Bitcoin Forum>Other>Meta
Pages:
Author

Topic: Report Malware and Suspicious Links here so Mods can take Action ! - page 77. (Read 37960 times)

Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 12, 2019, 11:57:44 PM
#97
Quote from: morvillz7z on November 12, 2019, 03:42:13 PM
This is also a fake ann, both threads are posted back to back:

Fake KORECY thread and GitHub: (created less than an hour ago):
https://bitcointalksearch.org/topic/ann-kory-korecy-new-decentralization-powno-icocuckaroo29-5200959
https://github.com/KORECYnew/KORY
http://archive.md/Md0Io

Quote from: https://bitcointalk.org/seclog.php?all
Today at 07:24:54 PM - purpnsourd - woke up

Both accounts tagged just in case.

Just update for this case and quote an Users Virustotal result that he has posted !

Quote from: bigtrevs98 on November 12, 2019, 03:42:33 PM
well, considering the wallet didn't open... plus virustotal doesnt like the dll, that came with the wallet. I dont trust it lol...
https://www.virustotal.com/gui/file/152090c189d1e808810930a24ed50c6b3c2fe0946d2d30d94a493afbd0662283/detection

And the Result looks realy shady and dangerous when look at it .

Gen:Variant.Ulise.85600
W64/Agent.ETX!tr.dldr
Trojan-Downloader.Win32.Agent
Malware (ai Score=88)
Trojan.Ulise.D14E60

Source: https://www.virustotal.com/gui/file/152090c189d1e808810930a24ed50c6b3c2fe0946d2d30d94a493afbd0662283/detection

There are some new ones since i done my other thread for the explain on the things . Will look at them and add them there maybe when i have the time.
morvillz7z
legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 12, 2019, 03:42:13 PM
#96
Please nuke user Lulloz and delete their fake self-moderated thread for 2X2 coin 2X2 PoS COIN | STAKING REWARDS 1% EVERY DAY | 365% ROI.

Original 2X2 PoS COIN thread and GitHub:
https://bitcointalksearch.org/topic/ann-2x2-pos-coin-staking-rewards-1-every-day-365-roi-5187844
https://github.com/2X2coin/

Fake 2X2 PoS COIN thread and GitHub (week old):
https://bitcointalksearch.org/topic/2x2-pos-coin-staking-rewards-1-every-day-365-roi-5200946
https://github.com/2X2-coin/
http://archive.md/QZ6TS

This is also a fake ann, both threads are posted back to back:

Fake KORECY thread and GitHub: (created less than an hour ago):
https://bitcointalksearch.org/topic/ann-kory-korecy-new-decentralization-powno-icocuckaroo29-5200959
https://github.com/KORECYnew/KORY
http://archive.md/Md0Io

Quote from: https://bitcointalk.org/seclog.php?all
Today at 07:24:54 PM - purpnsourd - woke up

Both accounts tagged just in case.
Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 11, 2019, 12:17:17 PM
#95
Fake ANN here again !

[ANN][BTSC] Beyond The Scene Coin [POS/MN/X11]

User : merz  <---------   Please nuke that User !


Code:
[b]Wallets[/b]
Windows: https://github.com/btsbtsc/BTSCOIN/releases/download/3.0.1.0/BTSC_WINDOWS.zip
Linux: https://github.com/btsbtsc/BTSCOIN/releases/download/3.0.1.0/BTSC_LINUX.zip

Source
github https://github.com/btscbtsc/BTSCOIN

Look how the github is written exactly and you see that there is something diffrent !

Fake Github : 

https_://github.com/btsbtsc/BTSCOIN/releases/download/3.0.1.0/BTSC_WINDOWS.zip

https_://github.com/btsbtsc/BTSCOIN/releases/download/3.0.1.0/BTSC_LINUX.zip


Real Github :

https_://github.com/btscbtsc/BTSCOIN/releases/download/3.0.0.1/BTSC_WINDOWS.zip

https_://github.com/btscbtsc/BTSCOIN/releases/download/3.0.0.1/BTSC_LINUX.zip

The Fake one has missing an small " c "


Archive :  https://archive.md/hN5SA


Original ANN :

[ANN][BTSC] Beyond The Scene Coin [POS/MN]

User : manocoin

Code:
[b]Wallets[/b]
Windows Wallet 3.0.0.1 https://github.com/btscbtsc/BTSCOIN/releases/download/3.0.0.1/BTSC_WINDOWS.zip
Linux Wallet 3.0.0.1 https://github.com/btscbtsc/BTSCOIN/releases/download/3.0.0.1/BTSC_LINUX.zip

[b]Source[/b]
github https://github.com/btscbtsc/BTSCOIN



Archive : https://archive.ph/dkILs
Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 11, 2019, 11:48:04 AM
#94
Quote from: morvillz7z on November 11, 2019, 10:53:29 AM
Here's another fake thread with links to malware wallets: [Pre-ANN] [SONA] SONATA - help for young music groups [Ethash/POW/No ICO]
Please nuke Unersame, 2011 account wakes up today and posts a direct link to brand new GitHub.

Fake SONATA thread and GitHub (created 5 hours ago):
https://bitcointalksearch.org/topic/pre-ann-sona-sonata-help-for-young-music-groups-ethashpowno-ico-5200532
https://github.com/SonataMusicCoin
http://archive.md/fvGJZ

Quote from: https://bitcointalk.org/seclog.php?all
Today at 12:17:32 PM - Unersame - woke up

Props to busminer for scanning the exe file, here are the results:
https://www.virustotal.com/gui/file/e446fe2f725fec1a36f60e6e2b6eb50ce0fd8ba291db646f0ba1afa737741820/detection

I've tagged the account in the meantime.


What i have seen the last month and for a lot of Fake Anns that was created here is that they also instant was posted on this Page https://coinhub.news.

And for the latest Fake ANN here you  are posted the same again and its posted at the same time when the Fake ANN are posted here .
https://coinhub.news/cs/article/bitcointalk-pre-ann-sona-sonata-help-for-young-music-groups-ethashpowno-ico

I dont know if that has something to do with the creator of the Fake Anns or they pay them for push this Informations.
But i guess they are just an service to bring news about new coins .

The other thing is specialy for your posted Fake ANN i cant find an real ANN .
morvillz7z
legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 11, 2019, 10:53:29 AM
#93
Here's another fake thread with links to malware wallets: [Pre-ANN] [SONA] SONATA - help for young music groups [Ethash/POW/No ICO]
Please nuke Unersame, 2011 account wakes up today and posts a direct link to brand new GitHub.

Fake SONATA thread and GitHub (created 5 hours ago):
https://bitcointalksearch.org/topic/pre-ann-sona-sonata-help-for-young-music-groups-ethashpowno-ico-5200532
https://github.com/SonataMusicCoin
http://archive.md/fvGJZ

Quote from: https://bitcointalk.org/seclog.php?all
Today at 12:17:32 PM - Unersame - woke up

Props to busminer for scanning the exe file, here are the results:
https://www.virustotal.com/gui/file/e446fe2f725fec1a36f60e6e2b6eb50ce0fd8ba291db646f0ba1afa737741820/detection

I've tagged the account in the meantime.
Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 08, 2019, 08:28:53 PM
#92
Quote from: morvillz7z on November 07, 2019, 10:22:27 AM
I've tagged the account in the meantime.
edit; wow, that was fast, thread is gone!

Nice catch on that !

Also updated the first post with useful links .
If anybody has some links that can be useful post it please .
morvillz7z
legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 07, 2019, 10:22:27 AM
#91
Please nuke user AyePhung and delete their fake announcement thread  [ANN][MPO+] Mpower+ Coin - new reward system [{POW/X11/Rework]

Original Mpower Coin thread and GitHub:
https://bitcointalksearch.org/topic/mpo-mpower-coin-powmasternodes-that-really-work-5162647
https://github.com/MpowerMPO/

Fake Mpower Coin thread and GitHub (created an hour ago):
https://bitcointalksearch.org/topic/--5199534
https://github.com/mpowernew/
http://archive.md/ul2Ky

Fake ann called out by the real Mpower Coin dev:

Quote from: ?? on ??
Original tread here:
https://bitcointalk.org/index.php?topic=5162647.new#new

No Idea why you trying to copy our project. Please Desist!

I've tagged the account in the meantime.

edit; wow, that was fast, thread is gone!
Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 03, 2019, 10:28:12 AM
#90
Fake ANN !

[ANN] Tickets (TKTS) - POW/Argon2id (CPU/GPU only) - Crypto e-Commerce

User : ishwor92  <----  Ban or nuke for plagiarism

There is nothing i can find thats diffrent from the Original Ann , Links and all is the same if i dont missed something or havnt seen .

The only thing thats diffrent from the Original ANN is the time when the ANNs was cretaed .

Fake ANN created : November 01, 2019, 09:32:42 PM

Real ANN created : November 01, 2019, 12:11:17 AM

Archive : https://archive.md/SvG38

So i report it for plagiarism


Original ANN :

[ANN] Tickets (TKTS) - POW/Argon2id (CPU/GPU only) - Crypto e-Commerce

User : TicketsCoin

morvillz7z
legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 02, 2019, 10:22:43 AM
#89
Could you please nuke user dcb33 and their fake announcement thread for [ANN] - [MediaCoin][MC] [FREE COINS].

Original Mediacoin thread and GitHub:
https://bitcointalksearch.org/topic/annmediacoinmdcbountyairdropnew-5179834
https://github.com/mediacoin-club

Fake Mediacoin thread and GitHub (two days old):
https://bitcointalksearch.org/topic/ann-mediacoinmc-free-coins-5197697
https://github.com/project-mediacoin/
archive: http://archive.md/1LoXj

My report for GREDEN (just two posts above) is still unhandled. It's obviously a fake ann and needs to be deleted/nuked.
masulum
legendary
Activity: 2324
Merit: 1604
hmph..
Re: Report Malware and Suspicious Links here so Mods can take Action !
November 02, 2019, 06:58:41 AM
#88
FAKE ANN: Obyte: Totally new consensus algorithm + private untraceable payments
Archives: https://archive.is/EgcF0

User : developernat    <-----    Please nuke that user

Code:
[quote author=developernat link=topic=5197963.msg52954498#msg52954498 date=1572666960]
For full technical description, read the white paper: [url=https://www.docdroid.net/X3pnfsJ/byteball.pdf]READ HERE[/url]
Former name: Byteball.
Download the wallet: [url=https://gofile.io/?c=gc3hHp][color=green][size=20pt]DOWNLOAD[/size][/color][/url]
[/quote]

Fake download: https:_/srv-file4.gofile.io/download/gc3hHp/ObyteWin64.exe
Virustotal: https://www.virustotal.com/gui/file-analysis/OWRkOWIwODkwMWQ5Mjc4YTdkMjVjZWM2YWMwZmZmMTA6MTU3MjY5NTY0Nw==/detection
VirusTotal: File Hash: 5649c298735ea546eb597dbc1aea8a061f6db7818dc67008fe026cd34be37a2e

Original link: https://github.com/byteball/obyte-gui-wallet


Original Thread: Obyte: Totally new consensus algorithm + private untraceable payments
Archives: https://archive.ph/w4BlO
Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 31, 2019, 03:24:28 PM
#87
Fake ANN with Quote from the Orignal ANN and edited download link !

🔴🔴🔴🔴🔴【✅ANN】ZOOMBACLIX【BETA LAUNCH✅ZOOMBAPLATFORM

User : shapov22   <-----    Please nuke that user

Code:
[quote author=shapov22 link=topic=5197632.msg52941290#msg52941290 date=1572546850]
[quote author=zoombacoin link=topic=4457816.msg39910629#msg39910629 date=1528750792]

[center][b][u]Wallet:[/u][/b][/center]
[center]https://www.sendspace.com/file/edl9qq[/center]

[/quote]

Fake Source Download : https_://www.sendspace.com/file/edl9qq

Real Source Download : https_://github.com/zoombacoin/zoomba/releases

Original ANN :

[ANN] ZOOMBACOIN - BETA LAUNCH - ZOOMBA PLATFORM

User : zoombacoin

Code:
[quote author=zoombacoin link=topic=4457816.msg39910629#msg39910629 date=1528750792]

[center][b][u]Wallet:[/u][/b][/center]
[center]https://github.com/zoombacoin/zoomba/releases[/center]

[/quote]

Archive : https://archive.md/Uc0hR

Maybe you can share your thoughts about that because the thread name is others as the Original but i guess its the Fake to catch people with the download !

Edit : its a fake ann , cheers
morvillz7z
legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 25, 2019, 03:50:14 PM
#86
Five-digit UID wakes up just 4 hours ago and the first thing he does is post a Cuckaroo29 algo, non-existent coin.
 
Of course, it comes with direct link to a wallet and a brand new GitHub, not obvious at all. I mean, you know what to do...


Account - zerqzee

Fake ANN - [ANN] [GRED] Greden - security, anonymity, ASIC resistance [POW/Cuckaroo29]

Archive - http://archive.fo/yCrB2

Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 22, 2019, 12:41:51 PM
#85
Quote from: morvillz7z on October 22, 2019, 08:45:35 AM
~~~~~~

Hey thanks buddy for posted it here and look more on it , and i dont have forgot it because i was on the jump to an meeting !

I was realy sure that there is something about that link and the file also i have downloaded it but my browser stoped it and normaly my Browser dont doing that.
So looks like there was some real shit software in it .

Thanks again !  Smiley


@alanst and @Rizzrack

Thanks for your support and work also , awesome and realy appreciate that !
Rizzrack
copper member
Activity: 786
Merit: 710
Defend Bitcoin and its PoW: bitcoincleanup.com
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 22, 2019, 12:06:34 PM
#84
Quote from: morvillz7z on October 22, 2019, 11:45:49 AM
... Links to wallets are still there and that's priority imo..These guys have an unlimited amount of compromised accounts at hand, they've probably lost 400 + since April, what's another newbie account to them?

That is the main priority but I see thread got Trashed in the meantime !

Quote from: William Shakespeare
There's method in this madness Smiley
morvillz7z
legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 22, 2019, 11:45:49 AM
#83
Isn't it better to have their thread deleted and account nuked? Links to wallets are still there and that's priority imo. I think it's pointless to sec lock a newbie account with no other/ or deleted posts. These guys have an unlimited amount of compromised accounts at hand, they've probably lost 400 + since April, what's another newbie account to them?

Quote from: Rizzrack on October 22, 2019, 12:06:34 PM
thread got Trashed in the meantime !
Nice!
alanst
copper member
Activity: 88
Merit: 115
former Mysterious newbie™
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 22, 2019, 09:01:42 AM
#82
Quote from: morvillz7z on October 22, 2019, 08:45:35 AM
Could you please nuke minerszone and his thread : [ANN] [BFC] Bitfree - New electronic cash [POW/Cuckaroo29]. It's a fake website with malware wallets.

~snip

We've also been looking at this account earlier today as it looked as though it may have possibly been compromised at some point so, as a result, it has now been security locked in order to prevent it from doing any more damage with these phishing attempts.
morvillz7z
legendary
Activity: 2212
Merit: 2061
Join the world-leading crypto sportsbook NOW!
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 22, 2019, 08:45:35 AM
#81
Could you please nuke minerszone and his thread : [ANN] [BFC] Bitfree - New electronic cash [POW/Cuckaroo29]. It's a fake website with malware wallets.

I see that Lafu has caught them but didn't post here, so let me quote him (and add some additional information):

Quote from: ?? on ??
Can you explain ?

Code:
[b]Wallets[/b]
Windows: [url=https://www.bitcfree.vip/downloads/bitfree-0.18.5-win32.tar.gz]https://www.bitfree.vip/downloads/bitfree-0.18.5-win32.tar.gz[/url]
Linux: [url=https://www.bitcfree.vip/downloads/bitfree-0.18.5-x86_64-linux-gnu.tar.gz]https://www.bitfree.vip/downloads/bitfree-0.18.5-x86_64-linux-gnu.tar.gz[/url]
Why you hide the real download link behind the other link ?

Looks like fake Download link for malware or something !

https_://www.bitcfree.vip/downloads/bitfree-0.18.5-win32.tar.gz  <----  suspicious

https_://www.bitfree.vip/downloads/bitfree-0.18.5-win32.tar.gz

Watch out when downloading here something , suspicious !

Fake domain is regestered just one day ago, whereas original back in May '19.

Quote from: https://whois.domaintools.com/bitcfree.vip
Domain Name: BITCFREE.VIP
Registry Domain ID: D_014FC94F_E1B63E46E42348DC834EBFF13BCE7A2A_0000016DEDB3835F-VIP
Registrar WHOIS Server:
Registrar URL:
Updated Date: 2019-10-21T09:43:52Z
Creation Date: 2019-10-21T09:43:47Z
Registry Expiry Date: 2020-10-21T09:43:47Z

Quote from: https://whois.domaintools.com/bitfree.vip
Domain Name: BITFREE.VIP
Registry Domain ID: D_00F9C038_B01DFEE6593F4D17B913EED5966F577F_0000016B0183F82D-VIP
Registrar WHOIS Server:
Registrar URL:
Updated Date: 2019-05-29T02:55:55Z
Creation Date: 2019-05-29T02:55:54Z
Registry Expiry Date: 2020-05-29T02:55:54Z

https://github.com/bitfreecash/bitfree


masulum
legendary
Activity: 2324
Merit: 1604
hmph..
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 21, 2019, 05:36:44 PM
#80
New Fake ANN here !

[ANN][NYC] NEW YORK COIN at 2017 MACY'S THANKSGIVING DAY PARADE IN NYC!
FAKE PROFILE: scryptenthuslast

Real Profile: scryptenthusiast

Archives: https://archive.is/N364c

ORIGINAL ANN: https://bitcointalksearch.org/topic/annnyc-new-york-coin-at-2017-macys-thanksgiving-day-parade-in-nyc-2016963

Fake Github link on his ANN, under github link goes to:
Code:
https://anonymousfiles.io/f/newyorkcoin-1.3.1.21-win-setup.zip

Scan files result by VirusDesk Kaspersky:
Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 21, 2019, 12:20:21 PM
#79
New Fake ANN here !

[ANN][Hybrid POW+MN][CN TRTL] ContentCoin - Made for content users

User : pendente  <-------- Please Nuke that user !

This user recently woke up from a long period of inactivity.

Code:
[b]WALLET[/b]
CLI Windows: [url=https://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip]https://github.com/contentnetwork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip[/url]
CLI Linux: [url=https://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-linux64.tar.gz]https://github.com/contentnetwork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-linux64.tar.gz[/url]

[b]LINKS[/b]
Website : new website soon. Old website : https://theblogcoin.xyz


Fake Github : https_://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip <--- Account created 3 hours ago

Real Github : https_://github.com/contentnetwork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip  

The original coin  uses a diffrent Github but if you look at the fake Ann there is a fake github behind the Github link you can read !

Downloading at the moment the file to check it and will post my result here.

But looks very strange to me and i guess its full of bad things .

And i have looked around the 2 Gihubs and in the fake one is nothing as only you can download the file .
In the other there is all the source code and stuff

They are using the same website and on the Original ann i have nothing readed about that something will change and thats why i think its fake !

Original ANN :

Blogcoin ,A social media based blogging Platform.

User : turtlegirl

Code:
Blogcoin.
[b]Website:[/b]
https://theblogcoin.xyz

GITHUB
Coin sourcecode: https://github.com/blognetwork/blogcoin
GUI electron wallet: https://github.com/blognetwork/BlogCoin-electron-wallet

Also there is a other ANN that looks the real one for !

https://bitcointalksearch.org/topic/annhybrid-powmncn-trtl-contentcoin-decentralized-content-exchange-crypto-5194370

User : semiPOOL

Code:
[center][b]WALLET[/b][/center]
[center]CLI : https://github.com/contentnetwork/contentcoin/releases[/center]

Update : Checked file for the Fake Github is full of shit.

Fake Github : https_://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip

https://www.virustotal.com/gui/file/9257d761fd3a304acfe1baab34563eb5da8aade8aa59790d4cc6138197f456b0/detection
Lafu
legendary
Activity: 3178
Merit: 3295
Re: Report Malware and Suspicious Links here so Mods can take Action !
October 20, 2019, 03:42:58 PM
#78
Next Fake Ann here !

[ANN] [UPD] [ADZ] Adzcoin||ADZbuzz - Replacing The Ad-Supported Web!

User : KaribuBlanco  <-----  Please nuke that user !


Code:
GitHub Source Code:

https://github.com/AdzCoin/adzcoin
-----------------------------------------------
[center][b]Wallets:[/b][/center]

[center][b][url=https://github.com/AdzColn/adzcoin/blob/master/adzcoin-qt.zip]Adzcoin-qt Windows[/url]


The Source github is right github.com/AdzCoin/adzcoin but if you looking at the download github link for the wallets you can see its the wrong one and fake.
Fake source : github.com/AdzColn/

For the wallets of the Original ANN they use there some other link you can see.

Original ANN :

[ANN] [ADZ] Adzcoin||ADZbuzz - Replacing The Ad-Supported Web!

User : coinstatic


Code:
[b][color=black][size=25pt]GitHub Source Code:[/size][/color][/b]

[size=19pt][b]https://github.com/AdzCoin/adzcoin[/b][/size]

[b][url=https://adzbuzz.com/adzcoin-files.zip][color=black][size=15pt]Download Windows wallet here:[/size][/color]

[img]https://i.imgur.com/dS34Pa4.png[/img][/url]   

Pages:
Bitcoin Forum>Other>Meta
Jump to: