Bitcoin Forum
May 27, 2024, 09:47:39 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Brand New user scam attempt(?)  (Read 139 times)
vv181 (OP)
Legendary
*
Offline Offline

Activity: 1932
Merit: 1273


View Profile
August 18, 2021, 08:36:02 AM
Last edit: August 18, 2021, 03:25:27 PM by vv181
 #1

Someone made a post on the Bitcoin Discussion board then immediately locking the thread. I suspect the script for the "bug" is just a scam attempt to change the BTC address to the scammer address.

The script is listed on <removed>. the script/code is obfusticated. But if you look at it, there is a line that is linked to <removed>. If you scan the QR it shows "address=1PMw9X3SZiGg9ScPNawcxoep5twi6jeRjE&amount=0.01"

Could anyone verify the obfuscated code is malicious?



Ravmaga
<removed>

EDIT: the user is already banned.
<removed>
mocacinno
Legendary
*
Online Online

Activity: 3402
Merit: 4984


https://merel.mobi => buy facemasks with BTC/LTC


View Profile WWW
August 18, 2021, 08:44:08 AM
 #2

I already gave this user a negative tag for exactly the same issue as soon as i saw he was posting this crap on several subforums... Eventough his script is encoded (so really hard to read), it's pretty clear that the qr code was indeed a payment request designed to replace the payment request shown by the payment processor.
And even if it was a donation-button (which i seriously doubt), he would still be posting a way to defraud an honest company, which would still be enough to give a negative tag.


█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
NotATether
Legendary
*
Offline Offline

Activity: 1610
Merit: 6761


bitcoincleanup.com / bitmixlist.org


View Profile WWW
August 18, 2021, 10:29:17 AM
Merited by ABCbits (1)
 #3

You'd have to be a real looney to believe that you can siphon money from a company that way and not expect them to ban your account at the first attempt. You don't even have to read the linked "method" to figure this out. They will even go after you for $5.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
mocacinno
Legendary
*
Online Online

Activity: 3402
Merit: 4984


https://merel.mobi => buy facemasks with BTC/LTC


View Profile WWW
August 18, 2021, 10:45:00 AM
 #4

Funny sidenote: he left me some retaliatory negative feedback by just copy/pasting my feedback (minus the reference), it seems to have happened AFTER he was banned.
Not only a scammer, but one with a short fuse  Grin

I didn't even know banned newbies could leave some more feedback, unless it was given a very (very) short time before he was banned and i simply missed it.

Anyways, account banned, scamposts were nukes, risk was mitigated... untill he comes back with a new account.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
NeuroticFish
Legendary
*
Offline Offline

Activity: 3682
Merit: 6412


Looking for campaign manager? Contact icopress!


View Profile
August 18, 2021, 11:00:25 AM
 #5

risk was mitigated

The culprit post is archived and linked, the culprit post is also quoted in this topic... it's like OP would really love to advertise the scammer...
Of course, one has to... have a certain death wish to try out that, but on the other hand, it was already the same with the initial topic imho...

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
The Cryptovator
Legendary
*
Offline Offline

Activity: 2254
Merit: 2181

Need PR/CMC & CG? TG @The_Cryptovator


View Profile WWW
August 18, 2021, 12:09:13 PM
 #6

Where you will find the smell of free money means there is something suspicious always. It doesn't need to verify anyway. So definitely it was a scam attempt.

@OP, please put this quote into the code. So no one can click the links. Since the scammer has been banned from the forum, the post shouldn't exist like this. Who knows if a few newbies like to try because of greedy behavior.
TalkStar
Copper Member
Hero Member
*****
Offline Offline

Activity: 1204
Merit: 737


✅ Need Campaign Manager? TG > @TalkStar675


View Profile WWW
August 18, 2021, 05:55:23 PM
 #7

@OP, please put this quote into the code. So no one can click the links. Since the scammer has been banned from the forum, the post shouldn't exist like this. Who knows if a few newbies like to try because of greedy behavior.
For now newbies are safer from this banned users post but we can't keep newbies safer if they do not manage enough time to justify anything before sending fund without thinking for a second.

Yeah its true that still people exist who always run after free money and they think earning money is so easy. This is why still scammers are taking this kinda attempt and so confident that they will be able to attract a specific group of people.

Few days earlier I joined a new telegram group to make contact with a project team and as like always started to receive PM from unknown sources. Most surprising thing was that in one of these messages there was different one. Scammer just give me a link and wrote; You can lose your money by investing here but you can try your luck for last time. Lol. 



.

▄██████████████████████████▄
████████████████████████████
████████████████████████████
████████████████████████████
███████████████████████████
████████████████████████████
████████████████████████████
████████████████████████████
███████████████████████████
████████████████████████████
████████████████████████████
████████████████████████████
▀██████████████████████████▀
.

.

.

.

████░█▄
████░███▄
████▄▄▄▄▄
█████████
█████████
█████████


████░█▄
████░███▄
████▄▄▄▄▄
█████████
█████████
█████████












.KUCOIN LISTING WORKFLOW.
.
.KUCOIN COMPANY PROFILE..

.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!