if it looks too good to be true, it is
If its on the TOR network don't trust it
Store your wallet and back it up
Don't trust files from the internet and scan anything dodgy looking against virustotal
Especially don't trust any file related to cryptocurrencies. So many fake trade bots have been posted online, which actually steal the user's wallets.
Not only trade bots, there are also malware in altcoin wallets, gambling bots, etc.
So, don't download any programs without checking the code, and don't run any programs without first testing with a sandbox.
