Bitcoin Forum

The original title of this post was
Scammer user 'Sword' - impersenating LightingASIC/Lketc vendors

But after updates id like to call out who is really behind it all

=========

There is some fraudster lurking around skype impersonating some reputable hardware asic vendors around

Notably he is impersonating user asicbtc on this forum, or JackASIC/Jack depending on how you know him, he is also impersonating iketc.com via skype as well. He is also putting fronts up on alibaba, aliexpress, dhgate pretending to be these guys and forwarding them to his fake skype.

The two fake IDS i know are

"altcoin," impersonating the real "altcoin" who is asicbtc
"live:nancy_business" impersonating "nancy_business" who is iketc.com

I also belive he is impersonating semtong and gridseed vendors from looking through fake profiles on the mentioned Chinese trading sites

I was unfortunately burned by this prick a few weeks ago as i copied jacks skype name from his signature that had " , " separating his skype and icq name a little carelessness cost me coins.

after following where the coins went a few hops the landed in this address

16R14EH4v8A9GPXkAAP8gcMFBA8oxA8nbY

This address looks like it's known to be used by some big time scammer, using blockchain tree visualise tool i spent hours following how these coins were split and mixed around to clean the inputs, along the way i started to see connections to another recent hack

http://www.reddit.com/r/Bitcoin/comments/21foj9/funds_currently_being_stolen_from_vanity/

there seemed to be lots of vanity address inputs, and also coins going around this mixer into what looked like vanity created bitcoin address

while trying to find more details on this address 16R14EH4v8A9GPXkAAP8gcMFBA8oxA8nbY as the reddit post mentioned it was related to mtgox and possible Andreas, but what i stumbled upon was this
https://bitcointalk.org/index.php?topic=564335.msg6185654#msg6185654

the same address linking to bitcointalk user "sword" linking to vanity address payments and hardware scam/fraud

this bitcoin talk post naming the user sword is in the german sub forums, which also coincides with his skype local time and online habits.

If any one has any information to add on any of the cases mentioned above please pm me, and proceed with cation when adding skype contacts, as he is abusing the way contact results are being returned using names that are alphabetically higher than the genuine ones.

Just a quick google also shows this from btc-e troll box archive looks like he's hit someone again, getting there btc-e account emptied

http://trollboxarchive.com/search.php?search_type=username&search=CobyPerc

Edit: further information

Sorry i haven’t thought about this in a few weeks so new info is popping up on google

Looks like this scam group have caught the attention of seclist.org mailing list for posting exploit code for sale, exploiting heart bleed vulnerability

http://seclists.org/fulldisclosure/2014/Apr/271

(of course it doesnt work it's a scam)

anyway the pastebin the post links to this http://pastebin.com/qPxR9BRv

the email is bitwasp@safe-mail.net

Im not sure if they have relation to the bitwasp marketplace software but i dunno if i could trust a bunch of people building darknet software,

I'd like to keep adding to this as i find things

my last post linked to the pastbin post and the use of bitwasp@safe-mail.net

googling the email took me to this softpedia news about the post of the FAKE exploit

http://news.softpedia.com/news/Hackers-Claim-to-Have-Found-New-OpenSSL-Flaw-Similar-to-Heartbleed-439556.shtml

and listed Chinese forums they posted to

in particular
'http://www.freebuf.com/news/33029.html'

there is a post


This looked to me an obvious attempt of the scammers hooking people into the con.

Googling this user name shows this handle has some history
https://www.google.co.uk/search?channel=fs&q=kasperm025+&ie=utf-8&oe=utf-8&gl=uk&gws_rd=cr&ei=M21hU_6iBsjtO5rFgKgE

noticeable linking to bitwasp.org user profile
http://www.google.co.uk/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&cad=rja&uact=8&ved=0CD4QFjAC&url=http%3A%2F%2Fbit-wasp.org%2Findex.php%3Faction%3Dprofile%3Bu%3D145%3Barea%3Dstatistics&ei=PW1hU_vTAYngOuijgagH&usg=AFQjCNEWZARYB-vh9JRKWi__EcwmLWqvdQ&bvm=bv.65636070,d.ZWU

hey man there is actually this guy i dont remeber his nick but he is selling som cascius btc coins if you search on the forum he has taken over the investegation off avalonshenzhen scam, and a couple off more scams and he is really closing in, you too should share youre information, he has his on topic and everything...

here is the link! https://bitcointalk.org/index.php?topic=605364.0;topicseen SHARE SHARE SHARE YOUR INFO LETS NAIL THESE MF TO THA WALL! :-P

This email has absolutely nothing to do with the BitWasp project. We've had self hosted email, so tend to be bitwasp.tk, or bitwasp.co.

As for who the developers are, our names are Thomas Kerin & Cameron Ruggles. Hope that's enough to point you in the right direction! I know is the 'scam accusations' board, but I why do you think it's the developers instead of a random account with red herrings?

What is it we're being accused of doing?
Anyone could have made that email, not sure what that's about but apparently the Kasper guy has an account on our forum. Perhaps they are setting up a marketplace using our software?
I need to read more on this drama and then maybe we can help find info? The user has been completely inactive and used Tor exit nodes to view our site.

I think serpiente just referring you to me for help. I do bit of network forensic for bounty and also programming and security. We not accusing you guy of anything.

But now that I look at this, I see two thing:

1) I believe BitWasp developer innocent. I see no indication they commit fraud here.
2) This look like handiwork of our guy: so-called "group buy scammer" and perpetrator of many other

OP, can you please pm me and share the details of what you know. I am investigating multiple suspect and you informations may help me figure who is responsible for ALL of this.

His greed will be his downfall...

Yeah the title of this thread isn't accurate or helpful to anyone. I suppose it doesn't matter much but it would be appreciated if it were changed to something more helpful.

sorry late reply i have been extremely busy, i will contact all those interested parties