Bitcoin Forum
June 26, 2024, 11:51:36 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: MASK - possibly malware  (Read 243 times)
marlboroza (OP)
Legendary
*
Offline Offline

Activity: 1932
Merit: 2270


View Profile
May 04, 2019, 09:56:49 PM
Merited by ICOEthics (5)
 #1

Announcement thread: [ANN] MASK [POW][CRYPTONIGHT]: THE MOST PRIVATE BLOCKCHAIN WITH 60 M
Archive: http://archive.is/xqMNX
Announced by: https://bitcointalk.org/index.php?action=profile;u=2593898

Virustotal showed malicious activity in their windows wallet:



Reporting this to moderator
morvillz7z
Legendary
*
Offline Offline

Activity: 2226
Merit: 2062


Join the world-leading crypto sportsbook NOW!


View Profile
May 04, 2019, 10:09:18 PM
 #2

That Russian dude again with his lame attempts to spread malicious wallets. I've lost count of all his fake ANNs.

This one, for example, is a copy of [ANN] 🚀 MASK 🚀 [POW][CRYPTONIGHT]: THE MOST 🤫 PRIVATE 🤐 BLOCKCHAIN WITH 60 MIXIN and of course bitbucket or newly made github leading to those infected qt wallets. I wish mods would ban this fool.


  ▄▄███████▄███████▄▄▄
 █████████████
▀▀▀▀▀▀████▄▄
███████████████
       ▀▀███▄
███████████████
          ▀███
 █████████████
             ███
███████████▀▀               ███
███                         ███
███                         ███
 ███                       ███
  ███▄                   ▄███
   ▀███▄▄             ▄▄███▀
     ▀▀████▄▄▄▄▄▄▄▄▄████▀▀
         ▀▀▀███████▀▀▀
░░░████▄▄▄▄
░▄▄░
▄▄███████▄▀█████▄▄
██▄████▌▐█▌█████▄██
████▀▄▄▄▌███░▄▄▄▀████
██████▄▄▄█▄▄▄██████
█░███████░▐█▌░███████░█
▀▀██▀░██░▐█▌░██░▀██▀▀
▄▄▄░█▀░█░██░▐█▌░██░█░▀█░▄▄▄
██▀░░░░▀██░▐█▌░██▀░░░░▀██
▀██
█████▄███▀▀██▀▀███▄███████▀
▀███████████████████████▀
▀▀▀▀███████████▀▀▀▀
▄▄██████▄▄
▀█▀
█  █▀█▀
  ▄█  ██  █▄  ▄
█ ▄█ █▀█▄▄█▀█ █▄ █
▀▄█ █ ███▄▄▄▄███ █ █▄▀
▀▀ █    ▄▄▄▄    █ ▀▀
   ██████   █
█     ▀▀     █
▀▄▀▄▀▄▀▄▀▄▀▄
▄ ██████▀▀██████ ▄
▄████████ ██ ████████▄
▀▀███████▄▄███████▀▀
▀▀▀████████▀▀▀
█████████████LEADING CRYPTO SPORTSBOOK & CASINO█████████████
MULTI
CURRENCY
1500+
CASINO GAMES
CRYPTO EXCLUSIVE
CLUBHOUSE
FAST & SECURE
PAYMENTS
.
..PLAY NOW!..
TryNinja
Legendary
*
Offline Offline

Activity: 2884
Merit: 7119


Top Crypto Casino


View Profile WWW
May 04, 2019, 10:19:06 PM
 #3

100% malware. The exe creates a file called "file.exe" that has a rat/trojan called QUASAR.

See: https://app.any.run/tasks/1d504af9-c431-4c42-94c4-67ff782a3fb5

I wish mods would ban this fool.
Report him. He is not only plagiarizing other coin's ANN threads but spreading malware (which is against the rules).

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
morvillz7z
Legendary
*
Offline Offline

Activity: 2226
Merit: 2062


Join the world-leading crypto sportsbook NOW!


View Profile
May 04, 2019, 10:29:09 PM
 #4

Report him. He is not only plagiarizing other coin's ANN threads but spreading malware (which is against the rules).

I have, not this account in particular but at least 7+ alts of his for the exact same thing - spreading malware.

One ended being banned (plagiarism), all others are still intact. Mods will only delete the thread, sadly.

  ▄▄███████▄███████▄▄▄
 █████████████
▀▀▀▀▀▀████▄▄
███████████████
       ▀▀███▄
███████████████
          ▀███
 █████████████
             ███
███████████▀▀               ███
███                         ███
███                         ███
 ███                       ███
  ███▄                   ▄███
   ▀███▄▄             ▄▄███▀
     ▀▀████▄▄▄▄▄▄▄▄▄████▀▀
         ▀▀▀███████▀▀▀
░░░████▄▄▄▄
░▄▄░
▄▄███████▄▀█████▄▄
██▄████▌▐█▌█████▄██
████▀▄▄▄▌███░▄▄▄▀████
██████▄▄▄█▄▄▄██████
█░███████░▐█▌░███████░█
▀▀██▀░██░▐█▌░██░▀██▀▀
▄▄▄░█▀░█░██░▐█▌░██░█░▀█░▄▄▄
██▀░░░░▀██░▐█▌░██▀░░░░▀██
▀██
█████▄███▀▀██▀▀███▄███████▀
▀███████████████████████▀
▀▀▀▀███████████▀▀▀▀
▄▄██████▄▄
▀█▀
█  █▀█▀
  ▄█  ██  █▄  ▄
█ ▄█ █▀█▄▄█▀█ █▄ █
▀▄█ █ ███▄▄▄▄███ █ █▄▀
▀▀ █    ▄▄▄▄    █ ▀▀
   ██████   █
█     ▀▀     █
▀▄▀▄▀▄▀▄▀▄▀▄
▄ ██████▀▀██████ ▄
▄████████ ██ ████████▄
▀▀███████▄▄███████▀▀
▀▀▀████████▀▀▀
█████████████LEADING CRYPTO SPORTSBOOK & CASINO█████████████
MULTI
CURRENCY
1500+
CASINO GAMES
CRYPTO EXCLUSIVE
CLUBHOUSE
FAST & SECURE
PAYMENTS
.
..PLAY NOW!..
marlboroza (OP)
Legendary
*
Offline Offline

Activity: 1932
Merit: 2270


View Profile
May 04, 2019, 10:34:35 PM
 #5

Perhaps newbie jail could solve malicious attempts in altcoin section.
One ended being banned (plagiarism), all others are still intact. Mods will only delete the thread, sadly.
This is much bigger issue than plagiarism and they should be perma banned. It is strange they are not.
morvillz7z
Legendary
*
Offline Offline

Activity: 2226
Merit: 2062


Join the world-leading crypto sportsbook NOW!


View Profile
May 04, 2019, 10:55:36 PM
Last edit: May 05, 2019, 02:07:30 PM by morvillz7z
Merited by marlboroza (1), ICOEthics (1)
 #6

This is much bigger issue than plagiarism and they should be perma banned.

It absolutely is and they should be banned!

I'll see if I can put a list tomorrow of all his accounts and fake announcement threads. I'd say there are at least 20 of those (all created within the last 30 days, most of which are gone; either deleted by a mod or self-edited/deleted).



edit; I take my words back, mods actually ban/nuke some of these accounts. Here's the list of his alts as promised:

KillRoy2005 - not banned

Hezacez - not banned

morthar - nuked

MaBug - not banned

s107n - banned

AlexDuma - banned

imreal not banned, currently has one active fake ann, haven't checked wallet.

Kiokawa not banned, has also one active fake ann which is copy of this one, haven't checked wallet either.

I swear that there was another newbie account, but I can't remember his name right now. However, one thing I can assure you, he's not just going to stop, expect a lot more of these ANN...soon.

  ▄▄███████▄███████▄▄▄
 █████████████
▀▀▀▀▀▀████▄▄
███████████████
       ▀▀███▄
███████████████
          ▀███
 █████████████
             ███
███████████▀▀               ███
███                         ███
███                         ███
 ███                       ███
  ███▄                   ▄███
   ▀███▄▄             ▄▄███▀
     ▀▀████▄▄▄▄▄▄▄▄▄████▀▀
         ▀▀▀███████▀▀▀
░░░████▄▄▄▄
░▄▄░
▄▄███████▄▀█████▄▄
██▄████▌▐█▌█████▄██
████▀▄▄▄▌███░▄▄▄▀████
██████▄▄▄█▄▄▄██████
█░███████░▐█▌░███████░█
▀▀██▀░██░▐█▌░██░▀██▀▀
▄▄▄░█▀░█░██░▐█▌░██░█░▀█░▄▄▄
██▀░░░░▀██░▐█▌░██▀░░░░▀██
▀██
█████▄███▀▀██▀▀███▄███████▀
▀███████████████████████▀
▀▀▀▀███████████▀▀▀▀
▄▄██████▄▄
▀█▀
█  █▀█▀
  ▄█  ██  █▄  ▄
█ ▄█ █▀█▄▄█▀█ █▄ █
▀▄█ █ ███▄▄▄▄███ █ █▄▀
▀▀ █    ▄▄▄▄    █ ▀▀
   ██████   █
█     ▀▀     █
▀▄▀▄▀▄▀▄▀▄▀▄
▄ ██████▀▀██████ ▄
▄████████ ██ ████████▄
▀▀███████▄▄███████▀▀
▀▀▀████████▀▀▀
█████████████LEADING CRYPTO SPORTSBOOK & CASINO█████████████
MULTI
CURRENCY
1500+
CASINO GAMES
CRYPTO EXCLUSIVE
CLUBHOUSE
FAST & SECURE
PAYMENTS
.
..PLAY NOW!..
morvillz7z
Legendary
*
Offline Offline

Activity: 2226
Merit: 2062


Join the world-leading crypto sportsbook NOW!


View Profile
May 07, 2019, 01:11:10 AM
 #7

I told you, it won't be long before he comes with new accounts. I haven't reported any of the two, and since your previous one came with a nuke, I'm going to leave it to you (if you don't have time, I will report it myself, but I can't promise mods will ban him). Tongue


[ANN] [BEAR] Voytek BEAR Coin (PoS->PoA 30% / Masternodes 70%) fake ANN

[ANN] [BEAR] Voytek BEAR Coin (PoS->PoA 30% / Masternodes 70%) original


[ANN] [PRX] [Masternode] [Staking] ProxyNode Network - fake ANN

[ANN] [PRX] [Masternode] [Staking] ProxyNode Network - The Rebirth original


Both GitHub wallet links replaced with bitbucket, both tested positive for DNS8 Malicious.

  ▄▄███████▄███████▄▄▄
 █████████████
▀▀▀▀▀▀████▄▄
███████████████
       ▀▀███▄
███████████████
          ▀███
 █████████████
             ███
███████████▀▀               ███
███                         ███
███                         ███
 ███                       ███
  ███▄                   ▄███
   ▀███▄▄             ▄▄███▀
     ▀▀████▄▄▄▄▄▄▄▄▄████▀▀
         ▀▀▀███████▀▀▀
░░░████▄▄▄▄
░▄▄░
▄▄███████▄▀█████▄▄
██▄████▌▐█▌█████▄██
████▀▄▄▄▌███░▄▄▄▀████
██████▄▄▄█▄▄▄██████
█░███████░▐█▌░███████░█
▀▀██▀░██░▐█▌░██░▀██▀▀
▄▄▄░█▀░█░██░▐█▌░██░█░▀█░▄▄▄
██▀░░░░▀██░▐█▌░██▀░░░░▀██
▀██
█████▄███▀▀██▀▀███▄███████▀
▀███████████████████████▀
▀▀▀▀███████████▀▀▀▀
▄▄██████▄▄
▀█▀
█  █▀█▀
  ▄█  ██  █▄  ▄
█ ▄█ █▀█▄▄█▀█ █▄ █
▀▄█ █ ███▄▄▄▄███ █ █▄▀
▀▀ █    ▄▄▄▄    █ ▀▀
   ██████   █
█     ▀▀     █
▀▄▀▄▀▄▀▄▀▄▀▄
▄ ██████▀▀██████ ▄
▄████████ ██ ████████▄
▀▀███████▄▄███████▀▀
▀▀▀████████▀▀▀
█████████████LEADING CRYPTO SPORTSBOOK & CASINO█████████████
MULTI
CURRENCY
1500+
CASINO GAMES
CRYPTO EXCLUSIVE
CLUBHOUSE
FAST & SECURE
PAYMENTS
.
..PLAY NOW!..
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!