Trojan Wallet stealer be careful

[ReCat]

I have a solution! Download and install a much more secure operating system its called linux. Did I mention its free too?  

brb, writing a trogan designed for linux that steals wallets and will be spread throughout the forum



(Not really, But you get the picture.)

It's only more secure from obscurity. Otherwise everything's pretty much the same.

(Unless if you have your wallet.dat stored in a folder only root has access to or some non-standard shit like that)

[2bfree]

What is wrong with people why do they need to scam and steal?

[brioche]

Whats wrong with people, why do they feel the need to dredge up dead threads?

[Evil-Knievel]

This message was too old and has been purged

[softron]

Thanks for tips. This is becoming my biggest problem using a pc , ill partition my drive to test run linux os.

[elavenil]

Thanks for the warning. There are many people loosing their btc with so many hacking. It looks like we should save wallet in separate offline computer.

[Khertan]

The security problem isn't from the os ... even if most linux distrib help with package repository where apps are builded from source and signed.

The problem is the ChairKeyboard interface !

[gbgamer]

Thanks for tips. This is becoming my biggest problem using a pc , ill partition my drive to test run linux os.

doing the same thing. worth the time.

[vmmo96]

Thanks for the tip!

[QuantumMiner]

is Mac OS vulnerable as well?

is it common here, that people with trust issues post warnings offering exe files as a remedy? 

[substratum]

is Mac OS vulnerable as well?

Mac OS and Linux are definitely vulnerable as well - there are cross-platform Java RATs out there, at least one of which has been distributed in this very forum in order to steal people's wallets. You would be crazy to run anything anyone posted here except in a clean virtual machine, really. Even long-time members can have their accounts hijacked and could post a trojan. Antivirus is a crap-shoot, no better than 50% final detection rate of wallet stealers overall, and that number usually starts out in single digits for the first couple of weeks after a new trojan is released.

[Kluge]

is Mac OS vulnerable as well?

Mac OS and Linux are definitely vulnerable as well - there are cross-platform Java RATs out there, at least one of which has been distributed in this very forum in order to steal people's wallets. You would be crazy to run anything anyone posted here except in a clean virtual machine, really. Even long-time members can have their accounts hijacked and could post a trojan. Antivirus is a crap-shoot, no better than 50% final detection rate of wallet stealers overall, and that number usually starts out in single digits for the first couple of weeks after a new trojan is released.

This is about right. Unless the code's really short and you can look at it yourself within a few minutes (and know what it means), at least let a few people test it out for you before thinking about downloading and running it.

Think of the computer as you, and you're out in a big city in a shady part of town, and some guy in a Guy Fawkes mask and furry suit comes out and tries giving people some type of liquid in a glass which he says solves some particular problem. You probably wouldn't drink first, and probably not even within a day or so of Fawkes still standing outside filling Solo cups with mystery fluid from a pitcher, and maybe you'd refuse to drink the mystery fluid until its contents can be certified in a lab. That's sorta-kinda what it's like to download software from this forum. Wait as long to download as you'd wait to drink from Fawkes' pitcher, keeping in mind the furry Fawkes of yesterday may not be the same furry Fawkes as today, and you can't be absolutely sure nobody added anything to his pitcher (or the bottom of the Solo cups).

[QuantumMiner]

is Mac OS vulnerable as well?

Mac OS and Linux are definitely vulnerable as well - there are cross-platform Java RATs out there, at least one of which has been distributed in this very forum in order to steal people's wallets. You would be crazy to run anything anyone posted here except in a clean virtual machine, really. Even long-time members can have their accounts hijacked and could post a trojan. Antivirus is a crap-shoot, no better than 50% final detection rate of wallet stealers overall, and that number usually starts out in single digits for the first couple of weeks after a new trojan is released.

This is about right. Unless the code's really short and you can look at it yourself within a few minutes (and know what it means), at least let a few people test it out for you before thinking about downloading and running it.

Think of the computer as you, and you're out in a big city in a shady part of town, and some guy in a Guy Fawkes mask and furry suit comes out and tries giving people some type of liquid in a glass which he says solves some particular problem. You probably wouldn't drink first, and probably not even within a day or so of Fawkes still standing outside filling Solo cups with mystery fluid from a pitcher, and maybe you'd refuse to drink the mystery fluid until its contents can be certified in a lab. That's sorta-kinda what it's like to download software from this forum. Wait as long to download as you'd wait to drink from Fawkes' pitcher, keeping in mind the furry Fawkes of yesterday may not be the same furry Fawkes as today, and you can't be absolutely sure nobody added anything to his pitcher (or the bottom of the Solo cups).

I appreciate the metaphore! Will definitely adhere to this one

[jparsley]

Does virus total detect most virus, & trojans?

[substratum]

Does virus total detect most virus, & trojans?

Not at first if it's a newly developed family or packer. After a time, you'll get some detection from some of the AV engines used by Virus Total. Of course, the malware author can tweak the file until it's no longer detected, and the game starts all over again.

[TheBitcoinRolls]

What would be the best way to avoid "accidentally" stumbling across a trojan by regular browsing? Any type of anti virus software that is specific to something like this? 

I ask because I've been seeing increased mention of simply clicking a link and it installs a trojan or some other malware. Sorry if this is a noob question.

[Kluge]

What would be the best way to avoid "accidentally" stumbling across a trojan by regular browsing? Any type of anti virus software that is specific to something like this? 

I ask because I've been seeing increased mention of simply clicking a link and it installs a trojan or some other malware. Sorry if this is a noob question.

Avast or Avira are statistically your best bets for catching 0days, which is pretty much all you're going to see in the crypto community. According to Shadowserver's long-term testing, they'll catch right around 73-78% of new and tweaked malware. For the other quarter of the time, even with the best heuristic analysis tools, you're still screwed unless you browse and download very carefully.

ETA: The 73-78% only applies to "all" 0days... 0days you'll find in the crypto community may be more likely to pass through most AV heuristic analysis systems.

[joekeo001]

Thanks

[rohan1]

thanks for the warning.

[lxgoffxi]

Is the trojan only for Windows or need the rest of us be scared too?

windows has way to many trojans...