Report Malware and Suspicious Links here so Mods can take Action ! - page 24.

qwertyup23

hero member

Activity: 2268

Merit: 789

1. Malware from Github link and Fake Wallet

Thread: ANN - PrivatePay [XPP] <---- DELETE

Profile Link: Yoko19v
----> BRAND NEW: Last post March 12, 2021

Archive: https://archive.fo/0k5V8

Virus Total Link/s:

https://www.virustotal.com/gui/file/bb51e233e3070cdd89159ef6c14c07737d9eb97b491517172b79da33dd42acfa/detection

Code:

https://github.com/PrivatePay-Reborn/PrivatePay/releases/download/v1.0/privatepay-win64.zip

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: PhoenixMiner on May 12, 2021, 01:43:27 AM

Probably compromised account, posting suspicious links in PhoenixMiner thread, pretending to be an official release of the miner.

Quote

The new beta version is finally ready. You can download PhoenixMiner 5.6d from here:

Code:

[url=http_://PhoenixMiner_5.6d_Windows.zip]PhoenixMiner_5.6d_Windows.zip[/url] (GitHub) [i]link removed[/i]
[url=http_://PhoenixMiner_5.6d_Linux.tar.gz]PhoenixMiner_5.6d_Linux.tar.gz[/url] (GitHub) [i]link removed[/i]

Looks like that the bot from mitchell already catching this kind of posts and links on your thread and from the forum!
As i have seen a few there and was on the way to report it to the moderators but the most got deleted instant.
Reported a few of them , thanks for let us know about the new links and post .

PhoenixMiner

full member

Activity: 357

Merit: 101

Probably compromised account, posting suspicious links in PhoenixMiner thread, pretending to be an official release of the miner.

User : stef_stef

Post : https://bitcointalksearch.org/topic/phoenixminer-62c-fastest-ethereumethash-miner-with-lowest-devfee-winlinux-2647654

Last post from this User was in June 25, 2019
The Github that is used for the links is created today (May 12, 2021)

Quote

The new beta version is finally ready. You can download PhoenixMiner 5.6d from here:

PhoenixMiner_5.6d_Windows.zip (GitHub) link removed
PhoenixMiner_5.6d_Linux.tar.gz (GitHub) link removed

The new features in this release are:

The problem with the missing GPU temperatures on Nvidia GPUs is fixed
Added native kernels for AMD RX6700 GPUs. These are faster than the generic kernels and produce a lot less stale shares
Increase the max supported DAG epoch to 550 (should be enough to about Jan 2023)
Full support for setting clocks, fan speeds, voltages, and memory timings of AMD RX6900/6800/6700 cards
The specific hashrate is now shown in the form of kilo hashes per joule (kH/J). Example: if a GPU has hashrate of 30 MH/s with 100W power usage, the specific hashrate is 300 kH/J
Added new command-line parameters -ttj and -ttmem, allowing automatic fan speed control based on GPU hotspot (junction), and memory temperatures respectively. Example: -ttmem 83 will keep the GPU memory temperature at or bellow 83C by increasing the fan speed as necessary. These parameters can be combined with -tt, as well as with each other. These options are supported only on AMD GPUs that report junction and memory temperatures
Added new command-line parameters -tmaxj and -tmaxmem, allowing to decrease the GPU usage when the GPU hotspot (junction), or GPU memory temperatures are above the specified thresholds. These options are supported only on AMD GPUs that report junction and memory temperatures
Added support for AMD Windows drivers 21.3.2, and 21.3.1
Added support for AMD Linux drivers 20.50.x. Use this drivers only if you have Polaris or older GPUs, or the latest RX6x000 GPUs. WARNING: Vega, Radeon VII, and Navi GPUs won't work with these drivers!
Turn off the zero fan feature on AMD cards whenever a fixed fan speed is used (e.g. -tt -40), or when an auto fan with min fan speed is used (e.g. -tt 63 -minfan 35). To disable this feature, add -fanstop 1 command-line parameter
When -mcdag 1 is specified under Linux, the miner will not wait for the daggen.sh script to finish before starting to generate the DAGs. Instead it will for a fixed 7 seconds. This allows you to do all the following in the daggen.sh: turn off the overclocking of Nvidia GPUs, sleep for 30-60 seconds to allow time for DAG generation, and then re-apply the overclocking of the Nvidia GPUs
Other small improvements and fixes

The support for -ttj, -ttmem, -tmaxj, and -tmaxmem for Nvidia 3090 and 3080 GPUs is not yet ready for release. We hope to have it ready for the final 5.6 release.

For more robust integrity check, you can use our GPG public key, which was verifyed with ETH transaction from our main devfee account as explained here: https://bitcointalksearch.org/topic/m.56755869.

Please let us know if you have any problems or questions related to PhoenixMiner 5.6d.

qwertyup23

hero member

Activity: 2268

Merit: 789

1. Malware from Github link and Fake Wallet

Thread: [ANN] COINBE - POW/POS - Anonymous, Secure, Independent <---- DELETE

Profile Link: bemoney
----> BRAND NEW: Last post May 10, 2021

Archive: https://archive.fo/vOz1d

Virus Total Link/s:

Code:

https://github.com/coin-be/core/releases/download/1.0/coinbe-qt-linux.tar.gz

Code:

https://github.com/coin-be/core/releases/download/1.0/coinbe-qt-windows.zip

Lafu

legendary

Activity: 3136

Merit: 3213

Next Fake ANN !

Thread : [ANN] [LCNT] LUCENT POW/HYBRID MASTERNODE/DARKSEND

User : yetiripper <----- Please ban or lock that Account

This user recently woke up from a long period of inactivity.
Last post from this User was in August 22, 2018, possible Hacked or sold Account
Github Account was just an Hour ago created

Archive : https://web.archive.org/web/20210510122808/https://bitcointalksearch.org/topic/ann-lcnt-lucent-powhybrid-masternodedarksend-5336472

Virustotal : https://www.virustotal.com/gui/file/73fbc45552927c7a7ec5d93896917040d3d8075a5ae6e63e0a1d2b7cee4824c2/detection

Code:

Windows: [URL=https://github.com/LCNT-coin/Lucent/raw/main/lucent-qt-windows64.zip] https://github.com/LucentCoin/Lucent/releases/download/v0.13.0.1/lucent-qt-windows64.zip[/URL]

Fake Github : https_://github.com/LCNT-coin/Lucent/raw/main/lucent-qt-windows64.zip

Real Github : https_://github.com/LucentCoin/Lucent/releases

Original ANN

Thread : [ANN] HYBRID MASTERNODE/POW/DARKSEND LUCENT [LCNT]

User : OfficialLCNT

Code:

https://github.com/LucentCoin/Lucent/releases

Lafu

legendary

Activity: 3136

Merit: 3213

For sure the Account got sold or hacked as the last post was done in January 29, 2020 from this Account !
Also the Exchange that he is writing in there Ann are at the moment in maintenance as they got hacked a few days ago.
The Github Account was created 17 hours ago , nice found buddy and will try to report the Github Account.

morvillz7z

legendary

Activity: 2212

Merit: 2061

Join the world-leading crypto sportsbook NOW!

Please ban/lock user XperiaZ4 and delete their fake announcement thread: [ANN] SharkCoin (SKN) POS + MASTERNODE

It's worth noting that the GitHub account they're using is named Chia-Netvvork, and it has two repositories, one for SharkCoin and one for Chia (empty). I believe they will use the same GitHub tomorrow or in the coming days, as Chia holders will be able to spend/sell their coins beginning May 3rd. So everyone, be on the lookout for more fake Chia threads...

Original SharkCoin thread and GitHub:
https://bitcointalksearch.org/topic/ann-sharkcoin-skn-pos-masternode-5253754
https_://github.com/sharkcoin32/Sharkcoin

Fake SharkCoin thread and GitHub:
https://bitcointalksearch.org/topic/ann-sharkcoin-skn-pos-masternode-5334702
https_://github.com/Chia-Netvvork (created less than a day ago)
https://archive.fo/PVxI0

Code:

WALLETS:
Win64: https_://github.com/Chia-Netvvork/SharkCoin/raw/main/sharkcoin-3.4-win64.rar

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: qwertyup23 on April 29, 2021, 09:45:43 AM

1. Malware from Github link and Fake Wallet

Thread: 🔥[ANN]🔥[BTO]💰BITOCOIN⚡️CPU mining⚡️FREE AND MINABLE🔥🚀🔥🚀🔥🚀 <---- DELETE

Profile Link: Bitosim
----> BRAND NEW: Last post April 07, 2021
Archive: https://archive.fo/asOKb

Nice found !
And i also have looked on the Whitepaper there and there is nothing special written in there !
They used a few Lines in there from diffrent papers like from LiteCoin and others .
And at the moment the Website dosnt work , cant get there !

qwertyup23

hero member

Activity: 2268

Merit: 789

1. Malware from Github link and Fake Wallet

Thread: 🔥[ANN]🔥[BTO]💰BITOCOIN⚡️CPU mining⚡️FREE AND MINABLE🔥🚀🔥🚀🔥🚀 <---- DELETE

Profile Link: Bitosim
----> BRAND NEW: Last post April 07, 2021

Archive: https://archive.fo/asOKb

Virus Total Link/s:

https://www.virustotal.com/gui/file/deda6fe8bbe1c2a4f7630cac8793e39433fbf4760f9fcf23a85a7cf20a8fe52d/detection

Code:

https://github.com/redstone5561/Bitocoin/raw/main/bitocoin-qt%201.exe

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: morvillz7z on April 26, 2021, 04:49:18 PM

~~~~~

Nice found buddy !
Hope that this is not the next wave starting with shitloads of new Fake Announcement Threads again.
But it can be as it was a long time quiet now from them , maybe the collected in this time new Accounts and starting again.
Will be more have an eye out there for sure now .

morvillz7z

legendary

Activity: 2212

Merit: 2061

Join the world-leading crypto sportsbook NOW!

Please ban/nuke newbie CohenB and delete their fake announcement thread: [ANN] Chia Network - Official Thread
Chia Network does not have an official thread here on bitcointalk, the one started by CohenB contains links to fake Github account and mega . nz files!

You can find and cross-check Chia Network downloads either on their website or on their official Twitter account:
https://chia.net/
https://twitter.com/chia_project

Original Chia Network thread and GitHub:
https://chia.net/
https://github.com/Chia-Network

Fake Chia Network thread and GitHub:
https://bitcointalksearch.org/topic/ann-chia-network-official-thread-5333119
https_://github.com/Chla-Network (404 error, it's either being deleted by mods or does not exist)
https://archive.fo/3ULTI

Code:

https://github.com/Chla-Network
https://mega.nz/file/pxg3mKzY#YbwuEb0gAbuwWcJlrHWgoSSRY6zJNCUukdjALkfkacA

Miscellaneous:

CohenB got 105 merits from three separate accounts that i suspect are compromised, they have either recently awoken or haven't posted in years. 100 merits have been sent to the following post:

archive: https://loyce.club/archive/posts/5686/56860793.html

Quote from: CohenB Sat Apr 24 20:43:07 CEST 2021

nice

jobsbuell - https://bitcointalksearch.org/user/jobsbuell-863226
majestymage - https://bitcointalksearch.org/user/majestymage-533079
Erickvand - https://bitcointalksearch.org/user/erickvand-966944

qwertyup23

hero member

Activity: 2268

Merit: 789

1. Malware from Github link and Fake Wallet

Thread: [ANN] 🚀🚀 WallStreetBets Coin 🚀🚀 **JUST RELEASED!!** 🤑 Join WallStreetBets! <---- DELETE

Profile Link: wallstreetbetscoin
----> BRAND NEW: Last post January 31, 2021

Archive: https://archive.fo/J80v1

Virus Total Link/s:

https://www.virustotal.com/gui/file/4057b7248e23ab6d6d6233fa891737150d0bcac20d28ad328977eba0c12699ad/detection

Code:

https://github.com/wsbc-coin/wallstreetbets/releases/download/v0.7.1.1/windows-release-v0.7.1.1.zip

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: SiNeReiNZzz on March 19, 2021, 04:02:04 PM

I have removed the negative rating in your profile.
Thank you for your comprehensible statement on this.

Of course, I do not want to accuse anyone unjustly... Wink

Maybe take a deeper look next time into all and the case before you give instant an negative Feedback as the Miner was used already for month for many Users.
And they dont got realy anything to do with the Malware Link postings they got in there Thread.
But im glad that they moved now all there things to github as you have a better looking over the things there and its easier to catch Fake Versions of them now.

SiNeReiNZzz

legendary

Activity: 1022

Merit: 1043

αLPʜα αɴd ΩMeGa

Quote from: PhoenixMiner on March 11, 2021, 10:17:34 PM

We greatly appreciate the efforts of the moderators in removing these links, and we are fully aware that it didn't start with us, and we are not that significant in the great scheme of things. Please take our sincere apologies about the situation - it wasn't our intention to start any dispute with NiceHash, or anybody else, and we hope this storm in a teacup will die down soon.

If there is anything we can do in order to help filter out the malicious links, please let us know.

I have removed the negative rating in your profile.
Thank you for your comprehensible statement on this.

Of course, I do not want to accuse anyone unjustly... Wink

lovesmayfamilis

legendary

Activity: 2072

Merit: 4265

✿♥‿♥✿

1. Malware and Fake Wallet

Thread: https://bitcointalksearch.org/topic/ann-vpc-voltpotcoin-first-virtual-battery-on-earth-5323461

Profile Link: ekkakon

[ archive ]

Virus Total Link/s:

https://www.virustotal.com/gui/file/e4c2dcb50c5e751fec7832eb5a45cfad53be6e9db15d05e77c84adfc517ea8aa/detection

PhoenixMiner

full member

Activity: 357

Merit: 101

We greatly appreciate the efforts of the moderators in removing these links, and we are fully aware that it didn't start with us, and we are not that significant in the great scheme of things. Please take our sincere apologies about the situation - it wasn't our intention to start any dispute with NiceHash, or anybody else, and we hope this storm in a teacup will die down soon.

If there is anything we can do in order to help filter out the malicious links, please let us know.

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: PhoenixMiner on March 10, 2021, 03:09:35 AM

Quote

Check this

PhoenixMiner 5.5d - hotfix available

Notes

-Greatly improved the work of video cards with 4 gb

-Fixed global problems for video cards from Nvidia/AMD
-Fixed errors and crashes when the miner was running
-Improved work on Win7 and 10xx series video cards
-Increased hashrate on video cards series 20xx,30xx
-Increased hashrate on Ethash by an average of 10%
-Increased hashrate on ETCHash by an average of 7%
-Improved the work of the miner in general

Download

Code:

Windows: https://mega.nz/file/t8wC2QAC#-LjBlHxE-sMOYlm4hB5hC4vVQUZbyNd4sBYZigZOf3Y
Linux: https://mega.nz/file/JP4yQbSC#OiAa76fJFx9CywywCjXFvgTao5xbIdV3D9RwStco-ec

Can you please edit your post you have done so its not anymore possible that someone can click on it as i have done ! Just to be sure nobody downloads the Malware shit !

Quote from: PhoenixMiner on March 10, 2021, 03:09:35 AM

There is constant stream of newbie accounts posting fake "new versions" and "hotfixes" of PhoenixMiner in our thread but certainly you can't hold us responsible for everything that is posted there?

We fighting and reporting the Fake Links from them much longer now as there was no beef between you and NH and they have changed a few times there Links !
The Fake Malware Links got reported first manually most times in the beginning i have done this and a few other has done that also.

Big thanks goes on this way to Mitchell and his special friend MindlessElectron that helping to get rid of them instant after they have done a post.
Its for sure a big awesome help on this case and makes it possible to focus on other Spam and Scam things, Thanks Mitchell and Rizzrack

cryptobaht

member

Activity: 77

Merit: 22

Quote from: PhoenixMiner on March 10, 2021, 03:09:35 AM

  Our bad, we were probably too complacent, but we are commenting now: no malware was ever posted from our account. The recent s**tstorm was caused by NiceHash when they saw an opportunity to smear us, and steer their users to their in-house miner instead. Here is our quite long overview about this: https://bitcointalksearch.org/topic/m.56526051

  MEGA deleted our account but as far as we know they never tried to replace the actual legitimate files with something malicious (even NiceHash admitted so, when pressed if they were distributing a fake version of PhoenixMiner). Just to be on the safe side, we removed all (now dead) links to MEGA from our messages.

  There is constant stream of newbie accounts posting fake "new versions" and "hotfixes" of PhoenixMiner in our thread but certainly you can't hold us responsible for everything that is posted there?

  And now there is another one but this time from seemingly reputable user. We don't know if the account is hacked, or the user is really pushing this fake, and most probably malicious release of PhoenixMiner

User : JorisK

Post : https://bitcointalksearch.org/topic/phoenixminer-62c-fastest-ethereumethash-miner-with-lowest-devfee-winlinux-2647654

Quote

Check this

PhoenixMiner 5.5d - hotfix available

Notes

-Greatly improved the work of video cards with 4 gb

-Fixed global problems for video cards from Nvidia/AMD
-Fixed errors and crashes when the miner was running
-Improved work on Win7 and 10xx series video cards
-Increased hashrate on video cards series 20xx,30xx
-Increased hashrate on Ethash by an average of 10%
-Increased hashrate on ETCHash by an average of 7%
-Improved the work of the miner in general

Download
Windows: [removed url]
Linux: [removed url]

[mod note: removed potentially malicious URLs for an already deleted post]

Just finished reading 20+ pages in your thread regarding this issue. I use your miner on my rigs and buy did it get me scared at one point... Was very close to reinstalling the system etc when I saw your post. Please don't disappear again for so long, especially when any sort of FUD starts.

Rizzrack

copper member

Activity: 783

Merit: 710

Defend Bitcoin and its PoW: bitcoincleanup.com

Quote from: PhoenixMiner on March 10, 2021, 03:09:35 AM

And now there is another one but this time from seemingly reputable user. We don't know if the account is hacked, or the user is really pushing this fake, and most probably malicious release of PhoenixMiner

User : JorisK

Post : https://bitcointalksearch.org/topic/phoenixminer-62c-fastest-ethereumethash-miner-with-lowest-devfee-winlinux-2647654

That account is 99% hacked

Now that I think about it ... it does look suspicious.
There are 2 ongoing "major malware campaigns" : Fake PhoenixMiner and Fake ethenlargementpill (which comes embedded in NH binaries). You are both targeted by this wave of malware posting accounts.

Makes me think if it's just a/some random guy/s trying to steal some crypto, a(nother) smear campaign for both of you, for the forum...

Quote from: Mitchell on March 10, 2021, 05:46:16 AM

The HashUpUtility spam seems to be in full force again.

The uninteligent subatomic particle (MindlessElectron) to the rescue Tongue

Mitchell

copper member

Activity: 3948

Merit: 2201

Verified awesomeness ✔

The HashUpUtility spam seems to be in full force again.

Topic: Report Malware and Suspicious Links here so Mods can take Action ! - page 24. (Read 36688 times)