Bitcoin Forum
April 15, 2024, 12:07:47 PM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 28 »
  Print  
Author Topic: Trojan Wallet stealer be careful  (Read 50227 times)
mash
Newbie
*
Offline Offline

Activity: 9
Merit: 0


View Profile
June 08, 2012, 01:07:05 PM
 #381

There is a (new?) trojan wallet stealer out in the wild ATM.

Plenty of script kiddies and scammers are going to be trying to get you to download and install it, what's more they'll be putting posts to do so (using lies obviously).

Don't install anything linked to on this forum, unless it's been found by someone with a good reputation to be legit. Assume everything is an attempt to steal your wallet.

You should also encrypt your wallet when not in use.
http://www.freeotfe.org/

Here is a portable apps version http://www.freeotfe.org/downloads/FreeOTFEExplorer_3_51.paf.exe

You have been warned.

Nefario

That's why we use a MAC Smiley
1713182867
Hero Member
*
Offline Offline

Posts: 1713182867

View Profile Personal Message (Offline)

Ignore
1713182867
Reply with quote  #2

1713182867
Report to moderator
1713182867
Hero Member
*
Offline Offline

Posts: 1713182867

View Profile Personal Message (Offline)

Ignore
1713182867
Reply with quote  #2

1713182867
Report to moderator
The forum strives to allow free discussion of any ideas. All policies are built around this principle. This doesn't mean you can post garbage, though: posts should actually contain ideas, and these ideas should be argued reasonably.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1713182867
Hero Member
*
Offline Offline

Posts: 1713182867

View Profile Personal Message (Offline)

Ignore
1713182867
Reply with quote  #2

1713182867
Report to moderator
Jesehl
Member
**
Offline Offline

Activity: 97
Merit: 10


View Profile
June 12, 2012, 01:49:29 PM
 #382

can avast prevent this?
Cray-1
Newbie
*
Offline Offline

Activity: 36
Merit: 0



View Profile
June 13, 2012, 05:38:33 AM
 #383

Good info!!
Kazimir
Legendary
*
Offline Offline

Activity: 1176
Merit: 1001



View Profile
June 13, 2012, 06:05:28 AM
 #384

That's why we use a MAC Smiley
Nothing more dangerous than a false sense of safety.

Hate to wake you up, but you are by no means less vulnerable than Windows or Linux users, sir Smiley

In theory, there's no difference between theory and practice. In practice, there is.
Insert coin(s): 1KazimirL9MNcnFnoosGrEkmMsbYLxPPob
hoseen
Newbie
*
Offline Offline

Activity: 16
Merit: 0


View Profile
June 14, 2012, 05:09:38 AM
 #385

this is why antivirus is key
Kazimir
Legendary
*
Offline Offline

Activity: 1176
Merit: 1001



View Profile
June 14, 2012, 12:43:34 PM
 #386

Does anyone have an actual, real, live sample of a trojan or virus that steals wallets and bitcoins? It would be great to submit them to antivirus producers.

In theory, there's no difference between theory and practice. In practice, there is.
Insert coin(s): 1KazimirL9MNcnFnoosGrEkmMsbYLxPPob
bangzilla
Newbie
*
Offline Offline

Activity: 2
Merit: 0


View Profile
June 14, 2012, 01:56:04 PM
 #387

its pretty scary if you think about it.

you can have thousands of dollars and someone can steal it all
and nobody can help you

i just hope my 15 character alphanumeric password to all my bitcoin related accounts is enough  =D
jbcmine
Member
**
Offline Offline

Activity: 209
Merit: 10



View Profile
June 18, 2012, 07:54:06 PM
 #388

That's why we use a MAC Smiley
Nothing more dangerous than a false sense of safety.

Hate to wake you up, but you are by no means less vulnerable than Windows or Linux users, sir Smiley

True, and this false sense of safety is why Flashback was so successful.

http://www.forbes.com/sites/adriankingsleyhughes/2012/04/06/mac-flashback-trojan-are-you-infected-how-do-you-remove-it/
malaimult
Hero Member
*****
Offline Offline

Activity: 658
Merit: 500



View Profile
June 18, 2012, 10:34:35 PM
 #389

you can run but you can hide  Roll Eyes somewhere sometime somehow he will get you  Wink

jagallout
Newbie
*
Offline Offline

Activity: 29
Merit: 0


View Profile
June 18, 2012, 11:57:53 PM
 #390

Does anyone have an actual, real, live sample of a trojan or virus that steals wallets and bitcoins? It would be great to submit them to antivirus producers.


I havn't read the entire thread, so please forgive me if there are any duplicate comments, but I wanted to address this question out of my experience.  Again, this is simply my take on the subject from only a few hours of research coupled with previous knowledge.

I am a programmer / network administrator by trade, and have close associations with a CEH certified pen tester.  Together in our spare time we theorycraft exploits and research this type of thing in a purely educational light.  After seeing some concept code for the bitcoin stealing wallet and I convinced of 2 things:
1. the antivirus company's are not oblivious - as the code from the prominent trojan a few months back, is actually published by the AV companies and
2. the code is deviously simplistic - once it makes it to your computer, there is very little you can do to prevent it from stealing your wallet.  That being said of course the thieves will need to get through your encryption (you are encrypted, right?), but getting the actual file off of your computer is unfortunately a "no brainer" in the eyes of a moderately skilled coder (this is of course once the malicious software has been downloaded).

I am not an expert at concealing bitcoin wallets, so I will defer to the other threads on the subject posted around this forum.  Some of the best generic advice I can give everyone is to be extremely cautious when downloading files, and honestly even following links on the web.  Any site that is dedicated to bitcoin (and even some that are not) are likely places for someone to attempt to social engineer an attack onto your computer.  Use NoScript (available for firefox at least), and use extreme prejudice when taking a websites word about what their linking you to, or having you download.  Remember you can normally mouse over links to investigate the "actual" target, this is a good habit to get into.

I am sure that as bitcoin gains speed, there will continue to be malicious people and computers out there trying to steal your hard earned/mined coinage.  Just make yourself aware of the possibility, as awareness is the first step toward prevention (wow, I sound like a cliche'd planned parenthood advocate)...

Hope this isn't too obvious of information and is helpful to at least one of you out there!
ALOIS
Newbie
*
Offline Offline

Activity: 58
Merit: 0


View Profile
June 19, 2012, 05:45:34 PM
 #391

I'm always search name of program, before running it. I advise you guys to do the same. And always keep your AV up-to -date.
billybob
Newbie
*
Offline Offline

Activity: 5
Merit: 0


View Profile
June 19, 2012, 07:08:34 PM
 #392

Thanks for the heads up OP.
zero3112
Hero Member
*****
Offline Offline

Activity: 588
Merit: 500



View Profile
June 24, 2012, 05:11:16 AM
 #393

Doesn't the official bitcoin client have optional encryption built into it already?

Michail1
Legendary
*
Offline Offline

Activity: 1498
Merit: 1164



View Profile WWW
June 24, 2012, 02:56:25 PM
 #394

I really like the idea of an offline wallet. (The netbook idea)
Did this already, but it was good to see it written.

I use a small thumb drive.  Since I have access to NEW computers all the time, I simply put the backup wallet on the new computer about once a month, just to update and get balance.
So far, so good.

bighecks
Newbie
*
Offline Offline

Activity: 23
Merit: 0


View Profile
June 27, 2012, 10:57:25 PM
 #395

Thanks for this, I had someone send me a file saying it would get me alot of bitcoins but I just blocked him. lol
zero3112
Hero Member
*****
Offline Offline

Activity: 588
Merit: 500



View Profile
June 30, 2012, 07:55:16 PM
 #396

Can anyone recommend what antivirus I should use to protect against this.

malaimult
Hero Member
*****
Offline Offline

Activity: 658
Merit: 500



View Profile
June 30, 2012, 10:35:56 PM
 #397

sure. stay away from doggy websites and links. that;s the best av ever.

ghostcheck
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
July 02, 2012, 08:38:42 PM
 #398

Anything ending with an .exe where somebody tells you to download could potentially be
a stealer. If it was an exe, it sould have a signature to check against the issuer.
Of course, assumes you trust issuer..  Roll Eyes
bitcrowd
Newbie
*
Offline Offline

Activity: 7
Merit: 0


View Profile
July 03, 2012, 01:06:28 AM
 #399

great read!
coyotama
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
July 04, 2012, 02:59:20 PM
 #400

its pretty scary if you think about it.

you can have thousands of dollars and someone can steal it all
and nobody can help you

i just hope my 15 character alphanumeric password to all my bitcoin related accounts is enough  =D

ideally, you should use different passwords for every account. have you considered using keepass2 or another similar secure password manager?

you can keep the keepass2 passwords and such encrypted on a usb dongle around your neck or on your neckchain, but that's meant as a backup, in case you lose the computer with keepass2 installed, or in case you need to use a school, work, or library computer.

but ideally, you'd use something like that. a single password across many bitcoin websites isnt exactly ideal. just saying.
Pages: « 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 [20] 21 22 23 24 25 26 27 28 »
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!