Topic: Report Malware and Suspicious Links here so Mods can take Action ! - page 18. (Read 38967 times)

I guess you maybe posted it in the wrong thread , as i dont see any suspicious Links or dangerous download Links on the post.
Maybe you wanted to write that in [CLUB] The SpamBusters! Busting rule-breakers constantly. because it would be fitting in there.
But anyway the Spam posts are already deleted and all is good , thanks for keeping your eyes open .

Possible Spam: 3 Announcements Made by Same User

It has come to my attention that three announcements have been posted on Bitcointalk by the same user within a short period of time. Given this unusual pattern, I suspect that these announcements may be spam.

Here are the links to the announcements in question:

1. https://bitcointalksearch.org/topic/--5448754
2. https://bitcointalksearch.org/topic/--5448753
3. https://bitcointalksearch.org/topic/--5448751

All three announcements were created by the user https://bitcointalksearch.org/user/coinratinternalgmailcom-3532270.

Please exercise caution when interacting with these announcements, and always conduct due diligence before investing in any projects.

Stay safe!

We have a new Fake Github Link with Malware download Link for the Fake Ann Prefix !

The Fake Github was created 4 days ago

Fake Github : github.com/Robert746/PerFixCoin

This are for now all the Fake Github repositories in there

Account : joywon  <--- Please ban or Lock that Account and delete the Thread
This user recently woke up from a long period of inactivity.
The last post from that user was back in December 29, 2017, Hacked or sold Account

Fake Ann Thread : [ANN] PerFix - Trusted & Secure Crypto Project (POW+POS)
The Thread is selfmoderated


This post is also a reference for the Github Report !
Hopefully it will be get deleted soon

There is a new Fake Miner Ann for the Rocketminer with a new Fake Github Account and download link !

The Fake Github Account was created yesterday !
Fake Github Account : github.com/RocketMinerCore/

The download file on the Fake Github is nearly exactly the same size as it was from the last one.

Account : hepilord  <--- Please ban or Lock that Account and delete the Thread
This user recently woke up from a long period of inactivity.
Last post from that Account was back in December 02, 2018, Hacked or sold Account

Fake Ann Thread : [ANN] Rocket Miner - Best KAS|ZIL|NEXA miner| Low fee | Based on Rigel
The thread is selfmoderated as always from the hackers.


This post is also a reference for the Github Report !

I have reported one that posts earlier this day but not because of the Service he is offering , but i reported it as it was in the wrong section in Altcoins.
Good to know about that other Alt Accounts already banned of him and next time when i see one of this posts i make a reference to your post here.
Thanks for let me know and that you always keep your eyes open.

About 8 of his accounts have been banned so far, but this guy is still posting links of a malicious script service

New account: Xdrainer543tre
ANN: https://bitcointalksearch.org/user/xdrainer543tre-3542319

I think the above profile should be banned too.

We have a new Fake Ann with a Fake Github download link with Malware for PerFix and they copy / paste the text from Chinet !

Fake Github Account : github.com/Per-Fix

The Fake Github Account was created an Hour ago.
And again there is the " Hi there 👋 " in the readme file as it was for the other Fake Github Accounts.

Account : SmokeysGardens  <--- Please ban or Lock that Account and delete the Thread
This user recently woke up from a long period of inactivity.
Last post of this Account was back in  March 21, 2018 , Hacked or sold Account !

Fake Ann Thread : [ANN] PerFix - Trusted & Secure Crypto Project (POW+POS)
The Thread is selfmoderated as always from the Hackers.


They used and copied the Text for there Fake Ann from the Chinet Ann and Website.


Original Thread : [ANN][CHN] Chinet - Trusted & Secure Crypto Project (POW+POS)

Original Website : https://chinet.io/

This post is also a reference for the Github Report !

I found another Fake Ann and Fake Miner Thread with the Fake Github where they try to get Users Account hacked !

Fake Github Account : github.com/Robert746/

In there there are more Fake download files :


Account : spracrypto  <--- Please ban or Lock that Account and delete the Thread
Last post from that Account was back in March 14, 2018, Hacked or sold Account

Fake Miner Thread : ✅RocketMiner | Best KAS ZIL NEXA miner in the world | Low fee✅
The thread is also selfmoderated and thats what the hackers lately are doing.


This post is also a reference for the Github Report !

Thanks for let me know about that User and the Malware download links !
I also have reported the posts with a reference to your post here and i also supporting the Flag for that User.
And i also have given the Account some negative Feedback to warn other Users and people.
Thanks for keeping your eyes open.

I was checking the topics in the Portuguese tabs and I came across a topic from that user, which when investigating would give the same alert. Thank you for having already done so.

Just a tip, the flag you created (which I already supported) indicated the first post of this topic, and should have indicated your post explaining the situation.


EDIT
Other topics created by the least user, with the same purpose:
https://bitcointalksearch.org/topic/--5444649
https://bitcointalksearch.org/topic/--5444648

This guy is trying to spread malware in a tricky way. Most members have probably not noticed it yet

Profile - Jescbitcoin <--- Please ban/Delete threads containing malware links

Topics.
1. https://bitcointalksearch.org/topic/--5444646
2. https://bitcointalksearch.org/topic/--5444647

Mega Malware link


Proof that the zipped file contains malware;

https://www.virustotal.com/gui/file/c40bf2e193e2e72f0a93f72b0b88b699887885a8da8091b26acbb5d8ff8fcf5e?nocache=1

And we have a new kind of Fake Ann and a new Fake Github Account with Malware !

The Fake Github Account was created an hour ago !

Fake Github Account : github.com/ProjectEvoX/
Real Github Account : github.com/evolution-project

Account : A7fold  <--- Please ban or Lock that Account and delete the Thread
Last post from that Account was back in June 25, 2018,Hacked or sold Account

Fake Thread : [ANN] Evolution Project EvoX - Fast, Secure and Anonymous

---

Original Thread

Thread : [ANN][EVOLUTION] Evolution-Project coin
Account : evolution-project


This post is also a reference for the Github Report !

---

Edit

They changed there Fake Github again for the Fake Evolution Project EvoX Thread !

Fake Github Account is now : github.com/Robert746/

Account : kamranki <--- Please ban or Lock that Account and delete the Thread

And they have changed the there Fake Github again for RadiumX in the Fake Ann Threads !

The Fake Github Account was created 1 hour ago  

Fake Github Account : github.com/RadiumX-Dev/

Account : Geeba_Official  <--- Please ban or Lock that Account and delete the Thread
The Last post from that Account was back in August 12, 2018 , Hacked or sold Account

Thread : [ANN] RadiumX New PoW coin . No ICO. No Masternode

---

And there is another new Fake Ann and download with Malware for Bitcointalk Wallet

Fake Github Account : github.com/BitcointalkWallet-Main/

Account : ikymwb  <--- Please ban or Lock that Account and delete the Thread
This user recently woke up from a long period of inactivity.


This post is also a reference for the Github Report !

Thanks and yes i have seen that also and reported it instant when i have readed the thread and post from that User.
I just havnt written it to my post earlier but i used the post as a reference for it and will be doing it for the coming one.
Thanks for keeping the eyes open and also for reporting this things.

And here is one more:

Account : JamalAmal99  
This user recently woke up from a long period of inactivity. (Hacked or sold Account)

Thread : [ANN] RadiumX New PoW coin . No ICO. No Masternode

Also, newbie account thikachhey is used to bump those fake ANN threads.

We have again a new Fake Ann with a new Fake Github Account for RadiumX !

Fake Github Account was created 2 days ago.

Fake Github Account  : github.com/Lolliediep/

And there are more Fake download and Malware files in there.

So i guess we will see more Fake Anns or posts for this files in the mining section in the threads soon also.

Account : s22606  <--- Please ban or Lock that Account and delete the Thread
Last post from that Account was back in January 30, 2018, Hacked or sold Account
This user recently woke up from a long period of inactivity.

Thread : [ANN] RadiumX New PoW coin . No ICO. No Masternode


This post is also a reference for the Github Report !

There is now a New Fake Ann Thread for Raptoreum with also a new Fake Github Account !

Fake Github Account was created 15 Hours ago !

Fake Github Account : github.com/Raptoreum-Core/
Original Github Account : github.com/Raptor3um/raptoreum

Account : oluaris      <--- Please ban or Lock that Account and delete the Thread
This user recently woke up from a long period of inactivity.
Last Post from this User was back in June 10, 2018, Hacked or sold Account

Fake Ann Thread : [ANN] Raptoreum - POW (GhostRider) | ASIC And FPGA Resistant | Mainnet Is Live

---

Original Thread :  [ANN] Raptoreum - POW (GhostRider) | ASIC And FPGA Resistant | Mainnet Is Live
User : Raptoreum


This post is also a reference for the Github Report !

Maybe a suggestion in Meta to enable some sort of "moderator review" with some sort of parameters (so that not all new threads have to be reviewed) that is open not just to moderators, but also to white-listed or established members like yourself who are actively watching these threads may be a good idea to combat the problem. The problem being that new members/inexperienced members are quick to try and get in on new coins at the moment they are announced, download the wallet, and then get infected...all before anyone who is knowledgeable enough discovers the thread is fake and the wallet is infected.

The review period could be a 24 hour/X time "hold" on the topic being published, where only available for legendary members (or some sort of membergroup) to be able to see so that the validity of the thread can be reviewed before the public sees it. To reduce the amount of threads caught in review, it can limit strictly to newbie members or also junior members. As it seems these are the ones who are mostly posting malicious content. Copper members excluded from review (as people who pay for the rights of Copper are less likely to waste it on an attempt to spread malware, I would assume) as are Full member and above (for a similar reason). Parameters about wake-up time can also be added.

Thats why write the Links here so Mitchell can add them to his Bot and also i write them here for a reference for the Github reports also .
And other Users can see them too when they maybe doing some research for the Links .
When i see them i report them dont worry on that , and its also a reference for the reports when i write them here.

I've moved it to the trashcan to mitigate the exposure, although I've escalated it to the global moderators to take further action, so shouldn't be long until that's done. As for the links, I'll probably formulate some sort of list, and report it to Mitchell periodically, however it does seem like they continue to just post new links, so will likely evade the bot. We might need to come up with a custom solution to detect these early, potentially. It's one of the reasons I'm for a shadow ban effect, maybe specifically for accounts looking to post links, rather than all newly registered accounts. I know that these accounts they're obtaining aren't new, which is part of the problem since they evade some of the moderators.

Although, keep reporting them, and we'll at the very least mitigate the exposure this gets. Thanks for doing your bit!