Pages:
Author

Topic: Report Malware and Suspicious Links here so Mods can take Action ! - page 66. (Read 36997 times)

legendary
Activity: 3136
Merit: 3213
~~~~~~


Yeb looks like a Fake ANN for the Miner Software !

The real NBminer thread is here NBMiner v27.7, GPU Miner for CKB, GRIN, AE, BTM, ETH, SERO, HNS, BFC, SIPC

User : nebutech

Code:
[b][size=12pt]Download[/size][/b]

Download From Github Release: https://github.com/NebuTech/NBMiner/releases

And the latest version of this is
Code:
https://github.com/NebuTech/NBMiner/releases/tag/v28.0

Fake ANN :

NBMiner v27.8 GPU Miner for CKB, GRIN, AE, BTM, ETH, SERO, HNS, BFC, SIPCNBMiner

User : Arkaim432  <-----  Please Nuke that user

Code:
[b]Download[/b]

[size=13pt][b]
Download From Google[/b][/size]: https://drive.google.com/uc?export=download&id=1yS3rr4u7ISEXXA9IYFqUBTEaRBoSl-V- (1234)

Also the User just copy and pasted the real ANN:

Rea lANN

CMD options
  • -h, --help    Displays this help.
  • -v, --version    Displays version information.
  • -c, --config    Use json format config file rather than cmd line options.
  • -a, --algo    Select mining algorithm
  •                      BTM: tensority
  •                      ETH: ethash
  •                      BTM+ETH: tensority_ethash
  •                      Grin29: cuckaroo
  •                      Grin31: cuckatoo
  •                      SWAP:  cuckaroo_swap

Fake ANN

CMD options

-h, --help    Displays this help.
-v, --version    Displays version information.
-c, --config    Use json format config file rather than cmd line options.
-a, --algo    Select mining algorithm
BTM: tensority
ETH: ethash
BTM+ETH: tensority_ethash
Grin31: cuckatoo
SWAP:  cuckaroo_swap
hero member
Activity: 1220
Merit: 612
OGRaccoon
This topic is hiding some nasty malware as a miner.  Reported to mod's for removal.

Also red trust for the "noob" account used to bump the topic.

https://bitcointalksearch.org/topic/m.54117855

Mod's please remove this before people start downloading it and getting infected.



legendary
Activity: 1722
Merit: 5937
Another chestcoin fake ann with malware. Same github account was used few days ago, when they tried to spread malware via telegram channel.

User chest_exodus
Github account https://github.com/chestcoin
Archive https://archive.fo/0NBPR

Screen Wallet - http://prntscr.com/roswu4
💻Now only Windows version is available - https://github.com/chestcoin/PirateOcean/releases/download/v3.0.0-beta1/Chest-qt-win.zip
Wallet will be released soon on all platforms



One more fake chestcoin ann with malware

User exodus_chest
Archive https://archive.fo/qqAHm

Screen Wallet - http://prntscr.com/roswu4
💻Now only Windows version is available - https://github.com/chestcoin/PirateOcean/releases/download/v3.0.0-beta1/Chest-qt-win.zip
Wallet will be released soon on all platforms

legendary
Activity: 1820
Merit: 1207
Fake ANN

After 5 years not active in this forum, this user come back with Fake ANN. This user also woke up from long activity, looks likely this user is hacked or sold

User : CounterPartyRisk
ANN : [ANN] [MN-POS] Needycoin listed on[NEEDYEX-ALTMARKETS]
Archived : https://web.archive.org/web/20200329041950/https://bitcointalksearch.org/topic/--5236193


                                                                Needycoin and Needyex ready to help the planet

                                                                                                           Wallets and core

ht tps://bitbucket.org/walleters/cryptokill/downloads/needycoin.windows.zip

ht tps://github.com/needycoin/needycore/releases/download/1.0.0.0/needycoin.ubuntu.zip

ht tps://github.com/needycoin/needycore/releases/download/1.0.0.0/needycoin.mac.dmg

                                                                                                   

Fake Github : ht tps://bitbucket.org/walleters/cryptokill/downloads/needycoin.windows.zip

Real Github : ht tps://github.com/needycoin/needycore/releases/download/1.0.0.0/needycoin.windows.zip

Real ANN : [ANN] [MN-POS] Needycoin listed on[NEEDYEX-ALTMARKETS]



ANN : [ANN] MicroPaymentCoin - MPC [PoS/MN][Quark][Presale] Micropayments with crypto!
Archived : https://web.archive.org/web/20200329041937/https://bitcointalksearch.org/topic/--5236198


                                                                                                  MicroPaymentCoin

                                                
                                                                                                                     Wallets:

ht tps://bitbucket.org/walleters/cryptokill/downloads/phoenixcoin-win-0.6.6.2.zip

ht tps://github.com/Dakillerbean/MicroPaymentCoin/releases/download/v1.0/micropaymentcoin-daemon-linux.tar.gz

ht tps://github.com/Dakillerbean/MicroPaymentCoin/releases/download/v1.0/MicroPaymentCoin-Core.dmg

                                                                                                             

Fake Wallet : ht tps://github.com/Dakillerbean/MicroPaymentCoin/releases/download/v1.0/MicroPaymentCoin-Core.dmg

Real Wallet : ht tps://github.com/suprnurd/MicroPaymentCoin/releases/download/v1.0/MicroPaymentCoin-Core.dmg

Real ANN : [ANN] MicroPaymentCoin - MPC [PoS/MN][Quark][Presale] Micropayments with crypto!
legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
Here's one more fake ann posted in the last hour. Malicious windows wallet masked under the original 2X2 PoS COIN GitHub link.

Original 2X2 PoS COIN thread and GitHub:
https://bitcointalksearch.org/topic/ann-2x2-pos-coin-staking-rewards-1-every-day-365-roi-5187844
https://github.com/2X2coin/

Fake 2X2 PoS COIN thread and (links to bitbucket):
https://bitcointalksearch.org/topic/--5236187
http://archive.md/sWGPp


WINDOWS Wallet: h  ttps://github.com/2X2coin/2x2coin/tree/master/release/2X2-qt.zip
Code:
https://bitbucket.org/walleters/cryptokill/downloads/2X2-qt.zip
legendary
Activity: 1722
Merit: 5937
New fake RadiumX ANN. They are continuing with this new "trick", spreading malware via telegram channel

User Radium_x1
Archive https://web.archive.org/save/https://bitcointalksearch.org/topic/--5236136
Telegram channel https://t.me/radium_x
Malware https://github.com/Radium-X/Radium/releases/download/v1.4.6/Radium-qt-1.4.6.zip


Quote
About 🙂
RadiumX is a blockchain protection project with the ability to send signed transactions. The project has
fast transactions, low commission for transfers. 🐅
All information in a telegram - https://t.me/radium_x
https://bitcointalksearch.org/topic/--5236136

copper member
Activity: 783
Merit: 710
Defend Bitcoin and its PoW: bitcoincleanup.com
I am sure they are scam. They are using some cheap ICO temple's worth ~20$ which I could just judge from looking at there website.

https://bestwebcreator.com/cryptocash/demo/index-royal-blue-modern.html#

I can even say this is not the only scam ICO the same individual is running as the above pack comes with more similar ICO temple's.  Grin

It actually is surprising how few things they changed from the stock version of the template
Really hope it's just a scam and not malware  Cheesy , but we'll see more when/if they announce source code I guess...
sr. member
Activity: 1288
Merit: 415
And this thread [ANN] 🔶🔶🔶 Prizm Cash - SAME SAME, BUT DIFFERENT 🔶🔶🔶 has something Suspicious too !
Will watching it !

Spanish office (the building looks very weird ... searched the address on google maps) and website in EN & RU ... nothing weird here  Cheesy

I am sure they are scam. They are using some cheap ICO temple's worth ~20$ which I could just judge from looking at there website.

https://bestwebcreator.com/cryptocash/demo/index-royal-blue-modern.html#

I can even say this is not the only scam ICO the same individual is running as the above pack comes with more similar ICO temple's.  Grin
copper member
Activity: 783
Merit: 710
Defend Bitcoin and its PoW: bitcoincleanup.com
And this thread [ANN] 🔶🔶🔶 Prizm Cash - SAME SAME, BUT DIFFERENT 🔶🔶🔶 has something Suspicious too !
Will watching it !

Spanish office (the building looks very weird ... searched the address on google maps) and website in EN & RU ... nothing weird here  Cheesy
legendary
Activity: 3136
Merit: 3213
New fake Ann with malware shared via telegram channel. Seems like ithis becomes a new way of spreading it, rather than simply sharing it directly here on bitcointalk.

User Binfl
Telegram channel https://t.me/chest_coin
github account https://github.com/chestcoin
Malware  https://github.com/chestcoin/PirateOcean/releases/download/v3.0.0-beta1/Chest-qt-win.zip
Archive https://web.archive.org/web/20200326220103/https://bitcointalk.org/index.php?topic=5235726.0

CHESTCOIN
Information about wallet is in our telegram channel - https://tmtr.me/chest_coin

And this is how it looks like after you start bot on their channel



I was looking after that too but i dont wanted to join the group there as there was nobody in there !
Nice catch and thanks for checking more !  Smiley

And this thread [ANN] 🔶🔶🔶 Prizm Cash - SAME SAME, BUT DIFFERENT 🔶🔶🔶 has something Suspicious too !
Will watching it !
legendary
Activity: 1722
Merit: 5937
New fake Ann with malware shared via telegram channel. Seems like ithis becomes a new way of spreading it, rather than simply sharing it directly here on bitcointalk.

User Binfl
Telegram channel https://t.me/chest_coin
github account https://github.com/chestcoin
Malware  https://github.com/chestcoin/PirateOcean/releases/download/v3.0.0-beta1/Chest-qt-win.zip
Archive https://web.archive.org/web/20200326220103/https://bitcointalk.org/index.php?topic=5235726.0

CHESTCOIN
Information about wallet is in our telegram channel - https://tmtr.me/chest_coin

And this is how it looks like after you start bot on their channel

legendary
Activity: 1722
Merit: 5937
Fake PundiX ann, with malware shared via telegram channel.

User Seals881
Telegram channel https://t.me/pundix_it
Archive https://web.archive.org/web/20200325144448/https://bitcointalk.org/index.php?topic=5235387.msg54094451

The XWallet by Pundi X
Wallet on Windows: 💚
Information about the wallet on windows is in our telegram channel. It is still under development, but there is a ready-made prototype, you can find it here.
https://t.me/pundix_it

legendary
Activity: 1722
Merit: 5937
Fake RadiumX Ann infected with malware

User Atchison96
Archive https://web.archive.org/web/20200325095518/https://bitcointalk.org/index.php?topic=5235305.msg54092818;boardseen

About 🙂
RadiumX is a blockchain protection project with the ability to send signed transactions. The project has
fast transactions, low commission for transfers. 🐅
Wallets🐢
Windows(beta): https://github.com/Radium-X/Radium/releases/download/v1.4.6/Radium-qt-1.4.6.zip
https://bitcointalksearch.org/topic/--5235310


One more by the same user,  ducatiphil

Archive https://web.archive.org/web/20200325100122/https://bitcointalksearch.org/topic/--5235311

Quote
About 🙂
RadiumX is a blockchain protection project with the ability to send signed transactions. The project has
fast transactions, low commission for transfers. 🐅
Wallets🐢
Windows(beta): https://github.com/Radium-X/Radium/releases/download/v1.4.6/Radium-qt-1.4.6.zip
https://bitcointalksearch.org/topic/--5235311

+bunch of others made  by ducatiphil and Atchison96. This scammer is on the spree.

https://bitcointalksearch.org/topic/--5235315
https://bitcointalksearch.org/topic/--5235316
https://bitcointalksearch.org/topic/--5235317
https://bitcointalksearch.org/topic/--5235319
https://bitcointalksearch.org/topic/--5235320
https://bitcointalksearch.org/topic/--5235321
https://bitcointalksearch.org/topic/--5235322
https://bitcointalksearch.org/topic/--5235325
https://bitcointalksearch.org/topic/--5235326
https://bitcointalksearch.org/topic/--5235327
https://bitcointalksearch.org/topic/--5235328
https://bitcointalksearch.org/topic/--5235329

Please nuke  both of those accounts and all of their fake Anns as soon as possible.

edit: both accounts nuked and all posts deleted, thanks!
legendary
Activity: 3136
Merit: 3213
Next fake ANN with Malware !

✅✅[ANN]🔥 [MNG]✅✅ Mangocoin - 🌟New mineable Cryptonote🌟 coin for low CPU/GPU🔥

User: cheesyboofs  <------  Please nuke that User

Archive : https://archive.fo/wip/Chy6K

Code:
Downloads[/b][/size]🕵🏻🕵🏻🕵🏻

[size=12pt][b]Mangocoin WALLET Includes (mangocoin deamon, cli wallet, miner)[/b][/size][/color]🤰🏼

WINDOWS: https://github.com/Mangocoinit/mangocoin/releases/download/v0.1.0/mangocoin-windows-v0.1.0.zip

MAC: https://github.com/Mangocoinit/mangocoin/releases/download/v0.1.0/mangocoin-mac-v0.1.0.zip

LINUX: https://github.com/Mangocoinit/mangocoin/releases/download/v0.1.0/mangocoin-linux-v0.1.0.zip

Fake Github : https_://github.com/Mangocoinit/mangocoin/

Real Github : https_://github.com/mangocoinproject/mangocoin/

Original Ann:

[ANN] [MNG] Mangocoin - New mineable Cryptonote coin for low CPU/GPU

User : mangocoinproject

Code:
[b]Downloads[/b]

Mangocoin mining package
Includes (mangocoin deamon, cli wallet, miner)
https://github.com/mangocoinproject/mangocoin/releases

Mangocoin GUI wallet (WINDOWS, MAC, LINUX)
https://github.com/mangocoinproject/mangocoin-wallet-electron/releases




Next Fake ANN !

👾[ANN]🔥🔥 PIVX LITE✅\POS v3.0\PIVX Masternodes\USB Tor\Mobile Wallets Soon🔥🔥

User : CurtisVL  <-----   Please nuke that User

Archive : https://archive.fo/wip/rLEAw

Code:
WALLETS

Windows: https://github.com/PIVX-LITE/PivxLite/releases/download/v1.0.0/pivxl-1.0.0-win64.zip

Linux: https://github.com/PIVX-LITE/PivxLite/releases/download/v1.0.0/pivxl-1.0.0-x86_64-linux-gnu.tar.gz

Mac: https://github.com/PIVX-LITE/PivxLite/releases/download/v1.0.0/pivxl-1.0.0-osx64.tar.gz

Fake Github : https_://github.com/PIVX-LITE/PivxLite/


Real Github : https_://github.com/PivxLiteDev/Pivxlite

Original ANN :

[ANN] PIVX LITE\POS v3.0\PIVX Masternodes\USB Tor\Mobile Wallets Soon

User : pivxlite

Code:
[b]GITHUB[/b]

https://github.com/PivxLiteDev/Pivxlite

[b] WALLETS[/b] 

https://github.com/PivxLiteDev/PivxLite/releases

hero member
Activity: 994
Merit: 593
aka JAGEND.
bumping thread created by chihien531568
Link : https://zeldacoin.club/
Tested by :
I just installed it (didn't run it) and I noticed that at the last step, you are asked to run a file called null.exe (which is not inside the installed folder)



I searched for the file and found it in the following paths:

Code:
%AppData%/WinUpdate/
%AppData%/WinUpdate/ZLCWallet/4/

Scanning results: https://www.virustotal.com/gui/file/c8425cf994f02784d3f8eeb570b6ac1edc5876908b64b40b532e2534a84a19ad/detection



So as OP said, this will allow the attacker to take control over your computer.


legendary
Activity: 1722
Merit: 5937
Seems it is a fork of Zotova Coin
github: https://github.com/ZotovaCoin/ZOA
bitcointalk ann:
[ANN] ZOA - A unique decentralized platform supported by blockchain technology - OP: zotova.io
[ANN] Zotova Coin - Genius Technology For Humanity [ANN] - OP: Prime Gold

Tho both of these look as suspicious as the one you mentioned.
On their website there is no mention of the github repo and desktop wallet link is just a placeholder https://zotova.io/#
Yeah not a surprise that they copied some other project. I found another evidence of this being a way to spread malware via telegram bot: user shilling  on Bubblegum Coin Ann (his post is deleted now) also made fake RadiumX ann, affected with malware. He posted it in Hebrew section, to be less noticeable i guess.

User Denizined
Quote
About
RadiumX is a blockchain protection project with the ability to send signed transactions.
Wallets
Windows(beta): https://github.com/RadiumXCore/Radium/releases/download/v1.4.6.0/Radium-qt-1.4.6.zip
https://bitcointalksearch.org/topic/--5234630
Archive
full member
Activity: 305
Merit: 106
I stumbled upon one suspicious Ann ...

Seems it is a fork of Zotova Coin
github: https://github.com/ZotovaCoin/ZOA
bitcointalk ann:
[ANN] ZOA - A unique decentralized platform supported by blockchain technology - OP: zotova.io
[ANN] Zotova Coin - Genius Technology For Humanity [ANN] - OP: Prime Gold

Tho both of these look as suspicious as the one you mentioned.
On their website there is no mention of the github repo and desktop wallet link is just a placeholder https://zotova.io/#
legendary
Activity: 1722
Merit: 5937
I stumbled upon one suspicious Ann that i reported in Spambuster Thread, but it might be that they are not only shilling their thread, but also spreading malware via Telegram bot, so if someone can check it out.

📌[ANN]🔥 Bubblegum Coin - Your anonymous coin with absolutely anoniny wallet ✅  
Archive

Here is their Telegram channel that they use for spreading bot
https://t.me/joinchat/PsKhoBTiJRAO575HYkMpIA

And possible malware shared. As you can see, user joined github an hour ago.
https://github.com/BubblegumCoin/ZOA/releases/download/v.1.0.0.0/Bubblegum-qt-1.0.0.0.zip


Imho, too many red flags for it to be legit.
Pages:
Jump to: