Bitcoin Forum
May 04, 2024, 01:17:39 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Dropbox malware?  (Read 542 times)
Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 19, 2016, 11:28:07 PM
 #1

I just got some files shared by some random person called "bitcoin backup" and inside it was electrum-2.6.4.exe and wallet.js

Is this malware? or some other type of hack/phishing attempt?
The block chain is the main innovation of Bitcoin. It is the first distributed timestamping system.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714785459
Hero Member
*
Offline Offline

Posts: 1714785459

View Profile Personal Message (Offline)

Ignore
1714785459
Reply with quote  #2

1714785459
Report to moderator
1714785459
Hero Member
*
Offline Offline

Posts: 1714785459

View Profile Personal Message (Offline)

Ignore
1714785459
Reply with quote  #2

1714785459
Report to moderator
1714785459
Hero Member
*
Offline Offline

Posts: 1714785459

View Profile Personal Message (Offline)

Ignore
1714785459
Reply with quote  #2

1714785459
Report to moderator
--Encrypted--
Copper Member
Legendary
*
Offline Offline

Activity: 924
Merit: 1007

hee-ho.


View Profile
May 19, 2016, 11:33:40 PM
 #2

https://bitcointalk.org/index.php?topic=1478385.0;topicseen

when someone shared some files out of nowhere, don't open them.
maybe post the link here. but remove the htt.ps://www. and write something [beware! might be malware.] just in case.
Quartx
Hero Member
*****
Offline Offline

Activity: 1036
Merit: 504


Becoming legend, but I took merit to the knee :(


View Profile WWW
May 19, 2016, 11:37:46 PM
 #3

Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 19, 2016, 11:40:51 PM
 #4

Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?
--Encrypted--
Copper Member
Legendary
*
Offline Offline

Activity: 924
Merit: 1007

hee-ho.


View Profile
May 19, 2016, 11:46:53 PM
 #5

Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?

it's a .js formatted file named "wallet".  Roll Eyes there can be anything inside.
Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 19, 2016, 11:51:38 PM
 #6

Why would you want to open some random file shared with you anyways? Common sense dictates you either unshare/delete or simply download the said files from the actual site, or simply ignore, if you really want to open it, use a clean isolated machine, but scan it beforehand

does wallet.js mean anything?

it's a .js formatted file named "wallet".  Roll Eyes there can be anything inside.

Yeah but would a electrum wallet be stored at wallet.js?
--Encrypted--
Copper Member
Legendary
*
Offline Offline

Activity: 924
Merit: 1007

hee-ho.


View Profile
May 20, 2016, 12:15:18 AM
 #7

Yeah but would a electrum wallet be stored at wallet.js?

getting greedy, aren't we?
afaik you can't store a file within .js file.
Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 20, 2016, 12:17:55 AM
 #8

Yeah but would a electrum wallet be stored at wallet.js?

getting greedy, aren't we?
afaik you can't store a file within .js file.

lol - I like money.

anywho its a virus..

https://www.virustotal.com/en/file/db398e8d1d42b777d88c0cc0dc062bb8d4e54ed451624a845c64db0448fe6897/analysis/
Shiroslullaby
Sr. Member
****
Offline Offline

Activity: 434
Merit: 250



View Profile
May 20, 2016, 12:19:50 AM
 #9

.js is a Javascript file.
I would definitely not open any files from a dropbox unless you know the owner and know the files in it are okay.

Boat4Sale (OP)
Newbie
*
Offline Offline

Activity: 50
Merit: 0


View Profile
May 20, 2016, 12:25:42 AM
 #10

.js is a Javascript file.
I would definitely not open any files from a dropbox unless you know the owner and know the files in it are okay.

The note that came with the notification said "Send 1 btc to Alan. Leave 2.7 btc in main wallet".


To be honest this is some good hacking technique, I was so tempted to open it to see if any bitcoins would fall out, lucky I posted here then scanned it!
techgeek
Hero Member
*****
Offline Offline

Activity: 826
Merit: 1000


View Profile
May 20, 2016, 07:50:39 AM
 #11

This is why you label your own back up file to something you recognize.

Anything else should be assume its a malware or trojan attempt, and if that happens youre screwed.

Cause basically you need a new computer.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!