Bitcoin Forum
March 29, 2024, 10:02:56 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: GIFCOIN - Spreading Malware, copying an already existing project.  (Read 214 times)
JeromeTash (OP)
Legendary
*
Offline Offline

Activity: 2100
Merit: 1203


Heisenberg


View Profile
March 28, 2019, 05:32:53 PM
Last edit: May 14, 2023, 05:10:39 PM by JeromeTash
Merited by tvplus006 (1)
 #1

What happened: Sharing a link to a file claiming that it's their wallet but it has a key logger embedded in it. No working website, No whitepaper, No Team.
They are also copying and already existing project also called GIFcoin.

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=1753077
Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=2434948
Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=2176945

ANN: https://bitcointalk.org/index.php?topic=5125335.0
Archived: http://archive.is/BwPaf

ANN: https://bitcointalk.org/index.php?topic=5125333.0
Archived: http://archive.is/Gro9m

ANN: https://bitcointalk.org/index.php?topic=5125322.0
Archived: http://archive.is/JKkxS

Website: http://gifcoin.ml/
Archived:
http://archive.is/shlRD

"Comming"Huh



Github Profie: https://github.com/gifcoin2019
Archived: http://archive.is/JSOlv

KeyLogger

Results from Virustotal show a detection of a keylogger in the file which is hosted on their github profile.

File Link: https://github.com/gifcoin2019/GifcoinMN/releases/download/v1.0.0.0/Gifcoin.qt-windows.zip
Virus total results: https://www.virustotal.com/gui/file/2291a75d0c66b1baf487ece525157c6bfce0859706952c9c8e33b51057287159/detection



Additional Notes
The scammer seems to be using so many profiles to make ANNs so that unsuspecting members get to download the wallets quick.

Original GIFCOIN Project

- Website: https://www.gifcoin.io/
- ANN: https://bitcointalk.org/index.php?topic=2785607.0

█████████████████████████████
█████████▀     ▄██ ▀▀████████
█████▀ ▀██▀▀▀▀▀▀▀▀▀▄▄  ▀█████
████  ▄▀▀▄█████████▄▀▀▄██████
███▄▄█▀▄██████▀ ▀████▄▀█▀ ▀██
██▀▀█▌▐█   ▀▀▀   █████▌▐█  ██
██  █ ███▄▄▄      ▀▀▀▀█ █  ██
██  █▌▐████▌         ▄▌▐█████
███▄██▄▀█████▄   ▄▄██▀▄█ ▀███
████▀ ▀▄▄▀███▀    █▀▄▄▀  ████
█████▄  ▀▀▄▄▄▄▄▄▄▄▄██▄ ▄█████
████████▄▄██       ██████████
█████████████████████████████
         ▄██▄     ▄
        █████   ▄████
       █████▌  █████▌
      ██████████████
     ███▀█████▀██▀████▄
   ▄▄▄▄▄██████████████
 ▄▄██████▄██▄▄██████▄█▀
▐██████████████████████▄
 ▀████████         ████▀
   ▀███████▄     ▄███▀
    ███████████████▀
  ▄█████████████████
▄▄███████████████████▄
               ▄███▄
            ▄████████

        ▄▄██████████
       █▀▀▀██▀▀▀████
      ███████████
    ▀▀▀████████████
      ▀███████████▀
      ▄███████████▄
 ▄
    ▀▀▀▀▀▀▀▀███▀▀   ▄
▀▀█▀▀
███████████▀▀▀█▀▀
    ████████████████
    ████████████████
▄▄▄▄▄▄███████████████▄▄▄▄▄▄
.
..PLAY NOW..
       ▄▄▄▄ ▄▄█████▄
     ████████████████
 ▄▄▄█████████████████████▄
███████████████████████████▄▄
▀█████████████████████████████
  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ▄█▄      ██
    ▄█▄▄█▄▄█▄          ▄▄
    ▄▄▄███▄▄▄    ▄ ▄ ▄ ▀▀
     ▀ ▄█▄ ▀  ▀▄█ ▀█▀ █▄▀
    ▄▄  ▀     ▀▀▀▀███▀▀▀▀
    ▀▀        ▀██▀▀█▀▀██▀
         ██   ▀ ▀▄▀█▀▄▀ ▀
1711706576
Hero Member
*
Offline Offline

Posts: 1711706576

View Profile Personal Message (Offline)

Ignore
1711706576
Reply with quote  #2

1711706576
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711706576
Hero Member
*
Offline Offline

Posts: 1711706576

View Profile Personal Message (Offline)

Ignore
1711706576
Reply with quote  #2

1711706576
Report to moderator
1711706576
Hero Member
*
Offline Offline

Posts: 1711706576

View Profile Personal Message (Offline)

Ignore
1711706576
Reply with quote  #2

1711706576
Report to moderator
Avirunes
Legendary
*
Offline Offline

Activity: 3094
Merit: 1468


View Profile WWW
March 28, 2019, 05:44:04 PM
 #2

After watching those threads, it seems like he used further more accounts to bump the thread. I will take my time and review each and will tag accordingly. For the meantime, I will tag these three accounts.
JeromeTash (OP)
Legendary
*
Offline Offline

Activity: 2100
Merit: 1203


Heisenberg


View Profile
March 29, 2019, 10:13:13 PM
 #3

Thanks for tagging them.
Looks like the sacmmer has gone into hidding after getting exposed.
2 of the threads got deleted too.

█████████████████████████████
█████████▀     ▄██ ▀▀████████
█████▀ ▀██▀▀▀▀▀▀▀▀▀▄▄  ▀█████
████  ▄▀▀▄█████████▄▀▀▄██████
███▄▄█▀▄██████▀ ▀████▄▀█▀ ▀██
██▀▀█▌▐█   ▀▀▀   █████▌▐█  ██
██  █ ███▄▄▄      ▀▀▀▀█ █  ██
██  █▌▐████▌         ▄▌▐█████
███▄██▄▀█████▄   ▄▄██▀▄█ ▀███
████▀ ▀▄▄▀███▀    █▀▄▄▀  ████
█████▄  ▀▀▄▄▄▄▄▄▄▄▄██▄ ▄█████
████████▄▄██       ██████████
█████████████████████████████
         ▄██▄     ▄
        █████   ▄████
       █████▌  █████▌
      ██████████████
     ███▀█████▀██▀████▄
   ▄▄▄▄▄██████████████
 ▄▄██████▄██▄▄██████▄█▀
▐██████████████████████▄
 ▀████████         ████▀
   ▀███████▄     ▄███▀
    ███████████████▀
  ▄█████████████████
▄▄███████████████████▄
               ▄███▄
            ▄████████

        ▄▄██████████
       █▀▀▀██▀▀▀████
      ███████████
    ▀▀▀████████████
      ▀███████████▀
      ▄███████████▄
 ▄
    ▀▀▀▀▀▀▀▀███▀▀   ▄
▀▀█▀▀
███████████▀▀▀█▀▀
    ████████████████
    ████████████████
▄▄▄▄▄▄███████████████▄▄▄▄▄▄
.
..PLAY NOW..
       ▄▄▄▄ ▄▄█████▄
     ████████████████
 ▄▄▄█████████████████████▄
███████████████████████████▄▄
▀█████████████████████████████
  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ▄█▄      ██
    ▄█▄▄█▄▄█▄          ▄▄
    ▄▄▄███▄▄▄    ▄ ▄ ▄ ▀▀
     ▀ ▄█▄ ▀  ▀▄█ ▀█▀ █▄▀
    ▄▄  ▀     ▀▀▀▀███▀▀▀▀
    ▀▀        ▀██▀▀█▀▀██▀
         ██   ▀ ▀▄▀█▀▄▀ ▀
JeromeTash (OP)
Legendary
*
Offline Offline

Activity: 2100
Merit: 1203


Heisenberg


View Profile
March 29, 2019, 10:30:39 PM
 #4

Another Profile just popped off the radar
Profile: https://bitcointalk.org/index.php?action=profile;u=2370023
ANN: https://bitcointalk.org/index.php?topic=5125896
Archived: http://archive.is/2A5Il

OP is promoting another project too that i believe is scam.
ANN: https://bitcointalk.org/index.php?topic=5125956.
Archived: http://archive.is/eOiMj

Website: https://yepcoin.fr/
Archived: http://archive.is/Xwgsv

According to the website, it looks like they are planning to release a wallet which i beleive could the the same malware-Keylogger store. I will keep my eyes peeled and look it to it more.

█████████████████████████████
█████████▀     ▄██ ▀▀████████
█████▀ ▀██▀▀▀▀▀▀▀▀▀▄▄  ▀█████
████  ▄▀▀▄█████████▄▀▀▄██████
███▄▄█▀▄██████▀ ▀████▄▀█▀ ▀██
██▀▀█▌▐█   ▀▀▀   █████▌▐█  ██
██  █ ███▄▄▄      ▀▀▀▀█ █  ██
██  █▌▐████▌         ▄▌▐█████
███▄██▄▀█████▄   ▄▄██▀▄█ ▀███
████▀ ▀▄▄▀███▀    █▀▄▄▀  ████
█████▄  ▀▀▄▄▄▄▄▄▄▄▄██▄ ▄█████
████████▄▄██       ██████████
█████████████████████████████
         ▄██▄     ▄
        █████   ▄████
       █████▌  █████▌
      ██████████████
     ███▀█████▀██▀████▄
   ▄▄▄▄▄██████████████
 ▄▄██████▄██▄▄██████▄█▀
▐██████████████████████▄
 ▀████████         ████▀
   ▀███████▄     ▄███▀
    ███████████████▀
  ▄█████████████████
▄▄███████████████████▄
               ▄███▄
            ▄████████

        ▄▄██████████
       █▀▀▀██▀▀▀████
      ███████████
    ▀▀▀████████████
      ▀███████████▀
      ▄███████████▄
 ▄
    ▀▀▀▀▀▀▀▀███▀▀   ▄
▀▀█▀▀
███████████▀▀▀█▀▀
    ████████████████
    ████████████████
▄▄▄▄▄▄███████████████▄▄▄▄▄▄
.
..PLAY NOW..
       ▄▄▄▄ ▄▄█████▄
     ████████████████
 ▄▄▄█████████████████████▄
███████████████████████████▄▄
▀█████████████████████████████
  ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ▄█▄      ██
    ▄█▄▄█▄▄█▄          ▄▄
    ▄▄▄███▄▄▄    ▄ ▄ ▄ ▀▀
     ▀ ▄█▄ ▀  ▀▄█ ▀█▀ █▄▀
    ▄▄  ▀     ▀▀▀▀███▀▀▀▀
    ▀▀        ▀██▀▀█▀▀██▀
         ██   ▀ ▀▄▀█▀▄▀ ▀
Hellangel359
Jr. Member
*
Offline Offline

Activity: 42
Merit: 1


View Profile
March 31, 2019, 01:17:43 PM
 #5

Thank you. I will stay away that scammer.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!