Be on the lookout for this scam.. Just got it in my email

[BuTaJIu4eK]

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.

I do not have a MtGox account. Only here.

I hate all scammer!  

Antivirus checking
https://www.virustotal.com/ru/file/85083a3cc70d4c38c60c20995f3f82f37bec6de1744cd8d10dea645888c58669/analysis/1389076208/

[1714898995]

1714898995

[1714898995]

1714898995

[1714898995]

1714898995

[dishwara]

I too got that email, checked the files in isolated machine.
The password.txt is a exe file with trojan.
But the wallet.dat file is true & it has 30.28 btc, but the wallet is encrypted.
The coins received from frosty wallet & it has another 3 addresses, which has label assigned to it.

It seems the scammer sent real wallet, encrypted, so that he dont loose coins, but want others to loose coins.

[Wolf Rainer]

I received the same e-mail. I'm trying to figure out why/how I got myself onto a list that identifies me as a BTC user.

Sent from:

Erwann Genson noreply@thehelixchallenge.com.hk via amazonses.com

I got it too, looks like they pulled the emails from the mtgox leak that happened a while back.

There´s no way, i don´t have mtgox account, but i recieved the e-mail.

[klenker]

I too got that email, checked the files in isolated machine.
The password.txt is a exe file with trojan.
But the wallet.dat file is true & it has 30.28 btc, but the wallet is encrypted.
The coins received from frosty wallet & it has another 3 addresses, which has label assigned to it.

It seems the scammer sent real wallet, encrypted, so that he dont loose coins, but want others to loose coins.

Indeed the person who seems to originally own the wallet is Liquid00 on the forums, also on the litecoin aus website.

he sent 19btc to this wallet at some point.

[CYPER]

I got it too, but while Thunderbird shows the small attachment icon, when I open the email there is no attachment.
I also opened it in my webmail and again - attachment icon present, but no attachment.

I assume the only way to get infected is by opening the attachment, right?
Just loading the email is harmless.

Also this must be from the MTGox leak as the email I use here is different and unique - I only use it for forum registrations.

[FractalUniverse]

yeah. i received this one as well today. i placed it directly to to spam folder without even opening it.
i just hope noone downloaded it

[alexlandonflicksss]

I even got this mail this morning. I tried to extract it by right clicking and clicking extract here. I got a error and found that it is a malicious file. HELP ME!

[2tights]

I even got this mail this morning. I tried to extract it by right clicking and clicking extract here. I got a error and found that it is a malicious file. HELP ME!

Assume Crash Positions!!

[walletrecoveryservices]

Isn't there a guy named David who operates a wallet recovery service?

EDIT: Yep http://www.walletrecoveryservices.com/testimonials.html

Yes, I operate a legitimate wallet password recovery service.
I assume that it is only co-incidence that this scammer used the name 'david'. It is certainly nothing to do with me.

FYI, I have received this scam in the last couple of days from 3 different email addresses.

Cheers
Dave Bitcoin
walletrecoveryservices.com