Bitcoin Forum
April 25, 2024, 11:27:42 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: http://mybitcoinjob.com/ Very suspicious site, May be password stealing  (Read 1515 times)
ReCat (OP)
Sr. Member
****
Offline Offline

Activity: 406
Merit: 250



View Profile WWW
January 18, 2014, 05:25:51 PM
 #1

A certain respectable forum member around here pointed me to that site to investigate if it was real or not. I registered, and after registering I realize that the whole site is basically static files with the only actual server sided code being the login form and registration form. All that the site contains is a "refer other users for free BTC" form.

It raises large suspicion for being a scam, in the form of a password stealer that may be used to try and compromise web wallets and, especially, since they ask for your BTC address, Potentially even blockchain.info wallets.

http://mybitcoinjob.com/

Anyone know anything about this?

BTC: 1recatirpHBjR9sxgabB3RDtM6TgntYUW
Hold onto what you love with all your might, Because you can never know when - Oh. What you love is now gone.
1714044462
Hero Member
*
Offline Offline

Posts: 1714044462

View Profile Personal Message (Offline)

Ignore
1714044462
Reply with quote  #2

1714044462
Report to moderator
1714044462
Hero Member
*
Offline Offline

Posts: 1714044462

View Profile Personal Message (Offline)

Ignore
1714044462
Reply with quote  #2

1714044462
Report to moderator
1714044462
Hero Member
*
Offline Offline

Posts: 1714044462

View Profile Personal Message (Offline)

Ignore
1714044462
Reply with quote  #2

1714044462
Report to moderator
"Bitcoin: mining our own business since 2009" -- Pieter Wuille
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714044462
Hero Member
*
Offline Offline

Posts: 1714044462

View Profile Personal Message (Offline)

Ignore
1714044462
Reply with quote  #2

1714044462
Report to moderator
1714044462
Hero Member
*
Offline Offline

Posts: 1714044462

View Profile Personal Message (Offline)

Ignore
1714044462
Reply with quote  #2

1714044462
Report to moderator
sase007
Sr. Member
****
Offline Offline

Activity: 364
Merit: 250


View Profile
January 18, 2014, 05:43:19 PM
 #2

SCAM


login: test
pass: test

Dont waste your time with that shit...
ReCat (OP)
Sr. Member
****
Offline Offline

Activity: 406
Merit: 250



View Profile WWW
January 18, 2014, 06:01:59 PM
Last edit: January 18, 2014, 06:19:39 PM by ReCat
 #3

SCAM


login: test
pass: test

Dont waste your time with that shit...
I thought so also. Definitely a scam.

I've looked up the whois, and I find this.

Registrant Name: WHOISGUARD PROTECTED
Registrant Organization: WHOISGUARD, INC.
Registrant Street: P.O. BOX 0823-03411
Registrant City: PANAMA

Through their abuse forms, i have found it was registered through NameCheap, so I have now sent abuse reports to both the whois guarder and the namecheap abuse and legal department. Such a disgusting thing. Hope it's taken down..

http://megastoon.com/ It seems to be a plain copypaste of this site with some things changed to say BitCoin instead.

Edit: Found something else.

http://whos.amung.us/stats/bitcohacker/

Look how many people are visiting that site!

BTC: 1recatirpHBjR9sxgabB3RDtM6TgntYUW
Hold onto what you love with all your might, Because you can never know when - Oh. What you love is now gone.
sase007
Sr. Member
****
Offline Offline

Activity: 364
Merit: 250


View Profile
January 18, 2014, 06:16:01 PM
 #4


http://megastoon.com/ It seems to be a plain copypaste of this site with some things changed to say BitCoin instead.


Scaned them as well, got baned immediately Cheesy

No errors I can use so far but page look like sh*t and it is 99.99% scam... Smiley
ReCat (OP)
Sr. Member
****
Offline Offline

Activity: 406
Merit: 250



View Profile WWW
January 18, 2014, 06:23:43 PM
 #5

Have a look at the whosamungus ticker i managed to dig up.

http://whos.amung.us/stats/bitcohacker/

Unbelievable amount of activity on the site. A bare minimum of 100 visitors at any given time.. This could be harvesting SO MANY user passwords and attempting to implant viruses on so many computers. It could even be a botnet.

BTC: 1recatirpHBjR9sxgabB3RDtM6TgntYUW
Hold onto what you love with all your might, Because you can never know when - Oh. What you love is now gone.
sase007
Sr. Member
****
Offline Offline

Activity: 364
Merit: 250


View Profile
January 18, 2014, 07:13:01 PM
 #6

You have to download some program to get your btc ("btc")...

So - wallet stealer or some virus?

It is too small for botnet...
ReCat (OP)
Sr. Member
****
Offline Offline

Activity: 406
Merit: 250



View Profile WWW
January 18, 2014, 08:17:35 PM
 #7

You have to download some program to get your btc ("btc")...

So - wallet stealer or some virus?

It is too small for botnet...

Most likely a wallet stealer, then.

BTC: 1recatirpHBjR9sxgabB3RDtM6TgntYUW
Hold onto what you love with all your might, Because you can never know when - Oh. What you love is now gone.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!