GIFCOIN - Spreading Malware, copying an already existing project.

[JeromeTash]

What happened: Sharing a link to a file claiming that it's their wallet but it has a key logger embedded in it. No working website, No whitepaper, No Team.
They are also copying and already existing project also called GIFcoin.

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=1753077
Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=2434948
Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=2176945

ANN: https://bitcointalk.org/index.php?topic=5125335.0
Archived: http://archive.is/BwPaf

ANN: https://bitcointalk.org/index.php?topic=5125333.0
Archived: http://archive.is/Gro9m

ANN: https://bitcointalk.org/index.php?topic=5125322.0
Archived: http://archive.is/JKkxS

Website: http://gifcoin.ml/
Archived: http://archive.is/shlRD

"Comming"



Github Profie: https://github.com/gifcoin2019
Archived: http://archive.is/JSOlv

KeyLogger

Results from Virustotal show a detection of a keylogger in the file which is hosted on their github profile.

File Link: https://github.com/gifcoin2019/GifcoinMN/releases/download/v1.0.0.0/Gifcoin.qt-windows.zip
Virus total results: https://www.virustotal.com/gui/file/2291a75d0c66b1baf487ece525157c6bfce0859706952c9c8e33b51057287159/detection



Additional Notes
The scammer seems to be using so many profiles to make ANNs so that unsuspecting members get to download the wallets quick.

Original GIFCOIN Project

- Website: https://www.gifcoin.io/
- ANN: https://bitcointalk.org/index.php?topic=2785607.0

[1715540453]

1715540453

[1715540453]

1715540453

[1715540453]

1715540453

[1715540453]

1715540453

[Avirunes]

After watching those threads, it seems like he used further more accounts to bump the thread. I will take my time and review each and will tag accordingly. For the meantime, I will tag these three accounts.

[JeromeTash]

Thanks for tagging them.
Looks like the sacmmer has gone into hidding after getting exposed.
2 of the threads got deleted too.

[JeromeTash]

Another Profile just popped off the radar
Profile: https://bitcointalk.org/index.php?action=profile;u=2370023
ANN: https://bitcointalk.org/index.php?topic=5125896
Archived: http://archive.is/2A5Il

OP is promoting another project too that i believe is scam.
ANN: https://bitcointalk.org/index.php?topic=5125956.
Archived: http://archive.is/eOiMj

Website: https://yepcoin.fr/
Archived: http://archive.is/Xwgsv

According to the website, it looks like they are planning to release a wallet which i beleive could the the same malware-Keylogger store. I will keep my eyes peeled and look it to it more.

[Hellangel359]

Thank you. I will stay away that scammer.