Bitcoin Forum

Economy => Scam Accusations => Topic started by: Boat4Sale on May 19, 2016, 11:28:07 PM



Title: Dropbox malware?
Post by: Boat4Sale on May 19, 2016, 11:28:07 PM
I just got some files shared by some random person called "bitcoin backup" and inside it was electrum-2.6.4.exe and wallet.js

Is this malware? or some other type of hack/phishing attempt?


Title: Re: Dropbox malware?
Post by: --Encrypted-- on May 19, 2016, 11:33:40 PM
https://bitcointalk.org/index.php?topic=1478385.0;topicseen

when someone shared some files out of nowhere, don't open them.
maybe post the link here. but remove the htt.ps://www. and write something [beware! might be malware.] just in case.


Title: Re: Dropbox malware?
Post by: Quartx on May 19, 2016, 11:37:46 PM
Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand


Title: Re: Dropbox malware?
Post by: Boat4Sale on May 19, 2016, 11:40:51 PM
Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?


Title: Re: Dropbox malware?
Post by: --Encrypted-- on May 19, 2016, 11:46:53 PM
Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?

it's a .js formatted (http://whatis.techtarget.com/fileformat/JS-JavaScript-source-code) file named "wallet".  ::) there can be anything inside.


Title: Re: Dropbox malware?
Post by: Boat4Sale on May 19, 2016, 11:51:38 PM
Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?

it's a .js formatted (http://whatis.techtarget.com/fileformat/JS-JavaScript-source-code) file named "wallet".  ::) there can be anything inside.

Yeah but would a electrum wallet be stored at wallet.js?


Title: Re: Dropbox malware?
Post by: --Encrypted-- on May 20, 2016, 12:15:18 AM
Yeah but would a electrum wallet be stored at wallet.js?

getting greedy, aren't we?
afaik you can't store a file within .js file.


Title: Re: Dropbox malware?
Post by: Boat4Sale on May 20, 2016, 12:17:55 AM
Yeah but would a electrum wallet be stored at wallet.js?

getting greedy, aren't we?
afaik you can't store a file within .js file.

lol - I like money.

anywho its a virus..

https://www.virustotal.com/en/file/db398e8d1d42b777d88c0cc0dc062bb8d4e54ed451624a845c64db0448fe6897/analysis/


Title: Re: Dropbox malware?
Post by: Shiroslullaby on May 20, 2016, 12:19:50 AM
.js is a Javascript file.
I would definitely not open any files from a dropbox unless you know the owner and know the files in it are okay.


Title: Re: Dropbox malware?
Post by: Boat4Sale on May 20, 2016, 12:25:42 AM
.js is a Javascript file.
I would definitely not open any files from a dropbox unless you know the owner and know the files in it are okay.

The note that came with the notification said "Send 1 btc to Alan. Leave 2.7 btc in main wallet".


To be honest this is some good hacking technique, I was so tempted to open it to see if any bitcoins would fall out, lucky I posted here then scanned it!


Title: Re: Dropbox malware?
Post by: techgeek on May 20, 2016, 07:50:39 AM
This is why you label your own back up file to something you recognize.

Anything else should be assume its a malware or trojan attempt, and if that happens youre screwed.

Cause basically you need a new computer.