Report Malware and Suspicious Links here so Mods can take Action ! - page 18.

Lafu

legendary

Activity: 2996

Merit: 3114

And there is the next Fake Github Account for PhoenixMiner download !

Fake github : github.com/Phoenix-maincore <----- Please report all kind posts with that Link and if possible also on Github
Created 9 hours ago
Real download link for PhoenixMiner : https://phoenixminer.info/downloads/

Account : Harry5555 <----- Please ban and lock that Account and delete the post
This user recently woke up from a long period of inactivity.
Last post from that Account was in February 07, 2018 , Hacked or sold Account

Archived post : https://archive.fo/Rl7FP

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenix-maincore/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenix-maincore/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

This Post is also a reference for the Github report

Edit and Update :
Github Account is now deleted

Lafu

legendary

Activity: 2996

Merit: 3114

And there is a new Fake Github Account for PhoenixMiner !

Fake Github Account : github.com/PhoenixMiner-DevUser <----- Please report all kind posts with that Link and if possible also on Github
Real download link for PhoenixMiner : https://phoenixminer.info/downloads/

Account : lucashunter <----- Please ban and lock that Account and delete the post
Looks like hacked or sold as the last post was done in October 01, 2019

Archived Post : https://archive.fo/WT6nF

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/PhoenixMiner-DevUser/PhoenixMiner/releases/download/5.8a/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/PhoenixMiner-DevUser/PhoenixMiner/releases/download/5.8a/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

This post is also a reference for the Github report !

Edit:
Github is already deleted

Lafu

legendary

Activity: 2996

Merit: 3114

Next Fake Github Account for PhoenixMiner with malware is created !

Fake Github : github.com/PhoenixMiner-build <----- Please report all kind posts with that Link and if possible also on Github
Github was created an Hour ago
Original Download for phoenixminer : https://phoenixminer.info/downloads/

Account : Akash121 <----- Please ban and lock that Account and delete the post
Looks like this Account got hacked as the last post was on October 03, 2021

Archived post from that User : https://archive.fo/ZKtOz

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/PhoenixMiner-build/PhoenixMiner/releases/download/5.8a/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/PhoenixMiner-build/PhoenixMiner/releases/download/5.8a/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

This post is also a reference for the Github Report !
Report on Github is done.

Edit and Update :
Fake Github is deleted already

VRMdude

member

Activity: 106

Merit: 31

Quote from: Lafu on October 02, 2021, 03:05:16 AM

Next Fake Github for PhoenixMiner is created !

Fake Github : github.com/Phoenix-mine-core <----- Please report all kind posts with that Link and if possible also on Github
Original PhoenixMiner download is : https://phoenixminer.info/downloads/

Account : Sgsg666 <----- Please ban and lock that Account and delete the post
Last post was done in June 26, 2018 , Account got hacked or sold
This user recently woke up from a long period of inactivity.

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenix-mine-core/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenix-mine-core/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

This post is also reference for the Github report !

I noticed one of these earlier good info thanks

Lafu

legendary

Activity: 2996

Merit: 3114

Next Fake Github for PhoenixMiner is created !

Fake Github : github.com/Phoenix-mine-core <----- Please report all kind posts with that Link and if possible also on Github
Original PhoenixMiner download is : https://phoenixminer.info/downloads/

Account : Sgsg666 <----- Please ban and lock that Account and delete the post
Last post was done in June 26, 2018 , Account got hacked or sold
This user recently woke up from a long period of inactivity.

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenix-mine-core/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenix-mine-core/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

Edit :
Account : ohyeahhaha122 <----- Please ban and lock that Account and delete the post
Account got hacked or sold !

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenix-mine-core/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenix-mine-core/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

This post is also reference for the Github report !

Lafu

legendary

Activity: 2996

Merit: 3114

There is a new Fake Github again for the PhoenixMiner now !

Fake Github : github.com/Phoenixmin <----- Please report all kind posts with that Link and if possible also on Github
created 18 hours ago
Original download for PhoenixMiner : https://phoenixminer.info/downloads/

Account : Vgtus <----- Please ban and lock that Account and delete the post
Last post was done in September 13, 2018 , hacked or sold Account
This user recently woke up from a long period of inactivity.

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenixmin/PhoenixMiner/releases/download/5.8a/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenixmin/PhoenixMiner/releases/download/5.8a/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

This is also a reference for the Github report

Edit and update:
The github is already deleted

Lafu

legendary

Activity: 2996

Merit: 3114

Next fake Github Account with Malware download for trexminer !

New Fake Github : github.com/trexminer-TRex <----- Please report all kind posts with that Link and if possible also on Github
Original Github : github.com/trexminer/T-Rex/releases

Account : teazy <------ Please ban and lock that Account and delete the post
The Account got hacked or sold and posting normaly only in the France board.

Quote from: ?? on ??

T-Rex 0.23.3 beta
url=https_://github.com/trexminer-TRex/T-Rex/releases/download/T-Rex/t-rex-0.23.3-win.zip]t-rex-0.23.3-win.zip[/url] Github
url=https_://github.com/trexminer-TRex/T-Rex/releases/download/T-Rex/t-rex-0.23.3-linux.tar.gz]t-rex-0.23.3-linux.tar.gz[/url] Github

This post is a reference for the Github report !
Report is already done .

Next Fake Github for PhoenixMiner !

Fake Github : github.com/Phoenixmine <------ Github is deleted

Account : matthewoz101 <----- Please lock that Account and delete the post
Last post was done in February 04, 2020

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenixmine/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenixmine/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

Another Hacked or sold Account !

Account : pedjo99 <----- Please lock that Account and delete the post
Last post was in July 23, 2020

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenixmin/PhoenixMiner/releases/download/5.8a/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenixmin/PhoenixMiner/releases/download/5.8a/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

Lafu

legendary

Activity: 2996

Merit: 3114

And there is a new Fake Github again for the PhoenixMiner !

Fake Github : github.com/Phoenix-mine/ <------ Please report all kind of posts with that Link and also on Github

Looks like another hacked Account is posting it
Account : Knathein <----- Please ban and lock that account and delete the post
Last post was done on June 26, 2021 , hacked or sold account

Archived Post : https://archive.fo/wRfge

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenix-mine/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenix-mine/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

Please let us know if you have any problems or questions related to PhoenixMiner 5.8a

Another Account that got hacked or sold!

Account : userghost <----- Please ban and lock that account and delete the post

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Phoenix-mine/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Phoenix-mine/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github

And there are new and other Fake Github Accounts now too

Fake Github : github.com/trexminer-corp
Original Github :github.com/trexminer

Quote from: ?? on ??

T-Rex 0.23.3 beta
url=https_://github.com/trexminer-corp/T-Rex/releases/download/T-Rex/t-rex-0.23.3-win.zip]t-rex-0.23.3-win.zip[/url] Github
url=https_://github.com/trexminer-corp/T-Rex/releases/download/T-Rex/t-rex-0.23.3-linux.tar.gz]t-rex-0.23.3-linux.tar.gz[/url] Github

Fake Github : github.com/Ethpill-corp/

Quote from: ?? on ??

Glad to see you new crypto software LHR-pill .
Download:
https_://github.com/Ethpill-corp/ethpill/releases/download/ETH/LHR-Pill.zip

Virustotal : https://www.virustotal.com/gui/file/dda4e70bdc23e63483cc3f8d491367f914ea91041fad48d51d09befa2edfdba2
its the same files as for the others we got

This is also a reference for my Github report.
Report on Github is already done !

Edit and Update :
All Github Accounts are banned and deleted now on Github

Lafu

legendary

Activity: 2996

Merit: 3114

There is now again a new Fake Github for the PhoenixMiner thread and download !

Fake Github : github.com/Poenix-build/ <------ Please report all kind of posts with that Link and also on Github
I already reported it on Github

Account E-commerce Token looks like hacked or sold <---- Please ban and lock that Account
Last post was done in December 06, 2017
This user recently woke up from a long period of inactivity.

Quote from: ?? on ??

The new version is finally ready. You can download PhoenixMiner 5.8a from here:

url=https_://github.com/Poenix-build/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Windows.zip]PhoenixMiner_5.8a_Windows.zip[/url] Github
url=https_://github.com/Poenix-build/PhoenixMiner/releases/download/PhoenixMiner/PhoenixMiner_5.8a_Linux.tar.gz]PhoenixMiner_5.8a_Linux.tar.gz[/url] Github
Changes in version 5.8a :

Edit and Update :
The Fake Github Account is deleted and banned on Github now

Lafu

legendary

Activity: 2996

Merit: 3114

Quote from: JayDDee on September 25, 2021, 11:54:48 AM

Is this now an automated process or is manual reporting still required for known repeat scams?

The reporting Bot from Mitchell is catching them all and then they get deleted.
Mostly the bot is to fast for reporting as he catches the posts and threads from Keywords when they get posted.
I tried it a few times with the LHR Threads but its impossible do get them reported.
If they change there Github and starting posting again you can report them.

Xal0lex

staff

Activity: 2436

Merit: 2347

Quote from: JayDDee on September 25, 2021, 11:54:48 AM

I can't seem to report LHR pill fast enough. Twice in the last 2 days I've seen it within a minute of
being posted but by the time I click the submit button it's already gone.

Is this now an automated process or is manual reporting still required for known repeat scams?

Some posts, in particular the one you mentioned, may be processed automatically. But you can still send the report to the moderators, if you have time to do it before the message is deleted.

JayDDee

full member

Activity: 1386

Merit: 220

I can't seem to report LHR pill fast enough. Twice in the last 2 days I've seen it within a minute of
being posted but by the time I click the submit button it's already gone.

Is this now an automated process or is manual reporting still required for known repeat scams?

Lafu

legendary

Activity: 2996

Merit: 3114

The ETH and LHR Pill posts and threads have a new Github thats 11 Hours old already !

Fake Github Account

Code:

https://github.com/Ethpill/eth/releases/tag/eth

Its the same file in there as on the others with Malware !
Virustotal : https://www.virustotal.com/gui/file/dda4e70bdc23e63483cc3f8d491367f914ea91041fad48d51d09befa2edfdba2
Same Trojan and Virus : GenericRXAA-AA!47CE6E097BA2

This post is a reference for the report on Github also !
Report on Github is done.

Edit and Update :
Github Account is banned and deleted

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: Rizzrack on September 23, 2021, 11:56:11 AM

how are new users getting infected/hacked ?

I'm hoping you can get the answer to that question

It indeed doesn't make sense to use a hacked account only for one easily detected malware post, while it could have stayed under the radar for a while to carry out other scams.

Quote from: Lafu on September 23, 2021, 12:26:36 PM

tell him he should write in here when his Account is recovered and i will remove my Feedback on the Account .

I sent him the link to this topic already. If you ask me though: I think you can remove the feedback already. The post is gone, the account is locked, and only the real owner will get it back.

Lafu

legendary

Activity: 2996

Merit: 3114

Quote from: bL4nkcode on September 23, 2021, 12:09:14 PM

Quote from: LoyceV on September 23, 2021, 11:08:19 AM

Quote from: Rizzrack on September 23, 2021, 10:51:27 AM

The account is locked so nobody can even login.

Was it locked by a Mod after the spam? It's not banned, so it doesn't show in modlog. The email address or password haven't been changed either, so as a user I can't see this lock anywhere.

This is the screenshot LM shared btw, so it's a ban and account was locked.

Removed the Image for privacy

Quote from: LoyceV on September 23, 2021, 11:08:19 AM

The email address or password haven't been changed either, so as a user I can't see this lock anywhere.

Yeah, seems the hacker knows the way of forum account's security that it will be locked soon (by the owner) if he somehow change the password/email.

I reported the LogitechMouse Account instant when i have seen his post in the PhoenixMiner thread as i know that User,
and i already knowen after i readed the post that it was hacked .
bL4nkcode or LoyceV when you write with him , tell him he should write in here when his Account is recovered and i will remove my Feedback on the Account .
The most Accounts that got banned and reported was newbies .

bL4nkcode

copper member

Activity: 2142

Merit: 1305

Limited in number. Limitless in potential.

Quote from: LoyceV on September 23, 2021, 11:08:19 AM

Quote from: Rizzrack on September 23, 2021, 10:51:27 AM

The account is locked so nobody can even login.

Was it locked by a Mod after the spam? It's not banned, so it doesn't show in modlog. The email address or password haven't been changed either, so as a user I can't see this lock anywhere.

This is the screenshot LM shared btw, so it's a ban and account was locked.

Quote from: LoyceV on September 23, 2021, 11:08:19 AM

The email address or password haven't been changed either, so as a user I can't see this lock anywhere.

Yeah, seems the hacker knows the way of forum account's security that it will be locked soon (by the owner) if he somehow change the password/email.

Rizzrack

copper member

Activity: 764

Merit: 700

Defend Bitcoin and its PoW: bitcoincleanup.com

Quote from: LoyceV on September 23, 2021, 11:08:19 AM

...so as a user I can't see this lock anywhere.

No you cannot

Quote from: LoyceV on September 23, 2021, 11:08:19 AM

That makes more sense than a regular user suddenly joining a long-term spammer scam.

LOL

Quote from: LoyceV on September 23, 2021, 11:08:19 AM

I assume MindlessElectron still bans them, right? That explains why they need more senior accounts for their spam.

It is whooping their asses 24/7 indeed.
Older accounts I can understand with the database leak(s) and all, but how are new users getting infected/hacked ? Provided they don't download the malware-PILLs or something similar...

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: bL4nkcode on September 23, 2021, 08:28:33 AM

Currently the account was banned and it should be lift somehow.

I received an email from someone asking to whitelist his alt, which I did now.

Quote from: Rizzrack on September 23, 2021, 10:51:27 AM

The account is locked so nobody can even login.

Was it locked by a Mod after the spam? It's not banned, so it doesn't show in modlog. The email address or password haven't been changed either, so as a user I can't see this lock anywhere.

Quote

It does look like his account was hacked.

That makes more sense than a regular user suddenly joining a long-term spammer scam.

Quote

Tell him to send an email and we'll look into it.

I told him that

Quote

There were over 400 of these posts in the Phoenix Miner thread in the last 3 days so yeah...

I assume MindlessElectron still bans them, right? That explains why they need more senior accounts for their spam.

Rizzrack

copper member

Activity: 764

Merit: 700

Defend Bitcoin and its PoW: bitcoincleanup.com

Quote from: bL4nkcode on September 23, 2021, 08:28:33 AM

I get in touch with the owner of this account in telegram, he said it wasn't him which is probably true. I didn't see this guy interact on that thread and then suddenly the account posted like he owns the thread or somewhat related to the team/devs of phoenix miner, and regarding the previous reports this is a desperate attacks of the scammer/hackers to phoenix miner.

Currently the account was banned and it should be lift somehow.

The account is locked so nobody can even login. It does look like his account was hacked. Tell him to send an email and we'll look into it.

There were over 400 of these posts in the Phoenix Miner thread in the last 3 days so yeah...

bL4nkcode

copper member

Activity: 2142

Merit: 1305

Limited in number. Limitless in potential.

Quote from: Lafu on September 22, 2021, 10:08:35 PM

And they have already a new Github again for the Fake PhoenixMiner download links !
Fake Github Account : github.com/PhoeixMiner-TeamDev <----- Please report that account on Github again that it gets deleted !

And looks like a Account got hacked @Rizzrack
Account : LogitechMouse <----- Please lock that Account and delete the post
[...]

I get in touch with the owner of this account in telegram, he said it wasn't him which is probably true. I didn't see this guy interact on that thread and then suddenly the account posted like he owns the thread or somewhat related to the team/devs of phoenix miner, and regarding the previous reports this is a desperate attacks of the scammer/hackers to phoenix miner.

Currently the account was banned and it should be lift somehow.

Topic: Report Malware and Suspicious Links here so Mods can take Action ! - page 18. (Read 34320 times)