Bitcoin Forum
April 25, 2024, 11:33:28 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [SCAM] s4fe.world client contains ransomware/adware  (Read 284 times)
nutildah (OP)
Legendary
*
Offline Offline

Activity: 2968
Merit: 7940



View Profile WWW
February 15, 2019, 09:12:38 AM
Last edit: September 29, 2020, 08:50:08 PM by nutildah
Merited by DireWolfM14 (1)
 #1

Removed on behalf of the actual team's request -- they were impersonated by scammers.

▄▄███████▄▄
▄██████████████▄
▄██████████████████▄
▄████▀▀▀▀███▀▀▀▀█████▄
▄█████████████▄█▀████▄
███████████▄███████████
██████████▄█▀███████████
██████████▀████████████
▀█████▄█▀█████████████▀
▀████▄▄▄▄███▄▄▄▄████▀
▀██████████████████▀
▀███████████████▀
▀▀███████▀▀
.
 MΞTAWIN  THE FIRST WEB3 CASINO   
.
.. PLAY NOW ..
1714044808
Hero Member
*
Offline Offline

Posts: 1714044808

View Profile Personal Message (Offline)

Ignore
1714044808
Reply with quote  #2

1714044808
Report to moderator
1714044808
Hero Member
*
Offline Offline

Posts: 1714044808

View Profile Personal Message (Offline)

Ignore
1714044808
Reply with quote  #2

1714044808
Report to moderator
If you want to be a moderator, report many posts with accuracy. You will be noticed.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714044808
Hero Member
*
Offline Offline

Posts: 1714044808

View Profile Personal Message (Offline)

Ignore
1714044808
Reply with quote  #2

1714044808
Report to moderator
1714044808
Hero Member
*
Offline Offline

Posts: 1714044808

View Profile Personal Message (Offline)

Ignore
1714044808
Reply with quote  #2

1714044808
Report to moderator
yogg
Legendary
*
Offline Offline

Activity: 2464
Merit: 3158



View Profile WWW
February 16, 2019, 11:53:38 AM
 #2

I cannot find the software on their website. Did they remove it ?
I'd like to run that in a sandbox. Do you still have the file by any chance ?

Left a trust feedback to that profile.
nutildah (OP)
Legendary
*
Offline Offline

Activity: 2968
Merit: 7940



View Profile WWW
February 16, 2019, 02:37:25 PM
Last edit: February 16, 2019, 03:08:35 PM by nutildah
 #3

I cannot find the software on their website. Did they remove it ?
I'd like to run that in a sandbox. Do you still have the file by any chance ?

Left a trust feedback to that profile.

Yep. I still have it. Furthermore, my Windows Defender just told me there was a CoinMiner "allowed" on my computer. If you want me to upload the original zip file let me know.

Another thing: the software used to start automatically downloading to the computer of the website's visitor. This also seems to have stopped.

I also left them a negative trust.

▄▄███████▄▄
▄██████████████▄
▄██████████████████▄
▄████▀▀▀▀███▀▀▀▀█████▄
▄█████████████▄█▀████▄
███████████▄███████████
██████████▄█▀███████████
██████████▀████████████
▀█████▄█▀█████████████▀
▀████▄▄▄▄███▄▄▄▄████▀
▀██████████████████▀
▀███████████████▀
▀▀███████▀▀
.
 MΞTAWIN  THE FIRST WEB3 CASINO   
.
.. PLAY NOW ..
IconFirm
Hero Member
*****
Offline Offline

Activity: 1438
Merit: 574


Always ask questions. #StandWithHongKong


View Profile WWW
February 16, 2019, 04:01:28 PM
 #4

I wasn't going to tag him as maybe he removed the malware in the wallet, but as he has now posted a stupid retaliatory scam post against nutildah - I have now tagged him.

Good work nutildah.

PIA went evil: https://bitcointalk.org/index.php?topic=5203968.msg53160131#msg53160131 Unofficial & Uncensored SYSCOIN thread: https://bitcointalk.org/index.php?topic=4748031.0    Do not trust Yobit/HitBTC/BiteBTC/coinsbit/p2pb2b/Mercatox/C-cex/Poloniex/WEX/KuCoin/LiveCoin/TheRockTrading/Bitfinex/ADAB/Okex/TradeSatoshi/Gate.io/Changelly/Freewallet.org/crex24 scam exchanges or ICO's by known scammers like HashCoins/Ambisafe/Bountyhive - they WILL scam you! Use diligence & research. Buy coins, sell coins - don't invest in stupid shit. If your questions aren't answered - don't touch it.
DireWolfM14
Copper Member
Legendary
*
Offline Offline

Activity: 2170
Merit: 4237


Join the world-leading crypto sportsbook NOW!


View Profile WWW
February 16, 2019, 04:20:19 PM
 #5

I wasn't going to tag him as maybe he removed the malware in the wallet, but as he has now posted a stupid retaliatory scam post against nutildah - I have now tagged him.

Good work nutildah.

I reported him for plagiarism for posting that stupidity.  His days here are numbered.

  ▄▄███████▄███████▄▄▄
 █████████████
▀▀▀▀▀▀████▄▄
███████████████
       ▀▀███▄
███████████████
          ▀███
 █████████████
             ███
███████████▀▀               ███
███                         ███
███                         ███
 ███                       ███
  ███▄                   ▄███
   ▀███▄▄             ▄▄███▀
     ▀▀████▄▄▄▄▄▄▄▄▄████▀▀
         ▀▀▀███████▀▀▀
░░░████▄▄▄▄
░▄▄░
▄▄███████▄▀█████▄▄
██▄████▌▐█▌█████▄██
████▀▄▄▄▌███░▄▄▄▀████
██████▄▄▄█▄▄▄██████
█░███████░▐█▌░███████░█
▀▀██▀░██░▐█▌░██░▀██▀▀
▄▄▄░█▀░█░██░▐█▌░██░█░▀█░▄▄▄
██▀░░░░▀██░▐█▌░██▀░░░░▀██
▀██
█████▄███▀▀██▀▀███▄███████▀
▀███████████████████████▀
▀▀▀▀███████████▀▀▀▀
▄▄██████▄▄
▀█▀
█  █▀█▀
  ▄█  ██  █▄  ▄
█ ▄█ █▀█▄▄█▀█ █▄ █
▀▄█ █ ███▄▄▄▄███ █ █▄▀
▀▀ █    ▄▄▄▄    █ ▀▀
   ██████   █
█     ▀▀     █
▀▄▀▄▀▄▀▄▀▄▀▄
▄ ██████▀▀██████ ▄
▄████████ ██ ████████▄
▀▀███████▄▄███████▀▀
▀▀▀████████▀▀▀
█████████████LEADING CRYPTO SPORTSBOOK & CASINO█████████████
MULTI
CURRENCY
1500+
CASINO GAMES
CRYPTO EXCLUSIVE
CLUBHOUSE
FAST & SECURE
PAYMENTS
.
..PLAY NOW!..
Theb
Hero Member
*****
Offline Offline

Activity: 1680
Merit: 655


View Profile
February 16, 2019, 06:41:28 PM
 #6

Tagged him as well, I got confused early on as I have read his scam accusation against you first before reading yours. Although right away I know from the start that it was fake as his accusations don't have any proof and his account has a -4/+0 on it (before I added another one) so I know this was just a retaliation against what you did to his account. Thank you for the warning.

..bustadice..         ▄▄████████████▄▄
     ▄▄████████▀▀▀▀████████▄▄
   ▄███████████    ███████████▄
  █████    ████▄▄▄▄████    █████
 ██████    ████████▀▀██    ██████
██████████████████   █████████████
█████████████████▌  ▐█████████████
███    ██████████   ███████    ███
███    ████████▀   ▐███████    ███
██████████████      ██████████████
██████████████      ██████████████
 ██████████████▄▄▄▄██████████████
  ▀████████████████████████████▀
                     ▄▄███████▄▄
                  ▄███████████████▄
   ███████████  ▄████▀▀       ▀▀████▄
               ████▀      ██     ▀████
 ███████████  ████        ██       ████
             ████         ██        ████
███████████  ████     ▄▄▄▄██        ████
             ████     ▀▀▀▀▀▀        ████
 ███████████  ████                 ████
               ████▄             ▄████
   ███████████  ▀████▄▄       ▄▄████▀
                  ▀███████████████▀
                     ▀▀███████▀▀
           ▄██▄
           ████
            ██
            ▀▀
 ▄██████████████████████▄
██████▀▀██████████▀▀██████
█████    ████████    █████
█████▄  ▄████████▄  ▄█████
██████████████████████████
██████████████████████████
    ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ████████████
......Play......
nutildah (OP)
Legendary
*
Offline Offline

Activity: 2968
Merit: 7940



View Profile WWW
February 17, 2019, 04:58:35 AM
 #7

Thanks for the help guys.

Meanwhile on their Telegram they are carrying on like its business as usual, but at least they won't be able to promote their scam here any more.

▄▄███████▄▄
▄██████████████▄
▄██████████████████▄
▄████▀▀▀▀███▀▀▀▀█████▄
▄█████████████▄█▀████▄
███████████▄███████████
██████████▄█▀███████████
██████████▀████████████
▀█████▄█▀█████████████▀
▀████▄▄▄▄███▄▄▄▄████▀
▀██████████████████▀
▀███████████████▀
▀▀███████▀▀
.
 MΞTAWIN  THE FIRST WEB3 CASINO   
.
.. PLAY NOW ..
nutildah (OP)
Legendary
*
Offline Offline

Activity: 2968
Merit: 7940



View Profile WWW
February 23, 2019, 06:38:16 AM
 #8

I just realized this scam was trying to piggyback off of another project of the same name, but with a different website.

Real project website: https://s4fe.io

Scam project website: https://s4fe.world

I think its dead because the scam website url now redirects to the real website url.

▄▄███████▄▄
▄██████████████▄
▄██████████████████▄
▄████▀▀▀▀███▀▀▀▀█████▄
▄█████████████▄█▀████▄
███████████▄███████████
██████████▄█▀███████████
██████████▀████████████
▀█████▄█▀█████████████▀
▀████▄▄▄▄███▄▄▄▄████▀
▀██████████████████▀
▀███████████████▀
▀▀███████▀▀
.
 MΞTAWIN  THE FIRST WEB3 CASINO   
.
.. PLAY NOW ..
rhomelmabini
Hero Member
*****
Offline Offline

Activity: 2002
Merit: 578


View Profile
June 29, 2020, 03:59:48 PM
Merited by nutildah (1)
 #9

Forgive my ingress and for necro bumping this thread but I think my content will still be relevant since this is connected to them at all. Lately, I've stumbled upon their thread and as I was to search if they have been here since there project's timeline on CMC was dated back 2018 and glad I able to search this thread of @nutildah. Mind if you'll tag them again. Just what a comeback they had!

Here's the new thread with new account of s4fe: https://bitcointalk.org/index.php?topic=5258049.0

nutildah (OP)
Legendary
*
Offline Offline

Activity: 2968
Merit: 7940



View Profile WWW
June 29, 2020, 04:38:29 PM
 #10

Forgive my ingress and for necro bumping this thread but I think my content will still be relevant since this is connected to them at all. Lately, I've stumbled upon their thread and as I was to search if they have been here since there project's timeline on CMC was dated back 2018 and glad I able to search this thread of @nutildah. Mind if you'll tag them again. Just what a comeback they had!

Here's the new thread with new account of s4fe: https://bitcointalk.org/index.php?topic=5258049.0

I sent you a merit for your use of the word "ingress," which is not in my own vocabulary, but I imagine you used it correctly.

The thread I reported for this scam accusation contained links to an unofficial URL that, when visited, began auto-downloading a malware-laced QT wallet onto the visitor's computer. I remember it quite well because they threw a scam accusation against me that was actually plagiarized from another scam accusation (lol), so the OP was banned. Then they redirected all their links to the official website, which is the only reason I can imagine why the thread wasn't taken down by moderators.

The new thread you mention also directs to the official website (s4fe.io), so maybe it is actually the team relaunching their ANN for what appears to be the 3rd time. Their ICO is long over and they are just directing people to exchanges, so I don't see the harm in this new version. I did report 3 of their posts, including the plagiarized one that you noticed. That was weird and fruitless for the person that merited it.

▄▄███████▄▄
▄██████████████▄
▄██████████████████▄
▄████▀▀▀▀███▀▀▀▀█████▄
▄█████████████▄█▀████▄
███████████▄███████████
██████████▄█▀███████████
██████████▀████████████
▀█████▄█▀█████████████▀
▀████▄▄▄▄███▄▄▄▄████▀
▀██████████████████▀
▀███████████████▀
▀▀███████▀▀
.
 MΞTAWIN  THE FIRST WEB3 CASINO   
.
.. PLAY NOW ..
rhomelmabini
Hero Member
*****
Offline Offline

Activity: 2002
Merit: 578


View Profile
June 30, 2020, 01:13:43 AM
 #11

I sent you a merit for your use of the word "ingress," which is not in my own vocabulary, but I imagine you used it correctly.
Don't mention it I am just still learning as well and improving my vocabulary.

Their ICO is long over and they are just directing people to exchanges, so I don't see the harm in this new version. I did report 3 of their posts, including the plagiarized one that you noticed. That was weird and fruitless for the person that merited it.
Yeah, but just sharing it here if ever they did way back then again. Well, thank you for that too it's really weird seeing those kind of things.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!