Bitcoin Forum
May 05, 2024, 10:53:43 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Username "Obama" IS behind the latest wave of RAT'ing and phishing.  (Read 1212 times)
DiamondCardz (OP)
Legendary
*
Offline Offline

Activity: 1134
Merit: 1112



View Profile WWW
July 07, 2013, 07:52:39 PM
 #1

I've just found the critical mass.

Seen in the thread https://bitcointalk.org/index.php?topic=251363.0 - the usernames acne/macintosh/kodo/Obama are the same. (which is also backed up as Obama was buying "vintage" names) Now I can say that legitnick is the same. We have the fact that legitnick offered to sell his account for $3.50, but we also have a hacking similarity.

If you opened legitnick's .zip file, a DarkComet RAT was installed on your system. Same if you went to the Phishing link.

On my system the downloaded file opened up access to DarkComet RAT.  They used that to remote onto my system to try installing other software.  In the details of the file they downloaded, Dell Datasafe was mentioned.  It looks like a service similar to Dropbox.

Chad

Now let's look at acne's, or Obama's, virus.

http://anubis.iseclab.org/?action=result&task_id=16fd927255c1f53f4b5941c1471918b0f&format=html

Oh look, it's our old friend, DarkComet RAT! I wouldn't be surprised if Obama has been behind the last couple waves of hacking.

Screw making account trading illegal, let's just ban Obama and his alts and get it over with?

BA Computer Science, University of Oxford
Dissertation was about threat modelling on distributed ledgers.
1714949623
Hero Member
*
Offline Offline

Posts: 1714949623

View Profile Personal Message (Offline)

Ignore
1714949623
Reply with quote  #2

1714949623
Report to moderator
1714949623
Hero Member
*
Offline Offline

Posts: 1714949623

View Profile Personal Message (Offline)

Ignore
1714949623
Reply with quote  #2

1714949623
Report to moderator
1714949623
Hero Member
*
Offline Offline

Posts: 1714949623

View Profile Personal Message (Offline)

Ignore
1714949623
Reply with quote  #2

1714949623
Report to moderator
I HATE TABLES I HATE TABLES I HA(╯°□°)╯︵ ┻━┻ TABLES I HATE TABLES I HATE TABLES
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714949623
Hero Member
*
Offline Offline

Posts: 1714949623

View Profile Personal Message (Offline)

Ignore
1714949623
Reply with quote  #2

1714949623
Report to moderator
1714949623
Hero Member
*
Offline Offline

Posts: 1714949623

View Profile Personal Message (Offline)

Ignore
1714949623
Reply with quote  #2

1714949623
Report to moderator
Tomatocage
Legendary
*
Offline Offline

Activity: 1554
Merit: 1222

brb keeping up with the Kardashians


View Profile
July 07, 2013, 09:02:10 PM
 #2

Seconded.

Recommended Exchanges: Binance.com | CelsiusNetwork
GPG ID: 4880D85C | 1% Escrow | 8% IPO/ICO Escrow services Temporarily Closed | Bitcointalk is the ONLY place where I use this name (No Skype/IRC/YIM/AIM/etc) | 13CsmTqGNwvFXb7tD9yFvJcEYCDTB8wQTS | Beware of these SCAM sites! | *Sponsored Link
Kouye
Sr. Member
****
Offline Offline

Activity: 336
Merit: 250


Cuddling, censored, unicorn-shaped troll.


View Profile
July 07, 2013, 11:40:06 PM
 #3

I know you guys already have been suspected to be socks, too.
And sincerely, you have an odd way to vouch for each other posts.

I still second that, too.  Wink

[OVER] RIDDLES 2nd edition --- this was claimed. Look out for 3rd edition!
I won't ever ask for a loan nor offer any escrow service. If I do, please consider my account as hacked.
HotCrypto
Newbie
*
Offline Offline

Activity: 16
Merit: 0


View Profile
July 28, 2013, 06:45:10 PM
 #4

I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.
pheaonix
Sr. Member
****
Offline Offline

Activity: 392
Merit: 250


http://casinobitco.in/ A+ customer support


View Profile
July 28, 2013, 08:14:30 PM
 #5

I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

die in a fire you faggot

BTC.sx - Leveraged Bitcoin Trading. Simply use Bitcoin to take advantage of a rising or falling Bitcoin price.
MPOE-PR
Hero Member
*****
Offline Offline

Activity: 756
Merit: 522



View Profile
July 28, 2013, 11:48:10 PM
 #6

I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

Lmao @ Bitcointalk, socks socking socks.

My Credentials  | THE BTC Stock Exchange | I have my very own anthology! | Use bitcointa.lk, it's like this one but better.
Tomatocage
Legendary
*
Offline Offline

Activity: 1554
Merit: 1222

brb keeping up with the Kardashians


View Profile
July 29, 2013, 12:00:52 AM
 #7

I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

Wrong. This account is a sock, but you'd probably never guess what my real account is Tongue

Recommended Exchanges: Binance.com | CelsiusNetwork
GPG ID: 4880D85C | 1% Escrow | 8% IPO/ICO Escrow services Temporarily Closed | Bitcointalk is the ONLY place where I use this name (No Skype/IRC/YIM/AIM/etc) | 13CsmTqGNwvFXb7tD9yFvJcEYCDTB8wQTS | Beware of these SCAM sites! | *Sponsored Link
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1316
Merit: 1043

👻


View Profile
July 29, 2013, 12:13:01 AM
 #8

The username Obama is behind this, yes, but not the original owner of Obama. varomint is behind this wave of phishing.

This also doesn't seem to be connected to scotaloo.

Quote
Wrong. This account is a sock, but you'd probably never guess what my real account is
pirateat40 Grin

Quote
Screw making account trading illegal, let's just ban Obama and his alts and get it over with?

Already banned?
MPOE-PR
Hero Member
*****
Offline Offline

Activity: 756
Merit: 522



View Profile
July 29, 2013, 02:31:49 PM
 #9

I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

Wrong. This account is a sock, but you'd probably never guess what my real account is Tongue

Copumpkin.

My Credentials  | THE BTC Stock Exchange | I have my very own anthology! | Use bitcointa.lk, it's like this one but better.
DiamondCardz (OP)
Legendary
*
Offline Offline

Activity: 1134
Merit: 1112



View Profile WWW
August 12, 2013, 07:05:45 PM
 #10

I have my suspiciouns about the OP... I believe he has multiple sockputtets, and is ultimately controlled by tomatocage (Look at diamondcardz trust rating) anyway, just what i think might be the case. Might be wrong tho.

LOL just saw this. Funny.

No, I'm not Tomatocage. Anyone with common sense could see that, the only "sock"-like thing are the vouches which aren't really that common.

BA Computer Science, University of Oxford
Dissertation was about threat modelling on distributed ledgers.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!