Bitcoin Forum
November 12, 2019, 06:19:24 PM *
News: Help collect the most notable posts made over the last 10 years.
 
   Home   Help Search Login Register More  
Pages: 1 2 [All]
  Print  
Author Topic: Be on the lookout for this scam.. Just got it in my email  (Read 4783 times)
andrewboy44
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250



View Profile
January 06, 2014, 11:36:36 PM
 #1

Lookout for this email. Definitely a scam

Edit: not sure why the image isnt coming up, let me try another website.
My name isn't even david and who would give their private key and password over to a stranger... plus the message was sent from an amazon cloud.
SCAM SCAM SCAM. Dont download, just will give you a virus plus probably steal your wallet.dat

1573582764
Hero Member
*
Offline Offline

Posts: 1573582764

View Profile Personal Message (Offline)

Ignore
1573582764
Reply with quote  #2

1573582764
Report to moderator
The Bitcoin Forum is turning 10 years old! Join the community in sharing and exploring the notable posts made over the years.
1573582764
Hero Member
*
Offline Offline

Posts: 1573582764

View Profile Personal Message (Offline)

Ignore
1573582764
Reply with quote  #2

1573582764
Report to moderator
kwoody
Sr. Member
****
Offline Offline

Activity: 454
Merit: 250


Technology and Women. Amazing.


View Profile
January 06, 2014, 11:42:35 PM
 #2

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com
andrewboy44
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250



View Profile
January 06, 2014, 11:45:13 PM
 #3

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

I think it may have happened from when someone hack bitcointalk.org. But I'm not sure. If you find out anything please let me know
2tights
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250

I like big BITS and I cannot lie.


View Profile WWW
January 06, 2014, 11:46:14 PM
 #4

Lookout for this email. Definitely a scam

Edit: not sure why the image isnt coming up, let me try another website.
My name isn't even david and who would give their private key and password over to a stranger... plus the message was sent from an amazon cloud.
SCAM SCAM SCAM. Dont download, just will give you a virus plus probably steal your private key



Why didn't you post the internet header on this email?
casascius
Mike Caldwell
VIP
Legendary
*
Offline Offline

Activity: 1386
Merit: 1045


The Casascius 1oz 10BTC Silver Round (w/ Gold B)


View Profile WWW
January 06, 2014, 11:48:55 PM
 #5

I got the same thing, it also called me David, which I thought was weird, since I wonder how someone would get my e-mail address but not my name with it.  I mean it's not like I make a secret of it!

Companies claiming they got hacked and lost your coins sounds like fraud so perfect it could be called fashionable.  I never believe them.  If I ever experience the misfortune of a real intrusion, I declare I have been honest about the way I have managed the keys in Casascius Coins.  I maintain no ability to recover or reproduce the keys, not even under limitless duress or total intrusion.  Remember that trusting strangers with your coins without any recourse is, as a matter of principle, not a best practice.  Don't keep coins online. Use paper or hardware wallets instead.
andrewboy44
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250



View Profile
January 06, 2014, 11:49:47 PM
 #6

Quote
Why didn't you post the internet header on this email?

Just keeping my email private.    

Erwann Genson <noreply@thehelixchallenge.com.hk>
to:    (my email)  
date:    Mon, Jan 6, 2014 at 3:11 PM
subject:    Wallet Backup
mailed-by:    amazonses.com

Edit:the 3:11 pm is really 6:11pm. This computer has the wrong time ha
GnB
Newbie
*
Offline Offline

Activity: 33
Merit: 0


View Profile
January 06, 2014, 11:50:15 PM
 #7

Lookout for this email. Definitely a scam http://s14.postimg.org/jss6jfeht/image.jpg

Edit: not sure why the image isnt coming up, let me try another website.
My name isn't even david and who would give their private key and password over to a stranger... plus the message was sent from an amazon cloud.
SCAM SCAM SCAM. Dont download, just will give you a virus plus probably steal your private key



Why didn't you post the internet header on this email?
I'm also wondering this lol

EDIT: Spoke to soon, thanks OP
MiningBuddy
Hero Member
*****
Offline Offline

Activity: 928
Merit: 1000


฿itcoin ฿itcoin ฿itcoin


View Profile
January 06, 2014, 11:52:03 PM
 #8

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.

kwoody
Sr. Member
****
Offline Offline

Activity: 454
Merit: 250


Technology and Women. Amazing.


View Profile
January 06, 2014, 11:56:19 PM
 #9

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.
I do not have a MtGox account.
andrewboy44
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250



View Profile
January 06, 2014, 11:58:55 PM
 #10

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.
I do not have a MtGox account.

This is getting weird.. I'm convinced they got our emails from bitcointalk when it was hacked with the man in the middle attack. But in all honesty, I could care less. Just have to educate others (new people to btc) on these spam emails even though common sense says don't download
mckmuze
Member
**
Offline Offline

Activity: 93
Merit: 10



View Profile
January 07, 2014, 12:06:57 AM
 #11

I got this too just today. Pretty annoying.
matriculator
Newbie
*
Offline Offline

Activity: 56
Merit: 0


View Profile
January 07, 2014, 12:15:27 AM
 #12

I got the same thing, it also called me David, which I thought was weird, since I wonder how someone would get my e-mail address but not my name with it.  I mean it's not like I make a secret of it!


It's to create the illusion that you got it by mistake.
TehoM
Newbie
*
Offline Offline

Activity: 16
Merit: 0


View Profile
January 07, 2014, 12:17:35 AM
 #13

How exactly did they get your email?
What sites use that email address?
Remember remember the 5th of November
Legendary
*
Offline Offline

Activity: 1862
Merit: 1002

Reverse engineer from time to time


View Profile
January 07, 2014, 12:18:26 AM
 #14

Confirmed I also received it, reported it as spam.

BTC:1AiCRMxgf1ptVQwx6hDuKMu4f7F27QmJC2
HappyS
Legendary
*
Offline Offline

Activity: 1386
Merit: 1002



View Profile
January 07, 2014, 12:20:08 AM
 #15

I also received it, fucking spamers.

Haм нyжны бoтинки для гoльфa, инaчe мы oтcюдa нe выбepeмcя.
13H5Cu9ixeud7kiD52mDXrR7NWgc2PERdJ
drrussellshane
Hero Member
*****
Offline Offline

Activity: 547
Merit: 500


View Profile
January 07, 2014, 12:21:31 AM
 #16

Isn't there a guy named David who operates a wallet recovery service?

EDIT: Yep http://www.walletrecoveryservices.com/testimonials.html

Buy a TREZOR! Premier BTC hardware wallet. If you're reading this, you should probably buy one if you don't already have one. You'll thank me later.
andrewboy44
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250



View Profile
January 07, 2014, 12:22:22 AM
 #17

How exactly did they get your email?
What sites use that email address?

It was sent to my main email which is used for a lot of things including multiple bitcoin related things. If multiple bitcoin users have gotten this is narrows it down to either bitcointalk.org or a bitcoin exchange platform. Only options really
franky1
Legendary
*
Offline Offline

Activity: 2576
Merit: 1514



View Profile
January 07, 2014, 12:24:45 AM
 #18

this scam has been going around for a few months. its supposedly written as a message to a friend of the sender asking them to sort out the issue, and appear like the email was sent mistakenly to the recipients.

a ploy to make the recipients feel that they have won the jackpot because someone (apparently) stupidly sent them their wallet.

this is not the case, its a ploy to get people to download scam software that will risk your own wallet.

do not touch emails with attachments unless you know the recipient personally and can slap them with a wet fish if they mess with your own wallet


I DO NOT TRADE OR ACT AS ESCROW ON THIS FORUM EVER.
Please do your own research & respect what is written here as both opinion & information gleaned from experience. many people replying with insults but no on-topic content substance, automatically are 'facepalmed' and yawned at
TH3xR34P3R
Newbie
*
Offline Offline

Activity: 5
Merit: 0



View Profile WWW
January 07, 2014, 12:53:01 AM
 #19

this scam has been going around for a few months. its supposedly written as a message to a friend of the sender asking them to sort out the issue, and appear like the email was sent mistakenly to the recipients.

a ploy to make the recipients feel that they have won the jackpot because someone (apparently) stupidly sent them their wallet.

this is not the case, its a ploy to get people to download scam software that will risk your own wallet.

do not touch emails with attachments unless you know the recipient personally and can slap them with a wet fish if they mess with your own wallet



Not just your wallet but your entire system and any machines on the network, my gut tells me this is a variation to try get people to run Cryptolocker, I made a psa on r/bitcoinsec and cross posted to r/bitcoin. I will add this thread to the post aswell.
MiningBuddy
Hero Member
*****
Offline Offline

Activity: 928
Merit: 1000


฿itcoin ฿itcoin ฿itcoin


View Profile
January 07, 2014, 01:03:40 AM
 #20

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.
I do not have a MtGox account.

This is getting weird.. I'm convinced they got our emails from bitcointalk when it was hacked with the man in the middle attack. But in all honesty, I could care less. Just have to educate others (new people to btc) on these spam emails even though common sense says don't download
I use a different email address on this site and haven't received any spam to that address.

BuTaJIu4eK
Member
**
Offline Offline

Activity: 113
Merit: 10


View Profile
January 07, 2014, 06:49:36 AM
 #21

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.
I do not have a MtGox account. Only here.

I hate all scammer!  Angry

Antivirus checking
https://www.virustotal.com/ru/file/85083a3cc70d4c38c60c20995f3f82f37bec6de1744cd8d10dea645888c58669/analysis/1389076208/
dishwara
Legendary
*
Offline Offline

Activity: 1863
Merit: 1016


000000000019d6689c085ae165831e934ff763ae46a2a6c172


View Profile
January 07, 2014, 07:40:01 AM
 #22

I too got that email, checked the files in isolated machine.
The password.txt is a exe file with trojan.
But the wallet.dat file is true & it has 30.28 btc, but the wallet is encrypted.
The coins received from frosty wallet & it has another 3 addresses, which has label assigned to it.

It seems the scammer sent real wallet, encrypted, so that he dont loose coins, but want others to loose coins.

Open Altcoin Github
Limxtec Telegram












Bitsend BSD
The ultimate longterm rollout!
The first Masternodecoin with Segwit

Web: www.bitsend.info












Bitcore BTX
Are you ready for the future?!
The first hybrid fork from BTC

Web: www.bitcore.cc












Bitcloud BTDX
Megacoin MEC

████
 ████
  ████
   ████
    ████
     ████
      ████
       ████
        ████
       ████
      ████
     ████
    ████
   ████
  ████
 ████
████

████
 ████
  ████
   ████
    ████
     ████
      ████
       ████
        ████
       ████
      ████
     ████
    ████
   ████
  ████
 ████
████
[/center]
Wolf Rainer
Legendary
*
Offline Offline

Activity: 1862
Merit: 1009


View Profile
January 07, 2014, 07:57:58 AM
 #23

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.

There´s no way, i don´t have mtgox account, but i recieved the e-mail.
klenker
Member
**
Offline Offline

Activity: 80
Merit: 10


Prospecting on the net, in a rundown old shack..


View Profile
January 07, 2014, 09:25:19 AM
 #24

I too got that email, checked the files in isolated machine.
The password.txt is a exe file with trojan.
But the wallet.dat file is true & it has 30.28 btc, but the wallet is encrypted.
The coins received from frosty wallet & it has another 3 addresses, which has label assigned to it.

It seems the scammer sent real wallet, encrypted, so that he dont loose coins, but want others to loose coins.


Indeed the person who seems to originally own the wallet is Liquid00 on the forums, also on the litecoin aus website.

he sent 19btc to this wallet at some point.


BTC: 1LJk6Ck83fqwoCzFB7KqHVkurhsFfuk9zv
LTC: LP1LBMd4Cxth8uada3wF2kTZu8ub7LfyRH
FTC: 6gsQ1WqzpEi8ioQ3irkhjVj8z7Wznos12C
--
CYPER
Hero Member
*****
Offline Offline

Activity: 770
Merit: 500



View Profile
January 07, 2014, 02:18:41 PM
 #25

I got it too, but while Thunderbird shows the small attachment icon, when I open the email there is no attachment.
I also opened it in my webmail and again - attachment icon present, but no attachment.

I assume the only way to get infected is by opening the attachment, right?
Just loading the email is harmless.

Also this must be from the MTGox leak as the email I use here is different and unique - I only use it for forum registrations.
FractalUniverse
Hero Member
*****
Online Online

Activity: 1001
Merit: 557



View Profile
January 07, 2014, 02:48:59 PM
 #26

yeah. i received this one as well today. i placed it directly to to spam folder without even opening it.
i just hope noone downloaded it
alexlandonflicksss
Newbie
*
Offline Offline

Activity: 24
Merit: 0


View Profile
January 07, 2014, 05:21:07 PM
 #27

I even got this mail this morning. I tried to extract it by right clicking and clicking extract here. I got a error and found that it is a malicious file. HELP ME!
2tights
Sr. Member
****
Offline Offline

Activity: 308
Merit: 250

I like big BITS and I cannot lie.


View Profile WWW
January 07, 2014, 05:33:12 PM
 #28

I even got this mail this morning. I tried to extract it by right clicking and clicking extract here. I got a error and found that it is a malicious file. HELP ME!

Assume Crash Positions!!

walletrecoveryservices
Member
**
Offline Offline

Activity: 88
Merit: 16



View Profile WWW
January 07, 2014, 08:22:25 PM
 #29

Isn't there a guy named David who operates a wallet recovery service?

EDIT: Yep http://www.walletrecoveryservices.com/testimonials.html

Yes, I operate a legitimate wallet password recovery service.
I assume that it is only co-incidence that this scammer used the name 'david'. It is certainly nothing to do with me.

FYI, I have received this scam in the last couple of days from 3 different email addresses.

Cheers
Dave Bitcoin
walletrecoveryservices.com

Providing Cryptocurrency Wallet, Password and Seed Recovery Services since 2013
Pages: 1 2 [All]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!