Bitcoin Forum
May 29, 2024, 07:17:40 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: User (0_0) spreading coin stealing Malware using CoinDesk phishing site.  (Read 799 times)
minifrij (OP)
Legendary
*
Offline Offline

Activity: 2324
Merit: 1267


In Memory of Zepher


View Profile WWW
August 19, 2015, 03:06:18 PM
 #1

Scammer profile: https://bitcointalk.org/index.php?action=profile;u=404399
Link to scam: https://archive.is/IgT7m - http://www.coindesk.us/CoinDesk-US-Research-Bitcoin-Downfall-Complete-Analysis-August19.html

This user has posted a link to a CoinDesk phishing site (CoinDesk.us) under the reasoning of an article on Bitcoin's Downfall. This article prompts you to then download an EXE file to view the presentation.
I am sure this is malware for two reasons, the first being that the EXE file has a description of 'Windows Explorer', perhaps suggesting that it was a file which would be injected into System32 or was created to look legit. The other is VirusTotal showing signs of malware on this file (https://www.virustotal.com/en/file/c3a3aab15b2c17f2e9e856962a534248f9a71d7a6dc26f283992c371fa34c76a/analysis/1439996343/), one especially sticks out as it is labeled 'MSIL/CoinStealer.W!tr.pws'.

Avoid any links posted by this user, and never run any EXE file that is not trusted.
marcotheminer
Legendary
*
Offline Offline

Activity: 2072
Merit: 1049


┴puoʎǝq ʞool┴


View Profile
August 19, 2015, 03:21:35 PM
 #2

He's been banned by BadBear already.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!