Bitcoin Forum

Economy => Reputation => Topic started by: IIV on January 12, 2020, 02:09:19 AM



Title: Tens of Fake accounts promoting scam (Bumping)
Post by: IIV on January 12, 2020, 02:09:19 AM
Almost all of post from these New members (mostly 1 merit) account are on Malwarechain announcement thread. https://bitcointalk.org/index.php?topic=5210851

They are doing a bumping service as well as abusing merits. As well creating spam on a single thread.

1. https://bitcointalk.org/index.php?action=profile;u=1837611
2. https://bitcointalk.org/index.php?action=profile;u=1653300
3. https://bitcointalk.org/index.php?action=profile;u=1539515
4. https://bitcointalk.org/index.php?action=profile;u=1288664
5. https://bitcointalk.org/index.php?action=profile;u=933175
6. https://bitcointalk.org/index.php?action=profile;u=642457
7. https://bitcointalk.org/index.php?action=profile;u=543940
8. https://bitcointalk.org/index.php?action=profile;u=932173
9. https://bitcointalk.org/index.php?action=profile;u=1653300

Everytime they post, they mostly act like they don't know anything about the project or ask question while others answer to themselves.
It's not just these bumpers there are several more and the whole team of this project are said to be a serial scam coin creators. But I have no time to research and find proof of that. Anyone researching over that are welcome.


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: YOSHIE on January 12, 2020, 07:25:39 AM
But I have no time to research and find proof of that. Anyone researching over that are welcome.
8. https://bitcointalk.org/index.php?action=profile;u=932173
They are indeed multi-accounts, so many accounts they have, I take one of them, that account: bitcok (https://bitcointalk.org/index.php?action=profile;u=932173), Let's see where he takes us, of course to the connected and banned Alt account.

Alt account, which involved a conversation in the campaign.

Accounts Connected:

1. Arek gagu (https://bitcointalk.org/index.php?action=profile;u=899574)
2. batagor225 (https://bitcointalk.org/index.php?action=profile;u=939413)
3. Koko UK (https://bitcointalk.org/index.php?action=profile;u=897395)
4. cimong371 (https://bitcointalk.org/index.php?action=profile;u=939050)

Proof:

Bitcoin Address: 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

http://archive.is/wip/otW9Q

Link: https://bitcointalk.org/index.php?topic=1738683.msg17401051#msg17401051
Quote
Your Bitcointalk Username: Koko UK
Your BTC Address:18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

http://archive.is/wip/n2KhR

BTC Address: 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

http://archive.is/wip/xJqss

my address : PGN7F4Yr7DMJcKsSu5zB7AP8XK1MjXTrzZ

http://archive.is/wip/6jwPT

address : PGN7F4Yr7DMJcKsSu5zB7AP8XK1MjXTrzZ

http://archive.is/wip/el5Q5

Miscellaneous:

The old Alt account is partially banned, more.

Topic: why is it prohibited (https://bitcointalk.org/index.php?topic=5169762.msg51984954#msg51984954)

Maybe this can be proof for you.

Your suspicion is correct, the Alt account I linked above was involved in a conversation in the MalwareChain campaign.

Proof:

Topic: 📢 [ANN][POS/MN] 🔥 MalwareChain - Cybersecurity Lab on Blockchain 🔥 (https://bitcointalk.org/index.php?topic=5210851.160)

http://archive.is/wip/SJadM


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: nutildah on January 12, 2020, 08:07:17 AM
Good find. All of these accounts woke up to start posting specifically on this thread, or else have large gaps in their posting, and now have been only shilling for this project. They are likely all owned by the same person, who probably runs a Fiverr thread bumping service.

I took a look at the white paper and it seems to be all original. The fact that they don't have any sort of team is suspicious, though.


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: Bttzed03 on January 12, 2020, 09:10:37 AM
It appears that they are also doing the same on other social media channels like discord according to this post Beware: Black Hat team working at BitcoinTalk to mislead newcomers. MalwareChain (https://bitcointalk.org/index.php?topic=5216800.0)


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: nutildah on January 12, 2020, 10:15:20 AM
It appears that they are also doing the same on other social media channels like discord according to this post Beware: Black Hat team working at BitcoinTalk to mislead newcomers. MalwareChain (https://bitcointalk.org/index.php?topic=5216800.0)

And now they've locked the thread (https://bitcointalk.org/index.php?topic=5210851)! Wonder what that's all about... Maybe they will only open it for their spammers, we'll see.


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: hugeblack on January 12, 2020, 10:33:39 AM
I hope to ask a trusted member "someone who is good at finding links between accounts" to do it (in private) or research on your own.
It seems that there are a large number of those accounts, and banning some of them will make them stop abusing for a while and then come back again with a more difficult strategy to discover.

In general, it appears that the person who created the topic has something to do with this abuse, as he locks the topic and only opens it for these accounts.


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: dkbit98 on January 12, 2020, 12:30:18 PM
And now they've locked the thread (https://bitcointalk.org/index.php?topic=5210851)! Wonder what that's all about... Maybe they will only open it for their spammers, we'll see.

All Malwarechain project is very suspicious, and I am not surprised with fake conversation and clocking of topic.
Lets wait and see what will happen next


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: rhomelmabini on January 13, 2020, 04:19:56 PM
This is my investigation regarding the matter and look at what I've found. I'll just use the submission form from "Known Alts of any-one - A User Generated List Mk III" in this investigation because it seems more nice to look here.

29 or more Accounts Connected:

bitcok (https://bitcointalk.org/index.php?action=profile;u=932173) - active
bitLeap (https://bitcointalk.org/index.php?action=profile;u=378999) - active and wear Yobit signature
koko UK (https://bitcointalk.org/index.php?action=profile;u=897395) - with negative trust
cimong371 (https://bitcointalk.org/index.php?action=profile;u=939050) - inactive
zorbig (https://bitcointalk.org/index.php?action=profile;u=1342451) - inactive
brontak994 (https://bitcointalk.org/index.php?action=profile;u=941741) - inactive
batagor225 (https://bitcointalk.org/index.php?action=profile;u=939413) - inactive
menjest (https://bitcointalk.org/index.php?action=profile;u=941836) - inactive
rempong054 (https://bitcointalk.org/index.php?action=profile;u=941745) - inactive
frezycroos (https://bitcointalk.org/index.php?action=profile;u=941830) - inactive
pecandubtc (https://bitcointalk.org/index.php?action=profile;u=939415) - inactive
stenein (https://bitcointalk.org/index.php?action=profile;u=1347077) - inactive
bitcoinminer566 (https://bitcointalk.org/index.php?action=profile;u=2236397) - inactive
Bidomax (https://bitcointalk.org/index.php?action=profile;u=2536632) - inactive
riburg (https://bitcointalk.org/index.php?action=profile;u=1347092) - inactive
elweiller (https://bitcointalk.org/index.php?action=profile;u=1347114) - inactive
dzofir (https://bitcointalk.org/index.php?action=profile;u=862797) - inactive
Arek gagu (https://bitcointalk.org/index.php?action=profile;u=899574) - inactive
Gogum1 (https://bitcointalk.org/index.php?action=profile;u=2032933) - inactive
Slavyanskiy (https://bitcointalk.org/index.php?action=profile;u=1215351) - Autoban user
Bitcoinsupervisor (https://bitcointalk.org/index.php?action=profile;u=2067304) - inactive
raisting (https://bitcointalk.org/index.php?action=profile;u=1347027) - inactive
Yasin58 (https://bitcointalk.org/index.php?action=profile;u=1980955) - inactive
balbirbit786 (https://bitcointalk.org/index.php?action=profile;u=1913020) - inactive
mridulhasan (https://bitcointalk.org/index.php?action=profile;u=1873144) - inactive
kaka manteng (https://bitcointalk.org/index.php?action=profile;u=1059368) - with negative trust
Ekaterina32 (https://bitcointalk.org/index.php?action=profile;u=1134341) - inactive
szafek (https://bitcointalk.org/index.php?action=profile;u=1339641) - inactive
Billgates710 (https://bitcointalk.org/index.php?action=profile;u=2235910) - Autoban user


Proof:

https://web.facebook.com/lukman.alwi.18/posts/408676619502121?pnref=story

BTC 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p
Archived (http://archive.md/fYT2x#selection-8243.0-8243.54)

Twitter url: https://twitter.com/KokoUK3

Facebook url: https://www.facebook.com/lukman.alwi.18
Archived (http://archive.md/wip/2RvLv)

twitter : https://mobile.twitter.com/KokoUK3/status/831683519957004288
Archived (http://web.archive.org/web/20200113154533/http://web.archive.org/screenshot/https://bitcointalk.org/index.php?topic=1790564.msg17855528%23msg17855528)

its name is koko UK
Archived (http://web.archive.org/web/20200113154720/http://web.archive.org/screenshot/https://bitcointalk.org/index.php?topic=2980227.msg30629000%23msg30629000)

my account twitter : https://twitter.com/cimong371
Archived (http://web.archive.org/web/20200113154848/https://bitcointalk.org/index.php?topic=1745355.msg17456450%23msg17456450)

Twitter account URL: https://twitter.com/cimong371
Archived (http://web.archive.org/web/20200113154946/https://bitcointalk.org/index.php?topic=5089058.msg49593875%23msg49593875)

Account bitleap joined the BWEX signature campaign here (https://bitcointalk.org/index.php?topic=3221473.msg33540194#msg33540194) and this is the link of its spreadsheet (https://docs.google.com/spreadsheets/d/1w46zVZV-VtdUA5Q1JFUCrBN8bAEgGzCHumFN_aH2TQM/edit#gid=1471954496) and he used this ETH address: 0x9EDBd018B6Db2905a87fF803A568fAB68883F0c4.
Archived link of the spreadsheet (http://archive.is/wip/uXnCT)

Then base on ethplorer (https://ethplorer.io/address/0x9edbd018b6db2905a87ff803a568fab68883f0c4?from=search#pageSize=100) transaction history these are the linked addresses of the ETH address he used that are only searchable here in the forum and there's a possibility that they are connected to one another, there is more information in this thread: [v2] Need DT Member (https://bitcointalk.org/index.php?topic=3009408.0).


https://ethplorer.io/tx/0xeda31f5de8c9d5a7abe6ed85564c95cd65298f77489b101f69b670778ac6f2a7 - brontak994 (https://bitcointalk.org/index.php?topic=2067654.msg20644238#msg20644238) - Archived (http://web.archive.org/web/20200113155103/https://bitcointalk.org/index.php?topic=2067654.msg20644238%23msg20644238)

https://ethplorer.io/tx/0x475894524007ab5195a0140c3efc51f87da40ececa318df3a128db24390bf5a6 - batagor225 (https://bitcointalk.org/index.php?topic=1819566.msg18782499#msg18782499) - Archived (http://web.archive.org/web/20200113155200/https://bitcointalk.org/index.php?topic=1819566.msg18782499%23msg18782499)

https://ethplorer.io/tx/0x0807055f642dc47a00dea1abeefe9ae03825305700355a6b607fa8837685634f - menjest (https://bitcointalk.org/index.php?topic=1819566.msg18783291#msg18783291) - Archived (http://web.archive.org/web/20200113155316/https://bitcointalk.org/index.php?topic=1819566.msg18783291%23msg18783291)

https://ethplorer.io/tx/0xe5ac6024d972c0d66a846d3a82d943aee5d9e4da89582ba6f5f2104ea49b76dd - rempong054 (https://bitcointalk.org/index.php?topic=1819566.msg18783357#msg18783357) - Archived (http://web.archive.org/web/20200113155429/https://bitcointalk.org/index.php?topic=1819566.msg18783357%23msg18783357)

https://ethplorer.io/tx/0x9678f8a256fb8f6b709449447d4a2985df77aa8eac38a225805d9c1b339ff0ac - frezycroos (https://bitcointalk.org/index.php?topic=1819566.msg18786584#msg18786584) - Archived (http://web.archive.org/web/20200113155533/https://bitcointalk.org/index.php?topic=1819566.msg18786584%23msg18786584)



Continuation from the above accounts

Twitter account: https://twitter.com/menjest09
Archived (http://archive.is/wip/btLsj)

Twitter account URL: https://twitter.com/menjest09
Archived (http://archive.is/wip/vA3JQ)

twitter url: https://twitter.com/menjest09
Archived (http://archive.is/wip/XjIaA)

Telegram: @menjest09
Archived (http://archive.is/wip/OFG0G)

twitter profile   : https://twitter.com/Frezycroos
Archived (http://archive.is/wip/W0Y6e)

Twitter account URL: https://twitter.com/frezycroos
Archived (http://archive.is/wip/RuWYp)

twitter url: https://twitter.com/rempong054
Archived (http://archive.is/wip/x7ADd)

Twitter account URL: https://twitter.com/rempong054
Archived (http://archive.is/wip/oqUsC)

twitter url: https://mobile.twitter.com/brontak994
Archived (http://archive.is/wip/RcdT3)

Twitter account URL: hhttps://twitter.com/brontak994
Archived (http://archive.is/wip/8bw9v)

Twitter account: https://twitter.com/KokoAllebas
Archived (http://archive.is/wip/XsbYd)

Link: https://mobile.twitter.com/KokoAllebas
Archived (http://archive.is/fH59i)

Twitter account:https://twitter.com/KokoAllebas
Archived (http://archive.is/h59e2)

Facebook account URL: https://www.facebook.com/pavel5858
Archived (http://archive.is/wip/zBsvT)

Link to Facebook: https://www.facebook.com/pavel5858
Archived (http://archive.is/wip/DL6yF)

Profile URL: https://www.facebook.com/pavel5858
Archived (http://archive.is/wip/FRqz3)

Facebook Link: https://www.facebook.com/pavel5858
Archived (http://archive.is/wip/nwJfy)

Twitter link : https://twitter.com/pecandubtc
Archived (http://archive.is/wip/eSH5E)

Twitter account URL: https://twitter.com/pecandubtc
Archived (http://archive.is/wip/HD1w5)

Twitter profile Link: https://www.twitteraudit.com/i4u_nowshin
ETH address: 0xB4204E4D7B3baCeAC1d85B875E12Ced89905E915
Archived (http://archive.is/wip/z2FnS)

ETH: 0xB4204E4D7B3baCeAC1d85B875E12Ced89905E915
Archived (http://archive.is/wip/DaEpX)

Twitter Link: https://twitter.com/i4u_nowshin
Archived[/ur]

 (http://archive.is/wip/HlisJ)
     
Twitter profile link: https://twitter.com/i4u_nowshin
Archived (http://archive.is/wip/83WTt)

Facebook account URL: https://www.facebook.com/muksal.mantong
Archived (http://archive.is/wip/cbVVy)

Facebook profile: https://m.facebook.com/muksal.mantong
Archived (http://archive.is/wip/gmzYk)
More connection can be found here: https://bitcointalk.org/index.php?topic=2544574.msg31846934#msg31846934

Facebook account URL: https://www.facebook.com/profile.php?id=100014232122548
Archived (http://archive.is/wip/xlTdM)

Facebook URL:https://www.facebook.com/profile.php?id=100014232122548
Archived (http://archive.is/wip/AtSfR)

BTC Address: 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p
Archived (http://archive.is/wip/4hQHZ)

Bitcoin Address: 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p
Archived (http://archive.is/otW9Q)

Facebook account URL: https://www.facebook.com/Piotrus.Szafraniec
Archived (http://archive.is/wip/YLOAa)

Link to Facebook Account: https://www.facebook.com/Piotrus.Szafraniec
Archived (http://archive.is/wip/fK7PC)

ETH Address: 0xCB045CA0121Be769cf552B890f8BE56129469eDB
Archived (http://archive.is/HlisJ)

ETH address: 0xCB045CA0121Be769cf552B890f8BE56129469eDB
Archived (http://archive.is/wip/reoXf)



Related Addresses:

Code:
0x9EDBd018B6Db2905a87fF803A568fAB68883F0c4
0xbdab08225141BcD78414Fe2f62FC6687Eb57381d
0x5065433E47a943098D114A862930e4BaFAD344af
0xa938c7B62C167D42E6F79ea445756b124b54b594
0x7376593337759f40cbAE88Ba92D339cdE58867bE
0x99Cde962dfe942d9402a0123D082baA72F212274
0xCB045CA0121Be769cf552B890f8BE56129469eDB
18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p
0xB4204E4D7B3baCeAC1d85B875E12Ced89905E915




Miscellaneous:

I guess I've missed some other connections, if you found it I thank you for that. To DT members I guess it's better if they are tagged, most of them are inactive but I have a hunch that they'll get back if somehow other accounts of them are compromised  and they'll get back to use these accounts instead.


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: Harlot on January 14, 2020, 04:50:55 PM
Are thery aware that posting and creating fake conversation doesn't work anymore if you want to bump a thread? Or are they just faking it out for the project to think that what they are doing is really working? Well I don't feel bad for the project either as what they are doing is already illegal, they are just wasting there money on a really bad conversation that isn't even working for then. I just hope that this posts can give awareness to people who will attempt on availing their services.


Title: Re: Tens of Fake accounts promoting scam (Bumping)
Post by: Rikafip on January 14, 2020, 11:20:41 PM
Are thery aware that posting and creating fake conversation doesn't work anymore if you want to bump a thread? Or are they just faking it out for the project to think that what they are doing is really working? Well I don't feel bad for the project either as what they are doing is already illegal, they are just wasting there money on a really bad conversation that isn't even working for then. I just hope that this posts can give awareness to people who will attempt on availing their services.

I think that most of their clients have no idea how exactly thread bumping works, they just want "buzz" around the project, without realising that it only makes things worse for them as noone will fall for those fake conversations.

Additionally, some ICO trackers are checking Ann thread activity of listed project, and based on that they give them score, so that might be another reason why they keep hiring Ann thread bumping services.