Title: Dropbox malware? Post by: Boat4Sale on May 19, 2016, 11:28:07 PM I just got some files shared by some random person called "bitcoin backup" and inside it was electrum-2.6.4.exe and wallet.js
Is this malware? or some other type of hack/phishing attempt? Title: Re: Dropbox malware? Post by: --Encrypted-- on May 19, 2016, 11:33:40 PM https://bitcointalk.org/index.php?topic=1478385.0;topicseen
when someone shared some files out of nowhere, don't open them. maybe post the link here. but remove the htt.ps://www. and write something [beware! might be malware.] just in case. Title: Re: Dropbox malware? Post by: Quartx on May 19, 2016, 11:37:46 PM Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand
Title: Re: Dropbox malware? Post by: Boat4Sale on May 19, 2016, 11:40:51 PM Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand does wallet.js mean anything? Title: Re: Dropbox malware? Post by: --Encrypted-- on May 19, 2016, 11:46:53 PM Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand does wallet.js mean anything? it's a .js formatted (http://whatis.techtarget.com/fileformat/JS-JavaScript-source-code) file named "wallet". ::) there can be anything inside. Title: Re: Dropbox malware? Post by: Boat4Sale on May 19, 2016, 11:51:38 PM Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand does wallet.js mean anything? it's a .js formatted (http://whatis.techtarget.com/fileformat/JS-JavaScript-source-code) file named "wallet". ::) there can be anything inside. Yeah but would a electrum wallet be stored at wallet.js? Title: Re: Dropbox malware? Post by: --Encrypted-- on May 20, 2016, 12:15:18 AM Yeah but would a electrum wallet be stored at wallet.js? getting greedy, aren't we? afaik you can't store a file within .js file. Title: Re: Dropbox malware? Post by: Boat4Sale on May 20, 2016, 12:17:55 AM Yeah but would a electrum wallet be stored at wallet.js? getting greedy, aren't we? afaik you can't store a file within .js file. lol - I like money. anywho its a virus.. https://www.virustotal.com/en/file/db398e8d1d42b777d88c0cc0dc062bb8d4e54ed451624a845c64db0448fe6897/analysis/ Title: Re: Dropbox malware? Post by: Shiroslullaby on May 20, 2016, 12:19:50 AM .js is a Javascript file.
I would definitely not open any files from a dropbox unless you know the owner and know the files in it are okay. Title: Re: Dropbox malware? Post by: Boat4Sale on May 20, 2016, 12:25:42 AM .js is a Javascript file. I would definitely not open any files from a dropbox unless you know the owner and know the files in it are okay. The note that came with the notification said "Send 1 btc to Alan. Leave 2.7 btc in main wallet". To be honest this is some good hacking technique, I was so tempted to open it to see if any bitcoins would fall out, lucky I posted here then scanned it! Title: Re: Dropbox malware? Post by: techgeek on May 20, 2016, 07:50:39 AM This is why you label your own back up file to something you recognize.
Anything else should be assume its a malware or trojan attempt, and if that happens youre screwed. Cause basically you need a new computer. |