Bitcoin Forum

Alternate cryptocurrencies => Altcoin Discussion => Topic started by: FreeTibet on May 11, 2013, 12:33:46 PM



Title: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: FreeTibet on May 11, 2013, 12:33:46 PM
Don't download yacoin Windows binary.. it sends your bitcoin wallet.dat to this page: http://bitcoin-ticker.netne.net/u.php

I observed it with Fiddler. Stay safe, compile the code yourself!


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Benson Samuel on May 11, 2013, 12:36:20 PM
Anyone else detected this?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: LewiesMan on May 11, 2013, 12:36:46 PM
Yeah I had my coins stolen last thing I uninstalled was yacoin

What is fiddler?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Benson Samuel on May 11, 2013, 12:37:42 PM
Yeah I had my coins stolen last thing I uninstalled was yacoin

What is fiddler?

http://fiddler2.com/get-fiddler


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: manrus on May 11, 2013, 12:41:10 PM
My bitcoin wallet is encrypted. I think this safe my bitcoins)


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Benson Samuel on May 11, 2013, 12:41:57 PM
Anyone else detected this?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: xibeijan on May 11, 2013, 12:42:41 PM
Is this true?

Please send output of AV scan and fiddler dumps.

Devs, if this is true, you need to get clean binaries hosted securely on gihub or yacoin.org ASAP, then make an annoucement.

First step, confirmation this is true and not just a scare tactic.

I've clamav scanned and not found anything.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: ertness on May 11, 2013, 12:43:02 PM
Anyone else detected this?
I can confirm this, got a popup from my firewall for connects to netne.net

Just deleted everything yacoin.. I don't think the request went through but I will be moving to cold wallets


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Benson Samuel on May 11, 2013, 12:45:29 PM
Is this true?

Please send output of AV scan and fiddler dumps.

Devs, if this is true, you need to get clean binaries hosted securely on gihub or yacoin.org ASAP, then make an annoucement.

First step, confirmation this is true and not just a scare tactic.

I've clamav scanned and not found anything.

This looks like a FUD thread.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Boba on May 11, 2013, 12:46:48 PM
Smells very much like fud. Until some respected dev confirmes I'm gonna asume it's just fud.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Tranz on May 11, 2013, 12:47:30 PM
Where did you get your YaCoin wallet binary from? I assume we are talking about qt?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: iANDROID on May 11, 2013, 12:48:39 PM
IP adress is: 31.170.160.169
Wireshark is not telling me nothing for this IP.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Rannasha on May 11, 2013, 12:49:06 PM
It seems a bit fishy that these warnings come out a few days after YaCoin has launched, from relatively new members. I'll hold judgement until a more established poster shares his views.

My BTC wallet is encrypted anyway.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: com911 on May 11, 2013, 12:50:11 PM
whoops  :o


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Brewins on May 11, 2013, 12:53:33 PM
Someone just sent coins from my wallet..


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: rme on May 11, 2013, 12:57:17 PM
Just to be safe I have shut down the .netne.net website with my cannons.

 ;)


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: iANDROID on May 11, 2013, 01:01:13 PM
YACoin is rich now:

https://blockchain.info/fr/address/1RPrtamTACe1TcqkX2FmWVtRzmQJ6CfRx


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: iPaulito on May 11, 2013, 01:01:19 PM
Just to be safe I have shut down the .netne.net website with my cannons.

 ;)

Good job :-)


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Aahzman on May 11, 2013, 01:02:47 PM
YACoin is rich now:

https://blockchain.info/fr/address/1RPrtamTACe1TcqkX2FmWVtRzmQJ6CfRx
Holy fuck, we need a moderator to delete all of Yacoin's posts


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: LTCesk on May 11, 2013, 01:12:27 PM
YACoin is rich now:

https://blockchain.info/fr/address/1RPrtamTACe1TcqkX2FmWVtRzmQJ6CfRx

Was all that stolen? :/
Im broke as shit so they wont get anything from me XD


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Tittiez on May 11, 2013, 01:16:31 PM
Someone confirm, right now all I see is FUD. Bitcoin-ticker.net could also be a node, mind you.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: jayjay2244 on May 11, 2013, 01:19:32 PM
Is it a rootkit? (hidden proccess) or am i safe now ive deleted it? Sent all my coins to btc-e though and check regedit ect as a precaution


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Mushoz on May 11, 2013, 01:21:51 PM
I can't replicate the findings in Process Monitor. Could someone please post some proof of Wireshark, process monitor or firewall screenshots?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: poly on May 11, 2013, 01:24:48 PM
I can't replicate the findings in Process Monitor. Could someone please post some proof of Wireshark, process monitor or firewall screenshots?
I'll try to figure out how to do that - my bitcoins were stolen too. Given how there are a lot of reports of yacoin, I'm pretty sure it is that, however I have downloaded quite a few programs recently.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: nocompare on May 11, 2013, 01:51:44 PM
BUMP YACOIN IS MALWARE


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: 🏰 TradeFortress 🏰 on May 11, 2013, 01:56:34 PM
I can't seem to reproduce this with the file downloaded from the OP.

SHA hashes?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Mike Christ on May 11, 2013, 01:58:14 PM
SHA hashes?

Bless you.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: rbdrbd on May 11, 2013, 01:59:46 PM
I can't seem to reproduce this with the file downloaded from the OP.

SHA hashes?

I can't either.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Mushoz on May 11, 2013, 02:02:31 PM
Me neither. People were probably using the infected Minerd.exe


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: e521 on May 11, 2013, 02:04:30 PM
YACoin is rich now:

https://blockchain.info/fr/address/1RPrtamTACe1TcqkX2FmWVtRzmQJ6CfRx
Holy fuck, we need a moderator to delete all of Yacoin's posts


ahahah


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: nearmiss on May 11, 2013, 02:34:33 PM
funny stuff.  Did you pay that "marketing service" I read about a few days back to go after this coin?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: seleme on May 11, 2013, 02:36:04 PM
funny stuff.  Did you pay that "marketing service" I read about a few days back to go after this coin?

Wouldn't be surprised at all.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: fenican on May 11, 2013, 02:38:53 PM
This is a lie.  No reputable tester has reported any issues with the *original* YAC windows client.

admins - please delete this thread it is spreading false information with no proof


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Simran on May 11, 2013, 02:41:27 PM
This is a lie.  No reputable tester has reported any issues with the *original* YAC windows client.

admins - please delete this thread it is spreading false information with no proof

Since no one is willing to do it, I will. Shit. Let me open up debugger.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: gpudude on May 11, 2013, 06:57:39 PM
Me neither. People were probably using the infected Minerd.exe

What one?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Oldsport on May 11, 2013, 06:59:28 PM
My idea is that the link to the site they posted is a hidden java drive buy. Use your minds people. Everyone's gonna be clicking that link, and they're gonna take over your account and post shit.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: gpudude on May 11, 2013, 07:02:12 PM
My idea is that the link to the site they posted is a hidden java drive buy. Use your minds people. Everyone's gonna be clicking that link, and they're gonna take over your account and post shit.

Link to what site?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: relm9 on May 11, 2013, 07:05:54 PM
My idea is that the link to the site they posted is a hidden java drive buy. Use your minds people. Everyone's gonna be clicking that link, and they're gonna take over your account and post shit.

Link to what site?

The one in the OP...


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: mc_lovin on May 11, 2013, 07:22:03 PM
FUD


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: mc_lovin on May 11, 2013, 07:24:10 PM
My idea is that the link to the site they posted is a hidden java drive buy. Use your minds people. Everyone's gonna be clicking that link, and they're gonna take over your account and post shit.

Link to what site?

The one in the OP...

Mod should edit out the URL in the top OP.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: alex_fun on May 11, 2013, 07:29:35 PM
and if link sends some trojans perhaps deal more switfly.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: Jaxkr on May 23, 2013, 04:29:00 AM
Just to be safe I have shut down the .netne.net website with my cannons.

 ;)
Awwww... That wasn't nice. Netne.net is a subdomain for a free hosting service. It's used by a lot of non-scam websites.


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: jasonslow on May 23, 2013, 04:51:55 AM
Beware all my coins are transfered to this address. http://blockchain.info/address/1FvMVtzxACJejfZvqtiSsTrUCpR2HYveB6


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: seleme on May 23, 2013, 04:53:52 AM
lol  ;D


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: xan_The_Dragon on May 23, 2013, 06:16:58 AM
Beware all my coins are transfered to this address. http://blockchain.info/address/1FvMVtzxACJejfZvqtiSsTrUCpR2HYveB6
im asssuming this is sarcasm since u had 1.5 million dollars not on a flash drive encryted in a safe?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: umair141 on May 23, 2013, 06:30:08 AM
Beware all my coins are transfered to this address. http://blockchain.info/address/1FvMVtzxACJejfZvqtiSsTrUCpR2HYveB6

WTF?


Title: Re: DO NOT DOWNLOAD YACOIN - SENDS WALLET.DAT TO http://bitcoin-ticker.netne.net/u.p
Post by: digger on May 23, 2013, 06:41:21 AM
Beware all my coins are transfered to this address. http://blockchain.info/address/1FvMVtzxACJejfZvqtiSsTrUCpR2HYveB6

you have so many BTC , but your wallet didn't been encrypted?