Bitcoin Forum
May 05, 2024, 01:07:54 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: amsterdamcoin spreads coinminervirus over its website  (Read 214 times)
KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 02, 2018, 06:30:41 PM
Last edit: June 02, 2018, 09:49:06 PM by KingScorpio
 #1

Coinmarketcap is somehow interconnected with Bitcointalk,
but the website regularily creates scandas,

here another one:
i think some admins of this forum also are manging coinmarketcap
that is why i post it here.

Be warned the website of this coinmarketcap listed coin:

uninfected link describing the coin: https://coinmarketcap.com/currencies/amsterdamcoin/

infected coin website: www. amsterdamcoin .com

is spreading a coinminer virus,

i have reported and tweeted that.

https://www.cryptoproductivity.com/single-post/2018/06/02/Coinmarketcap-lists-cryptocurrency-which-website-spreads-coinminervirus

regards

Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714871274
Hero Member
*
Offline Offline

Posts: 1714871274

View Profile Personal Message (Offline)

Ignore
1714871274
Reply with quote  #2

1714871274
Report to moderator
OmegaStarScream
Staff
Legendary
*
Offline Offline

Activity: 3472
Merit: 6120



View Profile
June 02, 2018, 06:52:29 PM
 #2

Is this supposed to be an executable virus or in the website where they basically use our computers to mine like some torrent sites? Either way, I didn't get any warnings just by visiting the site, so I'm sure that's the same case for CoinMarketCap developers otherwise they would've removed it already.

█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 02, 2018, 07:04:39 PM
 #3

Is this supposed to be an executable virus or in the website where they basically use our computers to mine like some torrent sites? Either way, I didn't get any warnings just by visiting the site, so I'm sure that's the same case for CoinMarketCap developers otherwise they would've removed it already.
my bitdefender blocked the website, and warned me of a coinminer virus there.

if this would have been just one of the 40.000 cryptocurrencies out there i wouldnt have written a formal warning

but since i found that coin later to be listed on coinmarket cap i wrote an article and posted it into several social media groups to warn people of this issue.



this was 23 hours ago.

KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 02, 2018, 09:59:54 PM
 #4

i have improved the article and posted a more detailed report of the bitdefender report.

the folks around amsterdamcoin indeed tried to spread coinminer viruses. otherwise my antivirus woulndt have triggered.

Cobalt9317
Copper Member
Sr. Member
****
Offline Offline

Activity: 434
Merit: 278

Offering Escrow 0.5 % fee


View Profile WWW
June 02, 2018, 10:19:19 PM
 #5

As a result they can mine a lot of that coin if user didn't know it and start using the service of amsterdamcoin.
shady person getting ingenious how to mine coin on someones leisure time.

It might even stop your pc for good.
KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 02, 2018, 10:51:51 PM
 #6

As a result they can mine a lot of that coin if user didn't know it and start using the service of amsterdamcoin.
shady person getting ingenious how to mine coin on someones leisure time.

It might even stop your pc for good.

i have tweeted that to the amsterdamcoin tweet group so they can prepare themselves for their shitstorm or fix their issue/present the world a scapegoat, or shut down their project

LTU_btc
Legendary
*
Offline Offline

Activity: 3052
Merit: 1330


Slava Ukraini!


View Profile WWW
June 02, 2018, 10:54:01 PM
 #7

Coinmarketcap is somehow interconnected with Bitcointalk,
but the website regularily creates scandas,

here another one:
i think some admins of this forum also are manging coinmarketcap
that is why i post it here.

Coinmarketcap aren't managed by one of forum admins. Coinmarketcap owned by one of Bitcointalk users - Gliss:
https://bitcointalk.org/index.php?action=profile;u=61526
Have you tried to contact him about this virus? If no, I think you need to try contact him and inform about that website and maybe he will remove it.

KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 02, 2018, 11:13:47 PM
 #8

Coinmarketcap is somehow interconnected with Bitcointalk,
but the website regularily creates scandas,

here another one:
i think some admins of this forum also are manging coinmarketcap
that is why i post it here.

Coinmarketcap aren't managed by one of forum admins. Coinmarketcap owned by one of Bitcointalk users - Gliss:
https://bitcointalk.org/index.php?action=profile;u=61526
Have you tried to contact him about this virus? If no, I think you need to try contact him and inform about that website and maybe he will remove it.

thx man i will immediately contact him,

i will also upgrade the article and make a video of that this group might now remove their virus from their website but we must be vigilant to protect the reputation of the industry

coin5haker
Member
**
Offline Offline

Activity: 350
Merit: 16

~bitcoin enthusiast~


View Profile WWW
June 03, 2018, 12:33:03 PM
 #9

Wow, never knew that one of the forum members own CMC! Great idea of monetization, I admire such people. This forum made so many rich and famous. Wondering if they paid back the forum somehow. Looking at the design (right from 2012) of this forum it seems that administration lacks money for the development  Undecided

KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 03, 2018, 12:43:45 PM
 #10

Wow, never knew that one of the forum members own CMC! Great idea of monetization, I admire such people. This forum made so many rich and famous. Wondering if they paid back the forum somehow. Looking at the design (right from 2012) of this forum it seems that administration lacks money for the development  Undecided

jes he even isnt able to respond to the countless approaches so many alternative indexes have pumped up

i heard that coinchecker is currently the best emerging one.

https://bitcointalk.org/index.php?topic=4412647.msg39278620#msg39278620


regards

Lucius
Legendary
*
Offline Offline

Activity: 3234
Merit: 5636


Blackjack.fun-Free Raffle-Join&Win $50🎲


View Profile WWW
June 03, 2018, 12:46:09 PM
 #11

Just checked amsterdamcoin site with VirusTotal and it came clean, even from BitDefender : https://www.virustotal.com/#/url/9df36748f820b781c0d53bac9bfd7c72c4cccdd852c9a44f3211bc3811965f20/detection

Also my AV did not detect anything from that site, and it is always block any JSCoin Miner. Maybe owners just try to get some profit using CoinHive browser miner since they are not so popular at this moment (ranked 990). I think you'd be surprised how much sites is using browser mining these days, mainly without user consent, free CPU&electric energy = free Monero.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 03, 2018, 12:47:48 PM
Last edit: June 03, 2018, 01:01:58 PM by KingScorpio
 #12

Just checked amsterdamcoin site with VirusTotal and it came clean, even from BitDefender : https://www.virustotal.com/#/url/9df36748f820b781c0d53bac9bfd7c72c4cccdd852c9a44f3211bc3811965f20/detection

Also my AV did not detect anything from that site, and it is always block any JSCoin Miner. Maybe owners just try to get some profit using CoinHive browser miner since they are not so popular at this moment (ranked 990). I think you'd be surprised how much sites is using browser mining these days, mainly without user consent, free CPU&electric energy = free Monero.

it doesnt matter if they have removed it now they have been catched doing it.....

two times:

on
june 1. 9:15 year 2018

and
june 1. 9:31 year 2018

Middle european time (UTC +01:00)

what where they thinking?

the fact that it has been remove now after this shitstorm has started is actually confirming that the virus existed as it is now excluded that the bitdefender did a wrong alarm.

Lucius
Legendary
*
Offline Offline

Activity: 3234
Merit: 5636


Blackjack.fun-Free Raffle-Join&Win $50🎲


View Profile WWW
June 04, 2018, 09:15:15 AM
 #13


it doesnt matter if they have removed it now they have been catched doing it.....

two times:

on
june 1. 9:15 year 2018

and
june 1. 9:31 year 2018

Middle european time (UTC +01:00)

what where they thinking?

the fact that it has been remove now after this shitstorm has started is actually confirming that the virus existed as it is now excluded that the bitdefender did a wrong alarm.

I think that in this particular case it is about mining script JS/CoinMiner, it is not a virus and it is blocked by almost all AV software and even some browsers have built in protection against this script. You should also know that such script can be executed even without site owner permission in a way that it can be hide in banner ads or video posted on that site, so owner is just a victim and not a perpetrator.

We can only speculate if owner of that site did it deliberately or not, but this is not a virus and does not pose a great threat for most users who take care about their device security.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
athanz88
Sr. Member
****
Offline Offline

Activity: 476
Merit: 359


View Profile
June 04, 2018, 10:59:31 AM
 #14

Thanks for the info man, it really helps me. I am in the middle of browsing in coinmarketcap website and scrolling looking upon coin, luckily i found this thread first before i read about that amsterdamcoin whatever on the link. Lucky me.

Yeah, about your last post OP. I think the owner didnt know about this thing and he is just a victim too, but even that being said, it would be a really good thing if the mentioned owner of that website can give explanation in here, or in the forum.
KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 04, 2018, 12:32:15 PM
Last edit: June 04, 2018, 12:44:26 PM by KingScorpio
 #15


it doesnt matter if they have removed it now they have been catched doing it.....

two times:

on
june 1. 9:15 year 2018

and
june 1. 9:31 year 2018

Middle european time (UTC +01:00)

what where they thinking?

the fact that it has been remove now after this shitstorm has started is actually confirming that the virus existed as it is now excluded that the bitdefender did a wrong alarm.

I think that in this particular case it is about mining script JS/CoinMiner, it is not a virus and it is blocked by almost all AV software and even some browsers have built in protection against this script. You should also know that such script can be executed even without site owner permission in a way that it can be hide in banner ads or video posted on that site, so owner is just a victim and not a perpetrator.

We can only speculate if owner of that site did it deliberately or not, but this is not a virus and does not pose a great threat for most users who take care about their device security.

you work for amsterdamcoin and are now trying to limit the shitstorm?

that link you refer to has an article where this script is described as what we understand about a coinminer virus, do you even read what you are linking to?

here the quote

"New Internet Attack! Secret Mining Script using your browser for their income
Sep 26, 2017360TS
      
Recently 360 Internet Security Center has discovered a new Internet attack hidden in websites through javascript to mine cryptocurrency for cybercriminals.
New Internet Attack

This mining script (JS/CoinMiner) has been found in and distributed to different and numerous websites globally. According to researchers in 360 Security Center, such script was firstly found on September 15th and has been distributed extensively. Within a week, the script has been seen by hundreds of thousands of visitors, and it’s still escalating."



https://crushus-s5.crushus.com was used as some form of proxy,

it is a virus, as its using the computation power of others to mine cryptocurrencies, and it has been warned about it i am getting tired of those idiots spreading malware, many people then are forced to delete their browser cookies which contain acces date to website and today even wallets.

we have to be vigilant or there will be some "smartasses" that do their "jokes" or "mistakes" at the expense of others. like amsterdamcoin did.

KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 04, 2018, 01:08:55 PM
 #16

maybe we can publish this in the big media channels, they might be interested reporting on this, to spread awareness of that malware, and showing that we have catched amsterdamcoin

LFC_Bitcoin
Legendary
*
Offline Offline

Activity: 3528
Merit: 9544


#1 VIP Crypto Casino


View Profile
June 04, 2018, 01:28:25 PM
 #17

Do yourselves a favour & don’t get interested & or click on links to possible virus ridden shit coin websites. Come on guys!

.
.BITCASINO.. 
.
#1 VIP CRYPTO CASINO

▄██████████████▄
█▄████████████▄▀▄▄▄
█████████████████▄▄▄
█████▄▄▄▄▄▄██████████████▄
███████████████████████████████
████▀█████████████▄▄██████████
██████▀██████████████████████
████████████████▀██████▌████
███████████████▀▀▄█▄▀▀█████▀
███████████████████▀▀█████▀
 ▀▀▀▀▀▀▀██████████████
          ▀▀▀████████
                ▀▀▀███

.
......PLAY......
KingScorpio (OP)
Sr. Member
****
Offline Offline

Activity: 1470
Merit: 325



View Profile WWW
June 04, 2018, 05:16:30 PM
 #18

Do yourselves a favour & don’t get interested & or click on links to possible virus ridden shit coin websites. Come on guys!

we just discovered this and are warning the community.

Lucius
Legendary
*
Offline Offline

Activity: 3234
Merit: 5636


Blackjack.fun-Free Raffle-Join&Win $50🎲


View Profile WWW
June 05, 2018, 01:15:49 PM
 #19


you work for amsterdamcoin and are now trying to limit the shitstorm?

that link you refer to has an article where this script is described as what we understand about a coinminer virus, do you even read what you are linking to?

here the quote

"New Internet Attack! Secret Mining Script using your browser for their income
Sep 26, 2017360TS
      
Recently 360 Internet Security Center has discovered a new Internet attack hidden in websites through javascript to mine cryptocurrency for cybercriminals.
New Internet Attack

This mining script (JS/CoinMiner) has been found in and distributed to different and numerous websites globally. According to researchers in 360 Security Center, such script was firstly found on September 15th and has been distributed extensively. Within a week, the script has been seen by hundreds of thousands of visitors, and it’s still escalating."



https://crushus-s5.crushus.com was used as some form of proxy,

it is a virus, as its using the computation power of others to mine cryptocurrencies, and it has been warned about it i am getting tired of those idiots spreading malware, many people then are forced to delete their browser cookies which contain acces date to website and today even wallets.

we have to be vigilant or there will be some "smartasses" that do their "jokes" or "mistakes" at the expense of others. like amsterdamcoin did.

I am not working for any shit coin and certainly not for some amsterdamcoin that is so irrelevant and unimportant that did not deserve even mentioning in this forum. How much sites linked to coinmarketcap have same script enabled, do you check them all?

If it is a virus as you say, then deleting only cookies/cache/browser data will not delete virus, it is just a script that is start to work when users is visit site who run such script, when user leave such site it is stop to work. Deleting your browser history, cookies/cache is recommended procedure after surfing is finished, in that way depending of users habits you can free a few hundred megabytes daily and get rid of tracking cookies.


.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!