Bitcoin Forum
May 14, 2024, 06:48:17 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 4 »  All
  Print  
Author Topic: I received this strange message via mail.  (Read 6663 times)
FanEagle (OP)
Legendary
*
Offline Offline

Activity: 2856
Merit: 1114


Leading Crypto Sports Betting & Casino Platform


View Profile
December 20, 2013, 07:15:38 PM
 #1

Quote
Hi Marc,

I still can't import the private key and I have 51.973444 BTC. I see the balance on blockchain.info but something is corrupt with my bitcoinqt client and I cannot transfer the BTC.

Here is a zip attached with my wallet.dat, and the password. ************ Can you please transfer the BTC to the following address : ************************** ?

Thanks alot you save my life !

My name is surely not Marc.
Question is this... is this a new form of scam/virus related on bitcoin?
The link brings to a zipped file called walletBTC.zip
And why in the world I would send them to him? I'm like... keep them for myself, right?
Should I try to open it in a safe zone aka linux machine and be curious like a cat to know what the hell he sent to me or should I simply delete the email and let it go forever like it never happened?
 Roll Eyes

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
FlappySocks
Hero Member
*****
Offline Offline

Activity: 546
Merit: 500



View Profile
December 20, 2013, 07:19:44 PM
 #2

Take a look in a sandboxed environment. Nothing to loose.
the joint
Legendary
*
Offline Offline

Activity: 1834
Merit: 1020



View Profile
December 20, 2013, 07:20:02 PM
 #3

Quote
Hi Marc,

I still can't import the private key and I have 51.973444 BTC. I see the balance on blockchain.info but something is corrupt with my bitcoinqt client and I cannot transfer the BTC.

Here is a zip attached with my wallet.dat, and the password. ************ Can you please transfer the BTC to the following address : ************************** ?

Thanks alot you save my life !

My name is surely not Marc.
Question is this... is this a new form of scam/virus related on bitcoin?
The link brings to a zipped file called walletBTC.zip
And why in the world I would send them to him? I'm like... keep them for myself, right?
Should I try to open it in a safe zone aka linux machine and be curious like a cat to know what the hell he sent to me or should I simply delete the email and let it go forever like it never happened?
 Roll Eyes


Sounds like a virus to me.  There's no need to make the wallet.dat into a zip file.  And why would he send his wallet to someone he doesn't know?  Emails aren't like phone calls where you can easily dial a wrong number.
markjamrobin
Sr. Member
****
Offline Offline

Activity: 462
Merit: 250



View Profile
December 20, 2013, 07:20:32 PM
 #4

Quote
Hi Marc,

I still can't import the private key and I have 51.973444 BTC. I see the balance on blockchain.info but something is corrupt with my bitcoinqt client and I cannot transfer the BTC.

Here is a zip attached with my wallet.dat, and the password. ************ Can you please transfer the BTC to the following address : ************************** ?

Thanks alot you save my life !

My name is surely not Marc.
Question is this... is this a new form of scam/virus related on bitcoin?
The link brings to a zipped file called walletBTC.zip
And why in the world I would send them to him? I'm like... keep them for myself, right?
Should I try to open it in a safe zone aka linux machine and be curious like a cat to know what the hell he sent to me or should I simply delete the email and let it go forever like it never happened?
 Roll Eyes


Upload it here: https://www.virustotal.com/
And see what it says, 98% sure it is a virius...

Also, did you know the sender? What e-mail was it from?


iPaulito
Full Member
***
Offline Offline

Activity: 150
Merit: 100

1EDwkxCjCMGGNQqZdxa8FwheMHXSoQe4TU


View Profile
December 20, 2013, 07:32:48 PM
 #5

Quote
Hi Marc,

I still can't import the private key and I have 51.973444 BTC. I see the balance on blockchain.info but something is corrupt with my bitcoinqt client and I cannot transfer the BTC.

Here is a zip attached with my wallet.dat, and the password. ************ Can you please transfer the BTC to the following address : ************************** ?

Thanks alot you save my life !

My name is surely not Marc.
Question is this... is this a new form of scam/virus related on bitcoin?
The link brings to a zipped file called walletBTC.zip
And why in the world I would send them to him? I'm like... keep them for myself, right?
Should I try to open it in a safe zone aka linux machine and be curious like a cat to know what the hell he sent to me or should I simply delete the email and let it go forever like it never happened?
 Roll Eyes

He forgot to add that he is from Nigeria. Nope there is no free lunch. Delete it.
Morbo
Member
**
Offline Offline

Activity: 115
Merit: 11


View Profile
December 20, 2013, 07:42:50 PM
 #6

I find it wise that you reached the community to ask for advice.

Yet I find it funny that you didn't share the zip file by uploading it somewhere and posting a link to it, so the bitcointalk lurkers involved in IT security could have a closer look at it :-)

http://drunkyoda.tk/ - Bitcoin blog by newbie for newbies (no ads, no reflinks, no donation begging)
charleshoskinson
Legendary
*
Offline Offline

Activity: 1134
Merit: 1008

CEO of IOHK


View Profile WWW
December 20, 2013, 07:51:02 PM
 #7

Well these social engineers are getting better at what they do. Anyway have to listen to this unrelated song:

https://www.youtube.com/watch?v=ZSF36ZuIFdo

The revolution begins with the mind and ends with the heart. Knowledge for all, accessible to all and shared by all
FanEagle (OP)
Legendary
*
Offline Offline

Activity: 2856
Merit: 1114


Leading Crypto Sports Betting & Casino Platform


View Profile
December 20, 2013, 07:55:52 PM
Last edit: December 20, 2013, 09:21:46 PM by FanEagle
 #8

https://www.virustotal.com/it/file/f385df994bd409818b6dc1a945e34c575a94c36f45d1ca26f4d0a2af079a6add/analysis/
Ok guys, what I found inside using my linux machine:
a .Ink file that contains a password and an exe kind file. I tried to extract it and i find inside UPX0 and UPX1 file, plus some folder like bitmap etc etc... you want the file? I give you the file so you can inspect it.
Beware don't open it if you aren't using gloves or security protection.
Don't use it on a machine where it contains your wallet or important stuff. a virtual machine without internet connection is fine.


*link deleted because I don't want noobs to click it*

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
FrostieTheSnowman
Newbie
*
Offline Offline

Activity: 19
Merit: 0


View Profile
December 20, 2013, 08:40:47 PM
 #9

would anyone actually fall for this? it screams scam all over.
FanEagle (OP)
Legendary
*
Offline Offline

Activity: 2856
Merit: 1114


Leading Crypto Sports Betting & Casino Platform


View Profile
December 20, 2013, 08:42:00 PM
 #10

Nobody fell for it yet. that btc address is empty.

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
MZD
Full Member
***
Offline Offline

Activity: 189
Merit: 100


View Profile
December 20, 2013, 08:46:50 PM
 #11

I opened the file that you just posted. My computer started making a lot of noise from the hard drive but I couldn't see anything happening on screen. Now all of a sudden my wallet is gone and so are my 23 bitcoins.

Can somebody please help me with this? Is this some kind of joke? I'm really worried!
gweedo
Legendary
*
Offline Offline

Activity: 1498
Merit: 1000


View Profile
December 20, 2013, 08:47:49 PM
 #12

I opened the file that you just posted. My computer started making a lot of noise from the hard drive but I couldn't see anything happening on screen. Now all of a sudden my wallet is gone and so are my 23 bitcoins.

Can somebody please help me with this? Is this some kind of joke? I'm really worried!

That is what you get for being dumb.
FiatKiller
Sr. Member
****
Offline Offline

Activity: 378
Merit: 250


View Profile
December 20, 2013, 08:51:09 PM
 #13

Hope he's kidding. It is obviously a wallet stealing program.

LTC: LdxgJQLUdr8hZ79BV5AYbxkBUdaXctXAPi
MoonCoin Gambling: https://coin-horse.com/MON/
MZD
Full Member
***
Offline Offline

Activity: 189
Merit: 100


View Profile
December 20, 2013, 08:52:11 PM
 #14

Dumb?! Avast said it was okay according to the link posted.

I better get my money back!  Angry

7Priest7
Sr. Member
****
Offline Offline

Activity: 392
Merit: 250


View Profile
December 20, 2013, 08:54:48 PM
 #15

Dumb?! Avast said it was okay according to the link posted.

I better get my money back!  Angry
Avast is a fail antivirus.

I opened the file that you just posted. My computer started making a lot of noise from the hard drive but I couldn't see anything happening on screen. Now all of a sudden my wallet is gone and so are my 23 bitcoins.

Can somebody please help me with this? Is this some kind of joke? I'm really worried!

The hdd noise was probably it scanning for your wallet.
The Bitcoins diss-appearing was probably the intent of the malware.

I would advise individuals such as yourself to only use paper wallets.
Without good security standards the Bitcoin QT client is dangerous.

EDIT: Here is a virustotal of the zip.
Notice how AVG detected it, and avast didn't.
Of the free antivirus programs available AVG is by far the best.
FiatKiller
Sr. Member
****
Offline Offline

Activity: 378
Merit: 250


View Profile
December 20, 2013, 08:59:38 PM
 #16

I'm inclined to put "BLOWME" in a wallet.dat file and running it just for laughs...  lol

LTC: LdxgJQLUdr8hZ79BV5AYbxkBUdaXctXAPi
MoonCoin Gambling: https://coin-horse.com/MON/
FanEagle (OP)
Legendary
*
Offline Offline

Activity: 2856
Merit: 1114


Leading Crypto Sports Betting & Casino Platform


View Profile
December 20, 2013, 09:00:59 PM
 #17

I opened the file that you just posted. My computer started making a lot of noise from the hard drive but I couldn't see anything happening on screen. Now all of a sudden my wallet is gone and so are my 23 bitcoins.

Can somebody please help me with this? Is this some kind of joke? I'm really worried!

This happens when you don't know how to read red warnings before clicking on anything you find on your path
Beware don't open it if you aren't using gloves or security protection.
Don't use it on a machine where it contains your wallet or important stuff. a virtual machine without internet connection is fine.

Your only excuses are:
You are trolling
You don't have sight for red colors
You are an aggressive person that behaves against the warnings.

Next person that wants to click on that wallet stealer better send me all his money so when the stealer finds your wallet it's already empty. Just in case.
Virus total said 11 antivirus found it as a backdoor/trojan.

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
Tomatocage
Legendary
*
Offline Offline

Activity: 1554
Merit: 1222

brb keeping up with the Kardashians


View Profile
December 20, 2013, 09:01:10 PM
 #18

I opened the file that you just posted. My computer started making a lot of noise from the hard drive but I couldn't see anything happening on screen. Now all of a sudden my wallet is gone and so are my 23 bitcoins.

Can somebody please help me with this? Is this some kind of joke? I'm really worried!

Post the TxID.

Recommended Exchanges: Binance.com | CelsiusNetwork
GPG ID: 4880D85C | 1% Escrow | 8% IPO/ICO Escrow services Temporarily Closed | Bitcointalk is the ONLY place where I use this name (No Skype/IRC/YIM/AIM/etc) | 13CsmTqGNwvFXb7tD9yFvJcEYCDTB8wQTS | Beware of these SCAM sites! | *Sponsored Link
Rampion
Legendary
*
Offline Offline

Activity: 1148
Merit: 1018


View Profile
December 20, 2013, 09:04:45 PM
 #19

Dumb?! Avast said it was okay according to the link posted.

I better get my money back!  Angry



THis cannot be true. It's too retarded to be true. I bet it's not true.

dopey
Hero Member
*****
Offline Offline

Activity: 1008
Merit: 514



View Profile
December 20, 2013, 09:05:54 PM
 #20

Total scam man, wow I wonder how many people will fall for this.

Open that zip and get your coins stolen simple as that. Common sense people!
Pages: [1] 2 3 4 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!