Bitcoin Forum
June 29, 2024, 05:07:33 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Email received from Multibit@team.multibit.org ?  (Read 4771 times)
Extravagant (OP)
Member
**
Offline Offline

Activity: 109
Merit: 10


I.. don't think.. I like the way that sounds....


View Profile
March 12, 2014, 09:14:29 PM
 #1


I registered on mtgoxrecovery.com because i lost 10.94 BTC when "crap" hit the fan @ MTGox,

I just received a email from Multibit@team.multibit.org which reads the following:

Quote
you get new funds 10.944 BTC Please Click On the link To active your Funds
and download the invoice

With a link to https://multibit.org which redirects and ask's you to download a .JAR file from https://palmbeachwineco.com. The file is a .JAR aprox 43kb in size

What is this?

Obviously i have not downloaded / ran or responded. I am asking mainly because i want people to be aware of this. im about 99% sure its a phish from info gathered off the mtgox recovery site.

Ex.
escrow.ms
Legendary
*
Offline Offline

Activity: 1274
Merit: 1004


View Profile
March 12, 2014, 09:19:45 PM
 #2

It's a phishing mail with a link to Java drive by (A page that's use Java exploit to Infect your system).

Do not download/Run anything or open that website if you have Java Installed in your pc (specially browser extension).

Can you please forward that mail to escrow.ms@gmail.com so I can analyse that jar file.
Extravagant (OP)
Member
**
Offline Offline

Activity: 109
Merit: 10


I.. don't think.. I like the way that sounds....


View Profile
March 12, 2014, 09:21:19 PM
 #3

OK, kinda what i thought. thank you very much for the info.
E.exchanger
Hero Member
*****
Offline Offline

Activity: 714
Merit: 500


NEED CRYPTO CODER? COIN DEVELOPER? PM US FOR HELP!


View Profile
March 15, 2014, 08:53:11 PM
 #4

It's a phishing mail with a link to Java drive by (A page that's use Java exploit to Infect your system).

Do not download/Run anything or open that website if you have Java Installed in your pc (specially browser extension).

Can you please forward that mail to escrow.ms@gmail.com so I can analyse that jar file.

escrow please do update this thread when you done analyzing the jar file i'll be watching this thread to look into what exactly they have sent in it !!! thanks  Smiley
escrow.ms
Legendary
*
Offline Offline

Activity: 1274
Merit: 1004


View Profile
March 16, 2014, 04:49:17 PM
 #5

It's a phishing mail with a link to Java drive by (A page that's use Java exploit to Infect your system).

Do not download/Run anything or open that website if you have Java Installed in your pc (specially browser extension).

Can you please forward that mail to escrow.ms@gmail.com so I can analyse that jar file.

escrow please do update this thread when you done analyzing the jar file i'll be watching this thread to look into what exactly they have sent in it !!! thanks  Smiley

Sorry I have posted it here.
https://bitcointalk.org/index.php?topic=513749.msg5729297#msg5729297
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!