[SCAM] - CatalansCoin, Wallets are Infected with Malware!!

dominguero

full member

Activity: 430

Merit: 228

Quote from: Bitcoin_Arena on April 27, 2019, 07:52:05 PM

What happened: CatalansCoin wallet is infected with Malware

1. Scammers Profile Link: https://bitcointalksearch.org/user/catalanscoin-2577541

ANN: https://bitcointalksearch.org/topic/pow-catalanscoin-the-free-social-and-catalan-cryptocurrency-5128919
[Archived]: http://archive.fo/eKWye

This was the right ANN, with the GitHub links, I downloaded the first version before the actual fork with no problem.

Quote from: Bitcoin_Arena on April 27, 2019, 07:52:05 PM

2. Scammers Profile Link: https://bitcointalksearch.org/user/alexduma-1079176

ANN: https://bitcointalksearch.org/topic/pow-catalanscoin-the-free-social-and-catalan-cryptocurrency-5133111
[Archived]: http://archive.fo/4uzH1

3. Scammers Profile Link: https://bitcointalksearch.org/user/edwinosky-1986279

ANN: https://bitcointalksearch.org/topic/pow-catalanscoin-the-free-social-and-catalan-cryptocurrency-5135335
[Archived]: http://archive.fo/5tHMw

Website: http://catalanscoin.com
[Archived]:http://archive.fo/OlUJr

Github:https://github.com/catalanscoin/catalanscoin
Archived:http://archive.fo/QSrCO

These are phissing links, by Alexduma https://bitcointalksearch.org/user/alexduma-1079176 a know scammer and other random user.

The fakes ANN have phissing links to other directions that they post and different than the real ANN https://github.com/githubcryptto/coinss/raw/master/Windows-Release.zip and https://bitbucket.org/astingl/catalans/downloads/Windows-Release.zip (NO DOWNLOAD)

Quote from: Bitcoin_Arena on April 27, 2019, 07:52:05 PM

Windows wallet zip file has 4 executable files in it

Code:

https://github.com/catalanscoin/catalanscoin/releases/download/0.1.0/Windows-Release.zip

1. CatalansCoind.exe

14 engines detected malware in the file
https://www.virustotal.com/#/file/06c6425ef2a6b2ce555e31b6703ac5a5be68ec149bf39633162e5c2cb097ec7a/detection

2. zedwallet.exe

5 engines detected malware in this file
https://www.virustotal.com/#/file/8b0c8a6259979fbe559d8a6975bfe364fc2552c9964940f1b79450c45d202c3a/detection

3. catalans-service.exe

2 engines detected malware in the file
https://www.virustotal.com/#/file/40051cfccec260657e58824be2983cdee3ab15e9573b397c43dfdd29e2a1c4c1/detection

4. miner.exe

8 Engines detected Malware in the files
https://www.virustotal.com/#/file/3683f3a1c8c3cffc1bfbbae25ad191bef8beec76d8a736b185c0657ed8af47cb/detection

Catalanscoin is a Turtlecoin Fork, and Turtlecoin binaries have the same warnings.

https://github.com/turtlecoin/turtlecoin/releases/tag/v0.13.0

https://www.virustotal.com/gui/file/69a412c88bc4574bc2da7eb726be5de281d92e2bf4fb74ba0974c780e9065995/detection

https://www.virustotal.com/gui/file/12b309bae949bf264e2bb352143749397c5297be1c7d4c93ad4c07194bd09fbe/detection

https://www.virustotal.com/gui/file/9b2490925c11b4e8135ad59a66cd8f608d989839d1f5223b4fae2bd749a5501c/detection

I am only a user that made my own research, i have no other interest in the project, and I could be mistake.

logfiles

copper member

Activity: 2170

Merit: 1827

Top Crypto Casino

Quote from: catalanscoin on June 09, 2019, 02:01:20 PM

Thanks for your warning. I hope you prevented people from downloading fake wallets.
This is the only official ANN (nº 1 of your links): https://bitcointalksearch.org/topic/pow-catalanscoin-the-free-social-and-catalan-cryptocurrency-5128919
2 and 3 were phishing attemps.

Really?

I think you have forgotten that we already have archived versions of your ANN... Why did you edit it? Trying to cover your own tracks?
Look again in the archive: http://archive.fo/eKWye
Github profile with fake wallet that was reported is the same as the one on your ANN. So how does someone else attempt to phish through your ANN?

ANN before editing

ANN after editing

Reported Malicious wallet Github link:

Code:

https://github.com/catalanscoin/catalanscoin/releases/download/0.1.0/Windows-Release.zip

1. The first release was deleted because you probably know it very well that your wallet was malicious from the word go and wanted to cover your tracks

2. You Uploaded the whole zip file and then scanned it, but we all know that virus total isn't that accurate with zip folders. Individual files in the zip folder are very malicious as pointed out in the OP as the person took time to scan each file.

3. False positive can happen but when 5-6 or 8 engines detect something, then it probably not a false positive.

4. The claim of someone's Ethers being stolen came from your own thread and not the "other fake threads"

Quote from: MC_Bocha on April 22, 2019, 03:30:41 AM

after you install the wallet, took the 1.7 ether 0x566128F92063D95178b88b69D19C6E9b90796be5

I am even surprised why the DT members didn't tag you and the other profile that was reported by OP.

catalanscoin

newbie

Activity: 5

Merit: 0

Thanks for your warning. I hope you prevented people from downloading fake wallets.
This is the only official ANN (nº 1 of your links): https://bitcointalksearch.org/topic/pow-catalanscoin-the-free-social-and-catalan-cryptocurrency-5128919
2 and 3 were phishing attemps.

I am sorry to answer on this old thread. It is on the first google positions, therefore, I had to answer in order to clean our damaged image.

CatalansCoin wallets were compiled in my own laptop, there is no virus here, nor the wallet ask for Administrator rights. Those threads are people impersonating us. Im sorry that some people lost ethereum after installing fake wallets, but there is nothing we can do.

There is no virus here, but I still decided to delete the first version of the wallet on github. We even already made a hardfork so the first release is useless at this point.

The new wallet hash is 8b634554b6ecd96f732ae83bfe56155e4ab62992df4c53adf76375a8263230dc

This wallet still show false positives on virustotal, however I can assure It's virus free: https://www.virustotal.com/gui/file/8b634554b6ecd96f732ae83bfe56155e4ab62992df4c53adf76375a8263230dc/detection

As I said on the official thread, If you are unsure when downloading a wallet, please check If you are using the official website / github, compile from sources or ask team. Even a file with 0 detections can be malicious.

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

Quote from: bL4nkcode on April 27, 2019, 08:41:42 PM

You should report to moderator their ann thread instead if this is really a virus. Though most of the client wallet are detected as malware of most AV even the core client but the fact that this project is just a joke and potential scam. I will not mind them instead.

Yes most have false positives but it's usually with a couple of AVs, not 8 or 10.
I reported to the mods but i am not sure how long they take to delete the threads.

I think DT members should so something for a mean time by tagging this chaps because I think there is a ring of guys spreading this malware over and over again.

Quote from: MC_Bocha on April 22, 2019, 03:30:41 AM

after you install the wallet, took the 1.7 ether 0x566128F92063D95178b88b69D19C6E9b90796be5

A number of people are already victims.
Look at the transactions in one of the hacker's addresses
https://etherscan.io/address/0x679db306f7d4b04ff76c8ba4c60991c0d7e76f8e

bL4nkcode

copper member

Activity: 2142

Merit: 1305

Limited in number. Limitless in potential.

You should report to moderator their ann thread instead if this is really a virus. Though most of the client wallet are detected as malware of most AV even the core client but the fact that this project is just a joke and potential scam. I will not mind them instead.

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

What happened: CatalansCoin wallet is infected with Malware

1. Scammers Profile Link: https://bitcointalksearch.org/user/catalanscoin-2577541

ANN: https://bitcointalksearch.org/topic/pow-catalanscoin-the-free-social-and-catalan-cryptocurrency-5128919
[Archived]: http://archive.fo/eKWye

2. Scammers Profile Link: https://bitcointalksearch.org/user/alexduma-1079176

ANN: https://bitcointalksearch.org/topic/pow-catalanscoin-the-free-social-and-catalan-cryptocurrency-5133111
[Archived]: http://archive.fo/4uzH1

3. Scammers Profile Link: https://bitcointalksearch.org/user/edwinosky-1986279

ANN: https://bitcointalksearch.org/topic/pow-catalanscoin-the-free-social-and-catalan-cryptocurrency-5135335
[Archived]: http://archive.fo/5tHMw

Website: http://catalanscoin.com
[Archived]:http://archive.fo/OlUJr

Github:https://github.com/catalanscoin/catalanscoin
Archived:http://archive.fo/QSrCO

Windows wallet zip file has 4 executable files in it

Code:

https://github.com/catalanscoin/catalanscoin/releases/download/0.1.0/Windows-Release.zip

1. CatalansCoind.exe

14 engines detected malware in the file
https://www.virustotal.com/#/file/06c6425ef2a6b2ce555e31b6703ac5a5be68ec149bf39633162e5c2cb097ec7a/detection

2. zedwallet.exe

5 engines detected malware in this file
https://www.virustotal.com/#/file/8b0c8a6259979fbe559d8a6975bfe364fc2552c9964940f1b79450c45d202c3a/detection

3. catalans-service.exe

2 engines detected malware in the file
https://www.virustotal.com/#/file/40051cfccec260657e58824be2983cdee3ab15e9573b397c43dfdd29e2a1c4c1/detection

4. miner.exe

8 Engines detected Malware in the files
https://www.virustotal.com/#/file/3683f3a1c8c3cffc1bfbbae25ad191bef8beec76d8a736b185c0657ed8af47cb/detection

Topic: [SCAM] - CatalansCoin, Wallets are Infected with Malware!! (Read 242 times)