[https_://github.com/PhoenixMiner62/PhoenixMiner/releases/download/6.2/PhoenixMiner_6.2a_Linux.tar.gz]PhoenixMiner_6.2a_Linux.tar.gz

The new features in this release are:

Account : vegasonline111 <----- Account is already banned and locked and the post deleted

Quote from: ?? on ??

The new beta version is ready. It is mostly a bugfix release, the more significant upgrades are coming next month. You can download PhoenixMiner 6.2a from here:

[https_://github.com/PhoenixMiner62/PhoenixMiner/releases/download/6.2/PhoenixMiner_6.2a_Windows.zip]PhoenixMiner_6.2a_Windows.zip
[https_://github.com/PhoenixMiner62/PhoenixMiner/releases/download/6.2/PhoenixMiner_6.2a_Linux.tar.gz]PhoenixMiner_6.2a_Linux.tar.gz

The new features in this release are:

Account : mshahalam01
Last post from this Account was in May 13, 2020 , Hacked or sold Account

Quote from: ?? on ??

The new beta version is ready. It is mostly a bugfix release, the more significant upgrades are coming next month. You can download PhoenixMiner 6.2a from here:

[https_://github.com/PhoenixMiner62/PhoenixMiner/releases/download/6.2/PhoenixMiner_6.2a_Windows.zip]PhoenixMiner_6.2a_Windows.zip
[https_://github.com/PhoenixMiner62/PhoenixMiner/releases/download/6.2/PhoenixMiner_6.2a_Linux.tar.gz]PhoenixMiner_6.2a_Linux.tar.gz

The new features in this release are:

And the result from Virustotal shows 17 detections with Malware and Virus:
https://www.virustotal.com/gui/file/100793c1ad37bf211f7c25a190e04c6af7895798b67fbf31abc9c71680249262?nocache=1

This post is also a reference for the Github Report !

Edit and Update :
The Fake Github Account is deleted and banned on Github !

Lafu

legendary

Activity: 2940

Merit: 3030

As i was just checking some Threads i saw there there was an offical Update on the Phoenixminer Version 5 days ago.

So i dont know if since this Update was coming out there was some fake downloads posted .
Because of that , that it was quiet the last weeks with Fake Downloads and Github Accounts i looked at Github and found something.

Exactly 4 days ago there was a Github Account added some files there.

Code:

https://github.com/ethermine/PhoenixMiner/releases/tag/6.1b

After i downloaded the File and checked it my guessing was right , full of Malware and Virus.

Virustotal detection with 41 counts.
https://www.virustotal.com/gui/file/a6dcc2dda40c4bbfb7a62dde1ffab43504cddba65109e1719ac79184eec86418

If you see the posted Github Link please report it and maybe write here.

Lafu

legendary

Activity: 2940

Merit: 3030

Quote from: qwertyup23 on January 24, 2022, 01:48:32 PM

Virus Total Link: https://www.virustotal.com/gui/file/30420d7be3214f1863f41dede4f0d408a5daced439c011c4f45a9d256bbf2176

The most of the dections looks like false positive as they are coinminers detections !
Also i dont know why there was a new Thread created about that Coin as there is already an existing one from 2019 ,
with the same Name , and also there is the same Github in there and downloads and the Coin was on Zpool for mining.

The Thread from 2019 is here : [ANN] [ISO] IsotopeC - a peer to peer digital crypto asset - Live free and mine!

And there is also a Thread translated into russian here : [ISO] IsotopeC - CPU-мaйнинг - Бeз пpeмaйнa, бeз ico

So i guess its not a Fake Wallet or something , but i havnt looked more into it !

So maybe you should try to contact the User isotopec or write in the thread and ask about it .

qwertyup23

hero member

Activity: 2212

Merit: 786

Malware from Github link and Fake Wallet

Thread: IsotopeC v1.0.0.4 RELEASED | Block #207750 Update & Halfway to the 1st Halving <---- DELETE

Profile Link:isotopec
----> Date Created:September 24, 2019

Archive: https://archive.fo/aIu6n

Code:

https://github.com/isotopec-org/isotopec-cpuminer/releases

Code:

 IsotopeC-CPUminer_v1.0.0.0_Windows-x86_64_DLL.zip

Virus Total Link: https://www.virustotal.com/gui/file/30420d7be3214f1863f41dede4f0d408a5daced439c011c4f45a9d256bbf2176

Lafu

legendary

Activity: 2940

Merit: 3030

And we got a new Fake Github Account for the LHR-Pill again in the Phoenixminer thread !

The Fake Github Account was created 1 hour ago
Fake Github Account : github.com/LHR-Pill-Main <----- Please report all kind posts with that Link and if possible also on Github

Account : Jennouen <----- Please ban or lock that Account if you havnt already
The last post from that user was back in October 02, 2018, Hacked or sold Account

Quote from: ?? on ??

Now unlock up to 100% of the Ethereum mining performance of Nvidia Lite Hash Rate (LHR) series
https_://github.com/LHR-Pill-Main/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip

Account : djprobsbd <----- Please ban or lock that Account if you havnt already
Last post was back in August 03, 2021, Hacked or sold Account

Quote from: ?? on ??

Now unlock up to 100% of the Ethereum mining performance of Nvidia Lite Hash Rate (LHR) series
https_://github.com/LHR-Pill-Main/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip

This post is also a reference for the Github Report !

Lafu

legendary

Activity: 2940

Merit: 3030

Quote from: intec on January 10, 2022, 04:04:25 PM

Lafu can you please stop posting on new threads stating everything is a virus? You clearly don't know how botnets work, for instance latest is just built in miner and this poor user got banned for your selfishness. God bless bitcointalk.

You dont have to quote my whole post .
I havnt reported the thread , just to be clear on that !
Second thing i know more about that all of what you think buddy .
For sure there a few false positiv detections but not all , if you want to complain about the deleted thread please write to a Global Moderator or Mod for this board.
Its mprep or welsh , and will not stop reporting when i see and found a post thats have a Malware download link in it or when its spam.

Edit :
Now i rememeber you from here https://bitcointalksearch.org/topic/stake-flags-for-ponzi-schemes-here-5157698

intec

full member

Activity: 265

Merit: 100

Quote from: Lafu on January 10, 2022, 03:54:33 PM

Quote from: qwertyup23 on January 10, 2022, 01:30:49 PM

Malware from Github link and Fake Wallet

Thread: [ANN] ePT - Escudo Digital Português - Mainnet Live <---- DELETE

Profile Link: e_PT
----> BRAND NEW:January 11, 2022

Archive: https://archive.fo/db7v3

Code:

https://github.com/ptdotps2/ePT/releases/tag/v0.0.1

Nice catch qwertyup23 , and yes it has some Malware in the download from the github !

Virustotal : https://www.virustotal.com/gui/file/7bd53a779f29e900edcf759a427fbcf319bd09aeb6c09185a7d4e0f357271e4d

There is the detection : Generic ML PUA (PUA) <------- Its Malware and also a locker software

Quote from: Mitchell on January 10, 2022, 10:45:43 AM

They are back. Over 40 members have been nuked already.

Thanks Mitchell to let me or us know about and will looking more again about some Links , maybe its possible you can write me the links or what kind or Github they using.
Would be good so i cn report them also on Github and write the links down for the records.

Quote from: Myleschetty on January 10, 2022, 01:11:09 PM

Just want to suggest the Mod to auto-ban every account that posts this thread. Although the previous thread is nuked but the group or person posting it keeps going and it may do some damage to the newbies.

Thank you for keeping your eyes open and reporting this kind of threads ,
but you should be next time posting about this here in the Spambuster thread [CLUB] The SpamBusters! Busting rule-breakers constantly.
As it looks like spam and not a Malware or Suspicious Link.

Lafu can you please stop posting on new threads stating everything is a virus? You clearly don't know how botnets work, for instance latest is just built in miner and this poor user got banned for your selfishness. God bless bitcointalk.

Lafu

legendary

Activity: 2940

Merit: 3030

Quote from: qwertyup23 on January 10, 2022, 01:30:49 PM

Malware from Github link and Fake Wallet

Thread: [ANN] ePT - Escudo Digital Português - Mainnet Live <---- DELETE

Profile Link: e_PT
----> BRAND NEW:January 11, 2022

Archive: https://archive.fo/db7v3

Code:

https://github.com/ptdotps2/ePT/releases/tag/v0.0.1

Nice catch qwertyup23 , and yes it has some Malware in the download from the github !

Virustotal : https://www.virustotal.com/gui/file/7bd53a779f29e900edcf759a427fbcf319bd09aeb6c09185a7d4e0f357271e4d

There is the detection : Generic ML PUA (PUA) <------- Its Malware and also a locker software

Quote from: Mitchell on January 10, 2022, 10:45:43 AM

They are back. Over 40 members have been nuked already.

Thanks Mitchell to let me or us know about and will looking more again about some Links , maybe its possible you can write me the links or what kind or Github they using.
Would be good so i cn report them also on Github and write the links down for the records.

Quote from: Myleschetty on January 10, 2022, 01:11:09 PM

Just want to suggest the Mod to auto-ban every account that posts this thread. Although the previous thread is nuked but the group or person posting it keeps going and it may do some damage to the newbies.

Thank you for keeping your eyes open and reporting this kind of threads ,
but you should be next time posting about this here in the Spambuster thread [CLUB] The SpamBusters! Busting rule-breakers constantly.
As it looks like spam and not a Malware or Suspicious Link.

qwertyup23

hero member

Activity: 2212

Merit: 786

Malware from Github link and Fake Wallet

Thread: [ANN] ePT - Escudo Digital Português - Mainnet Live <---- DELETE

Profile Link: e_PT
----> BRAND NEW:January 11, 2022

Archive: https://archive.fo/db7v3

Code:

https://github.com/ptdotps2/ePT/releases/tag/v0.0.1

Myleschetty

member

Activity: 1155

Merit: 77

Just want to suggest the Mod to auto-ban every account that posts this thread. Although the previous thread is nuked but the group or person posting it keeps going and it may do some damage to the newbies.

Mitchell

copper member

Activity: 3892

Merit: 2197

Verified awesomeness ✔

They are back. Over 40 members have been nuked already.

Lafu

legendary

Activity: 2940

Merit: 3030

Quote from: Mitchell on December 28, 2021, 06:29:48 PM

The last few accounts my bot nuked were from December 19, so it's just been quiet.

Thanks for the very fast answer

Hopefully it will keep this way now for some longer time and that they really wasted all there hacked Accounts that they got.
But i guess its just a matter of time if they coming back and posting there shit fake links again , or maybe they changed there style and links.
I will for sure have an eye on that and looking around every day in the mining board , lets hope they have given up .

Mitchell

copper member

Activity: 3892

Merit: 2197

Verified awesomeness ✔

Quote from: Lafu on December 28, 2021, 06:28:41 PM

[...]
Maybe a Global Mod or Moderator can answer this question or Mitchell at least .
[...]

The last few accounts my bot nuked were from December 19, so it's just been quiet.

Lafu

legendary

Activity: 2940

Merit: 3030

Is it really that quiet right now with the Fake Malware links and posts and threads or did i missed something ?
Are they still posting the fake links somewhere else here on the Forum as i noticed or havnt seen any posts for a week now .
Maybe a Global Mod or Moderator can answer this question or Mitchell at least .
I mean im very cool with that if there wasnt a single post since a week and maybe they wasted all there accounts witht here last wave.

Lafu

legendary

Activity: 2940

Merit: 3030

And we got a new Fake Github Account for the LHR-Pill again !

Fake Github Account : github.com/LHR-Pill-Unlock <----- Please report all kind posts with that Link and if possible also on Github
Fake Github was created 2 days ago

Account : Sahsibit <----- Please ban and lock that Account and delete the thread
Last post from that Account was in August 20, 2019 , Hacked or sold Account

Archived Thread : https://archive.fo/9y2Wu

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//github.com/LHR-Pill-Unlock/LHR-Pill/releases/download/LHR/LHR-RESULT.zip

This post is also a reference for the Github Report !

Lafu

legendary

Activity: 2940

Merit: 3030

Quote from: Toughit on December 13, 2021, 12:47:21 PM

Question: Is it worth reporting these to the moderator?

For sure is it worth to report them to the Moderators if you some kind of posts with Fake Github or other links that have Malware inside!
Sometimes they using Mega download Links also , if want to write in here , quote the post but with an edit on the Link that you cant click it !

They have a new Fake Download Link now with a MEGA download link for the LHR-PILL !

Fake download Link : https:_//mega.nz/file/NlcFBYCS#WCj5OpRe8ppa__WquZYzW9kdYlZi-iB6s5hsYP82WFc <----- Please report all kind posts with that Link if possible

Account : Ibrahimkill <----- Account is already banned and locked and the post deleted
The Account is from November 29, 2017, Hacked or sold Account

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//mega.nz/file/NlcFBYCS#WCj5OpRe8ppa__WquZYzW9kdYlZi-iB6s5hsYP82WFc

Source : The mega download link

Toughit

full member

Activity: 378

Merit: 197

Lafu,

I posted this in the Altcoin mining subform, and was referred here -- does it help to report these posts via the report to moderator, or is it too much data for the mods?

https://bitcointalksearch.org/topic/malware-war-in-altcoin-mining-subforum-5376696

--------------------------------------------------------------------------------------------------------

I spent the last hour or so in the Altcoin Mining subforum reading new posts (procrastinating), and ran into "LHR" malware posts.

In the span of about 1 hour I reported 28 cases (28 posts in the hour were LHR malware).

I never realized it was so bad!

During that time period there were just 4 VALID posts related to mining.

4 good, 28 malware.

They must be successful (making money) as it must take time to create these ID's

Question: Is it worth reporting these to the moderator?

Lafu

legendary

Activity: 2940

Merit: 3030

There are now 3 diffrent Versions of the Fake Github accounts for the LHR-Pill !

Fake Github Account : github.com/LHR-utility <----- Please report all kind posts with that Link and if possible also on Github
Fake Github Account : github.com/LHR-Build <----- Please report all kind posts with that Link and if possible also on Github
Fake Github Account : github.com/LHRProject <----- Please report all kind posts with that Link and if possible also on Github
I already reported 2 of them on Github but looks like the weekend nobody is working on the support Cheesy

Account : goygoo <----- Please ban or lock that Account if you havnt already
The Account is from March 08, 2014, Hacked or sold Account

The newest one this one , created 13 hours ago
Fake Github Account : github.com/LHR-utility

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//github.com/LHR-utility/LHR-pill/releases/download/1.1.0/LHR-pill.zip

This post is also a reference for the Github Report !

Lafu

legendary

Activity: 2940

Merit: 3030

We have some new Fake Github Accounts with Malware download links for PhoenixMiner and LHR-Pill !

Fake Github Account : github.com/Phoenix-product <----- Please report all kind posts with that Link and if possible also on Github
Real download link for PhoenixMiner : https://phoenixminer.info/downloads/

Account : kesty92 <----- Please ban or lock that Account if you havnt already
Last post from that User was in April 06, 2018, Hacked or sold Account

Quote from: ?? on ??

The new beta version is ready. It is mostly a bugfix release, the more significant upgrades are coming next month. You can download PhoenixMiner 6.0a from here:

url=https:_//github.com/Phoenix-product/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_6.0a_Windows.zip]PhoenixMiner_6.0a_Windows.zip[/url]
url=https:_//github.com/Phoenix-product/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_6.0a_Linux.tar.gz]PhoenixMiner_6.0a_Linux.tar.gz[/url]

Fake Github Account LHR-Pill

Fake Github Account : github.com/LHRProject <----- Please report all kind posts with that Link and if possible also on Github

Account : jupiterdianysa <----- Please ban or lock that Account if you havnt already
Last Post was in March 16, 2021, Hacked or sold Account

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//github.com/LHRProject/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip

This Post is also referenc for the Github Report !

willi9974

legendary

Activity: 3430

Merit: 2663

Escrow Service

Scam / Virus alert
Very Strange topic and the User spams in many topics

https://bitcointalksearch.org/topic/--5376409
https://bitcointalksearch.org/user/stanks-953957

https://_github.com/LHRProject/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Now unlock up to 100% of the Ethereum mining performance of Nvidia’s Lite Hash Rate (LHR) series

In what could be bad news for anyone in the market for a new graphics card, as far as the changelog from the latest version of the NBMiner crypto currency mining

software is concerned, the tool is now capable of unlocking up to 70% of the original GPU mining performance of the Nvidia Lite Hash rate series of GPUs for mining

Ethereum

But our software will completely solve this problem. It is by far the best solution to the problem of LHR GPU's. The software does not lower and increases power

consumption every second. therefore it is safe for your graphics cards. Work with Win7, Win10 (Not HiveOs,RaveOS and etc)

Download:
https://_github.com/LHRProject/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip
How to use:

Run LHR-pill.exe
Wait when software detected yours GPU's
When you see message "worked" you can minimize window and start your miner

Support miners:
NBminer
PhoenixMiner
Gminer
Trex

Results on 3060 LHR:

Topic: Report Malware and Suspicious Links here so Mods can take Action ! - page 14. (Read 34320 times)