Report Malware and Suspicious Links here so Mods can take Action ! - page 18.

intec

full member

Activity: 265

Merit: 100

Quote from: Lafu on January 10, 2022, 02:54:33 PM

Quote from: qwertyup23 on January 10, 2022, 12:30:49 PM

Malware from Github link and Fake Wallet

Thread: [ANN] ePT - Escudo Digital Português - Mainnet Live <---- DELETE

Profile Link: e_PT
----> BRAND NEW:January 11, 2022

Archive: https://archive.fo/db7v3

Code:

https://github.com/ptdotps2/ePT/releases/tag/v0.0.1

Nice catch qwertyup23 , and yes it has some Malware in the download from the github !

Virustotal : https://www.virustotal.com/gui/file/7bd53a779f29e900edcf759a427fbcf319bd09aeb6c09185a7d4e0f357271e4d

There is the detection : Generic ML PUA (PUA) <------- Its Malware and also a locker software

Quote from: Mitchell on January 10, 2022, 09:45:43 AM

They are back. Over 40 members have been nuked already.

Thanks Mitchell to let me or us know about and will looking more again about some Links , maybe its possible you can write me the links or what kind or Github they using.
Would be good so i cn report them also on Github and write the links down for the records.

Quote from: Myleschetty on January 10, 2022, 12:11:09 PM

Just want to suggest the Mod to auto-ban every account that posts this thread. Although the previous thread is nuked but the group or person posting it keeps going and it may do some damage to the newbies.

Thank you for keeping your eyes open and reporting this kind of threads ,
but you should be next time posting about this here in the Spambuster thread [CLUB] The SpamBusters! Busting rule-breakers constantly.
As it looks like spam and not a Malware or Suspicious Link.

Lafu can you please stop posting on new threads stating everything is a virus? You clearly don't know how botnets work, for instance latest is just built in miner and this poor user got banned for your selfishness. God bless bitcointalk.

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: qwertyup23 on January 10, 2022, 12:30:49 PM

Malware from Github link and Fake Wallet

Thread: [ANN] ePT - Escudo Digital Português - Mainnet Live <---- DELETE

Profile Link: e_PT
----> BRAND NEW:January 11, 2022

Archive: https://archive.fo/db7v3

Code:

https://github.com/ptdotps2/ePT/releases/tag/v0.0.1

Nice catch qwertyup23 , and yes it has some Malware in the download from the github !

Virustotal : https://www.virustotal.com/gui/file/7bd53a779f29e900edcf759a427fbcf319bd09aeb6c09185a7d4e0f357271e4d

There is the detection : Generic ML PUA (PUA) <------- Its Malware and also a locker software

Quote from: Mitchell on January 10, 2022, 09:45:43 AM

They are back. Over 40 members have been nuked already.

Thanks Mitchell to let me or us know about and will looking more again about some Links , maybe its possible you can write me the links or what kind or Github they using.
Would be good so i cn report them also on Github and write the links down for the records.

Quote from: Myleschetty on January 10, 2022, 12:11:09 PM

Just want to suggest the Mod to auto-ban every account that posts this thread. Although the previous thread is nuked but the group or person posting it keeps going and it may do some damage to the newbies.

Thank you for keeping your eyes open and reporting this kind of threads ,
but you should be next time posting about this here in the Spambuster thread [CLUB] The SpamBusters! Busting rule-breakers constantly.
As it looks like spam and not a Malware or Suspicious Link.

qwertyup23

hero member

Activity: 2268

Merit: 789

Malware from Github link and Fake Wallet

Thread: [ANN] ePT - Escudo Digital Português - Mainnet Live <---- DELETE

Profile Link: e_PT
----> BRAND NEW:January 11, 2022

Archive: https://archive.fo/db7v3

Code:

https://github.com/ptdotps2/ePT/releases/tag/v0.0.1

Myleschetty

member

Activity: 1165

Merit: 78

Just want to suggest the Mod to auto-ban every account that posts this thread. Although the previous thread is nuked but the group or person posting it keeps going and it may do some damage to the newbies.

Mitchell

copper member

Activity: 3948

Merit: 2201

Verified awesomeness ✔

They are back. Over 40 members have been nuked already.

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: Mitchell on December 28, 2021, 05:29:48 PM

The last few accounts my bot nuked were from December 19, so it's just been quiet.

Thanks for the very fast answer

Hopefully it will keep this way now for some longer time and that they really wasted all there hacked Accounts that they got.
But i guess its just a matter of time if they coming back and posting there shit fake links again , or maybe they changed there style and links.
I will for sure have an eye on that and looking around every day in the mining board , lets hope they have given up .

Mitchell

copper member

Activity: 3948

Merit: 2201

Verified awesomeness ✔

Quote from: Lafu on December 28, 2021, 05:28:41 PM

[...]
Maybe a Global Mod or Moderator can answer this question or Mitchell at least .
[...]

The last few accounts my bot nuked were from December 19, so it's just been quiet.

Lafu

legendary

Activity: 3136

Merit: 3213

Is it really that quiet right now with the Fake Malware links and posts and threads or did i missed something ?
Are they still posting the fake links somewhere else here on the Forum as i noticed or havnt seen any posts for a week now .
Maybe a Global Mod or Moderator can answer this question or Mitchell at least .
I mean im very cool with that if there wasnt a single post since a week and maybe they wasted all there accounts witht here last wave.

Lafu

legendary

Activity: 3136

Merit: 3213

And we got a new Fake Github Account for the LHR-Pill again !

Fake Github Account : github.com/LHR-Pill-Unlock <----- Please report all kind posts with that Link and if possible also on Github
Fake Github was created 2 days ago

Account : Sahsibit <----- Please ban and lock that Account and delete the thread
Last post from that Account was in August 20, 2019 , Hacked or sold Account

Archived Thread : https://archive.fo/9y2Wu

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//github.com/LHR-Pill-Unlock/LHR-Pill/releases/download/LHR/LHR-RESULT.zip

This post is also a reference for the Github Report !

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: Toughit on December 13, 2021, 11:47:21 AM

Question: Is it worth reporting these to the moderator?

For sure is it worth to report them to the Moderators if you some kind of posts with Fake Github or other links that have Malware inside!
Sometimes they using Mega download Links also , if want to write in here , quote the post but with an edit on the Link that you cant click it !

They have a new Fake Download Link now with a MEGA download link for the LHR-PILL !

Fake download Link : https:_//mega.nz/file/NlcFBYCS#WCj5OpRe8ppa__WquZYzW9kdYlZi-iB6s5hsYP82WFc <----- Please report all kind posts with that Link if possible

Account : Ibrahimkill <----- Account is already banned and locked and the post deleted
The Account is from November 29, 2017, Hacked or sold Account

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//mega.nz/file/NlcFBYCS#WCj5OpRe8ppa__WquZYzW9kdYlZi-iB6s5hsYP82WFc

Source : The mega download link

Toughit

full member

Activity: 378

Merit: 197

Lafu,

I posted this in the Altcoin mining subform, and was referred here -- does it help to report these posts via the report to moderator, or is it too much data for the mods?

https://bitcointalksearch.org/topic/malware-war-in-altcoin-mining-subforum-5376696

--------------------------------------------------------------------------------------------------------

I spent the last hour or so in the Altcoin Mining subforum reading new posts (procrastinating), and ran into "LHR" malware posts.

In the span of about 1 hour I reported 28 cases (28 posts in the hour were LHR malware).

I never realized it was so bad!

During that time period there were just 4 VALID posts related to mining.

4 good, 28 malware.

They must be successful (making money) as it must take time to create these ID's

Question: Is it worth reporting these to the moderator?

Lafu

legendary

Activity: 3136

Merit: 3213

There are now 3 diffrent Versions of the Fake Github accounts for the LHR-Pill !

Fake Github Account : github.com/LHR-utility <----- Please report all kind posts with that Link and if possible also on Github
Fake Github Account : github.com/LHR-Build <----- Please report all kind posts with that Link and if possible also on Github
Fake Github Account : github.com/LHRProject <----- Please report all kind posts with that Link and if possible also on Github
I already reported 2 of them on Github but looks like the weekend nobody is working on the support Cheesy

Account : goygoo <----- Please ban or lock that Account if you havnt already
The Account is from March 08, 2014, Hacked or sold Account

The newest one this one , created 13 hours ago
Fake Github Account : github.com/LHR-utility

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//github.com/LHR-utility/LHR-pill/releases/download/1.1.0/LHR-pill.zip

This post is also a reference for the Github Report !

Lafu

legendary

Activity: 3136

Merit: 3213

We have some new Fake Github Accounts with Malware download links for PhoenixMiner and LHR-Pill !

Fake Github Account : github.com/Phoenix-product <----- Please report all kind posts with that Link and if possible also on Github
Real download link for PhoenixMiner : https://phoenixminer.info/downloads/

Account : kesty92 <----- Please ban or lock that Account if you havnt already
Last post from that User was in April 06, 2018, Hacked or sold Account

Quote from: ?? on ??

The new beta version is ready. It is mostly a bugfix release, the more significant upgrades are coming next month. You can download PhoenixMiner 6.0a from here:

url=https:_//github.com/Phoenix-product/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_6.0a_Windows.zip]PhoenixMiner_6.0a_Windows.zip[/url]
url=https:_//github.com/Phoenix-product/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_6.0a_Linux.tar.gz]PhoenixMiner_6.0a_Linux.tar.gz[/url]

Fake Github Account LHR-Pill

Fake Github Account : github.com/LHRProject <----- Please report all kind posts with that Link and if possible also on Github

Account : jupiterdianysa <----- Please ban or lock that Account if you havnt already
Last Post was in March 16, 2021, Hacked or sold Account

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//github.com/LHRProject/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip

This Post is also referenc for the Github Report !

willi9974

legendary

Activity: 3500

Merit: 2792

Escrow Service

Scam / Virus alert
Very Strange topic and the User spams in many topics

https://bitcointalksearch.org/topic/--5376409
https://bitcointalksearch.org/user/stanks-953957

https://_github.com/LHRProject/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Now unlock up to 100% of the Ethereum mining performance of Nvidia’s Lite Hash Rate (LHR) series

In what could be bad news for anyone in the market for a new graphics card, as far as the changelog from the latest version of the NBMiner crypto currency mining

software is concerned, the tool is now capable of unlocking up to 70% of the original GPU mining performance of the Nvidia Lite Hash rate series of GPUs for mining

Ethereum

But our software will completely solve this problem. It is by far the best solution to the problem of LHR GPU's. The software does not lower and increases power

consumption every second. therefore it is safe for your graphics cards. Work with Win7, Win10 (Not HiveOs,RaveOS and etc)

Download:
https://_github.com/LHRProject/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip
How to use:

Run LHR-pill.exe
Wait when software detected yours GPU's
When you see message "worked" you can minimize window and start your miner

Support miners:
NBminer
PhoenixMiner
Gminer
Trex

Results on 3060 LHR:

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: willi9974 on December 10, 2021, 05:10:40 AM

Send you 10 Merits for your Support our Community here. Respect you!

Thanks willi9974 , but as you have written already i am doing that for the Community and specialy for the new Users that they dont fall into this trap,
and also for the other Users here on Forum as you know that it can be going fast to click and download the wrong files for Miner software.
There are many other Users that reporting that kind of links and hacked Accounts too even they dont write in here .
And there is some progress behind the scenes going on .

willi9974

legendary

Activity: 3500

Merit: 2792

Escrow Service

Send you 10 Merits for your Support our Community here. Respect you!

Lafu

legendary

Activity: 3136

Merit: 3213

And we have the Next Fake Github Account with the Fake LHR-Pill !

Fake Github Account was created 21 hours ago
Fake Github Account : github.com/LHR-Build <----- Please report all kind posts with that Link and if possible also on Github
And i guess we will see soon another Fake Github Account for the Phoenixminer thread

Account : jungbluth <----- Please ban and lock that Account and delete the thread
The Account is from January 07, 2019 without any posts, so its Hacked or sold

Archived Thread : https://archive.fo/c38J3

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https:_//github.com/LHR-Build/LHR-Pill/releases/download/LHR-Pill/LHR-Pill.zip

This Post is also a reference for the Github Report !

Lafu

legendary

Activity: 3136

Merit: 3213

There is a New Fake Github Account for the Phoenixminer posted and its already deleted on Gthub !

Fake Github Account : github.com/PhoenixCore-Official <----- Please report all kind posts with that Link and if possible also on Github

Account : Yaman303 <----- Please ban or lock that Account if you havnt already
The Account last post was done in August 30, 2018, Hacked or sold Account !

Account : Yaratiko <----- Please ban or lock that Account if you havnt already
Also this Account is from November 19, 2017, Hacked or sold Account

The last 2 weeks there are a lot of Accounts from 2017 and 2018 that posted the fake github links .

Quote from: ?? on ??

The new beta version is ready. It is mostly a bugfix release, the more significant upgrades are coming next month. You can download PhoenixMiner 6.0a from here:

url=https:_//github.com/PhoenixCore-Official/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_6.0a_Windows.zip]PhoenixMiner_6.0a_Windows.zip[/url]
url=https:_//github.com/PhoenixCore-Official/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_6.0a_Linux.tar.gz]PhoenixMiner_6.0a_Linux.tar.gz[/url]

Whoever reported the fake Github account, thank you for the report!
I guess we will see soon the next one .

Lafu

legendary

Activity: 3136

Merit: 3213

The old Fake Github Account gots deleted today and there is a new Fake Github Account already now !

The Fake Github Account was created 2 Hours ago
Fake Github Account : github.com/PhoenixOfficialTeam <----- Please report all kind posts with that Link and if possible also on Github
Real download link for PhoenixMiner : https://phoenixminer.info/downloads/

Account : Sanan tonongwa <----- Please ban or lock that Account if you havnt already
Account is from June 26, 2017, Hacked or sold Account
Account : Loveystor12 <----- Please ban or lock that Account if you havnt already
Account is from October 15, 2018, Hacked or sold Account

Archived post : https://archive.fo/kpoqN

Quote from: ?? on ??

The new beta version is ready. It is mostly a bugfix release, the more significant upgrades are coming next month. You can download PhoenixMiner 6.0a from here:

url=https:_//github.com/PhoenixOfficialTeam/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_6.0a_Windows.zip]PhoenixMiner_6.0a_Windows.zip[/url]
url=https:_//github.com/PhoenixOfficialTeam/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_6.0a_Linux.tar.gz]PhoenixMiner_6.0a_Linux.tar.gz[/url]

Still active LHR-Pill Fake Github Accounts :
github.com/LHR-Pill-utility
github.com/LHR-Pill-Official

This post is also a reference for the Github Report !

Edit and Update :
All 3 Fake Github Accounts are now deleted on Github !

Lafu

legendary

Activity: 3136

Merit: 3213

Guess we have new Fake Website with a Malware download for Miner Software !

Quote from: ?? on ??

https_://minerdownload.brizy.site/

On the Website is a download link that points to :

Code:

https://filedriving.com/Minerdownload

Virustotal : https://www.virustotal.com/gui/url/563158caec6eac8d172895f7d13a9c7d0fd65336e05fd7cb3700ecaec84ae698?nocache=1
The download link is marked as Phishing and malicious

The User posted in the last days a few diffrent miner Software Threads with always the same website !
On this website is only 1 download and nothing elese !

Threads he posted :

APMinerTool: Download and How to Use!
https://ninjastic.space/post/58616829

AMD Memory Tweak v0.2.3: Download and Apply Timings
https://ninjastic.space/post/58616688

GMiner v2.73: Download and configure - Quick start - Features
https://ninjastic.space/post/58612679

Account : sirdikk <----- Please ban or lock that Account
He also has done some plagiarism copy and paste i reported here : https://bitcointalksearch.org/topic/m.58612969
And he is still not banned !

Topic: Report Malware and Suspicious Links here so Mods can take Action ! - page 18. (Read 36686 times)