[ANN][OXN] OXEN | PoW/PoS Hybrid | Blake2s CPU | No Premine | Launched

[mistercashking]

yes virus confirmed. how did we miss it. My computer didn't even alert me of a virus. But someone did a remote desktop to my pc and tried to login into bittrex. I cut my pc off before they hit the login button. Just finished reformatting and clean install.

[cakir]

I've runned CPU miner, Gpu miner and oxen-qt so far I don't seem to be infected.
I'll run a full virus scan now. Let's see.

[Vaccomondus]

yes virus confirmed. how did we miss it. My computer didn't even alert me of a virus. But someone did a remote desktop to my pc and tried to login into bittrex. I cut my pc off before they hit the login button. Just finished reformatting and clean install.

what you installed only the qt?

[mistercashking]

yes virus confirmed. how did we miss it. My computer didn't even alert me of a virus. But someone did a remote desktop to my pc and tried to login into bittrex. I cut my pc off before they hit the login button. Just finished reformatting and clean install.

what you installed only the qt?

had installed both cpu miner, gpu miner and qt. had them running when it happened.

[BigBoom3599]

The vps i have the qt and cpuminer installed on is also clean 

[Vaccomondus]

this in netstat, is dangerous? msnbot-191-232-139-87:https

how can i know if i'm infected? i don't want to format

[BigBoom3599]

this in netstat, is dangerous? msnbot-191-232-139-87:https

how can i know if i'm infected? i don't want to format

I have that too in my netstat, some googling says that its a bot by Microsoft. http://superuser.com/questions/1045873/what-does-msnbot-mean-in-netstat-listings.  Doing a WHOIS on the IP also says that its an official Microsoft ip

[Sir_Astral]

I have Linux Router and interactive firewall on windows, no new connections, wallet running from yesterday...

Dev, hello? Answer something.

[USScrypto]

The dev being silent on the situation is not a good sign...

[Vaccomondus]

he is busy breaking some firewall lol

[Sir_Astral]

Someone is hardly solomining now.

[BigCat45]

The dev being silent on the situation is not a good sign...

So, I just had this idea while responding to another thread (https://bitcointalk.org/index.php?topic=18242.480)

I am looking for pentesters and developers to work with as a bitcoin "security team".

Basically, the idea is that we provide penetration/exploit testing for pool owners and maybe even individual users if they are so inclined and repair any security flaws and/or exploitable code.

If interested, please reply with your area of expertise, what tools you use and rate yourself on how knowledgeable you are in your field on a scale of 1 - 10 where 1 is "little to no experience" and 10 is "I can build a computer from the ground up and write all my own programs in Windows and *nix OS's".

Personally, my area of expertise is in penetration/exploit testing with some programming skill. The tools I use include but are not limited to: nmap, metasploit, wireshark, kismet, ettercap, hydra and MANY others. On a scale of 1 - 10 I rate myself as an 8 in my field.

What about you...?

4 years ago ...

[kondiomir]

So ... the wallet is clear - right ?

The malware comes from gpu or cpu miner.

Who posted them ?

[Sir_Astral]

Seems to be... Dev said he paid for miner. But he is offline now.

[Fishmaster42]

The dev being silent on the situation is not a good sign...

So, I just had this idea while responding to another thread (https://bitcointalk.org/index.php?topic=18242.480)

I am looking for pentesters and developers to work with as a bitcoin "security team".

Basically, the idea is that we provide penetration/exploit testing for pool owners and maybe even individual users if they are so inclined and repair any security flaws and/or exploitable code.

If interested, please reply with your area of expertise, what tools you use and rate yourself on how knowledgeable you are in your field on a scale of 1 - 10 where 1 is "little to no experience" and 10 is "I can build a computer from the ground up and write all my own programs in Windows and *nix OS's".

Personally, my area of expertise is in penetration/exploit testing with some programming skill. The tools I use include but are not limited to: nmap, metasploit, wireshark, kismet, ettercap, hydra and MANY others. On a scale of 1 - 10 I rate myself as an 8 in my field.

What about you...?

4 years ago ...

Oh no thats not good. I scanned the stuff only the minner cpu files showed up for me. What now

[BigBoom3599]

So, I just had this idea while responding to another thread (https://bitcointalk.org/index.php?topic=18242.480)

I am looking for pentesters and developers to work with as a bitcoin "security team".

Basically, the idea is that we provide penetration/exploit testing for pool owners and maybe even individual users if they are so inclined and repair any security flaws and/or exploitable code.

If interested, please reply with your area of expertise, what tools you use and rate yourself on how knowledgeable you are in your field on a scale of 1 - 10 where 1 is "little to no experience" and 10 is "I can build a computer from the ground up and write all my own programs in Windows and *nix OS's".

Personally, my area of expertise is in penetration/exploit testing with some programming skill. The tools I use include but are not limited to: nmap, metasploit, wireshark, kismet, ettercap, hydra and MANY others. On a scale of 1 - 10 I rate myself as an 8 in my field.

What about you...?

This fact and the fact that the dev is still silent are certainly worrying, I definitely think dev has something to do with the virus(es)

[Mote]

Coin is virus

[mistercashking]

I don't know if it's the dev who planted the virus or not but he's pretty easy to dox. If you look at his first post on bitcointalk back from 2012 you can find everything you need to know about him by searching his recording label in this post. There could also be the possibility that this account was sold a long time ago.

https://bitcointalk.org/index.php?topic=15672.msg1171453#msg1171453

[appcapn]

Its not just the cpu miner that contains malware but also the wallet consistently tries to connect to nodes that have been flagged in the malwarebytes database for spreading malware. Also I wasn't running cpu miner, just the wallet and gpuminer which "appear" to be clean and still I was constantly being notified by my antivirus software about the virus file "taskhost" appearing in the temp directory, even though each time it was blocked and deleted by the antivirus.

[seedtrue]

I am glad that I just scanned the thread at launch and chose to not get involved. These fuckers are getting pretty low with this bullshit.