Bitcoin Forum
May 05, 2024, 04:39:26 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: WARNING! crypto.voyage is hacking you! DO NOT DOWNLOAD!  (Read 488 times)
zalando95 (OP)
Member
**
Offline Offline

Activity: 76
Merit: 10


View Profile
May 08, 2017, 06:04:50 PM
 #1

Hello,
some of you may have readed of "crypto.voyage"'s giveaway thread.

Now I have bad news:
Everybody who has downloaded the program, got hacked, in any way.

I found this out when I made a transaction to a wrong address.
Luckyli it was "only" some small amount but you all should now be very careful.
When copying a bitcoin address into my clipboard, the hack automaticly changes the clipboard to
an address of them. Now I did not see it and paid to the address which was added to my clipboard.
Only after some minutes I saw that there is no satoshi coming to my address.

But now comes a bigger thing!
While the first program was just an .exe which created a second program into your roaming folder
and which starts automaticly when starting the computer, replacing bitcoin addresses in your clipboard,
it looks like the current program will do much more!

How to delete the hack:
It was difficult to find out that I got hacked that way. But finding the hack was much more difficultier.
The hack showed the error "Could not load program" on startup.
But in reality it created another program in the roaming folder named "cscv32.exe".
Delete this shit out of your computer.

How to stop the hack:
Look for two processes in your taskmanager named "csrvc.exe" and/or "cscv32.exe".
Stop both dumbshit processes.

BE CAREFUL!
If you downloaded the "giveaway" shit before, check every address you copy!!!!!!!
Even check the withdrawal confirmation mail in your inbox.

AGAIN!!! The next shit they produced looks like a much bigger hack.
AND WARNING: The programm does NOT get detected by some Antivirus tools! My did not found any virus in it!
If you want to be a moderator, report many posts with accuracy. You will be noticed.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714927166
Hero Member
*
Offline Offline

Posts: 1714927166

View Profile Personal Message (Offline)

Ignore
1714927166
Reply with quote  #2

1714927166
Report to moderator
1714927166
Hero Member
*
Offline Offline

Posts: 1714927166

View Profile Personal Message (Offline)

Ignore
1714927166
Reply with quote  #2

1714927166
Report to moderator
JanpriX
Hero Member
*****
Offline Offline

Activity: 1708
Merit: 606

Buy The F*cking Dip


View Profile
May 08, 2017, 06:16:04 PM
 #2

Thanks for informing us about this. I visited the thread of crypto.voyage before this and I'm just thinking of downloading their "free" file but thanks to you, I will not do that anymore. If you think about it, their approach is very peculiar because their bot is so expensive and they're just giving it for free for 1 month. Any cryptotrader would think that there's something wrong with this offer. Is there anyone here who encountered such hack in their desktop when they downloaded their "bot"?

bitcoin revo
Legendary
*
Offline Offline

Activity: 1168
Merit: 1049



View Profile
May 08, 2017, 07:21:20 PM
 #3

It's also an older version of Sampey's trade bot (reference). Distributing a virus along with stolen work... what a bunch of scumbags.

If you're about to head onto the guy's trust page, click here.
U2
Hero Member
*****
Offline Offline

Activity: 676
Merit: 503


I used to be indecisive, but now I'm not sure...


View Profile
May 08, 2017, 07:27:15 PM
 #4

It's also an older version of Sampey's trade bot (reference). Distributing a virus along with stolen work... what a bunch of scumbags.

If you're about to head onto the guy's trust page, click here.

Well duh, this goes with anything. People will buy a copy, infect the code then give it away for a steep discount or free. This had been done everywhere on the internet since inception so if you thought you were getting a deal, welcome to the internet hahahahahaa.
zalando95 (OP)
Member
**
Offline Offline

Activity: 76
Merit: 10


View Profile
May 08, 2017, 07:44:11 PM
 #5

Well duh, this goes with anything. People will buy a copy, infect the code then give it away for a steep discount or free. This had been done everywhere on the internet since inception so if you thought you were getting a deal, welcome to the internet hahahahahaa.
It's also an older version of Sampey's trade bot (reference). Distributing a virus along with stolen work... what a bunch of scumbags.

If you're about to head onto the guy's trust page, click here.
It's not even a copy or stolen. It's just a virus/hack. There is no real program behind this.
I hope that nobody downloaded the program and sent bitcoin without paying attention to the address.
ImHash
Hero Member
*****
Offline Offline

Activity: 924
Merit: 506


View Profile
May 08, 2017, 08:04:40 PM
 #6

In both ann thread and giveaway thread there are people warning others about this, unless you were stupid and greedy thinking you are going to get easy free money there is no reason to even consider downloading it, funny how they'd made the giveaway in such a way to make people rush installing the bot without even thinking first.
Next time when you see free some where take your time and think carefully before getting hacked for good.
zalando95 (OP)
Member
**
Offline Offline

Activity: 76
Merit: 10


View Profile
May 08, 2017, 08:19:36 PM
 #7

In both ann thread and giveaway thread there are people warning others about this, unless you were stupid and greedy thinking you are going to get easy free money there is no reason to even consider downloading it, funny how they'd made the giveaway in such a way to make people rush installing the bot without even thinking first.
Next time when you see free some where take your time and think carefully before getting hacked for good.
Well I am not stupid nor greedy or anything else.
I had downloaded the program before users were even talking about it. Just to test, nothing more.
But only today I found out what it does. I did already delete it after the message that it would not work. This was yesterday.
But I found out that even after deletion the program continues. And that was where I wanted to warn others that a simple deletion is not enough.

I did not even expect to get anything from the giveaway.

But in one sentence I aggree with you now: "Next time when you see free some where take your time and think carefully".
The next part not.
BCTBF
Sr. Member
****
Offline Offline

Activity: 560
Merit: 257


View Profile
May 08, 2017, 08:30:08 PM
 #8

Good information, thanks. Hopefully not many hacked because of this. Getting used to looking for more information before doing something somewhere is the best way to prevent all kinds of crimes like this. thanks again for good information.
BitMaxz
Legendary
*
Offline Offline

Activity: 3248
Merit: 2965


Block halving is coming.


View Profile WWW
May 08, 2017, 10:54:55 PM
 #9

It's also an older version of Sampey's trade bot (reference). Distributing a virus along with stolen work... what a bunch of scumbags.

If you're about to head onto the guy's trust page, click here.
Can you share with me in pm the trading bot who are selling from this man and let me check if what kind of virus. i have available virtual pc in aws just made instance right now and . i will try if the software has virus infected or something a codes like monitoring or stealing bitcoin...
Hoping that you can pm me..

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
freebutcaged
Hero Member
*****
Offline Offline

Activity: 588
Merit: 541


View Profile
May 08, 2017, 11:04:55 PM
 #10

I'm not going to lie I was stupid enough to go there and click on download but fortunately my browser stopped finishing the download and warned me and told me to discard it which I did, good thing to always change the settings of your browser and activate additional security features.
I didn't even go to the part for installing as I never fully downloaded it, of course when they say first person will get 0.5 you get greedy.Smiley
~Bitcoin~
Legendary
*
Offline Offline

Activity: 994
Merit: 1000



View Profile
May 09, 2017, 07:36:45 AM
 #11

Thanks for making us aware of this, i have also seen their giveaway but couldn't believe that they are giving those prizes for free so i have never touched that download button. Downloading any app from non-reliable/trusted source is always risky and i got attacked by a strong malware some months ago which forced me to format my entire laptop.

pooya87
Legendary
*
Offline Offline

Activity: 3444
Merit: 10549



View Profile
May 09, 2017, 08:32:18 AM
 #12

It's also an older version of Sampey's trade bot (reference). Distributing a virus along with stolen work... what a bunch of scumbags.

If you're about to head onto the guy's trust page, click here.

it is not an old version of C.A.T trading bot (Sampey's trade bot) it is not even a bot. it is a malware.
the website is just using a low res cropped screenshot of Sampey's trade bot and shows it as their "bot"

you can easily find the picture with a quick google search: https://bitcointalk.org/index.php?topic=1904782.msg18913289#msg18913289

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
Iranus
Hero Member
*****
Offline Offline

Activity: 1806
Merit: 534


Leading Crypto Sports Betting & Casino Platform


View Profile
May 09, 2017, 03:07:15 PM
 #13

It's also an older version of Sampey's trade bot (reference). Distributing a virus along with stolen work... what a bunch of scumbags.

If you're about to head onto the guy's trust page, click here.

it is not an old version of C.A.T trading bot (Sampey's trade bot) it is not even a bot. it is a malware.
the website is just using a low res cropped screenshot of Sampey's trade bot and shows it as their "bot"

you can easily find the picture with a quick google search: https://bitcointalk.org/index.php?topic=1904782.msg18913289#msg18913289
Seems according to other people that they are actually selling the copied bot - they're just selling it along with malware.  This would be good for them since the user wouldn't automatically assume that it's malware as soon as they've downloaded the file because then they'd be running virus checks and being really careful with their transactions straight after they downloaded it which would make the malware find it harder to operate.

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
pooya87
Legendary
*
Offline Offline

Activity: 3444
Merit: 10549



View Profile
May 10, 2017, 04:34:12 AM
 #14

It's also an older version of Sampey's trade bot (reference). Distributing a virus along with stolen work... what a bunch of scumbags.

If you're about to head onto the guy's trust page, click here.

it is not an old version of C.A.T trading bot (Sampey's trade bot) it is not even a bot. it is a malware.
the website is just using a low res cropped screenshot of Sampey's trade bot and shows it as their "bot"

you can easily find the picture with a quick google search: https://bitcointalk.org/index.php?topic=1904782.msg18913289#msg18913289
Seems according to other people that they are actually selling the copied bot - they're just selling it along with malware.  This would be good for them since the user wouldn't automatically assume that it's malware as soon as they've downloaded the file because then they'd be running virus checks and being really careful with their transactions straight after they downloaded it which would make the malware find it harder to operate.

i did download it (inside a snadbox for protection) and the file size is small (~6-7 MB) and it didn't open anything, any interface or something like that. it just started using my CPU to the max! and no interface appeared, that is mostly why i said it is just a malware not a copy of the bot with malware.

but it may also be because the sandbox was a windows XP Smiley so you may be right after all.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!