Bitcoin Mining Accelerator SCAM

[mouse]

His name is Brett,

he is also linked to http://www.prankcallradio.net/

and he was implicated earlier in a bitcoin heist on OTC, but I wasn't involved so I can't vouch either way.

[BCEmporium]

His fancy website gives us a treasure trove of information about him. I say he is a college educated American who visits this forum daily. In fact he is following this thread.
Social engineering is a two way street dude.

What are your observations about our thief and his website?

Doubt they're connect, they probably bought that crap from someone. They're using someone else's tool.

[cdhowie]

I currently have 41.91003938 secured.  One of the wallets I checked had an email address as the label for a receiving address, so at least I have a lead on who owns them.

Time to commute home, it's 8:30 PM already.  I'll try to work through a lot more of these tonight.

[Raoul Duke]

DON'T VISIT THE MODERNAMERICANREVOLUTION.US WEBSITE!

IT HAS A JAVA EXPLOIT THAT WILL PAWN YOU!

[andes]

DON'T VISIT THE MODERNAMERICANREVOLUTION.US WEBSITE!

IT HAS A JAVA EXPLOIT THAT WILL PAWN YOU!

Oops, too late. What could be the consequences of doing just that?

[RodeoX]

His fancy website gives us a treasure trove of information about him. I say he is a college educated American who visits this forum daily. In fact he is following this thread.
Social engineering is a two way street dude.

What are your observations about our thief and his website?

Doubt they're connect, they probably bought that crap from someone. They're using someone else's tool.

I was looking at the content of the email. Whoever wrote it likely knows it is a scam.

[vragnaroda]

DON'T VISIT THE MODERNAMERICANREVOLUTION.US WEBSITE!

IT HAS A JAVA EXPLOIT THAT WILL PAWN YOU!

seriously, who lets Java run on strange websites?

[BCEmporium]

His fancy website gives us a treasure trove of information about him. I say he is a college educated American who visits this forum daily. In fact he is following this thread.
Social engineering is a two way street dude.

What are your observations about our thief and his website?

Doubt they're connect, they probably bought that crap from someone. They're using someone else's tool.

I was looking at the content of the email. Whoever wrote it likely knows it is a scam.

You mean the email + today's robbery? That's sure.
I mean this American Revolution guy and the Bitcoin Accelerator, those seams to had bought the same tool, different versions, but same tool.

[Raoul Duke]

DON'T VISIT THE MODERNAMERICANREVOLUTION.US WEBSITE!

IT HAS A JAVA EXPLOIT THAT WILL PAWN YOU!

Oops, too late. What could be the consequences of doing just that?

No idea, honnestly... didn't let it run to find out

[andes]

DON'T VISIT THE MODERNAMERICANREVOLUTION.US WEBSITE!

IT HAS A JAVA EXPLOIT THAT WILL PAWN YOU!

Oops, too late. What could be the consequences of doing just that?

No idea, honnestly... didn't let it run to find out

I use Firefox 4.01, but got no warning when entered the site. Someone knows if it could ran the java without my permission?

Also for all the technical geniuses, a question: where can I learn the best practices for safe surfing?  

[casascius]

I notice on the BitcoinMiningAccelerator screen shot, there's a screenshot of three miner processes apparently submitting shares, possibly to a real pool.

Do the mining pool operators keep track of the actual hashes of the shares received?  I'd be amused to find a mining pool operator be able to sniff out the person behind the scam just by matching the sequence of hashes in the picture against their submissions.

[BCEmporium]

The only applet found there is from this http://rg.revolvermaps.com/
Still, a) Java sucks and I don't have such thing installed (and won't I REALLY, and I mean REALLY, need it); b) Even if I had such installed, I wonder why I would let an unknown site to run some applet.

[MadCoinMan]

Well done guys. This just shows that you simply can't pull shit like that.

[Raoul Duke]

DON'T VISIT THE MODERNAMERICANREVOLUTION.US WEBSITE!

IT HAS A JAVA EXPLOIT THAT WILL PAWN YOU!

Oops, too late. What could be the consequences of doing just that?

No idea, honnestly... didn't let it run to find out

I use Firefox 4.01, but got no warning when entered the site. Someone knows if it could ran the java without my permission?

Usually it runs if you have the java plugin activated.

seriously, who lets Java run on strange websites?

Curious persons, like me, in virtual machines lol

This is the exploit:
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Exploit%3aJava%2fCVE-2010-0840.CI&threatid=2147645887

[UniverseMan]

http://paste2.org/p/1484245

(edit: i'm just the messenger, not originator)

this was back on the 22nd

http://www.facebook.com/ModernAmericanRevolution

That facebook page is fantastic. This quote, in particular, really tickled me.

f the American people ever allow private banks to control the issue of their money, first by inflation and then by deflation, the banks and corporations that will grow up around them (around the banks), will deprive the people of their property until their children will wake up homeless on the continent their fathers conquered.

Give me control of a nation's money and I care not who makes the laws. -Mayer Rothschild

Yeah, it might be hard for the banks to deprive people of their property after someone has already deprived them of their wallets. And I think you've taken that "give me control of a nation's money" bit way too seriously.

[antares]

lol, does someone have a screenshot from that website?

btw, this scam shows that the scammers are actually noobs. They might have done some nice site, I won't know that unless someone has a screen,  but WHO THE FUCK IS THAT STUPID to create a wallet stealer and then use a ftp account that is not write-only?

[Maged]

I currently have 41.91003938 secured.  One of the wallets I checked had an email address as the label for a receiving address, so at least I have a lead on who owns them.

Time to commute home, it's 8:30 PM already.  I'll try to work through a lot more of these tonight.

Maybe run the addresses through this list that was scraped earlier today?
http://forum.bitcoin.org/index.php?topic=24346.0

I wonder if unemployed still has the unfiltered list... (any address added to a sig after this was released can't be trusted)

[andes]

You know what, I smell something fishy here. This whole americanrevolution thing with the java exploit, associated with this professionally designed site seems like an outside organization to me targeting bitocoin using a libertarian site as camouflage. It does not seem to me like the profile of a corrupted independent techie inside the community. They were just too lousy on the programming side, and too good on the marketing side (in fact, better than any other bitcoin site).

To me it could be some top-down order, like: infiltrate this thing and start attacking them to break the trust. Its just another conspiracy theory, I know, but just made that association after watching this today: http://www.youtube.com/user/BitcoinChannel
This will be my only and last conspiracy speculation, btw.

[mouse]

lol, does someone have a screenshot from that website?

btw, this scam shows that the scammers are actually noobs. They might have done some nice site, I won't know that unless someone has a screen,  but WHO THE FUCK IS THAT STUPID to create a wallet stealer and then use a ftp account that is not write-only?

http://imageshack.us/photo/my-images/804/bitcoinminingaccelerato.jpg/

[andes]

Google "Researchers find malware rigged with Bitcoin miner"
FUCK bitcoin. It's pure garbage and you people are delusional beyond belief.
JRCrowley 19 minutes ago

Found it in the comments here: http://www.youtube.com/watch?v=yY9DvHEIxco&feature=channel_video_title


The origin of the info seems to come from here: http://www.zdnet.com/blog/security/researchers-find-malware-rigged-with-bitcoin-miner/8934

Not related directly with this particular scam, I guess. But if could also be the first steps in information warfare to discredit BTC.