Bitcoin Forum

Bitcoin => Project Development => Topic started by: IGHOR on January 05, 2014, 10:53:58 PM



Title: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on January 05, 2014, 10:53:58 PM
On Internet there is many fakes and malware files what want to steal your Bitcoins.

I think it good idea to collect all information about malicious websites and programs attributable to Bitcoin in one place.

So other people will be able to google them by name and find this thread to prevent money loss and damage.

If you find Malware/Fake/Phishing website or program please write message here. Also please leave some information about them.

Code:
http://www.qt-trader.ru
http://cryptocointrader.net
http://www.btce-bot.me
http://listentobitcoin.com
http://www.bitcoin-bot.tk
http://sourceforge.net/projects/oscryptocointrader/
http://reddit.com/r/Bitcoin/comments/1vlpbb/btcltcxpm_trader_open_source_trader_with_advanced/
http://www.bitcoinsimpletradebot.com
http://itraderpro.co.uk
http://www.cryptonic.tk
http://ccelite.bl.ee
http://multibitcoinwisdom.info
http://coinBesk.com
http://qtbitcointrade.com
http://www.seedpeer.me/details/8134990/QT-Bitcoin-Trader-v.1.07.98-Windows.html
http://twitter.com/cryptocointoday
http://coinbasewallet.com
https://sourceforge.net/projects/bitcointechnicalanalyzer/

Be careful. Double check urls in received emails.

https://i.imgur.com/gYQSIu6.jpg


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on January 05, 2014, 10:57:38 PM
Fake trader programs

Code:
http://www.qt-trader.ru
http://cryptocointrader.net
http://www.btce-bot.me


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: malevolent on January 05, 2014, 10:58:13 PM
listentobitcoin dot com


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on January 09, 2014, 04:57:25 PM
Fake trader app
Code:
www.bitcoin-bot.tk
http://www.youtube.com/watch?v=ZZpUG99lc3Y
http://www.youtube.com/watch?v=Lx5v7xYT_C4
http://www.youtube.com/watch?v=meAoKAkXACs


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on January 20, 2014, 07:01:23 PM
Fake trader app
Code:
sourceforge.net/projects/oscryptocointrader/
reddit.com/r/Bitcoin/comments/1vlpbb/btcltcxpm_trader_open_source_trader_with_advanced/


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: Stephan224 on January 24, 2014, 06:32:58 PM
Code:
www.bitcoinsimpletradebot.com

Fake copy of my own trade software, but in this case its loaded with keyloggers. Be ware!



Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: devthedev on January 24, 2014, 06:49:43 PM
I like how it tries to download something to your computer as soon as you visit the site...


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: StarenseN on January 30, 2014, 05:46:10 PM
I suggest you to put the list on #1 post and update it, thanks


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on February 03, 2014, 10:00:17 PM
Code:
http://www.youtube.com/watch?v=nsF-dLrqAGQ


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: mgcoder on February 10, 2014, 07:00:47 AM
Hi IGHOR, please add itraderpro.co.uk (itrader) to the list.

You can find more information at those links:
https://bitcointalk.org/index.php?topic=233142.20
https://bitcointalk.org/index.php?topic=232283.120
https://bitcointalk.org/index.php?topic=263484.0


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: wilfried on February 10, 2014, 07:27:51 PM
what about
qttrader.com
?


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on February 25, 2014, 01:31:45 PM
Code:
http://www.cryptonic.tk


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on March 15, 2014, 11:36:45 AM
Code:
http://ccelite.bl.ee


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on March 29, 2014, 09:29:13 PM
Code:
http://bitcointa.lk

If someone give me proof that it is not malware domain, than I'll remove it from list.


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: enrapha on March 29, 2014, 10:52:28 PM
This is very similar to somthing I am trying to do. I will add this post to my watchlist but if you could please message me so we can talk.


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: escrow.ms on March 29, 2014, 10:55:27 PM
Warning! Fake BitcoinTalk forum

Code:
http://bitcointa.lk

If someone give me proof that it is not malware domain, than I'll remove it from list.

No it's not fake/malware domain it's just a Live copy of bitcointalk made by a forum member.

https://bitcointalk.org/index.php?topic=530315.0


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on March 29, 2014, 11:03:23 PM
No it's not fake/malware domain it's just a Live copy of bitcointalk made by a forum member.

https://bitcointalk.org/index.php?topic=530315.0

Can we trust him?
Security question is very important for bitcoin community.
A large history of bitcointalk.org show us that it is trusted.
But if in one day this bitcointa.lk forum will be hacked and all thread urls will be replaced by malware files, than it will cause money loss of many people. (For example download links for Qt Bitcoin Trader).


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: enrapha on March 30, 2014, 05:32:49 AM
A blacklist of similar sorts has been added into BTCPD.com.

thank you ighor for the information to start us out.


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: razorfishsl on March 30, 2014, 06:34:19 AM
No it's not fake/malware domain it's just a Live copy of bitcointalk made by a forum member.

https://bitcointalk.org/index.php?topic=530315.0

Can we trust him?
Security question is very important for bitcoin community.
A large history of bitcointalk.org show us that it is trusted.
But if in one day this bitcointa.lk forum will be hacked and all thread urls will be replaced by malware files, than it will cause money loss of many people. (For example download links for Qt Bitcoin Trader).


I would say no….
there is no credible reason to make a 'live' copy of another website, unless your plan is to leave it a few months then start injecting malware, or worse you get fed-up … loose control of the domain name and then the ass clown domain miners take over.



Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: V. Putin on March 30, 2014, 06:48:26 PM
This is a helpful thread.


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on April 15, 2014, 03:48:55 PM
Be careful. Double check urls in received emails.

https://i.imgur.com/gYQSIu6.jpg


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: devthedev on April 15, 2014, 07:08:49 PM
No it's not fake/malware domain it's just a Live copy of bitcointalk made by a forum member.

https://bitcointalk.org/index.php?topic=530315.0

Can we trust him?
Security question is very important for bitcoin community.
A large history of bitcointalk.org show us that it is trusted.
But if in one day this bitcointa.lk forum will be hacked and all thread urls will be replaced by malware files, than it will cause money loss of many people. (For example download links for Qt Bitcoin Trader).

You should unflag this domain. (Not that it matters much)
It's a project that benefit's the forum as a whole...


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on April 15, 2014, 07:23:17 PM
You should unflag this domain. (Not that it matters much)
It's a project that benefit's the forum as a whole...

I did unflagged it in same day I posted message.


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: bnjmnkent on May 06, 2014, 01:23:06 PM
multibitcoinwisdom.info
https://i.imgur.com/kEiw3pk.png?1


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: bitkoof on May 07, 2014, 02:02:46 PM
CoinBesk.com - Pretends to be CoinDesk with a Windows App called Coinstatus



Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on May 12, 2014, 11:35:39 PM
qtbitcointrade.com fake trader website


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on May 28, 2014, 09:17:07 PM
Virus (fake trader app): http://www.seedpeer.me/details/8134990/QT-Bitcoin-Trader-v.1.07.98-Windows.html
This is a person who publish malware url: https://twitter.com/cryptocointoday


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: escrow.ms on June 01, 2014, 01:03:21 PM
coinbasewallet.com
Receiving over 3-4 phishing emails daily from contactsupport@coinbasewallet.com
email source http://pastie.org/pastes


Title: Re: Malware Domain Blacklist. Fake exchanges, traders and wallets.
Post by: IGHOR on July 03, 2014, 09:23:22 PM
Fake and malware project:
Code:
https://sourceforge.net/projects/bitcointechnicalanalyzer/
I don't know why this file wasn't deleted during last 8 months but now there is 1k downloads.
Everyone should be more careful when download any file from sourceforge.net

Here is virustotal scan results: https://www.virustotal.com/en/file/3b84232b465303fe73add8abf523645eb663f39dea71197493d7f06c43ee5a55/analysis/1404422412/