Fake movie file infects Windows and steals or tricks bitcoin users

[bbc.reporter]

Everyone who likes downloading their movies from torrent websites should be very careful. The article mentions Windows users, however, I reckon everyone should be careful.

Also, stop using your personal computer for cryptocoins to download movies or tv series for crying out loud.



A malicious Windows shortcut file posing as a movie via The Pirate Bay torrent tracker can trigger a chain of mischievous activities on your computer, like injecting content from the attacker into high-profile web sites such as Wikipedia, Google and Yandex Search or by stealing cryptocurrency.

If the victim goes to Wikipedia, the malware's injection mechanism inserts a fake donation banner that states Wikipedia now accepts cryptocurrency donations and provides two cryptocurrency addresses to send "donate" to.

One wallet is for Bitcoin and at the time of writing had $70 worth of cryptocurrency. The other is for Ethereum and had a balance of almost ETH 4.6, or about $600.

A third bitcoin wallet address was found in the scripts downloaded by the malware, with a balance of $13. This does not appear to be included in the Wikipedia donation scam.

All three wallets are part of another malicious task, meant to replace a Bitcoin and Ethereum addresses found on web pages. This tactic does not show any sign that could alert the user of the trick. Because the wallets are a large string of random characters, most users will likely not notice the difference between what they expected to copy and the pasted result.

Read in full https://www.bleepingcomputer.com/news/security/fake-movie-file-infects-pc-to-steal-cryptocurrency-poison-google-results/

[1714303091]

1714303091

[1714303091]

1714303091

[1714303091]

1714303091

[1714303091]

1714303091

[1714303091]

1714303091

[Artemis3]

Today is a good day to drop windows. There are plenty of nice alternatives, do not delay if you don't want nasty surprises, use Linux: https://distrowatch.com/

Of course, as I explained elsewhere, your leisure activities and your money should be separate. So if you insist in keeping a "windows gaming computer", at least install Linux in another one and keep your serious stuff there.

[hatshepsut93]

Today is a good day to drop windows. There are plenty of nice alternatives, do not delay if you don't want nasty surprises, use Linux: https://distrowatch.com/

Linux isn't really that much more secure than windows, a similar attack could easily be executed against Linux desktops. However, Linux is only used on a small amount of home machines, so malware authors don't bother with it.

Of course, as I explained elsewhere, your leisure activities and your money should be separate. So if you insist in keeping a "windows gaming computer", at least install Linux in another one and keep your serious stuff there.

The only excuse to not have a cold storage setup is if you have a tiny wallet for daily spendings, everything else is just a stupid risk. And people who want to pirate should get a dedicated device for that, instead of using the same one for both piracy and work or finance.

[jrrsparkles]

Evolution of scammers when the technology evolves.

But the people who uses pirated version of any software or movies found on the internet are always have the risk of something goes against it,so better use separate PC of crypto wallets and anohter one for watching movies.

[care2yak]

or better yet, just don't pirate material. go to safe streaming sites if you want to keep malware away from your device.

[killat]

Hackers become smarter every day and their stealing methods more complex. If you want to sleep well knowing your funds are totally safe just buy a hardware wallet and you'll eliminate the risk of being hacked.

[Kakmakr]

You can easily just boot up with "Tails" and quickly do your Crypto currency stuff, if you are using Windows as a Operating system. <On the same computer> 

This is actually not something that would simply steal your funds by just downloading the shortcut, but rather a Social engineered method to trick you into believing that you are donating to Wikipedia. <People will only lose the donations and not all their coins in their wallet>

Thanks OP, for the advanced warning. 

[Herbert2020]

Today is a good day to drop windows. There are plenty of nice alternatives, do not delay if you don't want nasty surprises, use Linux: https://distrowatch.com/

Of course, as I explained elsewhere, your leisure activities and your money should be separate. So if you insist in keeping a "windows gaming computer", at least install Linux in another one and keep your serious stuff there.

this is a very common misunderstanding that people think if they use Linux they will magically be safe. but that is not the case at all. the only difference between Windows and Linux that makes Linus safer is that Linux is open source and when security holes are found in it, they are patched fast while Windows security holes take a long time to be patched and Microsoft usually leaves some backdoors intentionally.

otherwise if you want to be safe to you have to use cold storage and it doesn't make much of a difference what OS you use for it then.

[tanoe]

Today is a good day to drop windows. There are plenty of nice alternatives, do not delay if you don't want nasty surprises, use Linux: https://distrowatch.com/

Of course, as I explained elsewhere, your leisure activities and your money should be separate. So if you insist in keeping a "windows gaming computer", at least install Linux in another one and keep your serious stuff there.

this is a very common misunderstanding that people think if they use Linux they will magically be safe. but that is not the case at all. the only difference between Windows and Linux that makes Linus safer is that Linux is open source and when security holes are found in it, they are patched fast while Windows security holes take a long time to be patched and Microsoft usually leaves some backdoors intentionally.

otherwise if you want to be safe to you have to use cold storage and it doesn't make much of a difference what OS you use for it then.

Maybe a little safer than windows, but not too safe.

Whatever they find and want to download on the internet, they have given hack hackers into the computer systems we use. better try using a different device for work and for entertainment.

[LFC_Bitcoin]

Anybody who keeps their bitcoin’s on a computer where they download files is awking for trouble. Sure it’s ok to use it for browsing etc but you are seriously asking for trouble if you even think about downloading torrents.

There is no cure for idiocy.

[kelz1]

Tails is more crypto friendly as it has integrated with deeponion the privacy focused coin. Good to know about this windows scam, we should check those bitcoin addresses and see how many bitcoins they net

[The Sceptical Chymist]

or better yet, just don't pirate material. go to safe streaming sites if you want to keep malware away from your device.

That's the best advice to give, though I have no confidence whatsoever that people will follow it given how easy it is to pirate stuff.  Me, I'm happy with old-school methods of entertainment--buying DVDs or just watching what's on Youtube. 

That would be something if Wikipedia actually did accept crypto for donations, and I'm really surprised that they don't.  I've seen their genuine banner, and it always made me scratch my head that they don't take bitcoin at least.

Evolution of scammers when the technology evolves.

Yep, and for me as a relatively non-techie guy, this scares the pants off of me.  Fortunately for me I don't often download legitimate programs much less some sketchy torrent files that I wouldn't be able to protect myself against.  I'm sure more computer literate people would be able to, but if I relied on those in order to watch movies I'd be in serious trouble.  Thanks but no thanks.

[Juggy777]

Anybody who keeps their bitcoin’s on a computer where they download files is awking for trouble. Sure it’s ok to use it for browsing etc but you are seriously asking for trouble if you even think about downloading torrents.

There is no cure for idiocy.

Hey I believe not all can use separate devices for both as not all will have the luxury of extra cash, hence these people are often the soft targets. I believe in a situation like this one should install good antivirus protection, and make sure to daily run the antivirus and if the antivirus says it’s risky leave the file or site instantly. Also it’s pertinent to note that in today’s digital world I would advise to stream online, rather than download files which may be harmful for your system.

Yep, and for me as a relatively non-techie guy, this scares the pants off of me.

This is why I stress on having a good antivirus program installed, most of these now come with search engine tools which shows whether the site is safe or not, also they’ll scan your file and help you be safe. I feel you should consider getting one, and it’s just not non techie guys, remember the recent Electrum wallet scam so many fell for it.

[dothebeats]

Today is a good day to drop windows. There are plenty of nice alternatives, do not delay if you don't want nasty surprises, use Linux: https://distrowatch.com/

Of course, as I explained elsewhere, your leisure activities and your money should be separate. So if you insist in keeping a "windows gaming computer", at least install Linux in another one and keep your serious stuff there.

Another Linux elitist. This is easily preventable if the user don't really play with torrents and keep it clean on their computer, doing regular scans and avoiding downloading on direct links, especially on websites that are plagued with ads that would surely contain adware/malware on the side. I keep my games, downloaded files, and a lot more stuff in the same computer but I haven't encountered any such thing, not even once.

And I'm running Windows, and you should understand that not all are familiar with the UI of Linux.

[gentlemand]

And I'm running Windows, and you should understand that not all are familiar with the UI of Linux.

I think Linux is painfully clunky shit and I'd sooner give up computing than have to use that on an every day basis. I don't understand why it has to be so crappy after all these years and I don't care either.

And anyone who says 'yeah, but' is welcome to come and sit on my lap and operate it for me via my voice commands. Until then, sod off.

Hey I believe not all can use separate devices for both as not all will have the luxury of extra cash, hence these people are often the soft targets.

You can get a fully functioning second hand computer for $40 or less if you're totally unfussy. Obviously that's still a lot of money in some parts of the world. If you're in a bit where it isn't consider it an investment in your own future.

[1Referee]

Anybody who keeps their bitcoin’s on a computer where they download files is awking for trouble. Sure it’s ok to use it for browsing etc but you are seriously asking for trouble if you even think about downloading torrents.

There is no cure for idiocy.

People somehow blindly assume that when they use a desktop client, they can't be hacked anymore, because hey, using Bitcoin Core as the most secure client (or pretty much any other reputable desktop client) will make sure their funds are safe. It's like folks in Africa believing that if they expose themselves to certain substances, that they can't be shot or stabbed anymore. It's so retarded, that you can't even think of a way to help them other than having them get rekt/hurt first.

The deeper we dig into mainstream adoption, the worse the people entering crypto become, and we have seen that in 2017/2018 already.

This is why banks and payment services such as PayPal will always have a dominant position in the world economy. People can't take care of their own finances. They need a central party to do it for them, and that can reverse transactions in case of malicious activity.

[DeathAngel]

I see so many stories of people getting hacked & having their wallets emptied. It’s sad but these guys really need to educate themselves.

You wouldn’t go out on the town with your wallet open constantly & show people what hou have on you.

Seriously, offline cold storage damn it.

[bbc.reporter]

or better yet, just don't pirate material. go to safe streaming sites if you want to keep malware away from your device.

Nothing beats free however hehehe. There are also no safe streaming sites except the paid sites similar to Netflix.

In any case, you might have missed what bittorrent mainly is. It is a peer to peer file sharing network for anything. Its use for good must be encouraged.

[Artemis3]

Today is a good day to drop windows. There are plenty of nice alternatives, do not delay if you don't want nasty surprises, use Linux: https://distrowatch.com/

Of course, as I explained elsewhere, your leisure activities and your money should be separate. So if you insist in keeping a "windows gaming computer", at least install Linux in another one and keep your serious stuff there.

this is a very common misunderstanding that people think if they use Linux they will magically be safe. but that is not the case at all. the only difference between Windows and Linux that makes Linus safer is that Linux is open source and when security holes are found in it, they are patched fast while Windows security holes take a long time to be patched and Microsoft usually leaves some backdoors intentionally.

otherwise if you want to be safe to you have to use cold storage and it doesn't make much of a difference what OS you use for it then.

Its not a misunderstanding, but I didn't go into details in regards of the audience. The truth of the matter is that there are far less vectors for infection in Linux/BSDs. For starters windows binaries do nothing there, and people using Linux don't (usually) download binaries from web sites, they use their official repository packages or source compile. There are also several bad habits windows users have that are simply not done in Linux.

Yes, you are not totally safe, but its never on the same level. Some windows users like to pat themselves on that false premise: that the only reason Linux doesn't have as much malware as windows is because its not popular. But you are disregarding the infection vectors, which in Linux are very few and rare, but windows has been in all its history a never-ending security nightmare full of bugs and exploits and many don't even require user intervention.

If your malware ridden windows happens to have been infected with a keylogger or similar, the moment you activate your cold wallet you can kiss your money goodbye. A cold wallet should always be handled from a live iso, like Kakmakr suggests.

And I'm running Windows, and you should understand that not all are familiar with the UI of Linux.

So? To each their own. The "UI" of "Linux" doesn't even exist, In Linux you can choose to use from many UIs (including several windows/osx clones) or none at all. You are just too lazy to learn new things, but that's your choice. Don't assume everyone is as lazy as you are. Its everyone's decision to take the advice or ignore it.

or better yet, just don't pirate material. go to safe streaming sites if you want to keep malware away from your device.

That's the best advice to give, though I have no confidence whatsoever that people will follow it given how easy it is to pirate stuff.  Me, I'm happy with old-school methods of entertainment--buying DVDs or just watching what's on Youtube.

In this case they used a "movie" as bait, but it could have been anything like "free game/video player/windows cleaner" whatever. Its something about habits and culture, cultivated by that OS that happens to be "popular" but is also the most dangerous.

For example this case: I GOT HACKED AND LOST 1 MILLION.

[darklus123]

That is the main reason why  I usually put some amountd that i will be using on a exchanger site especially because I am using only one pc for all my activities.

The larger part of my amount are of coursed being stored on a cold wallet. Ill just have to try mobile wallet as an alternative