Trojan hijack my clipboard and change my bitcoin address

pooya87

legendary

Activity: 3472

Merit: 10611

Quote from: timpire on September 02, 2016, 05:15:59 AM

Quote

OP, did you have any antivirus software installed? What was that?
If you didn't have, you should consider install one, even one of the free products.
If you did have, please share more details, since maybe there's a product or configuration others also have and it is inefficient.

Thanks for sharing this experience.

I do have antivirus which is Kaspersky Internet Security but it was disable because it blocks one of the bitcoin faucet that i always access to.

never disable your antivirus especially on a faucet site.
if you really want to access a site that is blocked, just learn how to add it to the exclusion list of your antivirus. and every one of them have something like that although you should make sure the URL is safe and then add it.
this may help you: https://support.kaspersky.com/5418

Zadicar

legendary

Activity: 1302

Merit: 1018

Cashback 15%

Quote from: timpire on September 02, 2016, 12:58:44 AM

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again. Grin

I experienced the same scenario when im trying to transafer funds to another address luckily ive noticed it right away because i have a habit on double check or even triple the address before i send thats why it saves me from that. There are really malwares that cant be detected by AV.

Mike8

sr. member

Activity: 291

Merit: 250

Having more than one antivirus software in the same time can make them all work bad. At least some say so.
Switching off antivirus is bad. If you want to keep for whatever reason an unsafe environment, use a virtual machine.

HeroCat

hero member

Activity: 658

Merit: 500

Good antivirus is not easy to find, nowadays almost any antivirus company claim, that its antivirus is the best. But I think using Kaspersky is the best option, and especially if you use also Anti Malware soft. Of course there are more good solutions, but most often expensive ones, not for everyday user. The main advice - never switch off Kaspersky, it can cause a lot of problems then. Grin

pereira4

legendary

Activity: 1610

Merit: 1183

You need to backup your wallet and format your hard disk immediately. Also change password for every single login and including password for deciphering the bitcoin wallet itself. Your computer is compromised now and there is no 100% safe way to get it clean other than formating, must delete everything quick, we don't know if you may have a keylogger too.

unamis76

legendary

Activity: 1512

Merit: 1009

Now the question is, what did you do or download in order to have this trojan installed? Would be helpful to sort out sources of these things.

timpire

newbie

Activity: 4

Merit: 0

Quote

OP, did you have any antivirus software installed? What was that?
If you didn't have, you should consider install one, even one of the free products.
If you did have, please share more details, since maybe there's a product or configuration others also have and it is inefficient.

Thanks for sharing this experience.

I do have antivirus which is Kaspersky Internet Security but it was disable because it blocks one of the bitcoin faucet that i always access to.

asriloni

legendary

Activity: 3038

Merit: 1024

Leading Crypto Sports Betting & Casino Platform

Quote from: Mike8 on September 02, 2016, 03:12:58 AM

OP, did you have any antivirus software installed? What was that?
If you didn't have, you should consider install one, even one of the free products.
If you did have, please share more details, since maybe there's a product or configuration others also have and it is inefficient.

Thanks for sharing this experience.

you are right,anti virus is really needed nowadays,if it's about money,i really encourage to pay for premium anti virus for the security and safety
it's better paying off the antivirus company for a little money rather than getting hacked than suddenly become poor,it's digital world that criminality is everywhere

Mike8

sr. member

Activity: 291

Merit: 250

OP, did you have any antivirus software installed? What was that?
If you didn't have, you should consider install one, even one of the free products.
If you did have, please share more details, since maybe there's a product or configuration others also have and it is inefficient.

Thanks for sharing this experience.

NorrisK

legendary

Activity: 1946

Merit: 1007

Quote from: MyBTT on September 02, 2016, 01:31:03 AM

You're really lucky you noticed. Remember to always be vigilant against viruses. You never know when you can get one. I got One before but luckily I caught it.

It is not luck that you notice something like this.. You should always and I mean always double check to see if the address is still the same.

I recommend using a hardware wallet like a trezor in this case, keeps you safe from bitcoin and also forces you to double check the address on the trezor itself. So even if hardware changes the address, you will always see the receiving address on the device itself and can confirm if it is where you want to send your coins to or not.

davis196

hero member

Activity: 2968

Merit: 913

Quote from: timpire on September 02, 2016, 12:58:44 AM

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again. Grin

Wow.This is a pretty nasty malware. Angry

Usually i use Malwarebytes to clean my PC every week.

I`m not sure if this is enough for such malware. Sad

I`m very carefull when i use bitcoin addresses so it`s impossible to scam me.

rphk

full member

Activity: 210

Merit: 100

Quote from: timpire on September 02, 2016, 12:58:44 AM

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again. Grin

good that you noticed early , now days there are lot of malware's , trozan and people are trying to hack which will try to gather details.It is better always keep the PC's secured with security feature like antivirus etc , and using strong passwords .

shinratensei_

legendary

Activity: 3136

Merit: 1024

Leading Crypto Sports Betting & Casino Platform

Okay, nice aware and that will sue me for checking for twice about my address clipboard, another from that I ever finding my friend is finding in their PC but I don't know the trojan works. Huh

But I never get this malware in my PC I think very recommended for putting anti-malware in every PC in this time.

Senor.Bla

sr. member

Activity: 280

Merit: 253

it is true that double checking and a safe environment (and backups do not hurt) are important. not everyone does that and they only start when they lose money. the sad part is that for every person who manage to notice this there are probably two who do not and lose some coins.

bedeskon

full member

Activity: 126

Merit: 100

my friend got that virus i don't know what he did before but he think after he download some altcoin wallet, untill now even got it or not i always double check recipient address before i send bitcoins

MyBTT

sr. member

Activity: 378

Merit: 250

You're really lucky you noticed. Remember to always be vigilant against viruses. You never know when you can get one. I got One before but luckily I caught it.

jhenfelipe

hero member

Activity: 1372

Merit: 647

Quote from: timpire on September 02, 2016, 12:58:44 AM

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again. Grin

It's nice to know that the attackers didn't get any of your coins. Bitcoin users must be aware of the existence of this malware, for them to be extra careful. That's why I'm always checking the address that I'm pasting, if it really matches on the wallet address that I copied. Well, luckily I haven't been attacked by this malware and hopefully not in the future.

Trojan.Coinbitclip? Read more here: https://www.symantec.com/security_response/writeup.jsp?docid=2016-020216-4204-99

BeginnerCoin

member

Activity: 70

Merit: 10

Good catch! Unfortunately these types of malware trojans are all too common. I think everyone has been affected by something like this at one point or another, whether you want to admit it or not.

And if you haven't been affected, then you simply haven't been adventurous enough. :-)

Be careful and scan your computer regularly, and notice things like this, and you'll be fine. As long as you're not holding a large amount of value you're fine.

trashman43

full member

Activity: 298

Merit: 100

glad you noticed. but if you're getting trojans like this, you need to fundamentally change the way you use your PC. if you store bitcoins on a PC, you need to be very careful about what sites you visit and especially what files you download.

timpire

newbie

Activity: 4

Merit: 0

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again. Grin

http://picpaste.com/pics/btc_attack-8XWLtn9r.1472792199.jpg

Topic: Trojan hijack my clipboard and change my bitcoin address (Read 2258 times)