Bitcoin Forum
June 18, 2024, 07:32:46 AM
Welcome,
Guest
. Please
login
or
register
.
News
:
Voting for pizza day contest
Home
Help
Search
Login
Register
More
Bitcoin Forum
>
Economy
>
Trading Discussion
>
Scam Accusations
>
rahman1988 - posting links to password stealing malware
Pages: [
1
]
« previous topic
next topic »
Print
Author
Topic: rahman1988 - posting links to password stealing malware (Read 822 times)
hamsterfly
(OP)
Newbie
Offline
Activity: 6
Merit: 0
rahman1988 - posting links to password stealing malware
April 08, 2016, 08:31:56 PM
#1
Scammer : rahman1988
Profile :
https://bitcointalk.org/index.php?action=profile;u=326395
Link to his sales thread -
https://bitcointalk.org/index.php?topic=1429893.msg14461489#msg14461489
Sends you a .zip file claiming its his Dash wallet.dat file for the trade except it has a password stealer in it.
I have a complete log of all pm's between us if anyone wants to see them.
Quote from: rahman1988 on April 08, 2016, 07:53:45 PM
I have now send 25% of the 14000 DASH upfront as promised.
-
https://stemfund.com/dashwallet.zip
I'm looking forward to your business!
My bitcoin address is:
1LhdG3aB5a2zQzKBSWBkwNxCYCBhSvqaXS
Quote from: rahman1988 on April 08, 2016, 08:06:17 PM
StemFund is my bitcoin loaning company, and i already sent you the wallet with password..
I dont know how a txt or zip is malware.. man i its my wallet.dat and password for DASH.
Else i would have to change my password for my wallet. It contains 3507 DASH coins.
Regards
rahman1988
Virustotal report on zip file :
https://www.virustotal.com/en/file/216cfbe6851a2d733ec5f7d9875e9156b5cf6b461dc195d41d08642edd525aed/analysis/1460146837/
If this guy posts any bullshit about who is the real scammer I happy to give my password to any senior member so they can confirm every pm between us.
Please tag this retard as a scammer!
suchmoon
Legendary
Offline
Activity: 3710
Merit: 8969
https://bpip.org
Re: rahman1988 - posting links to password stealing malware
April 08, 2016, 10:05:24 PM
#2
Selling coins by sending a zipped wallet? That's a new one.
The VirusTotal report is showing only 1/56 detection ratio, which could mean a false positive. Did you try to unzip the file?
Edit: never mind, there is an .lnk file in it, those are dangerous. Could be a link to anything, and also there are possible Windows exploits.
xetsr
Legendary
Offline
Activity: 1120
Merit: 1000
Re: rahman1988 - posting links to password stealing malware
April 08, 2016, 10:20:55 PM
#3
Quote from: suchmoon on April 08, 2016, 10:05:24 PM
Selling coins by sending a zipped wallet? That's a new one.
The VirusTotal report is showing only 1/56 detection ratio, which could mean a false positive. Did you try to unzip the file?
Edit: never mind, there is an .lnk file in it, those are dangerous. Could be a link to anything, and also there are possible Windows exploits.
Seen this many times before here. Been awhile but it's nothing new.
rahman1988
Member
Offline
Activity: 91
Merit: 10
Re: rahman1988 - posting links to password stealing malware
April 08, 2016, 11:20:18 PM
#4
This is ridiculous!
that is a false positive.
Luckily I got to move my coins before someone stole the coins you leaked from our PMs.
The crypto currency of the future! ●
RACE
● ✔ Fast ✔ Secure ✔ Anonymous
▄▄▄███ Masternodes | PoW | Secure | ASIC resistant | Lyra2REv2 ███▄▄▄
DISCORD
TWITTER
suchmoon
Legendary
Offline
Activity: 3710
Merit: 8969
https://bpip.org
Re: rahman1988 - posting links to password stealing malware
April 08, 2016, 11:37:13 PM
#5
Quote from: rahman1988 on April 08, 2016, 11:20:18 PM
This is ridiculous!
that is a false positive.
Luckily I got to move my coins before someone stole the coins you leaked from our PMs.
Oh, so you know how to "move" coins. I wonder why you had to send the wallet file then? Instead of just sending the coins to the buyer.
And why did the password have to be in the LNK file?
xetsr
Legendary
Offline
Activity: 1120
Merit: 1000
Re: rahman1988 - posting links to password stealing malware
April 09, 2016, 12:16:09 AM
#6
Quote from: rahman1988 on April 08, 2016, 11:20:18 PM
This is ridiculous!
that is a false positive.
Luckily I got to move my coins before someone stole the coins you leaked from our PMs.
Yeah... I don't think anyone is gonna fall for that. Might wanna try again
http://whois.domaintools.com/stemfund.com
- Shared namecheap hosting. They'll take it down if enough people report it.
KenR
Hero Member
Offline
Activity: 910
Merit: 1000
「きみはこれ&#
Re: rahman1988 - posting links to password stealing malware
April 09, 2016, 03:38:55 AM
#7
Quote from: rahman1988 on April 08, 2016, 11:20:18 PM
This is ridiculous!
that is a false positive.
Luckily I got to move my coins before someone stole the coins you leaked from our PMs.
How can someone steal the coins leaked from the PM's ?
Aren't you the one trying to send the coins in a Zip File ? That's a new one dude! What were you actually thinking!
▄▄█████████▄▄
▄██▀▀ ▀▀██▄
▄██▀ ██▄
▄██ ██▄
N A R B O N N E
▀██ ██▀
▀██▄ ▄██▀
▀██▄▄ ▄▄██▀
▀▀█████████▀▀
████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████
.
THE
1
st
decentralised
CRYPTO BANK
.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ▄ ▄▄ ▄▄▄ ▄▄▄▄▄
████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████
.
WEBSITE
.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
.
ANN THREAD
.
▄▄███████▄▄
▄
████████▀
▄
█████████ ▄▄██
██████████ ██████
████████ ███
████████▄▄ ▄▄████
█████████ █████
▀
███████ ███
▀
▀▀
████
▀▀
.
facebook
▄▄███████▄▄
▄█████████████▄
███▀█████▀ ▀▀▀██
████ ▀▀ ████
████▄ █████
█████▄ ██████
██▄▀ ▄▄██████
▀█████████████▀
▀▀███████▀▀
.
twitter
▄▄███████▄▄
▄█████████████▄
███████████▀▀████
███████▀▀▀ █████
███▀ ▄▀ ▄█████
█████▄▄█ ██████
██████ ▄█▄ ▄█████
▀█████████████▀
▀▀███████▀▀
.
telegram
.
▄▄▄▄▄▄▄▄
████
█ ████
█ ████
█ ████
█ ████ █
█ ████ █
█ ████ █
█ ████ █
█ ████ █
████ █
████ █
████ █
████
.
.
TOKEN SALE
.
Sept
29th
- Oct
8th
Timelord2067
Legendary
Offline
Activity: 3710
Merit: 2221
💲🏎️💨🚓
Re: rahman1988 - posting links to password stealing malware
April 26, 2016, 03:31:07 PM
#8
Strange transactions:
https://blockchain.info/tx/c54a42d272782ea1751425085baec5f8888e066d74b9cd801d95253678c0a5d7
1LhdG3aB5a2zQzKBSWBkwNxCYCBhSvqaXS sends
1bk6raTidUCGEgmyvEmhV8q7fujGRVAWG 3.999 BTC
157meJhNjuetruUKbLKRhvzi63KDW9W2Q4 1.0009 BTC
https://blockchain.info/address/157meJhNjuetruUKbLKRhvzi63KDW9W2Q4
only other transaction two days later is to send
1bk6raTidUCGEgmyvEmhV8q7fujGRVAWG 1.599 BTC
1MRkXWDcvcPKKR1PpQUVbugKZtS1fewZQ6 0.01504649 BTC
https://blockchain.info/tx/c81739504b649b31002e7ce229e9962a07ad2c4aa4482567c6edf87e286db2fe
1LhdG3aB5a2zQzKBSWBkwNxCYCBhSvqaXS also sends 1bk6raTidUCGEgmyvEmhV8q7fujGRVAWG directly more than once eg
https://blockchain.info/tx/95295cac37482d6aa7e6c814b196065819157d162caec7476804bc435632fa03
https://blockchain.info/tx/15d7a07ac0225a92ae3e15ce757818f2af0b78786b2c77fae091461c0ca90561
Timelord2067
ⓘ
Ⓛ
Ⓝ
[
Ranking
] [Flags
TL
LV
] [
Mobile Alt
]
KEYBASE
❖
Wallet Verified
❖
OpenPGP Key
❖
Known Alts of any-one
-
A User Generated List
Mk IV
❖
[Guide]
Broadcast Your RAW Transaction
❖
[List]
Vanity Wallet Generation. Threads, how-to & links
❖
[Cryptopia]
ONLINE ARTICLES related to hack & theft of funds
▶
[Rugby]
Union / League
▶
NetHack 3.6.
6
▶
Hearse V 1.0.6e
▶
PokerTH
/ [
NitrogenSports
]
❖
@Twitter
Retweet ≠ endorsement
❖
£ $ ₹ € ¥ ¢ ≠ ÷
BTC
™
❖
★☆★
Signature For Rent
★☆★
.
★☆★ UNPAID ADVERTISEMENTS: ★☆★
❖
Get Paid in BitCoin
.
.
❖
CoinPlaza Exchange (IT)
★☆★
.
TALK[img]
Talk with Images™
.
❖
Win Free Bitcoins every hour! -
www.freebitco.in
.
Stemfund
Newbie
Offline
Activity: 11
Merit: 0
Re: rahman1988 - posting links to password stealing malware
January 02, 2017, 05:00:36 PM
#9
This guy is clearly a scammer. He has nothing to do with Stemfund.
Pages: [
1
]
Print
Bitcoin Forum
>
Economy
>
Trading Discussion
>
Scam Accusations
>
rahman1988 - posting links to password stealing malware
« previous topic
next topic »
Jump to:
Please select a destination:
-----------------------------
Bitcoin
-----------------------------
=> Bitcoin Discussion
===> Legal
===> Press
===> Meetups
===> Important Announcements
=> Development & Technical Discussion
===> Wallet software
=====> Electrum
=====> Bitcoin Wallet for Android
=====> BitcoinJ
=====> Armory
=====> Mycelium
=====> Hardware wallets
=> Mining
===> Mining support
===> Pools
===> Mining software (miners)
===> Hardware
=====> Group buys
===> Mining speculation
=> Bitcoin Technical Support
=> Project Development
-----------------------------
Economy
-----------------------------
=> Economics
===> Speculation
=> Marketplace
===> Goods
=====> Computer hardware
=====> Digital goods
=======> Invites & Accounts
=====> Collectibles
===> Services
===> Currency exchange
===> Gambling
=====> Games and rounds
=====> Investor-based games
=====> Gambling discussion
===> Lending
=====> Long-term offers
===> Securities
===> Auctions
===> Service Announcements
=====> Micro Earnings
===> Service Discussion
=====> Web Wallets
=====> Exchanges
=> Trading Discussion
===> Scam Accusations
===> Reputation
-----------------------------
Other
-----------------------------
=> Meta
===> New forum software
===> Bitcoin Wiki
=> Politics & Society
=> Beginners & Help
=> Off-topic
=> Serious discussion
===> Ivory Tower
=> Archival
===> Корзина
===> CPU/GPU Bitcoin mining hardware
===> Chinese students
===> Obsolete (buying)
===> Obsolete (selling)
===> MultiBit
-----------------------------
Alternate cryptocurrencies
-----------------------------
=> Altcoin Discussion
=> Announcements (Altcoins)
===> Tokens (Altcoins)
=> Mining (Altcoins)
===> Pools (Altcoins)
=> Marketplace (Altcoins)
===> Service Announcements (Altcoins)
===> Service Discussion (Altcoins)
===> Bounties (Altcoins)
=> Speculation (Altcoins)
-----------------------------
Local
-----------------------------
=> العربية (Arabic)
===> العملات البديلة (Altcoins)
=====> النقاشات
===> إستفسارات و أسئلة المبتدئين
===> التعدين
===> النقاشات الأخرى
===> منصات التبادل
=> Bahasa Indonesia (Indonesian)
===> Marketplace (Bahasa Indonesia)
===> Mining (Bahasa Indonesia)
===> Altcoins (Bahasa Indonesia)
===> Trading dan Spekulasi
===> Ekonomi, Politik, dan Budaya
===> Topik Lainnya
=> Español (Spanish)
===> Mercado y Economía
=====> Servicios
=====> Trading y especulación
===> Hardware y Minería
===> Esquina Libre
===> Mercadillo
=====> Mexico
=====> Argentina
=====> España
=====> Centroamerica y Caribe
===> Primeros pasos y ayuda
===> Altcoins (criptomonedas alternativas)
=====> Minería de altcoins
=====> Servicios
=====> Tokens (Español)
=> 中文 (Chinese)
===> 跳蚤市场
===> 山寨币
===> 媒体
===> 挖矿
===> 离题万里
=> Hrvatski (Croatian)
===> Trgovina
===> Altcoins (Hrvatski)
=====> Announcements (Hrvatski)
===> Off-topic (Hrvatski)
=> Deutsch (German)
===> Anfänger und Hilfe
===> Mining (Deutsch)
===> Trading und Spekulation
===> Projektentwicklung
===> Off-Topic (Deutsch)
===> Treffen
===> Presse
===> Altcoins (Deutsch)
=====> Announcements (Deutsch)
===> Marktplatz
=====> Auktionen
=====> Suche
=====> Biete
=> Ελληνικά (Greek)
===> Αγορά
===> Mining Discussion (Ελληνικά)
===> Altcoins (Ελληνικά)
=====> Altcoin Announcements (Ελληνικά)
=====> Altcoin Mining (Ελληνικά)
=> עברית (Hebrew)
=> Français
===> Actualité et News
===> Débutants
===> Discussions générales et utilisation du Bitcoin
===> Mining et Hardware
===> Économie et spéculation
===> Place de marché
=====> Échanges
=====> Produits et services
=====> Petites annonces
===> Le Bitcoin et la loi
===> Wiki, documentation et traduction
===> Développement et technique
===> Vos sites et projets
===> Hors-sujet
===> Altcoins (Français)
=====> Annonces
=> India
===> Mining (India)
===> Marketplace (India)
===> Regional Languages (India)
===> Press & News from India
===> Alt Coins (India)
===> Buyer/ Seller Reputations (India)
===> Off-Topic (India)
=> Italiano (Italian)
===> Guide (Italiano)
===> Progetti
===> Discussioni avanzate e sviluppo
===> Trading, analisi e speculazione
===> Mercato
=====> Mercato valute
=====> Beni
=====> Servizi
=====> Esercizi commerciali
=====> Hardware/Mining (Italiano)
=====> Gambling (Italiano)
===> Accuse scam/truffe
===> Mining (Italiano)
===> Alt-Currencies (Italiano)
=====> Annunci
===> Raduni/Meeting (Italiano)
===> Crittografia e decentralizzazione
===> Off-Topic (Italiano)
=> 日本語 (Japanese)
===> アルトコイン
=> Nederlands (Dutch)
===> Markt
===> Gokken/lotterijen
===> Mining (Nederlands)
===> Beurzen
===> Alt Coins (Nederlands)
===> Off-topic (Nederlands)
===> Meetings (Nederlands)
=> Nigeria (Naija)
===> Politics and society (Naija)
===> Off-topic (Naija)
=> 한국어 (Korean)
===> 대체코인 Alt Coins (한국어)
=> Pilipinas
===> Altcoins (Pilipinas)
=====> Altcoin Announcements (Pilipinas)
===> Pamilihan
===> Others (Pilipinas)
=> Polski
===> Tablica ogłoszeń
===> Alternatywne kryptowaluty
=====> Nowe kryptowaluty i tokeny
=====> Tablica ogłoszeń (altcoiny)
=> Português (Portuguese)
===> Primeiros Passos (Iniciantes)
===> Economia & Mercado
===> Mineração em Geral
===> Desenvolvimento & Discussões Técnicas
===> Criptomoedas Alternativas
===> Brasil
===> Portugal
=> Русский (Russian)
===> Новички
===> Бизнес
=====> Барахолка
=====> Обменники
===> Идеи
===> Кодеры
===> Майнеры
===> Политика
===> Трейдеры
===> Альтернативные криптовалюты
=====> Токены
=====> Бayнти и aиpдpoпы
===> Хайпы
===> Работа
===> Разное
===> Oбcyждeниe Bitcoin
=====> Новости
=====> Юристы
=> Română (Romanian)
===> Anunturi importante
===> Offtopic
===> Market
=====> Discutii Servicii
===> Minerit
===> Tutoriale
===> Bine ai venit!
===> Presa
===> Altcoins (Monede Alternative)
=====> Anunturi Monede Alternative
=> Skandinavisk
=> Türkçe (Turkish)
===> Bitcoin Haberleri
===> Pazar Alanı
===> Madencilik
===> Ekonomi
===> Servisler
=====> Fonlar
===> Proje Geliştirme
===> Alternatif Kripto-Paralar
=====> Madencilik (Alternatif Kripto-Paralar)
=====> Duyurular (Alternatif Kripto-Paralar)
===> Konu Dışı
===> Yeni Başlayanlar & Yardım
===> Buluşmalar
=> Other languages/locations
Loading...