Pages:

Author

Topic: Report Malware and Suspicious Links here so Mods can take Action ! - page 41. (Read 36997 times)

DaveF

legendary

Activity: 3500

Merit: 6320

Crypto Swap Exchange

Quote from: Lafu on September 13, 2020, 05:09:11 PM

...

And as I mentioned here: https://bitcointalksearch.org/topic/m.55190713

It follows the account went dark in 2018 and then came back and posted malware that is constant in the altcoins section.
Getting to the point that I wish that we could drop the altcoins section from the forum. Yeah I use it, but it's really a dumpster fire at this point.

-Dave

Lafu

legendary

Activity: 3136

Merit: 3213

Quote from: nutildah on September 13, 2020, 03:55:14 PM

Please report the OP from this thread. The wallet linked in the GitHub for this project is virused.

https://bitcointalksearch.org/topic/annchainsaur-project-chukwa-total-supply-5000-5275064

The thread creator is trying to distract away from this by posting links to a wallet for a project that has nothing to do with theirs. Meanwhile the wallet linked in the OP contains a virus.

Yeah saw that and got this thread already on the radar !

I archived the thread https://archive.fo/wip/7Sda2

One is for sure false positive but the others dosnt look very well and are for sure Trojan and Malware !

Looks like they forked it from turtlecoin and a few others maybe thats why he posted the link to there github.

Code:

Cryptonote Developers, Bytecoin Developers, Monero Developers, Forknote Project, Chainsaur Community

// Copyright (c) 2012-2017, The CryptoNote developers, The Bytecoin developers
// Copyright (c) 2014-2018, The Monero Project
// Copyright (c) 2018-2019, The TurtleCoin Developers
// Copyright (c) 2020, The Chainsaur Developers

// Please see the included LICENSE file for more information.

Source : https://github.com/chainsaur-project/chainsaur

https://github.com/chainsaur-project/chainsaur/blob/master/LICENSE

But it realy looks like a bit strange as he posted the thread at September 11, 2020, 08:04:03 AM and before that the Account last post was in December 16, 2018 !

Looks like realy for an Hacked or sold Account possible.

nutildah

legendary

Activity: 3010

Merit: 8114

Lafu

legendary

Activity: 3136

Merit: 3213

Next Fake Miner Software Thread from EthPil

Thread : [ANN] New EXTRA pill for ETH [AMD+Nvidia/Windows/Best results] <----- Please delete this Thread

User : Perdator <----- Please ban that User

This user recently woke up from a long period of inactivity.

Last post from that user was in April 29, 2016 , Hacked or sold Account

Archive : https://loyce.club/archive/posts/5518/55187260.html

Code:

Project MorpheusETH - pill to increase hashrate using algorithms such as: Ethash/KawPow/ProgPow
Support all miners for Windows (AMD+Nvidia)
The project is being actively developed, and a new version with new features will be presented soon

GutHub: https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Next Thread with the same

Thread : [ANN] New FAST pill for ETH [AMD+Nvidia/Windows/Best results] <----- Please delete this Thread

User : Oxyartes <----- Please ban that User

Last post from that User was in June 11, 2018 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5519/55190553.html

Rikafip

legendary

Activity: 1722

Merit: 5937

Fake announcement thread malware infected with all the classic signs; recently awoken account, new github, copy/paste of already existing announcement thread.

User brownxchange
ANN [ANN] 42-coin Development Discussion Thread - Latest release: v0.1.1.0!
Archive https://archive.fo/4gQMn

Code:

https://github.com/coin-42/42/releases/download/0.1.1.0/42-coin-qt.zip

Original ANN https://bitcointalksearch.org/topic/ann-42-coin-development-discussion-thread-1502028

One more fake announcement thread made for sole purpose of spreading malware.

User moneybit02
ANN ⚡[ANN] [IndexChain-IDX] Safe+Private+Hybrid POW/ POS/ MN ♔♕
Archive https://archive.vn/W6Hu9

Code:

https://github.com/INDEX-CHAIN/index/releases/download/1.0/Index-qt.zip

Original ANN https://bitcointalksearch.org/topic/ann-indexchain-idx-safeprivatehybrid-pow-pos-mn-5235506

Another fake announcement thread, this time they decided to copy ANN of a well known coin, Ravencoin. Account used is Member rank, so most likely it has been hacked since it was inactive for more than 2 years prior to creating this fake thread.

User MeistroUK
ANN [ANN] Ravencoin [RVN] PoW GPU Mining | Asset Transfer Blockchain
Archive https://archive.fo/w9GBl

Code:

https://github.com/Raven-core/Ravencoin/releases/download/v4.3.1.0/raven-qt-4.3.1.0.zip

Original ANN [ANN] Ravencoin [RVN] PoW GPU Mining | Asset Transfer Blockchain (Updated ANN)

LaaMos Seeth

newbie

Activity: 123

Merit: 0

Looks suspicious in my opinion.

[ANN][POW][IND] Indium - Argon2id Chukwa
https://bitcointalksearch.org/topic/annpowind-indium-argon2id-chukwa-5274006

wallet zip
https://www.virustotal.com/gui/file/a9be77c718e6eb70e3d35ba13972b2c44ac69d9a0b3cd35d5ca9ccc24356185d/detection

Miner
https://www.virustotal.com/gui/file/59401625a4a2037b41051829b0cfc0ea0e8aff84901797f2119fb8666d0593b4/detection

Trojan.Ursu (file analysis)
https://adwareremoval.info/trojan-ursu/
=================================================================================================

[ANN][POW][SPWN] SpawnCoin | GPU/CPU Cryptonight Turtle
https://bitcointalksearch.org/topic/annpowspwn-spawncoin-gpucpu-cryptonight-turtle-5274612

wallet zip
https://www.virustotal.com/gui/file/cb0a29f4ef60ae7b6b5bdd542d090f1224b98d06cfe19f9689df0c5a1a18a57f/detection

SpawnEngine
https://www.virustotal.com/gui/file/747bbfc4d1872e722afe2834733a0be76680a1b61166348c0c78a0458f3dfb04/detection

Lafu

legendary

Activity: 3136

Merit: 3213

Next Fake Miner post from Ethpil

User : egoryana <----- Please Ban that User

Last post from that user was in June 23, 2019 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5518/55184149.html

Post 1 : https://bitcointalksearch.org/topic/ann-ethereum-welcome-to-the-beginning-428589 <----- Please delete this post

post 2 : https://bitcointalksearch.org/topic/ann-ravencoin-rvn-pow-gpu-mining-asset-transfer-blockchain-updated-ann-3238497 <----- Please delete this post

Quote from: ?? on ??

Project MorpheusETH - pill to increase hashrate using algorithms such as: Ethash/KawPow/ProgPow
Support all miners for Windows (AMD+Nvidia)
The project is being actively developed, and a new version with new features will be presented soon

Code:

[b]GutHub:[/b] https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

morvillz7z

legendary

Activity: 2212

Merit: 2061

Join the world-leading crypto sportsbook NOW!

Please ban/lock user humanam and delete their thread: [ANN] New EXTRA Pill for ETH [AMD+Nvidia/Windows/Best results]
Hacked account posting malware via fake software miner, for the 100th time this week - MorpheusPill
archive: https://archive.fo/TGdZh

Code:

Project MorpheusETH - pill to increase hashrate using algorithms such as: Ethash/KawPow/ProgPow
Support all miners for Windows (AMD+Nvidia)
The project is being actively developed, and a new version with new features will be presented soon

GutHub: https_://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

lightbit

member

Activity: 347

Merit: 78

⚠️ CRYPTOPIA.IN ⚠️

FAKE AKOIN ANN Roll Eyes

Thread: 🔥【ANN】【IEO】⭐️Akoin.io ⭐️｜One Afrika. One Koin.｜🔴【Bounty】
OP: Heartstone <------- Please nuke this user (Hacked/sold account of course)
Archive: https://archive.is/e8O8o

This is actually funny how other "newbie" accounts are appreciating their project. They are probably from the same person or a paid services idk. But it must be removed asap else someone might fall for this scam.

Stay safe!

Lafu

legendary

Activity: 3136

Merit: 3213

Next Fake Miner Links from Ethpil !

User : Sydneydexter <------ Please ban that User

Last post from that User was in February 14, 2020 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5517/55176487.html

Post : https://bitcointalksearch.org/topic/claymores-dual-ethereum-amdnvidia-gpu-miner-v150-windowslinux-1433925 <------ Please delete this Post

Quote from: ?? on ??

Code:

[b]GutHub:[/b] https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Next One here

User : nounousse62 <------ Please ban that User

Last Post from that User was in January 15, 2018 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5517/55177576.html

Post : https://bitcointalksearch.org/topic/phoenixminer-62c-fastest-ethereumethash-miner-with-lowest-devfee-winlinux-2647654 <------ Please delete this Post

Quote from: ?? on ??

Quote from: milospinkfloyd on September 11, 2020, 12:25:07 PM

is there command like rxboost in claymore? Or way to boost cards via hive or something

use new pill for boost hashrate -

Code:

https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Next Fake Software post

User : markzuk <------- Please ban that User

Last post from that User was in December 28, 2019 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5517/55178576.html

Post : https://bitcointalksearch.org/topic/claymores-dual-ethereum-amdnvidia-gpu-miner-v150-windowslinux-1433925 <----- Please delete this post

Quote from: ?? on ??

Code:

[b]GutHub:[/b] https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Lafu

legendary

Activity: 3136

Merit: 3213

Sorry for the post but i want to keep the other post with the signatur separated!

Next Fake Miner Software with Ethpil Link !

User : mikensen <------ Please ban that user

Last post from that User was in November 26, 2018 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5516/55169889.html

Post : https://bitcointalksearch.org/topic/claymores-dual-ethereum-amdnvidia-gpu-miner-v150-windowslinux-1433925 <----- Please delete this post

Quote from: ?? on ??

Code:

[b]GutHub:[/b] https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Next Fake Post with Ethpil

User : Cobra98 <------ Please ban that User

This user recently woke up from a long period of inactivity.

Last post from that User was in July 16, 2017 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5517/55171393.html

Post : https://bitcointalksearch.org/topic/ann-ravencoin-rvn-pow-gpu-mining-asset-transfer-blockchain-updated-ann-3238497 <----- Please delete this Post

Quote from: ?? on ??

Code:

[b]GutHub:[/b] https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Next one

User : tmzn32 <----- Please Ban that User

Last post from taht User was in December 04, 2019 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5517/55171744.html

Post 1 : https://bitcointalksearch.org/topic/claymores-dual-ethereum-amdnvidia-gpu-miner-v150-windowslinux-1433925 <------ Please delete this Post

Post 2 : https://bitcointalksearch.org/topic/gminer-v324-ergokaspazilkawpowequihashcortex-5034735 <------ Please delete this Post

Quote from: ?? on ??

Code:

[b]GutHub:[/b] https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Next Thread about Ethpil

Thread : [ANN] New pill for ETH [AMD+Nvidia/Windows/Best results]

User : ravedien <------ Please ban that user

Last post from that User was in January 17, 2018 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5517/55171857.html

Code:

GutHub: https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Lafu

legendary

Activity: 3136

Merit: 3213

FIrst i want to say thanks to alanst and also thanks to febriyana for have written here !

Thats why also this thread is here so if a Account got hacked we can clear the things out with the recovery team !

Quote from: alanst on September 10, 2020, 06:57:17 AM

I can confirm that the account was silently used by someone else to post the fake miner but it appears that now, it's back in the original owner's hands and the email and password were changed.
My suggestion would be to perform a complete clean-up on your device and have another go with changing the password and email. Only after that, you can provide a signed message using a previously posted BTC address in order to have Lafu remove his negative feedback. It so happens that the first ever post using this account is a BTC address, so you can use that one if you're still in control.

Thanks for the confirmation about that the Account is back to the real owner !

I got the PM from febriyana and he used the BTC adress he has posted first in 2014 here on the Forum and also a Message with Signatur !

Quote from: febriyana on October 17, 2014, 07:09:19 AM

1PAy5FiCbUzLx84Btw7NYUeBYP1xNT7ivT

My message :

Quote

I am the owner Bitcointalk account with nickname febriyana Please remove negative feedback and dont banned my account

Sign message

Quote

IPZmGUpNvXeU3RdLVx2ajRGfACvzbZZ1js/0odKmeeeEb48h0pTQJTEX0iroH2D2AeQ76w4+EewJHg+t6BSZ1yI=

I checked the Signatur and the Account is back in the Hands of the real owner !

Verified : http://proof.eureka.co/?adr=1PAy5FiCbUzLx84Btw7NYUeBYP1xNT7ivT&msg=I+am+the+owner+Bitcointalk+account+with+nickname+febriyana+Please+remove+negative+feedback+and+dont+banned+my+account&sig=IPZmGUpNvXeU3RdLVx2ajRGfACvzbZZ1js%2F0odKmeeeEb48h0pTQJTEX0iroH2D2AeQ76w4%2BEewJHg%2Bt6BSZ1yI%3D

Thanks for the PM and contacting me , welcome back and i will remove my feedback shortly

And i also will edit my post i have done with report reference and i guess you dont get banned , maybe alanst or mprep can confirm that to be sure .

Rikafip

legendary

Activity: 1722

Merit: 5937

Another fake announcement thread infected with malware is out. As always, scammer is user previously dormant account, thread is self-moderated and content used belongs to another recently launched project. Only thing that is changed is github account, that was made half an hour ago and has malware.

User gremune
ANN [ANN] Stipendium | X11 | Private | ICO | Payments Driven | POW/MN
Archive https://archive.fo/uGtpz

Code:

 https://github.com/Stipendium/wallets/releases/download/1.0/stipendium-qt-windows.zip

Real ANN https://bitcointalksearch.org/topic/ann-stipendium-x11-prywatno-bounty-ico-patnoci-powmn-5272886
Real github https://github.com/finteklabs/Stipendium

febriyana

sr. member

Activity: 432

Merit: 250

Febriyana Muhammad

Quote from: alanst on September 10, 2020, 06:57:17 AM

Quote from: febriyana on September 10, 2020, 05:32:23 AM

Hello i just want clarify about my account.
I don't know what happen. I am the real owner of my account.
Today i get email from Bitcointalk, my last login on June 2020. My last reply is on the Bitvest thread.

Please remove my negative trust. I don't know what happen. I never do anything to harmness someone.
I will change my password and also maybe my email. Or tell me how to full control my account again.
I think i just get hacked. But i don't know how the hacker get access to my account. I only access my account in my personal computer or my phone with high security and never install anything software.

Also please don't banned my account. I build my reputation in long way. Very sad if that happen. I swear this is out of my control.

I can confirm that the account was silently used by someone else to post the fake miner but it appears that now, it's back in the original owner's hands and the email and password were changed.

My suggestion would be to perform a complete clean-up on your device and have another go with changing the password and email. Only after that, you can provide a signed message using a previously posted BTC address in order to have Lafu remove his negative feedback. It so happens that the first ever post using this account is a BTC address, so you can use that one if you're still in control.

Thanks for the suggestion. But my first BTC address is created with Multibit Wallet, now that wallet is discontinued. The private key also already lost on the old laptop, where the laptop is already broken and can't turn on again. Maybe any other option. My BTC address now is always changed because i am using Coinomi wallet.
If that is only the solution, no problem about negative feedback.
Please give me one chance to control my account. Please don't banned me.

Edit :
I already PM Lafu with details and sign message from my oldest BTC address. I hope he taking best decision. Thanks.
Sorry for double post. Long time not come here...

febriyana

sr. member

Activity: 432

Merit: 250

Febriyana Muhammad

Quote from: posi on September 10, 2020, 06:50:19 AM

Quote from: febriyana on September 10, 2020, 05:32:23 AM

Looking at your profile, it aged account and I believe you should know that this issue cant be solve in this thread why dont you create a thread and explain the issue while you also notify Lafu about it.
Meanwhile, using secure computer or phone to access your account doesnt guarantee your account safety if you dont use strong password.

Yes that is right. This is aged account. I create this account and build rank very long time. If get banned because this, i am really sad. I think about password already strong enough. Long password with combination number. Now i already adding some special character and adding more char.
Hope the hacker can't comeback again.
Thank you for the suggestion. May i know where i must create the thread?

alanst

copper member

Activity: 88

Merit: 115

former Mysterious newbie™

Quote from: febriyana on September 10, 2020, 05:32:23 AM

posi

hero member

Activity: 2268

Merit: 579

Vave.com - Crypto Casino

Quote from: febriyana on September 10, 2020, 05:32:23 AM

febriyana

sr. member

Activity: 432

Merit: 250

Febriyana Muhammad

Lafu

legendary

Activity: 3136

Merit: 3213

Next Fake Miner Software Thread from Ethpil

Thread : [ANN] Project MorpheusPill - pill for Ethash/KawPow/ProgPow

User : elngotz101 <------- Please Ban that User

Last post from that User was done in February 01, 2019, hacked or sold Account

Archive : https://loyce.club/archive/posts/5516/55167260.html

Code:

Project MorpheusETH - pill to increase hashrate using algorithms such as: Ethash/KawPow/ProgPow
Support all miners for Windows (AMD+Nvidia)
The project is being actively developed, and a new version with new features will be presented soon

GutHub: https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Next fake ANN

Thread : 🔊[ANN] BitCoinFast - Decentralized CryptoCurrency l Script PoW/PoS

User : nikitatiufekchiev <---- Please ban that User

Last post from that User was in June 06, 2018 , hacked or sold Account

This user recently woke up from a long period of inactivity.

Archive : https://archive.fo/wip/9MI9f

Code:

https://github.com/BitCoin-Fast/wallets/releases/download/3.1.1.0/BitcoinFast-qt.zip

Fake Github : https_://github.com/BitCoin-Fast/wallets/releases/download/3.1.1.0/BitcoinFast-qt.zip

Real Github : https_://github.com/Crypto-Currency/bitcoinfast

Original ANN

Thread : [ANN] BitcoinFast revival -

User : Spidersbox

Code:

https://github.com/Crypto-Currency/bitcoinfast

Lafu

legendary

Activity: 3136

Merit: 3213

Next Fake ANN !

Thread : [ANN] Blackcoin Protocol [BLK] | Home of PoS 3.0 | No ICO | No Pre-mine

User : quynvp11296 <----- Please Ban that User

This user recently woke up from a long period of inactivity.

Last post from that User was in November 06, 2018, hacked or sold Account

Archive : https://archive.vn/wip/Miv1R

Code:

https://github.com/Black-coin/Black/releases/download/1.2.5.2/Blackcoin-qt.zip

Fake Github : https_://github.com/Black-coin/Black/releases/download/1.2.5.2/Blackcoin-qt.zip

Real Github : https_://github.com/CoinBlack/blackcoin/releases/download/v1.2.5.2/blackcoin-1.2.5.2-windows.zip

Original ANN

Thread : [ANN] Blackcoin Protocol [BLK] | Home of PoS 3.0 | No ICO | No Pre-mine

User : Gritt-N-Auld

Code:

https://github.com/CoinBlack/blackcoin.org
https://github.com/CoinBlack/blackcoin/releases/download/v1.2.5.2/blackcoin-1.2.5.2-windows.zip

~~Next Fake Miner Software download link for Ethpil~~

User : febriyana <---- Account was hacked and is back in the Hands of the real owner

Last post form that User was in June 02, 2020 , hacked or sold Account

Archive : https://loyce.club/archive/posts/5516/55164304.html

Post 1 : https://bitcointalksearch.org/topic/claymores-dual-ethereum-amdnvidia-gpu-miner-v150-windowslinux-1433925 <----- Please delete this post

Post 2 : https://bitcointalksearch.org/topic/phoenixminer-62c-fastest-ethereumethash-miner-with-lowest-devfee-winlinux-2647654 <----- Please delete this post

Quote from: ?? on ??

Code:

[b]GutHub:[/b] https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1

Next Fake Miner Software Thread from Ethpil

Thread : [ANN] Project MorpheusPill - pill for Ethash/KawPow/ProgPow <----- Please delete this Thread

User : GabryRox <----- Please Ban that User

Last post from that User was in September 03, 2020 , so i guess this Account got hacked or sold

Archive : https://loyce.club/archive/posts/5516/55164843.html

Code:

Project MorpheusETH - pill to increase hashrate using algorithms such as: Ethash/KawPow/ProgPow
Support all miners for Windows (AMD+Nvidia)
The project is being actively developed, and a new version with new features will be presented soon

GutHub: https://github.com/MorpheusPill/MorpheusPillETH/releases/tag/v1.0.1