Bitcoin Forum

Economy => Scam Accusations => Topic started by: ReCat on January 18, 2014, 05:25:51 PM



Title: http://mybitcoinjob.com/ Very suspicious site, May be password stealing
Post by: ReCat on January 18, 2014, 05:25:51 PM
A certain respectable forum member around here pointed me to that site to investigate if it was real or not. I registered, and after registering I realize that the whole site is basically static files with the only actual server sided code being the login form and registration form. All that the site contains is a "refer other users for free BTC" form.

It raises large suspicion for being a scam, in the form of a password stealer that may be used to try and compromise web wallets and, especially, since they ask for your BTC address, Potentially even blockchain.info wallets.

http://mybitcoinjob.com/

Anyone know anything about this?


Title: Re: http://mybitcoinjob.com/ Very suspicious site, May be password stealing
Post by: sase007 on January 18, 2014, 05:43:19 PM
SCAM


login: test
pass: test

Dont waste your time with that shit...


Title: Re: http://mybitcoinjob.com/ Very suspicious site, May be password stealing
Post by: ReCat on January 18, 2014, 06:01:59 PM
SCAM


login: test
pass: test

Dont waste your time with that shit...
I thought so also. Definitely a scam.

I've looked up the whois, and I find this.

Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA

Through their abuse forms, i have found it was registered through NameCheap, so I have now sent abuse reports to both the whois guarder and the namecheap abuse and legal department. Such a disgusting thing. Hope it's taken down..

http://megastoon.com/ It seems to be a plain copypaste of this site with some things changed to say BitCoin instead.

Edit: Found something else.

http://whos.amung.us/stats/bitcohacker/

Look how many people are visiting that site!


Title: Re: http://mybitcoinjob.com/ Very suspicious site, May be password stealing
Post by: sase007 on January 18, 2014, 06:16:01 PM

http://megastoon.com/ It seems to be a plain copypaste of this site with some things changed to say BitCoin instead.


Scaned them as well, got baned immediately :D

No errors I can use so far but page look like sh*t and it is 99.99% scam... :)


Title: Re: http://mybitcoinjob.com/ Very suspicious site, May be password stealing
Post by: ReCat on January 18, 2014, 06:23:43 PM
Have a look at the whosamungus ticker i managed to dig up.

http://whos.amung.us/stats/bitcohacker/

Unbelievable amount of activity on the site. A bare minimum of 100 visitors at any given time.. This could be harvesting SO MANY user passwords and attempting to implant viruses on so many computers. It could even be a botnet.


Title: Re: http://mybitcoinjob.com/ Very suspicious site, May be password stealing
Post by: sase007 on January 18, 2014, 07:13:01 PM
You have to download some program to get your btc ("btc")...

So - wallet stealer or some virus?

It is too small for botnet...


Title: Re: http://mybitcoinjob.com/ Very suspicious site, May be password stealing
Post by: ReCat on January 18, 2014, 08:17:35 PM
You have to download some program to get your btc ("btc")...

So - wallet stealer or some virus?

It is too small for botnet...

Most likely a wallet stealer, then.