Author

Topic: the new ETH PILL scam called now Project Morpheus!!! ATTENTION!!!!! (Read 1456 times)

full member
Activity: 1424
Merit: 225
It's back, A fresh coat of spam on all the miner threads.

It's not using Ethpill or Morpheus name, just hashup.
legendary
Activity: 3164
Merit: 3290
So i got this post today in my thread Report Malware and Suspicious Links here so Mods can take Action ! from an not long active User Account that was just woked up !

ok guys, you won.
You just bothered me with your filters, and every time I find something new, the maximum lasts a day.
No more spam, malwares and more, I'm leaving.

P.S.: say thank you suchmoonbot

I dont know if i should believe on this post or not but i guess we will see it in the next Days or weeks if we really won this Fight !
If we won it , a really big thank you to all Users that helped to report all this things.
full member
Activity: 1275
Merit: 141
The mods also need to kill the halvmining scam selling of asics. 

Their documents from SoS of Oregon are forged and clearly incorrect date vs SoS...also SoS site has never had a halvmining anything.

Scammers gonna scam...and not even very well.
jr. member
Activity: 557
Merit: 5
Now they are linking medium posts with the ethpill malware on all the miner topics.

Yes, can confirm.
I have reported the medium post but medium is not as quick as bitcointalk mods Sad
legendary
Activity: 3164
Merit: 3290
We and a lot Users have seen that already and they get reported as soon as possible when they show up.
If you see one of this posts or Users posting this kind of things just report them with " Report to Moderator Button " and all is good.
There was a shitload of them the last days and i guess the most or all of them is deleted for now.
newbie
Activity: 7
Merit: 0
Now they are linking medium posts with the ethpill malware on all the miner topics.

Yes, can confirm.
full member
Activity: 1124
Merit: 136
Now they are linking medium posts with the ethpill malware on all the miner topics.
legendary
Activity: 3164
Merit: 3290
Most of the new scam posts are new accounts with 14 total posts.

The total posts dosnt say anything about !
If you really want to see if its a suspicious User or Account just look when the last post from this User was done !
Mostly the latest posts over a year old and more and thats for sure a sign that it got hacked or sold to the people that posting this malware software download links.
There are even more ways to catch them but i dont want to let them know  Grin
full member
Activity: 1124
Merit: 136
Most of the new scam posts are new accounts with 14 total posts.
legendary
Activity: 3164
Merit: 3290
did the moderators add something? since right now, their posts are deleted almost immediately, this is definitely not manual
I guess that Moderators dosnt add something for automatic deleting this posts and threads as there other posts will be deleted also if you report it in a post !
Its possible that maybe suchmoon's reporting bot is activated on them or that they just looking more on it as a lot of Accounts got hacked in the last weeks and months,
with that shady download links and thats the reason why it will taken more care about.

Or some Users just reporting them instant if they show up.
hero member
Activity: 1484
Merit: 505
Just for let you all know there is a new Link out there with what they try to catch Users !

They use the word and link " HashrateUp for ETH " now , but there is now a other link behind what you can see !
The new link is a MEGA download link now !

Malware download Link

Code:
https://mega.nz/file/g9BRkSwY#OZzqPsbpkDztZJ4tOR8y_EBHXpVJR2QEQHPPVcFkqtI

Code:
New HashrateUp for ETH release
Support Algo: Ethash/KawPow/ProgPow

Download: [url=https://mega.nz/file/g9BRkSwY#OZzqPsbpkDztZJ4tOR8y_EBHXpVJR2QEQHPPVcFkqtI]HashrateUp for ETH[/url]


So if you see this MEGA Link please report it and watch out what kind of links you clicking !



did the moderators add something? since right now, their posts are deleted almost immediately, this is definitely not manual
legendary
Activity: 3164
Merit: 3290
Just for let you all know there is a new Link out there with what they try to catch Users !

They use the word and link " HashrateUp for ETH " now , but there is now a other link behind what you can see !
The new link is a MEGA download link now !

Malware download Link

Code:
https://mega.nz/file/g9BRkSwY#OZzqPsbpkDztZJ4tOR8y_EBHXpVJR2QEQHPPVcFkqtI

Code:
New HashrateUp for ETH release
Support Algo: Ethash/KawPow/ProgPow

Download: [url=https://mega.nz/file/g9BRkSwY#OZzqPsbpkDztZJ4tOR8y_EBHXpVJR2QEQHPPVcFkqtI]HashrateUp for ETH[/url]


So if you see this MEGA Link please report it and watch out what kind of links you clicking !

sr. member
Activity: 703
Merit: 272
We are glad to present you a completely new software that increases the performance of your video cards and CPU's.
For more than half a year, we have achieved excellent performance for GPU's and CPU's

Support algorithm's:
Ethash
RandomX

Support miners:
Claymore Dual
ETHminer
PhoenixMiner
TRMiner
TTminer
XMRig

Download:
https_://hashup-utilite.info/HashUpUtilite.zip

How to use :
Unzip the archive to any folder then run HashUpUtilite.exe
Wait for the message "Status - Running"
Then start your miner


Here are some examples of performance with HushUp-Utilite on Ethash

Nvidia                                     AMD

P104-100 - 38.5 Mh/s                       RX 470 - 28.1 Mh/s       
GTX 1060 - 24.5 Mh/s                       RX 480 - 30.2 Mh/s             
GTX 1070 - 30.1 Mh/s                       RX 570(Samsung) - 30.9 Mh/s             
GTX 1080 - 35.2 Mh/s                       RX 580(Samsung) - 33.6 Mh/s   
GTX 1080Ti - 49.7 Mh/s                     RX 580(Micron) - 35.8  Mh/s
GTX 1660S - 34.9 Mh/s                      RX 5600XT(Micron) - 46.7 Mh/s             
RTX 2060S - 45.7 Mh/s                      RX 5700XT(Samsung) - 56.3 Mh/s     
RTX 3080 - 106.9 Mh/s                      RX 5700XT(Micron) - 59.7 Mh/s


CPUs (Randomx)

XEON E3-1225 V2 @3392MHZ    2590 H/s
AMD RYZEN 7 1700                4730 H/s
INTEL XEON E5-4627 V3      5900 H/s
RYZEN 5 3600                    8100 H/s
RYZEN 7 3700X -           10116 H/s
RYZEN 9 3900X                  12965 H/s
RYZEN 3950X                   19200 H/s

For any questions, you can always write to the mail [email protected]

they've updated their scam with new link and info... but format still the same

https_://www.hashup-utilite.info/
full member
Activity: 1424
Merit: 225

Thanks. The're spamming many threads continuously. Best to just report them to the moderator as you find them.
legendary
Activity: 3164
Merit: 3290
lately an incredible amount of scam has appeared in posts that post links to software  Cry

Not only lately , its over the last year that there some posts and ANN threads that are Fake ones with Malware download links and Fake Github Accounts.
Just check 2 or 3 times the link if you download anything and maybe use google for searching if there is already something like it.
Helps you maybe to be safe and that you dont get hacked of a shady software.
newbie
Activity: 16
Merit: 0
lately an incredible amount of scam has appeared in posts that post links to software  Cry
legendary
Activity: 3164
Merit: 3290
I think there's a bot posting all of these, because as soon has one gets moderated, another pops in it's place almost immediately.
Yes it looks like they have some kind of bot for it , or some script that instant post the same post with another User.
I was thinking that the last weeks or days when a few posts got deleted and the Users banned ,
a few minutes later there is posting a punch of other Users .

But as far as we keep reporting them and they get deleted its a waste of Accounts and there time !
full member
Activity: 1424
Merit: 225
I think there's a bot posting all of these, because as soon has one gets moderated, another pops in it's place almost immediately.

Agreed. I also wonder where the're getting all the userids.
sr. member
Activity: 703
Merit: 272
I think there's a bot posting all of these, because as soon has one gets moderated, another pops in it's place almost immediately.
DrG
legendary
Activity: 2086
Merit: 1035
Just had to report 3 posts for this again. It's the same person logging into multiple accounts and spamming it in the Claymore and Phoenix miner threads. New users will of course click the link and get malware/trojans on their system/network. Hopefully it's just limited to crypto and does not proliferate into keylogging or other vectors that would result in drained bank accounts and identity theft.
full member
Activity: 1275
Merit: 141
The scammer (appears to be russian and the whois shows an individual in russia is owner) has been very active last few days.  Keep reporting when you see it. 

Replying here so it gets back on main page to warn others.

full member
Activity: 1424
Merit: 225
Since the Ethpill scam has been accused of stealing wallets it might be a good time to remind people to protect their wallet.

Best practice is to install the wallet on a seperate system that isn't used for mining, preferably firewalled from mining rigs.
If that's not practical or you have a multi-purpose system create a seperate non-root user for all mining related software.

Be very suspicious of any software that requires root/admin. User protection doesn't work against root processes.
If root/admin is needed for mining, do it only on dedicated mining rigs. Never mix a wallet with root mining on the same system.

Allways password protect and backup the wallet.

I'm sure there are more.

legendary
Activity: 3164
Merit: 3290
A new URL to avoid:

http:// ethereumpill . info / Project Ethereum Pill . zip

Thanks Buddy for let me know !

I got the Github Account banned and deleted already that they have created today !
So i guess that why they open up this website , but i just forwarded the website to possible get blacklisted here on bitcointalk so the link cant posted anymore !
Fingers crossed this will work and is possible.
full member
Activity: 1424
Merit: 225
A new URL to avoid:

http:// ethereumpill . info / Project Ethereum Pill . zip
legendary
Activity: 3164
Merit: 3290
I got the old Github Account of them deleted!

So i guess you all have already seen it that they have a new Fake github link with what they spreading there Malware !

Here is the new link they posting ! Please dont download or click on the link if you find them its Malware

Code:
https://github.com/ProjectPill/EthereumPill/releases/tag/1.1.0

If you see this kind of link in any Post , please report them to the Moderators


Regards Lafu
sr. member
Activity: 703
Merit: 272
Thanks for the heads up, so can we safely conclude that at the moment there is no "ETH Pill" product in the market that greatly enhances hash rates for Nvidia cards,

in particular I haven't found any modification that creates a considerable improvement for 1080 TI's, in the style of ETHlargement pill, so let me know if there is anything which actually works...

no... there's that old one from ohgadagirl... or something like that from a couple years ago for nvidia cards.. i.e. 1080 series... don't know if it worked for 2080 cards as i never had any 2080 cards nor 30xx cards.

However, there is no "Eth Pill" product for AMD cards.  Never has been for AMD cards.
legendary
Activity: 2128
Merit: 1657
Thanks for the heads up, so can we safely conclude that at the moment there is no "ETH Pill" product in the market that greatly enhances hash rates for Nvidia cards,

in particular I haven't found any modification that creates a considerable improvement for 1080 TI's, in the style of ETHlargement pill, so let me know if there is anything which actually works...
sr. member
Activity: 703
Merit: 272
Why are there well over 50 different people now with well over 200 posts doing this?
Ban everyone who does it.
Seems sketchy

We fighting them over half of a year now or longer.

thank you for your time and dedication to this.  Smiley Smiley
legendary
Activity: 3164
Merit: 3290
Why are there well over 50 different people now with well over 200 posts doing this?
Ban everyone who does it.
Seems sketchy

They getting banned and the most of this Accounts are hacked and or sold  !

The person behind all that use them to post this shady links , sadly there are some Users that fall into this trap and get hacked!
Also its possible that there coins and personal details also gets stolen.

We fighting them over half of a year now or longer.
jr. member
Activity: 124
Merit: 2
Why are there well over 50 different people now with well over 200 posts doing this?
Ban everyone who does it.
Seems sketchy
sr. member
Activity: 703
Merit: 272
Just to let you all know the Link for the Fake Ethpil with Malware included has changed !

Dont click or quote any kind of posts with this Link if you see it ! Its Malware and dangerous
Code:
https://github.com/ProjectEthereum/
Just report the posts and threads and the Users that posting that Link !

Regards Lafu


they've been super active today.  report one message, and 10 minutes later another pops in it's place.
legendary
Activity: 3164
Merit: 3290
Just to let you all know the Link for the Fake Ethpil with Malware included has changed !

Dont click or quote any kind of posts with this Link if you see it ! Its Malware and dangerous
Code:
https://github.com/ProjectEthereum/
Just report the posts and threads and the Users that posting that Link !

Regards Lafu
legendary
Activity: 3164
Merit: 3290
Lately I noticed the mods quickly delete the posts and usually someone requotes the post and says its a virus and to avoid downloading. However I am wondering how much longer this will go on for.
We looking everyday for them and reporting the posts and threads instant as we see this shady posts.
Also we track them and the most times we know when they have posted , but there is not much we can do as reporting .
So if you see one of them just report the Account , so more reporting so faster they get deleted.
I also keep a record of the most of users in my thread .
DrG
legendary
Activity: 2086
Merit: 1035
The reason why people are falling for this scam is because most of the time its posted by a user who is NOT a newbie. They got some rank and makes people feel comfortable and they download the virus.

The accounts that post this virus is usually some account where they re-used their username and password from somewhere else and they don't change the password to cause a flag.

Lately I noticed the mods quickly delete the posts and usually someone requotes the post and says its a virus and to avoid downloading. However I am wondering how much longer this will go on for.

You know what's sad is that Windows Defender will manage to block pretty much every miner you put on your PC. Malwarebytes will do the same thing. Neither of these programs will give you a decent warning about a fake Github link, at least not until somebody like Google has pinged it as a bad actor and that can take ages.

Crypto is still not popular enough that there isn't a "ignore mining software" option of most Antivirus... guess it doesn't fit with their agenda.
legendary
Activity: 3808
Merit: 1723
The reason why people are falling for this scam is because most of the time its posted by a user who is NOT a newbie. They got some rank and makes people feel comfortable and they download the virus.

The accounts that post this virus is usually some account where they re-used their username and password from somewhere else and they don't change the password to cause a flag.

Lately I noticed the mods quickly delete the posts and usually someone requotes the post and says its a virus and to avoid downloading. However I am wondering how much longer this will go on for.
legendary
Activity: 3164
Merit: 3290
They changed the Github Link again !

Now it is

Code:
github.com/ProjectEthereumPill/
Just wanted to let you all know !
Dont download anything with that Link or any other Link that has Ethpill in it !
Check the Links first and do some research before you download anything !
full member
Activity: 1424
Merit: 225
Just a bump, another one popped up. Reported.
legendary
Activity: 3164
Merit: 3290
Another locked scam thread posted a couple off hours ago.

It's become a game of whack-a-mole for the mods.
Yeah tha last 2 weeks they went very busy for posting this scrap shit links and posts , threads !
But i report them every day and look after them and there are a few others that look for this too.
As long that the posts get reported all is good and they get deleted

I know its a pain in the Ass but that the only thing we can do , keep reporting !
full member
Activity: 1424
Merit: 225
Another locked scam thread posted a couple off hours ago.

It's become a game of whack-a-mole for the mods.
full member
Activity: 1424
Merit: 225
As someone else mentioned, why are newbies allowed to post self moderated threads?
legendary
Activity: 3164
Merit: 3290
Watch Out

There is  Fake Miner with Fake Github here :
Qitmer Miner v0.7.1 [Update] Cuckaroo , Cuckatooo , Blake2b + 3 algo
Code:
https://github.com/Qitmer/

And also the Fake Links with Malware for Ethpil has changed to :
Code:
https_://github.com/EthereumPillProject/

Dont download anything with that links !


legendary
Activity: 3164
Merit: 3290
I was once a victim of this shitty stuff, at first I believe that it is legit apps, so I downloaded it and used in one of my rig, but the effect is became worst my rig became laggy and there's a lot of pop up coming in my rig, Thanks to the people here who post their review, I downloaded it the first day the scammer post it here. SO BE CAREFUL guys!

Hope you got fully rid of all the shady files and software and you are safe now !

The problem and mostly new Users making that misstake that they believe the posted links and download here are safe and secure !
You always should be check the Links first and do some research before you click anything from here.

1.Search the Forum
2.Search on Google

This should be get you for sure some results that helps you to see if the link or download is shady or ok !
Another good thing is when you downloaded something to check it Virustotal after the download and check it again after you unziped it.
hero member
Activity: 2114
Merit: 562
I was once a victim of this shitty stuff, at first I believe that it is legit apps, so I downloaded it and used in one of my rig, but the effect is became worst my rig became laggy and there's a lot of pop up coming in my rig, Thanks to the people here who post their review, I downloaded it the first day the scammer post it here. SO BE CAREFUL guys!
full member
Activity: 1424
Merit: 225

Dont worry buddy i looking every day about them and reporting them as soon as i see them !
Feel free to post in my thread about , we got already somebody that got his account hacked and it was recovered.
Thats why keep an record in my thread also , thanks for also that you keep your eyes open.

I only post if it's immediately after the malware post so the warning is just above it in the message list.
I guess that doesn't matter now.
legendary
Activity: 3164
Merit: 3290

Dont worry buddy i looking every day about them and reporting them as soon as i see them !
Feel free to post in my thread about , we got already somebody that got his account hacked and it was recovered.
Thats why keep an record in my thread also , thanks for also that you keep your eyes open.
full member
Activity: 1424
Merit: 225
legendary
Activity: 3164
Merit: 3290
Its already be reported from my side , and as more the thread are reporting so sooner it should be get deleted.
Guess when a Global Moderator comes on and see the report it will be deleted as soon as possible.
Just keep reporting this Fake Threads and post and they will be getting removed and the Accounts banned.
full member
Activity: 1424
Merit: 225
It's gone now. Thanks.
full member
Activity: 1124
Merit: 136
New ETH Pill scam.
They call it now Project Morpheus, but same stupid hashrates which are not possible to achieve.

Now they lock thread at start, so no one can warn other members.
https://bitcointalksearch.org/topic/--5274291

MODS I DON´T KNOW WHY YOU NEED SO MUCH TIME TO DELETE MALICIOUS THREADS.



Mods are real people and have lives outside of this forum.  Just report the thread and its usually gone the next day.
member
Activity: 1558
Merit: 69
New ETH Pill scam.
They call it now Project Morpheus, but same stupid hashrates which are not possible to achieve.

Now they lock thread at start, so no one can warn other members.
https://bitcointalksearch.org/topic/--5274291

MODS I DON´T KNOW WHY YOU NEED SO MUCH TIME TO DELETE MALICIOUS THREADS.

Jump to: