Wallet as trojan

[nikisev]

I wonder if there is a history of infecting user computers with wallet applications?
I mean its a lot of wallets and, like, you always install uninstall them.
Sure i have antivirus but its a lot of very complex code deployed around.

[1715569759]

1715569759

[BillyBobZorton]

I wonder if there is a history of infecting user computers with wallet applications?
I mean its a lot of wallets and, like, you always install uninstall them.
Sure i have antivirus but its a lot of very complex code deployed around.

There is bast history of wallets being infected with malware. The altcoin section is a dangerous place to be when it comes to downloading clients. There is a ton of evidence of people trying to pass wallets as legit when they were infected with viruses, RATs, malwares, keyloggers.. you name it. There's also this trick of infecting the computer to paste addresses that belong to the hacker. So when you think you copied your address and paste it, you are pasting his address so you send him BTC.

In general, always be wary when you download anything that isn't signed by reputable people.

[wanispwnz]

I have a little trick for this but it may sound very annoying for many people.
As I am very distrustful person, whenever I try untrusted/unknown wallet I install it on a virtual computer first.
So far I didn't find out any suspicious activity but I still think it's worth it.   

[Kakmakr]

I have a little trick for this but it may sound very annoying for many people.
As I am very distrustful person, whenever I try untrusted/unknown wallet I install it on a virtual computer first.
So far I didn't find out any suspicious activity but I still think it's worth it.   

You are setting yourself up for failure. Most hackers know people "Sand box" their applications to test them, so they do not steal coins on the first install. They will wait until you are have shown that you trusted the wallet or service and once you started depositing larger amounts, they will steal it. < They are not interested in small change, they want the fat cats with the big pockets >

These hackers should not be underestimated, they are not Script kiddies. ^smile^

[Thekool1s]

I have a little trick for this but it may sound very annoying for many people.
As I am very distrustful person, whenever I try untrusted/unknown wallet I install it on a virtual computer first.
So far I didn't find out any suspicious activity but I still think it's worth it.  

You are setting yourself up for failure. Most hackers know people "Sand box" their applications to test them, so they do not steal coins on the first install. They will wait until you are have shown that you trusted the wallet or service and once you started depositing larger amounts, they will steal it. < They are not interested in small change, they want the fat cats with the big pockets >

These hackers should not be underestimated, they are not Script kiddies. ^smile^

Wow! i never thought of this, but it is quite easy for them to achieve this, just have a variable with number of times the program has been run, after lets say X runs it will run the malware etc. I am Never installing another non-open sourced wallet ever again. Thanks you for mentioning this mate.

[nikisev]

I have a little trick for this but it may sound very annoying for many people.
As I am very distrustful person, whenever I try untrusted/unknown wallet I install it on a virtual computer first.
So far I didn't find out any suspicious activity but I still think it's worth it.   

Yes Vm is always good.
Still Wallet takes a lot of time and space to sync. So when you are sure its safe you have to move it back.Which is not very pleasant procedure
And simply setting it up wont do much good. malware may be activated at certain time. Like at night to do evil things.
Does any body knows good scanner for github repo. I had one once, i cannot remember what it was.
Otherwise you need some guardicore or something to monitor situation when software actually runs.

[BillyBobZorton]

I have a little trick for this but it may sound very annoying for many people.
As I am very distrustful person, whenever I try untrusted/unknown wallet I install it on a virtual computer first.
So far I didn't find out any suspicious activity but I still think it's worth it.   

Yes Vm is always good.
Still Wallet takes a lot of time and space to sync. So when you are sure its safe you have to move it back.Which is not very pleasant procedure
And simply setting it up wont do much good. malware may be activated at certain time. Like at night to do evil things.
Does any body knows good scanner for github repo. I had one once, i cannot remember what it was.
Otherwise you need some guardicore or something to monitor situation when software actually runs.

I wouldn't trust Virtual Machines as enough prevention for potential hacks to be honest. If you really want to install risky wallets on the altcoin section, get an additional computer, such as a laptop that contains no confidential data, then install all the crap you want on there and stop worrying about if your main computer is safe against altcoin wallets potentially infected with malware. It's just too much stress to deal with VM, antiviruses, firewalls etc.. better get a secondary computer.

[wanispwnz]

I agree it might be pain in the ass and with another device it would be easier but I really hate
maintaining more devices and this option fits my needs.

[aleksej996]

I wonder if there is a history of infecting user computers with wallet applications?
I mean its a lot of wallets and, like, you always install uninstall them.
Sure i have antivirus but its a lot of very complex code deployed around.

I can give you an example of one. There is a Litecoin wallet that has a very advanced malware on it called Sality https://en.wikipedia.org/wiki/Sality.
It is a real pain to get rid of it, so be very careful.

I would suggest to not run any non-open source program on the same pc you have any coins or anything of value on, including an open source OS. But it is your choice on how much you care about those things.

[Kprawn]

I have a little trick for this but it may sound very annoying for many people.
As I am very distrustful person, whenever I try untrusted/unknown wallet I install it on a virtual computer first.
So far I didn't find out any suspicious activity but I still think it's worth it.   

Yes Vm is always good.
Still Wallet takes a lot of time and space to sync. So when you are sure its safe you have to move it back.Which is not very pleasant procedure
And simply setting it up wont do much good. malware may be activated at certain time. Like at night to do evil things.
Does any body knows good scanner for github repo. I had one once, i cannot remember what it was.
Otherwise you need some guardicore or something to monitor situation when software actually runs.

I wouldn't trust Virtual Machines as enough prevention for potential hacks to be honest. If you really want to install risky wallets on the altcoin section, get an additional computer, such as a laptop that contains no confidential data, then install all the crap you want on there and stop worrying about if your main computer is safe against altcoin wallets potentially infected with malware. It's just too much stress to deal with VM, antiviruses, firewalls etc.. better get a secondary computer.

I am not a big VM fan, just because it is a very mainstream application and the more popular the software, the move focus

are placed on finding exploits for it. {Hackers will target the software that are the most popular and the most widely used} I

would much rather clean boot with something like Tails to get rid of all the crap that are being installed. {every boot is clean,

if you boot from a burn bootable cd} 

[Livebetcoin]

The whole internet is a virus waiting to get you

[cgecko]

anyone knows the safest wallet in computer to store your bitcoin? something similar like MEW for ether perhaps..?

[aleksej996]

anyone knows the safest wallet in computer to store your bitcoin? something similar like MEW for ether perhaps..?

Bitcoin Core is the most developed and reviewed wallet. The fact that it is a full node client is also crucial for the security as that is an only way to be certain that funds are in your account. MEW is an online wallet, to my knowledge, and the security in online wallets is the lowest. You don't even have those coins, it is the exchange that keeps it for you, let along that you store them securely, which those online wallets get hacked all the time. So at least use a light client like Electrum if you don't want to run a full node.

[Cereberus]

anyone knows the safest wallet in computer to store your bitcoin? something similar like MEW for ether perhaps..?

If you want a full node than Bitcoin Core is the best desktop wallet to use. It needs a lot of space on your hard disk as it will grow over time and a pretty fast internet connection in order to fully synchronize with the network.

Electrum is another very good option to store your Bitcoins, it needs to be installed in a clean formatted PC for the first time and to save its 12 word seed which you can restore from wherever you are as long as you have access to a PC.

For the ultimate security a hardware wallet is recommended to keep really big amount of Bitcoins. They use a built in chip where they store the private keys and all transactions are made within inside this chip, so even if you have a PC full of malware there is no risk to you but best is to use in a clean PC of course.

[mensa84]

Always purses have open code, so the virus in the wallet will be immediately found.

Typically, the computer itself is infected with a trojan, for example, a lot of trojans, such as Zeus, for example, stole the account data bank and credit card details.
But now the Trojans steal wallet.dat.

My advice:
Use the site virustotal.com to check the wallets and other programs that you want to install on your PC

[salmanahmedone]

Happens all the time, weeds out the stupid people that install software written by total strangers, showing no background of trust and no real reason that it shouldn't be a virus. I hear about it once or twice a week, when they make it back from getting their computer back to the point where they can get on a forum.

[bob123]

anyone knows the safest wallet in computer to store your bitcoin? something similar like MEW for ether perhaps..?

Besides Core (already mentioned) i would suggest Hardware wallets for best Security/useability.
If you Dont want to always keep the whole Chain up to Date you can also installiert lightweight wallets which sync your addresses via internet. For example Electrum.

[natsu_koo]

I have a little trick for this but it may sound very annoying for many people.
As I am very distrustful person, whenever I try untrusted/unknown wallet I install it on a virtual computer first.
So far I didn't find out any suspicious activity but I still think it's worth it.   

Yes Vm is always good.
Still Wallet takes a lot of time and space to sync. So when you are sure its safe you have to move it back.Which is not very pleasant procedure
And simply setting it up wont do much good. malware may be activated at certain time. Like at night to do evil things.
Does any body knows good scanner for github repo. I had one once, i cannot remember what it was.
Otherwise you need some guardicore or something to monitor situation when software actually runs.

I wouldn't trust Virtual Machines as enough prevention for potential hacks to be honest. If you really want to install risky wallets on the altcoin section, get an additional computer, such as a laptop that contains no confidential data, then install all the crap you want on there and stop worrying about if your main computer is safe against altcoin wallets potentially infected with malware. It's just too much stress to deal with VM, antiviruses, firewalls etc.. better get a secondary computer.

I think so, it would be much easier if you would get another computer or laptop. 

[Giraffle]

if you look at the altcoin announcements threads there is a sticky showing some wallet malicious code

[sandler425]

I wonder if there is a history of infecting user computers with wallet applications?
I mean its a lot of wallets and, like, you always install uninstall them.
Sure i have antivirus but its a lot of very complex code deployed around.

You really should only use open source wallets with community approval. That's it. Or make your wallets offline.

[xFiber]

You will find criminals everywhere if there's money involved. I have already become way more protective of my computer and how I treat unknown links and files in general. Compared to my time before I was messing around with bitcoin. Downloads from this forum are generlly speaking a big red flag for me and the same goes for suspicious links. Let's hope our anti-virus does the job and we won't have to worry about our bitcoin getting stolen.
Malicious files are also a reason why I prefer cold storage over any other medium of storage (e.g online wallets or desktop wallets). If maintained and used correctly a cold storage wallet remains offline at all times, it is less practical but better safe than sorry.

[Aum Ram]

Use a hardware wallet! This will be the best solution to ensure the safety of your coins! trezor or ledger nano - these are the best options for today! Buy a terzor and do not worry about anything else!

[AtraxPool]

Even the most simple botnets out there have anti-VM / Anti-Sandbox built into them so no matter if you install it on a VM or run it sandbox means nothing they can still infect your main machine..   While sandbox is good its no longer fully effective in protecting your machine from malware infection.

[Ursul0]

@nikisev
If you feel scared try virustotal.com - it will make you feel better.

Or even better- install Kaspersky - some serious protection for your computer!
...as I always said - fuck A/V crap, it was always worse then any viruses.
https://www.businessinsider.nl/russian-hackers-nsa-kaspersky-lab-software-2017-10

[nikisev]

if you look at the altcoin announcements threads there is a sticky showing some wallet malicious code

How does it look like?
I'm checking there regularly , somehow it never catches my eye.
Did you see one malicious recently?
Can you send me a link.
Thanks

[btc_angela]

I wonder if there is a history of infecting user computers with wallet applications?
I mean its a lot of wallets and, like, you always install uninstall them.
Sure i have antivirus but its a lot of very complex code deployed around.

It's really possible to get infected from wallet applications if you didn't download it from their official site or from github. So should only get it from trusted source as a lot of hackers are really targeting the crypto world because of the huge sum of money involved. This scenario could be possible in the altcoins as a lot of coins are popping everyday and one mistake you made, all your coins are gone. Even wallets like myetherwallet have been targeted too. So we needed a lot of common sense here, double check everything before downloading, clicking a link. As we evolved, hackers evolved as well.

[nikisev]

I wonder if there is a history of infecting user computers with wallet applications?
I mean its a lot of wallets and, like, you always install uninstall them.
Sure i have antivirus but its a lot of very complex code deployed around.

It's really possible to get infected from wallet applications if you didn't download it from their official site or from github. So should only get it from trusted source as a lot of hackers are really targeting the crypto world because of the huge sum of money involved. This scenario could be possible in the altcoins as a lot of coins are popping everyday and one mistake you made, all your coins are gone. Even wallets like myetherwallet have been targeted too. So we needed a lot of common sense here, double check everything before downloading, clicking a link. As we evolved, hackers evolved as well.

I'm not even talking about hackers.
I mean the pure surge in activity makes it impossible to trace all the code. I can clone repo insert my code, fork the Bitcoin or what not , make a post here, create some static page site, generate google questionnaire to get some airdrop going, and my business  is as legit as 80% of other projects here. And meanwhile i steal money from all other wallets installed on customer computer.
Its C++ binary code, nobody knows what it does really.
Sounds like good ground for bad people.

[the rise]

I wonder if there is a history of infecting user computers with wallet applications?
I mean its a lot of wallets and, like, you always install uninstall them.
Sure i have antivirus but its a lot of very complex code deployed around.

It's really possible to get infected from wallet applications if you didn't download it from their official site or from github. So should only get it from trusted source as a lot of hackers are really targeting the crypto world because of the huge sum of money involved. This scenario could be possible in the altcoins as a lot of coins are popping everyday and one mistake you made, all your coins are gone. Even wallets like myetherwallet have been targeted too. So we needed a lot of common sense here, double check everything before downloading, clicking a link. As we evolved, hackers evolved as well.

I do not even want to download any wallets and just trust the web purse for daily transaction purposes, I am worried about script modules that always have a gap, only sources of github that can be trusted to date. If we use bitcoincore or any type of hardwallet it is also suggested, but it should be more careful because of which fissure attacks focus to the OS device of the user's computer.

[nikisev]

How its possible not to install this qt-wallet crap? Every new coin has it except for Etherium tokens.
And no i wont install Kasperskiy. I think antiviruses are major virsues.
I had mccafee, it just killed my i7 16gb SSD laptop. Literally it was useless and always on 100%
I guess vm it is.