|
|
b!z
Legendary
 Offline
Activity: 1582
Merit: 1010
|
 |
August 31, 2013, 02:21:35 PM |
|
Shit, installed novacoin-qt for nothing...
novascoin.org has the same links to sourceforge as novacoin.org, how does our system gets compromised in this attack?
Links are not the same. sourceforge.net/projects/nova scoin qt/files/ vs. sourceforge.net/projects/novacoin/files/ // Sent file to Kaspersky Lab and DrWeb. Upload it using jotti and virustotal: it'll get detected by many AVs after a few hours. |
|
|
|
|
pedrog
Legendary
Offline
Activity: 2786
Merit: 1031
|
|
August 31, 2013, 02:42:50 PM |
|
Yes, that link is in the front page. Linux user not affected!  |
|
|
|
Balthazar
Legendary
Offline
Activity: 3108
Merit: 1359
|
|
August 31, 2013, 03:01:51 PM |
|
Linux user not affected! Just because there are not so much linux users...  |
|
|
|
|
pedrog
Legendary
Offline
Activity: 2786
Merit: 1031
|
|
August 31, 2013, 03:04:30 PM |
|
Linux user not affected! Just because there are not so much linux users... Actually there are, they are called Android users. |
|
|
|
Balthazar
Legendary
Offline
Activity: 3108
Merit: 1359
|
|
August 31, 2013, 03:57:37 PM |
|
Linux user not affected! Just because there are not so much linux users... Actually there are, they are called Android users. They are Android users. Android != Linux, it's just a Dalvik VM based platform. Android could be started under any OS (MIPS/Vxworks for example), you just need to port a Dalvik VM with underlying libraries. |
|
|
|
|
|
zeta1
|
|
August 31, 2013, 04:57:01 PM |
|
Got that mail as well. Stupid scammers.
|
|
|
|
|
|
Reaper3
|
|
August 31, 2013, 05:11:32 PM |
|
It was the name novacoin with an S extra in the url. Beware!
|
|
|
|
|
whiskers75
|
|
August 31, 2013, 05:24:16 PM |
|
LOL, I got one too from Jozzaboy. Reported to admin. Nice try, but I don't even care about Novacoin.  |
|
|
|
Balthazar
Legendary
Offline
Activity: 3108
Merit: 1359
|
|
August 31, 2013, 05:36:22 PM |
|
It seems that they are using victim accounts to send more PMs.
|
|
|
|
|
jozzaboy2
Newbie
Offline
Activity: 1
Merit: 0
|
|
August 31, 2013, 06:21:11 PM |
|
This is Jozzaboy. Unfortunately I've discovered my computer was infected with infected with DarkComet RAT. A remote control software. They have successfully gained access into my account, Jozzaboy and changed the email and password. Even attempted to get into my email without success.
If you downloaded that file, isolate the machine and scan it for all new .exe files since you downloaded it and run DarkComet RAT remover. Change any passwords you entered since the file was downloaded.
Fucking virus and people who don't have anything better to do.
|
|
|
|
|
romerun
Legendary
Offline
Activity: 1078
Merit: 1002
Bitcoin is new, makes sense to hodl.
|
|
September 01, 2013, 03:44:05 AM |
|
This NVC address is not generated from new client. Please download new client and generate another address to be qualified.
Thanks
what a scumbag. |
|
|
|
|
|
smscotten
|
|
September 01, 2013, 11:03:36 AM |
|
If nothing else, it looks as though sourceforge has taken down the novascoin "project." I'm guessing that I wasn't the only one to click the "report abuse" button on that page.
|
|
|
|
Balthazar
Legendary
Offline
Activity: 3108
Merit: 1359
|
|
September 01, 2013, 12:11:37 PM |
|
|
|
|
|
|
2048-bit
Newbie
Offline
Activity: 42
Merit: 0
|
|
September 14, 2013, 03:15:39 PM |
|
I sent the EXE to ClamAV.
"If nothing else, it looks as though sourceforge has taken down the novascoin "project." I'm guessing that I wasn't the only one to click the "report abuse" button on that page."
I did, too.
|
|
|
|
|
|
