Bitcoin Forum

Other => Meta => Topic started by: OcTradism on July 08, 2020, 04:34:18 AM



Title: theymos, please automatic nuke them: a group of scammers.
Post by: OcTradism on July 08, 2020, 04:34:18 AM
Urgent!

29 Sep. 2020
Please shut them down ASAP

They came back today:

Earn up to 0.10 BTC from NitrogenSports.eu Beta Tester PROMOTION (in gambling) (https://bitcointalk.org/index.php?topic=5278825.0)
Earn up to 0.10 BTC from NitrogenSports (in Bitcoin Discussion) (https://bitcointalk.org/index.php?topic=5278832.msg55281243#msg55281243)



Reports from Legendary members
Theymos! Please ban/disable this phishing link from forum.  (https://bitcointalk.org/index.php?topic=5261652.0) by Coolcryptovator (https://bitcointalk.org/index.php?action=profile;u=1980983) in July 2020
A scam targeting NitrogenSports users (https://bitcointalk.org/index.php?topic=5229888.0) by OmegaStarScream (https://bitcointalk.org/index.php?action=profile;u=375981) in March 2020.



I don't know where they come from but they posted on the scam give aways. Two threads were locked but I don't know who locked those threads. Please check and nuke them.

If you see others make same posts or topics on the same giveaways, please report.
❤️ Earn up to 5 BTC for becoming a Beta Tester for NitrogenSports! ❤️ (https://bitcointalk.org/index.php?topic=5260708.0) by Klopaskoss (https://bitcointalk.org/index.php?action=profile;u=2827022)
Double your Bitcoins for becoming a Beta Tester [up to 5 BTC] ✔️Working (https://bitcointalk.org/index.php?topic=5260714.0) by hasker123 (https://bitcointalk.org/index.php?action=profile;u=2827021)
❤️ Earn up to 5 BTC for becoming a Beta Tester for NitrogenSports! ❤️ (https://bitcointalk.org/index.php?topic=5260707.0) by whitecalifornia (https://bitcointalk.org/index.php?action=profile;u=2827024)
❤️ Earn up to 5 BTC for becoming a Beta Tester for NitrogenSports! ❤️ (https://bitcointalk.org/index.php?topic=5260715.0) by deMalkosa19 (https://bitcointalk.org/index.php?action=profile;u=2827019)
Podwojenie BTC przy użyciu bonusu na stronie bukmacherskiej. [Nawet do 5 BTC] (https://bitcointalk.org/index.php?topic=5260706.msg54751351#msg54751351) by Rockeman (https://bitcointalk.org/index.php?action=profile;u=2827025)

Some are found later
A new crop of accounts have surfaced sharing similar content as the recently nuked ones across several boards and also locked topics to prevent people from pointing out their scam;
https://bitcointalk.org/index.php?topic=5261461.0
https://bitcointalk.org/index.php?topic=5261462.0
https://bitcointalk.org/index.php?topic=5261464.0
https://bitcointalk.org/index.php?topic=5261465.0

More found recently
Easy way to double your Bitcoins (tested myself) (https://bitcointalk.org/index.php?topic=5263814.0) by mekantos (https://bitcointalk.org/index.php?action=profile;u=2832453)
  • Earn up to 5 BTC for becoming a Beta Tester for Nitrogensports.eu [PROMO] (https://bitcointalk.org/index.php?topic=5263721.0) by ayken131 (https://bitcointalk.org/index.php?action=profile;u=2832381)
  • Earn free BTC for becoming a Beta Tester for Nitrogensports.eu [PROMO] (https://bitcointalk.org/index.php?topic=5263720.0) by danilogalinarrri  (https://bitcointalk.org/index.php?action=profile;u=2832374)
Easy way to double your Bitcoins (tested myself) (https://bitcointalk.org/index.php?topic=5263821.msg54848005#msg54848005), doblekosia (https://bitcointalk.org/index.php?action=profile;u=2832455)


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: JeromeTash on July 08, 2020, 04:41:32 AM
They links directly users to download add-ons that i believe are infected with malware. Just usef the report to moderators button. The mods will nuke them. You can also report the posts to this thread - Report Malware and Suspicious Links here so Mods can take Action ! (https://bitcointalk.org/index.php?topic=5182222.0)


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: acroman08 on July 08, 2020, 04:49:51 AM
you can add this guy Rockeman (https://bitcointalk.org/index.php?action=profile;u=2827025) to the list. all account was created today.

Podwojenie BTC przy użyciu bonusu na stronie bukmacherskiej. [Nawet do 5 BTC] (https://bitcointalk.org/index.php?topic=5260706.msg54751351#msg54751351)
https://i.imgur.com/tGE9BV1.jpg

all of the account in that thread are shilling the website and most likely an alt since all of the account are created minutes apart (I used a translator to see what they were saying)
https://i.imgur.com/wAe87Og.jpg


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: Upgrade00 on July 08, 2020, 04:58:04 AM
All the UIDs are similar so all accounts are related and they probably locked the topics themselves to prevent others from accusing then of being a scam, so an unsuspecting newbie could click on the link with no warning.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: cryptoaddictchie on July 08, 2020, 06:04:30 AM
They links directly users to download add-ons that i believe are infected with malware. Just usef the report to moderators button. The mods will nuke them. You can also report the posts to this thread - Report Malware and Suspicious Links here so Mods can take Action ! (https://bitcointalk.org/index.php?topic=5182222.0)
So they knew that scam boards are highly visited to check scams but this guy is tricky using multiple account to spread giveaway associated with malware, of course users here loves to check those discovered scam. Very wise, but Im glad OP, reported it here.

All the UIDs are similar so all accounts are related and they probably locked the topics themselves to prevent others from accusing then of being a scam, so an unsuspecting newbie could click on the link with no warning.
Intelligent scammers, thought locking their thread would avoid them getting nuke. Probably the accounts created purposedly what else could it be done for. Im afraid even those accounts get ban hammered they would just come back again with new created one.

They would not probably used their same IPs to avoid evil points, so there must be a layer of security for incoming registration to give those aliens a hard time


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: AverageGlabella on July 08, 2020, 07:32:47 AM
They are probably bot accounts and they will ditch the account and create a new one and spam the same thing again. I think the only way to combat this would be to make registration harder. The points of evil system only prevents a small minority of scammers and other bad members from signing up. The majority will probably be using clean vpns from something like openvpn and moving onto a different IP everytime making it almost impossible to prevent this happening on a large scale.

The captcha system can be exploited for pennies and that again is only preventing those that are not willing to spend anything but most scammers are willing to spend some money to earn money in return. I think our best option would be to making registration harder by including randomly generated questions related to the forum so they are both being taught how to use the forum as well as having to answer questions about it. These questions could be changed every 2 weeks or something to prevent bots learning how to answer them.

Another option would be the shadow ban that has been talked about a lot. I think this would probably be the most effective way although again for this specific scammer attack they would learn to get approved by a staff member and then continue on their way of scamming but this would probably stop bots being able to easily exploit the forum.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: Yaunfitda on July 08, 2020, 08:34:28 AM
I've also reported scammers using Nitrogen sports here;

[1] [Warning]: Double your bitcoin in Nitrogen Sports (https://bitcointalk.org/index.php?topic=5250525.0)
[2] [Scam]: Nitrogen Sports Beta Testers! (https://bitcointalk.org/index.php?topic=5255060.0)


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: UserU on July 08, 2020, 10:26:58 AM
They are probably bot accounts and they will ditch the account and create a new one and spam the same thing again. I think the only way to combat this would be to make registration harder. The points of evil system only prevents a small minority of scammers and other bad members from signing up. The majority will probably be using clean vpns from something like openvpn and moving onto a different IP everytime making it almost impossible to prevent this happening on a large scale.

The captcha system can be exploited for pennies and that again is only preventing those that are not willing to spend anything but most scammers are willing to spend some money to earn money in return. I think our best option would be to making registration harder by including randomly generated questions related to the forum so they are both being taught how to use the forum as well as having to answer questions about it. These questions could be changed every 2 weeks or something to prevent bots learning how to answer them.

Another option would be the shadow ban that has been talked about a lot. I think this would probably be the most effective way although again for this specific scammer attack they would learn to get approved by a staff member and then continue on their way of scamming but this would probably stop bots being able to easily exploit the forum.

Maybe about time to introduce hCAPTCHA. Ironically reCAPTCHA is easy on bots, hard on humans.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: Lucius on July 08, 2020, 11:05:56 AM
I think our best option would be to making registration harder by including randomly generated questions related to the forum so they are both being taught how to use the forum as well as having to answer questions about it. These questions could be changed every 2 weeks or something to prevent bots learning how to answer them.

The idea makes some sense, but I think it would make registration quite difficult for some of the legitimate members. It should be noted that a large number of new members do not come from an English-speaking area, and that they would probably not understand the question/s - and would give up registration. It seems to me that this is not just about bots, but a lot of real people who have bad intentions and see in this forum an opportunity to achieve them.

Another option would be the shadow ban that has been talked about a lot. I think this would probably be the most effective way although again for this specific scammer attack they would learn to get approved by a staff member and then continue on their way of scamming but this would probably stop bots being able to easily exploit the forum.

I have to admit I had to look up what exactly it means shadow ban, and it is true what you say that there has been much discussion on the subject in the past. But taking into account the number of newly registered members (a year ago 20 000 new accounts per month based on this thread (https://bitcointalk.org/index.php?topic=5170084.msg51996615#msg51996615)) some conclusion is that the staff/mods would have about 3000 posts per day to check on this basis alone, and to that should be added all the regular reports.

Yet the idea has potential, perhaps this post (https://bitcointalk.org/index.php?topic=5170084.msg52002996#msg52002996) gives a better insight into how the whole thing might work.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: noorman0 on July 08, 2020, 04:16:21 PM
Maybe about time to introduce hCAPTCHA. Ironically reCAPTCHA is easy on bots, hard on humans.

There is now a limit for newbies to spread links, for example (https://bitcointalk.org/index.php?topic=5260879.msg54755696#msg54755696)
but it seems to only work on certain types of links.

This may be the only solution without increasing restrictions on sing up or rank up requirements , it's just that need to add more types of links that can be suspected or even not allow all types of links even though inserting them as quote or code in some boards that are likely to be targeted by scammers .


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: Lordhermes on July 08, 2020, 11:09:57 PM
The rate at which these scammers gets in here posting giveaway in BTC now is high. This is Mod responsibility to delete such post when ever it comes up.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: NotATether on July 08, 2020, 11:39:47 PM
Why not automatically temp ban people whose topic titles are similar enough to the ones OP mentioned, and have it expire for a week or so? Most scam topics have something like "[WORKING]" or "✔️Verified" or "Earn up to {x} BTC" so an automated banning bot can look for those key words.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: OcTradism on July 09, 2020, 12:45:48 AM
Why not automatically temp ban people whose topic titles are similar enough to the ones OP mentioned, and have it expire for a week or so? Most scam topics have something like "[WORKING]" or "✔️Verified" or "Earn up to {x} BTC" so an automated banning bot can look for those key words.
Only theymos can do so. Last year he did it with Yobit.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: jademaxsuy on July 09, 2020, 01:23:00 AM
They links directly users to download add-ons that i believe are infected with malware. Just usef the report to moderators button. The mods will nuke them. You can also report the posts to this thread - Report Malware and Suspicious Links here so Mods can take Action ! (https://bitcointalk.org/index.php?topic=5182222.0)
It seems also effective posting it here for awareness not only for the mods but also for the users in this forum. All users here were free to post and that is the good thing but there are really users here abuses this freedom.

It is really helpful in promoting the forum and reporting the likes of this scam posts. We had been hearing a lot of this scam activities and there are users also fall for it.

There is no really end of this scamming activity but the good thing is that it could be minimize. Well thank for the mods for that.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: UserU on July 09, 2020, 09:49:44 AM

There is now a limit for newbies to spread links, for example (https://bitcointalk.org/index.php?topic=5260879.msg54755696#msg54755696)
but it seems to only work on certain types of links.

This may be the only solution without increasing restrictions on sing up or rank up requirements , it's just that need to add more types of links that can be suspected or even not allow all types of links even though inserting them as quote or code in some boards that are likely to be targeted by scammers .

They can still bypass if they do not include the protocol, like abc.com instead of https://abc.com.

About the link you posted, the contents were removed. What was it about?


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: LoyceV on July 09, 2020, 10:20:51 AM
Why not automatically temp ban people whose topic titles are similar enough to the ones OP mentioned, and have it expire for a week or so? Most scam topics have something like "[WORKING]" or "✔️Verified" or "Earn up to {x} BTC" so an automated banning bot can look for those key words.]
MindlessElectron (https://bitcointalk.org/index.php?action=profile;u=1136003) reports posts based on keywords. It's up to the Mods to manually verify the reports.
Automated banning will lead to false positives, and scare off real users.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: UmerIdrees on July 10, 2020, 08:54:18 AM
The rate at which these scammers gets in here posting giveaway in BTC now is high. This is Mod responsibility to delete such post when ever it comes up.

The mods can't check if every giveaway is real or a scam. So this is practically impossible for the mods to perform this job. We all have to do our duty as if we come across any such scam posts, we should report it. Once many people report it, the action will be taken on it by the moderators.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: Upgrade00 on July 11, 2020, 05:06:24 AM
A new crop of accounts have surfaced sharing similar content as the recently nuked ones across several boards and also locked topics to prevent people from pointing out their scam;
https://bitcointalk.org/index.php?topic=5261461.0
https://bitcointalk.org/index.php?topic=5261462.0
https://bitcointalk.org/index.php?topic=5261464.0
https://bitcointalk.org/index.php?topic=5261465.0

This seems to be a targeted attack at new members, their accounts would eventually be nuked, but would have already been viewed by some and as the topics are locked a curious newbie could follow the link to find out more. And the cycle would be repeated again.
A suggestion is to restrict topics from being locked until xx hours after it was made. This could be limited to brand-new/newbie accounts


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: OcTradism on July 11, 2020, 06:17:45 AM
A suggestion is to restrict topics from being locked until xx hours after it was made. This could be limited to brand-new/newbie accounts
Thank you for reporting them (that I think you did) but the idea is not necessary. Locked topics or not locked topics by them does not affect your report process. Report locked topics from scammers, moderators will step in and do their works. Or you can report topics and bring issues to Meta board, like me.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: Upgrade00 on July 11, 2020, 06:36:00 AM
They were reported and all four of the users has been nuked at this time.
Locked topics or not locked topics by them does not affect your report process.
It doesn't, but due to the queue of reports needing attention from the mods, it could take a while for a report to be handled, during this time the threads have already been viewed by other users. Usually, I'll reply a warning message to such posts pending when the report is handled, however due to the topics being locked that cannot be done.
The fact that the scammers are repeating the process may suggest that it's attracting some unsuspecting users.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: Mrengage on July 11, 2020, 10:53:30 PM
The rate at which these scammers gets in here posting giveaway in BTC now is high. This is Mod responsibility to delete such post when ever it comes up.
They probably might have been involved in pandemic cases LOL 😂 that's why they ain't doing the needful. Scammers are ready and fully prepared on this forum I just pray we don't Fall in their traps and probably customised good password to your Bitcointalk logins.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: AhmadM on July 22, 2020, 05:21:13 AM
Looks like they do not stop doing it and keep continuing their behavior to share these fishy giveaways, make a topic in the different board then lock it.

  • Earn up to 5 BTC for becoming a Beta Tester for Nitrogensports.eu [PROMO] (https://bitcointalk.org/index.php?topic=5263721.0) by ayken131 (https://bitcointalk.org/index.php?action=profile;u=2832381)
  • Earn free BTC for becoming a Beta Tester for Nitrogensports.eu [PROMO] (https://bitcointalk.org/index.php?topic=5263720.0) by danilogalinarrri  (https://bitcointalk.org/index.php?action=profile;u=2832374)

Edit:
Another one Easy way to double your Bitcoins (tested myself)
 (https://bitcointalk.org/index.php?topic=5263861) by Klopakonar (https://bitcointalk.org/index.php?action=profile;u=2832458)



Title: theymos, please automatic nuke them: a group of scammers.
Post by: OcTradism on July 22, 2020, 05:49:57 AM
Please step in theymos. They have not yet stopped and kept reappearing.

Report and nuke them are not enough.

Minutes ago, I saw a new thread
Easy way to double your Bitcoins (tested myself) (https://bitcointalk.org/index.php?topic=5263814.0), mekantos (https://bitcointalk.org/index.php?action=profile;u=2832453)


Title: Re: theymos, please automatic nuke them: a group of scammers.
Post by: acroman08 on July 22, 2020, 12:37:20 PM
just saw this on bitcoin discussion. these people sure are really persistent. @OcTradism I agree that nuking them is not enough but and I am wondering what type of precaution do you have in mind against these people?

Easy way to double your Bitcoins (tested myself) (https://bitcointalk.org/index.php?topic=5263821.msg54848005#msg54848005), doblekosia (https://bitcointalk.org/index.php?action=profile;u=2832455)


Title: Re: theymos, please automatic nuke them: a group of scammers.
Post by: OcTradism on July 22, 2020, 12:41:44 PM
just saw this on bitcoin discussion. these people sure are really persistent. @OcTradism I agree that nuking them is not enough but and I am wondering what type of precaution do you have in mind against these people?
A script to detect them and nuke them all. Automatically! As same as this one but the restriction is nuke, not temp ban.
129 users who were wearing a yobit signature and had at least 1 good report against them in the last 14 days are banned for 14 days. All yobit signatures are wiped. Signatures containing "yobit.net" are banned for 60 days.

Some people were talking about neg-trusting spammers for spamming. This is not appropriate; report the posts, and if that doesn't seem to be working well, come to Meta with specific examples and suggestions.
Quote
Easy way to double your Bitcoins (tested myself) (https://bitcointalk.org/index.php?topic=5263821.msg54848005#msg54848005), doblekosia (https://bitcointalk.org/index.php?action=profile;u=2832455)
Added to OP. Thank you.


Title: Re: A new group of scammers, make topics with phishing links. Please nuke them.
Post by: Latviand on July 24, 2020, 02:37:38 PM
They are probably bot accounts and they will ditch the account and create a new one and spam the same thing again. I think the only way to combat this would be to make registration harder. The points of evil system only prevents a small minority of scammers and other bad members from signing up.

I agree with the registration to become more difficult and technical so that bots or fraud users will not enter this forum easily. Scammers will have a hard time to invade this forum if it prioritizes the security of its system. If they don't start to make a simple step to prevent scamming, it will surely get worsen.

I think our best option would be to making registration harder by including randomly generated questions related to the forum so they are both being taught how to use the forum as well as having to answer questions about it.

Questions related to a forum will really help the system to identify if they are really willing to learn or they will just do some scams in this forum.

Another option would be the shadow ban that has been talked about a lot. I think this would probably be the most effective way although again for this specific scammer attack they would learn to get approved by a staff member and then continue on their way of scamming but this would probably stop bots being able to easily exploit the forum.

This shadow banning can minimize the number of their victims and bots who are used in scamming and circulating in a system will be prevented to see publicly.

This will become their restriction when they enter a forum, they will not be easily seen by other people.

Why not automatically temp ban people whose topic titles are similar enough to the ones OP mentioned, and have it expire for a week or so? Most scam topics have something like "[WORKING]" or "✔️Verified" or "Earn up to {x} BTC" so an automated banning bot can look for those key words.

They are using those capitalization and positive words that's why some of their topic titles are beautiful to read. But in reality, it is very obvious and too suspicious whenever I see a title like that. We should always check the content and its legitimacy before engaging to those kind of information.


Title: Re: theymos, please automatic nuke them: a group of scammers.
Post by: CarnagexD on July 24, 2020, 06:32:10 PM
Please step in theymos. They have not yet stopped and kept reappearing.

Report and nuke them are not enough.

Minutes ago, I saw a new thread
Easy way to double your Bitcoins (tested myself) (https://bitcointalk.org/index.php?topic=5263814.0), mekantos (https://bitcointalk.org/index.php?action=profile;u=2832453)

They are just like a trash in this forum, they keep on doing that even if it is not pleasant to view.

Unnecessary, emoticons and words using all caps are their signature move, so that they can lure and attract people with their give aways.

Scammers will really do anything just to fool people and they will invest to it because they know that there are a lot of people who are unaware about those scams. It is just a shame that they keep on doing that even if they are being reported several times in this forum.


Title: Re: theymos, please automatic nuke them: a group of scammers.
Post by: acroman08 on September 19, 2020, 01:10:07 PM
they are at it again and this time they are pretending to be a bustadice script and bustadice promotion [BUSTADICE SCRIPT] 100X CATCHER | MAKE SOME MONEY AUTOPILOTED (https://bitcointalk.org/index.php?topic=5276870.0) by vehifi (https://bitcointalk.org/index.php?action=profile;u=2855933).

photo for reference:
https://i.imgur.com/01P7myP.jpg


Title: Re: theymos, please automatic nuke them: a group of scammers.
Post by: OcTradism on September 29, 2020, 06:05:55 AM
They came back today:

Earn up to 0.10 BTC from NitrogenSports.eu Beta Tester PROMOTION (in gambling) (https://bitcointalk.org/index.php?topic=5278825.0)
Earn up to 0.10 BTC from NitrogenSports (in Bitcoin Discussion) (https://bitcointalk.org/index.php?topic=5278832.msg55281243#msg55281243)