Fuloos Signature Campaign; A possible Scam!

[chiggz]

Today user Fuloos started a thread for Fuloos Signature Campaign (https://bitcointalk.org/index.php?topic=2815250.0) which I highly believe is a scam and better to look into ASAP since the applied users passwords might be at risk. Some proof in regards to this:

1) Fullos has a twitter campaign and never paid the users
Ref: https://bitcointalk.org/index.php?topic=2649217.0

2) The campaign asks you to download their wallet to receive the tokens and on running the windows .exe file on Virus total this is what I found
http://prntscr.com/i514ys

Since I am not a computer geek I cannot justify this. So if anyone could look into the source code I am pretty sure it would be easy to figure out. Also this needs to be addressed with priority as many signature bounty hungry people have already installed the wallet and their passwords, private keys might be at stake.

3) Their whitepaper is nothing but definition of concepts and highly plagiarised (can be checked using a plagiarism tool online)

4) Jr member running the campaign without escrowed funds, Some shady exchange to trade the coin (probably created by them to look legit) all clearly points out to a be scam.

[teddy5145]

Most of false positives that happened by antivirus were for generic viruses as generic viruses has basic functions and can be easily detected by antivirus.
Based on your screenshot it detected keylogger and miner, those were not generic virus, so I can say that their wallet was a virus
I mean, why a wallet need a bitcoin miner and a keylogger anyway?

But, it would be great to hear Fuulos's statement regarding this accusation.
Might also want to notify their participants too

[Patatas]

2) The campaign asks you to download their wallet to receive the tokens and on running the windows .exe file on Virus total this is what I found
http://prntscr.com/i514ys

Since I am not a computer geek I cannot justify this. So if anyone could look into the source code I am pretty sure it would be easy to figure out. Also this needs to be addressed with priority as many signature bounty hungry people have already installed the wallet and their passwords, private keys might be at at stake.

You are absolutely correct here.The wallet has a keylogger which can record all your key strokes including your passwords,credit-card details and just about everything which is sent in a text file using an email service to the hacker.There are other vulnerabilities but I'm not sure what they do.Keylogger itself is the biggest security risk.

4) Jr member running the campaign without escrowed funds, Some shady exchange to trade the coin (probably created by them to look legit) all clearly points out to a be scam.

Thanks for bringing this up.All the idiots who downloaded the wallet would have already sent half of their details to the hacker.Only noobs would fall for such a low level pathetic scam anyway.

[timerland]

Today user Fuloos started a thread for Fuloos Signature Campaign (https://bitcointalk.org/index.php?topic=2815250.0) which I highly believe is a scam and better to look into ASAP since the applied users passwords might be at risk. Some proof in regards to this:

1) Fullos has a twitter campaign and never paid the users
Ref: https://bitcointalk.org/index.php?topic=2649217.0

2) The campaign asks you to download their wallet to receive the tokens and on running the windows .exe file on Virus total this is what I found
http://prntscr.com/i514ys

Since I am not a computer geek I cannot justify this. So if anyone could look into the source code I am pretty sure it would be easy to figure out. Also this needs to be addressed with priority as many signature bounty hungry people have already installed the wallet and their passwords, private keys might be at at stake.

3) Their whitepaper is nothing but definition of concepts and highly plagiarised (can be checked using a plagiarism tool online)

4) Jr member running the campaign without escrowed funds, Some shady exchange to trade the coin (probably created by them to look legit) all clearly points out to a be scam.

Great find. They are only promising fuloos payments which is fishy, and they refuse to even escrow these worthless fuloos. There are so many alarms going off in virustotal and it's not for a reason. The worst thing that could happne if you join their signature campaign isn't even you not getting paid, it's your entire computer getting infected by viruses if you're not careful.

These people are the worst types of scammers, imo.

When joining a signature campaign, make sure that funds are escrowed, and anything that they require you to download is verified to be legitimate. Otherwise, you're taking on a lot of risks.

[joniboini]

1) Fullos has a twitter campaign and never paid the users
Ref: https://bitcointalk.org/index.php?topic=2649217.0

about this, as long as I can remember, the user who started this campaign is not Fuloos, it is Yankee.
And it is still unclear whether that campaign is really from Fuloos or not. I can't find Fuloos post about this, I tried to sent a tweet to them but it never got answered.

Regarding the wallet, Fuloos replied it like that it was because of the miner code or something like that, just like teddy and your ss pointed out. https://bitcointalk.org/index.php?topic=2586410.msg26774324#msg26774324.

Still, I also wanted to hear their responses about this though.

[teddy5145]

1) Fullos has a twitter campaign and never paid the users
Ref: https://bitcointalk.org/index.php?topic=2649217.0

about this, as long as I can remember, the user who started this campaign is not Fuloos, it is Yankee.
And it is still unclear whether that campaign is really from Fuloos or not. I can't find Fuloos post about this, I tried to sent a tweet to them but it never got answered.

Regarding the wallet, Fuloos replied it like that it was because of the miner code or something like that, just like teddy and your ss pointed out. https://bitcointalk.org/index.php?topic=2586410.msg26774324#msg26774324.

Still, I also wanted to hear their responses about this though.

I would still be more careful around it though, Fuloos wallet does not need Bitcoin Miner.

Their campaign also didn't use escrow, Fuloos instead replied this when asked about escrow

We are going to pay. Because we are a company of official. If we didn't pay we don't want to blame our coin. Because we are going very good. Soon we will cross 3 USD. So we don't want to harm our image thank you. It's your choice to join our campaign. Because we are trusted. It's our official account of our fuloos coin.

That is not how you respond to that kind of questions.

Regardless of that, make sure to install Fuloos wallet on a secure environment such as sandbox just in case my hunch turned out to be true

[lastshootingstar]

In the campaign thread fullos answered this

It's problem of blocks by upcoming TCP. That's the problem we are working on that. If you thinking about the problem then you can easily create an account of stock exchange and buy some fuloos and you can send deposit fuloos account we will send you free fuloos on that. For more information stay update with us. Thank you for update us. We will fix this soon. You can go through our roadmap we are releasing online wallet.

But i dont see any explanation for using the keylogger

[chiggz]

I would still be more careful around it though, Fuloos wallet does not need Bitcoin Miner.

The wallet is just a dummy product to embed the virus. I remember last year installing some sketchy software and my CPU going nuts at 100% in the background. Couldn't do anything and had to re-install the OS. So basically the wallet will chew up your CPU power and start mining coins until you notice the cooling fan making a loud noise.  

And the key-logger, I guess everyone knows what it does. These kinds of scams are very well put up and a computer noobie will never understand its consequences. This is how your Info is sold on the Dark Web.

[poGium]

Thank you for the thread. I try in his threads to warn other users against using the keylo ... oh I mean the wallet (  ). He tries to bluff it out again. His way of writing and explaining problems is typical for a scammer.  

[legendster]

http://prntscr.com/i514ys

Not sure if they're a scam or not since most ICO's look scammy at start. But that is a false positive virus alarm. If it were a Win32 Sality virus along with a keylogger THEN that would be a warning sign. And most if not all bitcoin miners are picked up as virus / malware by most security apps.

[harizen]

http://prntscr.com/i514ys

Not sure if they're a scam or not since most ICO's look scammy at start. But that is a false positive virus alarm. If it were a Win32 Sality virus along with a keylogger THEN that would be a warning sign. And most if not all bitcoin miners are picked up as virus / malware by most security apps.

There are virus scanners that detects a file as a virus, even it isn't a really a virus. And pointing to the screenshot, Avira is known for having a sensitive views about downloaded file. Im not saying they aren't scam but a user itself in the first place must:

1. Use their common sense (if the scanner found any error then don't used if you don't have any knowledge)
2. Repeat 1

Moving on, just to add, it's not about the file but the campaign has an history of not paying (according to reference) so thanks for OP as that is a big reason why participants must not joined the campaign. And no escrow?? Come on don't ever participate in a weekly campaign without any assurance that you will be paid. Escrow is a must!

P.S I download the file and scanned it on my own scanner.

[coinlocket$]

i have a virus alarm also on avg pro, an advice if u want join could be to use a virtual machine so in the end if it will be scam o worse your pc will be safe anyway

[Fuloos]

for all of those who are so keen to do a public service by passing a verdict that this is a scam, you are more than welcome to reach out to me via email admin@fuloos.org or Telegram @iamCryptoKnight. We are more than happy to provide our side of the story and as for the wallet issues, we are working to release to fix this false positive. the code is available on github for any genius to look and to verify but still we are in the mist of releasing a webwallet and then mobile wallet as well.  for further issues, just get with me directly!

[Fuloos]

Today user Fuloos started a thread for Fuloos Signature Campaign (https://bitcointalk.org/index.php?topic=2815250.0) which I highly believe is a scam and better to look into ASAP since the applied users passwords might be at risk. Some proof in regards to this:

1) Fullos has a twitter campaign and never paid the users
Ref: https://bitcointalk.org/index.php?topic=2649217.0

2) The campaign asks you to download their wallet to receive the tokens and on running the windows .exe file on Virus total this is what I found
http://prntscr.com/i514ys

Since I am not a computer geek I cannot justify this. So if anyone could look into the source code I am pretty sure it would be easy to figure out. Also this needs to be addressed with priority as many signature bounty hungry people have already installed the wallet and their passwords, private keys might be at stake.

3) Their whitepaper is nothing but definition of concepts and highly plagiarised (can be checked using a plagiarism tool online)

4) Jr member running the campaign without escrowed funds, Some shady exchange to trade the coin (probably created by them to look legit) all clearly points out to a be scam.

You will have to take this thread down soon after all of your doubts are answered.......