Bitcoin Forum
June 20, 2024, 09:35:11 PM *
News: Voting for pizza day contest
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Beaware about virus [QnodeCoin]  (Read 154 times)
Bitcoinsummoner (OP)
Hero Member
*****
Offline Offline

Activity: 1372
Merit: 623


Maintain Social Distance, Stay safe.


View Profile WWW
May 30, 2020, 01:18:37 PM
Merited by nutildah (1)
 #1

What happened: Virus on their wallet
Link of virus:
Quote


Announcement thread: https://bitcointalk.org/index.php?topic=5252100
Archive: http://archive.is/KdQ65
Scammer profile link: https://bitcointalk.org/index.php?action=profile;u=57528
Screenshot from virus total:



.
.BIG WINNER!.
[15.00000000 BTC]


▄████████████████████▄
██████████████████████
██████████▀▀██████████
█████████░░░░█████████
██████████▄▄██████████
███████▀▀████▀▀███████
██████░░░░██░░░░██████
███████▄▄████▄▄███████
████▀▀████▀▀████▀▀████
███░░░░██░░░░██░░░░███
████▄▄████▄▄████▄▄████
██████████████████████

▀████████████████████▀
▄████████████████████▄
██████████████████████
█████▀▀█▀▀▀▀▀▀██▀▀████
█████░░░░░░░░░░░░░████
█████░░░░░░░░░░░░▄████
█████░░▄███▄░░░░██████
█████▄▄███▀░░░░▄██████
█████████░░░░░░███████
████████░░░░░░░███████
███████░░░░░░░░███████
███████▄▄▄▄▄▄▄▄███████

██████████████████████
▀████████████████████▀
▄████████████████████▄
███████████████▀▀▀▀▀▀▀
███████████▀▀▄▄█░░░░░█
█████████▀░░█████░░░░█
███████▀░░░░░████▀░░░▀
██████░░░░░░░░▀▄▄█████
█████░▄░░░░░▄██████▀▀█
████░████▄░███████░░░░
███░█████░█████████░░█
███░░░▀█░██████████░░█
███░░░░░░████▀▀██▀░░░░
███░░░░░░███░░░░░░░░░░

██░▄▄▄▄░████▄▄██▄░░░░
████████████▀▀▀▀▀▀▀██
█████████████░█▀▀▀█░███
██████████▀▀░█▀░░░▀█░▀▀
███████▀░▄▄█░█░░░░░█░█▄
████▀░▄▄████░▀█░░░█▀░██
███░▄████▀▀░▄░▀█░█▀░▄░▀
█▀░███▀▀▀░░███░▀█▀░███░
▀░███▀░░░░░████▄░▄████░
░███▀░░░░░░░█████████░░
░███░░░░░░░░░███████░░░
███▀░██░░░░░░▀░▄▄▄░▀░░░
███░██████▄▄░▄█████▄░▄▄

██░████████░███████░█
▄████████████████████▄
████████▀▀░░░▀▀███████
███▀▀░░░░░▄▄▄░░░░▀▀▀██
██░▀▀▄▄░░░▀▀▀░░░▄▄▀▀██
██░▄▄░░▀▀▄▄░▄▄▀▀░░░░██
██░▀▀░░░░░░█░░░░░██░██
██░░░▄▄░░░░█░██░░░░░██
██░░░▀▀░░░░█░░░░░░░░██
██░░░░░▄▄░░█░░░░░██░██
██▄░░░░▀▀░░█░██░░░░░██
█████▄▄░░░░█░░░░▄▄████
█████████▄▄█▄▄████████

▀████████████████████▀




Rainbot
Daily Quests
Faucet
bL4nkcode
Copper Member
Legendary
*
Offline Offline

Activity: 2142
Merit: 1305


Limited in number. Limitless in potential.


View Profile
May 30, 2020, 02:22:42 PM
 #2

Most qt wallets are detected with malware even the bitcoin-qt wallet on virustotal. Which you can't assure the legitimacy of the report not unless the source code of the software was audited by the open-source community without any issue. Considering this is a new wallet/project I'm skeptical of using them in any way.
Rikafip
Legendary
*
Offline Offline

Activity: 1792
Merit: 6116


Iznad svih Hrvatska!


View Profile WWW
May 30, 2020, 03:15:30 PM
 #3

Most qt wallets are detected with malware even the bitcoin-qt wallet on virustotal. Which you can't assure the legitimacy of the report not unless the source code of the software was audited by the open-source community without any issue.
True, Virus Total might give false results, but in this case there is no question what's going on. There are several red flags beside Virus Total result:
  • account used was made in 2012, wakes up after  8 years break and immediately makes self-moderated thread
  • Ann of the project (Qnode) already exists. This looks like combination of two, Qnode and Qnodecoin. It is their standard practice, to use real project name so people think its legit


@OP Best place to report fake  ANN threads with malware is this thread in Meta Report Malware and Suspicious Links here so Mods can take Action !. Every day there are several attempts like that, so when you come across them, just make a post  there, and don't forget to report the thread to mods so it gets deleted before someone downloads it.

██
██
██
██
██
██
██
██
██
██
██
██
██
... LIVECASINO.io    Play Live Games with up to 20% cashback!...██
██
██
██
██
██
██
██
██
██
██
██
██
nutildah
Legendary
*
Offline Offline

Activity: 3024
Merit: 8126



View Profile WWW
May 30, 2020, 03:44:37 PM
 #4

Just for "fun" I downloaded the file, unzipped it, and sent the QT file back to VirusTotal. Indeed, it appears as some scanners are just declaring the coin miner as a virus. I also scanned it with my Malwarebytes which didn't find anything... The link to the Windows wallet doesn't even work.

What's weird, however, is that they already released an ANN for this project back in February. The user account promoting the current ANN is from 2012 and has zero previous posts -- no way that's an original account, was probably bought sometime in August 2018.

In any case, no decent reason to get involved with this project.

Edit: just saw the post by Rikafip, yes I agree

▄▄███████▄▄
▄██████████████▄
▄██████████████████▄
▄████▀▀▀▀███▀▀▀▀█████▄
▄█████████████▄█▀████▄
███████████▄███████████
██████████▄█▀███████████
██████████▀████████████
▀█████▄█▀█████████████▀
▀████▄▄▄▄███▄▄▄▄████▀
▀██████████████████▀
▀███████████████▀
▀▀███████▀▀
.
 MΞTAWIN  THE FIRST WEB3 CASINO   
.
.. PLAY NOW ..
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!