Please disable Fake ANNs download links , theymos !

[Lafu]

As the most maybe have seen , there are in the last days and weeks coming more Fake ANNs in the Announcements (Altcoins) section !

Looks like that this kind of Fake ANN topics now gets created automated by Bots !

All Fake ANNs have the same download link main Adress !

For a real ANN , the most downloads and Source links are from:

Code:

www.github.com

But in the Fake ANN Topics all download Links from :

Code:

raw.githubusercontent.com/DUONetworkToken/

All ANNs have the github user DUONetworkToken on the links for the downloads !

Suggastion if that is possible to disable or blacklist this link !


Its just an Idea

[1713301192]

1713301192

[1713301192]

1713301192

[1713301192]

1713301192

[1713301192]

1713301192

[AdolfinWolf]

Code:

raw.githubusercontent.com

Is part of github (?)

Links from newbies shouldn't be clickable, and users posting links to viruses should get banned once reported.
E:-- Actually, links from newbies are clickable. Huh. Perhaps that would be a good solution; Users who are actually interested in a newbie's content, will simply copy the link, and spammers&scammers will have a much harder time getting clicks from unaware visitors through newbie accounts.

Though i never visit the ANN section, so i have no idea if this problem is that big that another measure against newbies is warranted for.


I don't exactly see the reason why the domain should be blacklisted though.

[LoyceV]

Without making any claim about whether or not the posts/users are bad: In the past 42 hours, these users have posted "githubusercontent":
     1.fanki (Trust: -4: -2 / +0) - Activity: 0 Nuked! -- post > Report to moderator
     2.mipari (Trust: -2: -1 / +0) - Activity: 154 (BPIP) -- post > Report to moderator
     3.typz0 (Trust: neutral) - Activity: 8 (BPIP) -- post > Report to moderator
     4.Hamzayounas (Trust: neutral) - Activity: 1 (BPIP) -- post > Report to moderator
     5.ac10158 (Trust: -8: -3 / +0) - Activity: 2 (BPIP) -- post > Report to moderator
     6.nasrunpk (Trust: neutral) - Activity: 1 (BPIP) -- post > Report to moderator
     7.sykunno (Trust: -2: -1 / +0) - Activity: 2 (BPIP) -- post > Report to moderator
     8.sunrise8vn (Trust: -2: -1 / +0) - Activity: 1 (BPIP) -- post > Report to moderator
     9.Sotec (Trust: -2: -1 / +0) - Activity: 2 (BPIP) -- post > Report to moderator
    10.zoran55 (Trust: neutral) - Activity: 2 (BPIP) -- post > Report to moderator
    11.Flangler (Trust: neutral) - Activity: 504 - 3 Merit earned (BPIP) -- post > Report to moderator
    12.Mixeryworld (Trust: -4: -2 / +0) - Activity: 1 (BPIP) -- post > Report to moderator
    13.devhdc (Trust: -8: -3 / +0) - Activity: 1 (BPIP) -- post > Report to moderator
    14.Neoscape (Trust: -2: -1 / +0) (Copper Member) - Activity: 252 (BPIP) -- post > Report to moderator
    15.bendine1976 (Trust: -4: -2 / +0) - Activity: 4 (BPIP) -- post > Report to moderator
    16.rollthienvuong (Trust: -2: -1 / +0) - Activity: 113 (BPIP) -- post > Report to moderator
    17.bitspectra (Trust: neutral) - Activity: 58 (BPIP) -- post > Report to moderator
    18.pauldavid18 (Trust: neutral) - Activity: 1 (BPIP) -- post > Report to moderator
    19.luv_2211 (Trust: -8: -3 / +0) - Activity: 5 (BPIP) -- post > Report to moderator
    20.avoulkaze (Trust: neutral) - Activity: 1 (BPIP) -- post > Report to moderator
    21.rahulagg89 (Trust: -4: -2 / +0) - Activity: 43 (BPIP) -- post > Report to moderator
    22.rodrifaus (Trust: neutral) - Activity: 4 (BPIP) -- post > Report to moderator
    23.gorocoin (Trust: neutral) - Activity: 5 (BPIP) -- post > Report to moderator
    24.veilMaDOS (Trust: neutral) (Copper Member) - Activity: 88 (BPIP) -- post > Report to moderator
    25.profitdaily (Trust: neutral) - Activity: 6 (BPIP) -- post > Report to moderator
    26.IDLV.Token (Trust: neutral) (Copper Member) - Activity: 5 (BPIP) -- post > Report to moderator
    27.jjeeppeerrxx (Trust: -2: -1 / +0) - Activity: 336 - 38 Merit earned (BPIP) -- post > Report to moderator
    28.grek21 (Trust: neutral) - Activity: 9 (BPIP) -- post > Report to moderator
    29.profitbliss (Trust: neutral) - Activity: 2 (BPIP) -- post > Report to moderator
    30.gilmor (Trust: neutral) - Activity: 4 (BPIP) -- post > Report to moderator
    31.Alfredomaz (Trust: neutral) - Activity: 1 (BPIP) -- post > Report to moderator
    32.cyntia1 (Trust: -4: -2 / +0) - Activity: 1 (BPIP) -- post > Report to moderator
    33.ELGEATi (Trust: -4: -2 / +0) - Activity: 1 (BPIP) -- post > Report to moderator
    34.anrei123 (Trust: neutral) - Activity: 16 (BPIP) -- post > Report to moderator
    35.clemo95 (Trust: -2: -1 / +0) - Activity: 18 (BPIP) -- post > Report to moderator

[TryNinja]

Code:

raw.githubusercontent.com

Is part of github (?)

That's the Github domain for downloadable files. I don't think blacklisting it is a good choice either. If we blacklist just the link with their repo "DUONetworkToken", they can easily create a new one. If we blacklist all links with "raw.githubusercontent.com", then we are just blacklisting GitHub - hurting everybody (even legit projects).

[Lafu]

Users who created Fake Anns today :

https://bitcointalk.org/index.php?action=profile;u=839908
https://bitcointalk.org/index.php?action=profile;u=1264905
https://bitcointalk.org/index.php?action=profile;u=398500
https://bitcointalk.org/index.php?action=profile;u=481354
https://bitcointalk.org/index.php?action=profile;u=2094645
https://bitcointalk.org/index.php?action=profile;u=2181388
https://bitcointalk.org/index.php?action=profile;u=472950
https://bitcointalk.org/index.php?action=profile;u=258312
https://bitcointalk.org/index.php?action=profile;u=1011535
https://bitcointalk.org/index.php?action=profile;u=354623
https://bitcointalk.org/index.php?action=profile;u=937386
https://bitcointalk.org/index.php?action=profile;u=560366
https://bitcointalk.org/index.php?action=profile;u=734338


Still on searching and guess there are coming more !

[morvillz7z]

I will quote myself here as someone whos been following the situation with fake ANN for over a month now.

Someone is trying really hard with those fake announcement threads. I think they are now resorting to using bots. Most of the topic-starters from this week are newbie accounts that woked up on April 27th/28th. They just copy existing projects threads and sneak links to malware wallets. This has been happening for over a month now.

This week in numbers: today - 15 fake ANNs, yesterday - 10, this past monday - 18. 

edit; 12/13 ANNs added just now, that means close to 30 in a single day. ATH

You can't really blacklist GitHub, they can and have used mega.nz and bitbucket previously, it doesn't matter where their malware wallets are deposited. If it's GitHub best course of action is to report it, have those wallets scanned first. Their support usually deletes those channels within 24 hours.

[Lafu]

You can't really blacklist GitHub, they can and have used mega.nz and bitbucket previously, it doesn't matter where their malware wallets are deposited. If it's GitHub best course of action is to report it, have those wallets scanned first. Their support usually deletes those channels within 24 hours.

I know , and i dont want to blacklist github ,lol !

Thats why asked if its possible to disable that link for that github user here , i know maybe its just short solution but you see that everyday it getting more of this Fake ANNs .

And we should do something about it , if we dont it will be to late maybe for some User they download from that links and also its Spamming too !

Sure report them helps a bit but thats a lot of reporting to do !

[TheBeardedBaby]

I didn't got this one. So the fake Anns are copying real projects just replacing the links with infected ones in GitHub?? Can you host files with malware on GitHub ??
I'll keep an eye on those ones.

[hugeblack]

Many of SCAM ANN used Github to gain a temporary trust. I have reported many of those projects to Github, but it is difficult to judge many of them, especially those that compress files.

Can you host files with malware on GitHub ??

Have you given me 1 Merit on this topic^[1] without reading its content? 


[1] Just because It’s on GitHub. It doesn’t mean it’s safe>

[morvillz7z]

Can you host files with malware on GitHub ??

Yes, you can!

- Starting Fake ANNs of already existing and old projects in the altcoin Announcements board
- Creating Fake GitHub profiles under similar names of existing projects and hosting wallets that are infected with malware so that users download them thinking they are wallets of original projects
- Hacking some older user accounts in the process and using the accounts for posting.

Yup, you read that right, there's been account hacking going on too. Two users complained last week that they were temporarily locked/logged out of their accounts. From both accounts were posted fake announcement threads. After further investigation and assistance from theymos, we found that both accounts were accessed by different IPs around the time these threads were started. All suspicious IPs have multiple violation reports, such as port scanning, unauthorized login attempts, etc. There's been a third case this week.

[ICOEthics]

~
Yup, you read that right, there's been account hacking going on too. Two users complained last week that they were temporarily locked/logged out of their accounts...
...There's been a third case this week.

And maybe many more hacked accounts will come up soon. Check this person profile: 413783
there are over 40 posts/bumps today (possibly deleted already). It appears to be a hacked account.

We have been following this fake ANN story: post 1 , post 2, and it appears the numbers of fake ANN are doubling every day.
This morning we found more than 30 new posts that could be a FAKE ANN.  
Now (afternoon) we noticed many of them have been deleted (by moderator? by the poster?)
 
users are also noticing the fake ANN's.

SCAM

Original ann: https://bitcointalk.org/index.php?topic=5132724

Admin where are you? 6+ fake topics in a couple of minutes with trojan wallet!!

[Cyrus]

We're on it, thanks for tagging and reporting them while they run out of accounts. I've been locking a lot of these hacked accounts, a part of them are active accounts which the hacker silently used. We'll handle account recoveries as they come in. Curious how they picked the altcoin threads, seems pretty random.

[tranthidung]

To be honest, I have not been in the forum for too long (since November of 2017), but I felt like the forum has been in one of the most effective period of clean-up procedure. Maybe, it is unnecessary if Epochtalk will become lively in coming months, but who knows when Epochtalk will become lively, so in reality such clean-up wave has good net effects for the forum.
Three huge things I witnessed so far:
- Merit system
- Default Trust Change
- Wave of permanent bans and account-nukes.

[TheBeardedBaby]

Many of SCAM ANN used Github to gain a temporary trust. I have reported many of those projects to Github, but it is difficult to judge many of them, especially those that compress files.

Can you host files with malware on GitHub ??

Have you given me 1 Merit on this topic^[1] without reading its content? 


[1] Just because It’s on GitHub. It doesn’t mean it’s safe>

I read that of course, but what I was thinking as a thread to be more like unknown wallets sharing your private keys with the creator and stealing your coins,not like injecting malicious code to existing .exe files which should be detected by AV or other protecting software. I thought that it should be some kind of protection against such threads or at least warning when downloading that using that code/file can affect your system.

[Rizzrack]

It seems we have experienced another wave of FAKE[ANN]. Grand majority were posted yesterday.

They have been deleted and a bunch of users banned.

Here are some users and fake threads:

garmowkin [ANN] INFINITECOIN - UPDATE TO 1.8.8 visit INFINITECOIN.COM
ONLINE-LEAGUE [ANN] ONLINE-LEAGUE [OLC] | LoL | CS:GO | THE GAME IS YOUR's [ PoS ][ PoW ][MN]
fredericktcw [ANN] [VITE] [DAG + Smart Contract] Vite | Asynchronous Architecture
lin57 [ANN][DIVI][ONE-CLICK MASTERNODES] Tiered Masternodes and Smart Wallet Live Now!
kagerjohann [ANN][RLC] iEx.ec blockchain-based distributed cloud announces its Crowdsale
cleotides [ANN][SUPER] SuperCoin v2 - The blazing fast, low fee coin - Tried and tested
musheerahmad [ANN] [POS/MN] [DEQ] Dequant - Quantum-Computer
gravez [ANN][etfx][Ethereum Fx] Make Mining Great Again
Beejae [ANN][PoW][ESN][Listing] Ethersocial -Optimized Solution to Build Online Forum
musheerahmad [ANN](CNv8) {{{{DRGL}}}} DRAGONGLASS kills white walkers. Rare | Private | Value
AceSevenFive ClassicBitcoin (CBTC) New Chain. ZCL-BTC Fork Merger for BitClassic MarketPlace
OLC Coin *edited*
Online League Dev *edited*
LTNC Official *edited*
Online League *edited*

Keep a keen eye (as always) as your experience and feedback hugely helps the community !

Let`s finish theese pajeets and prove them wrong...




Thank you guys and have a good one !

[franckuestein]

New wave of fake [ANN] detected. Most of them from 2014-2016 zombie accounts active since 1-2 weeks ago.

Some of them

• kibrg : https://bitcointalk.org/index.php?action=profile;u=726775
• jfrd607 : https://bitcointalk.org/index.php?action=profile;u=712243
• nutthavee : https://bitcointalk.org/index.php?action=profile;u=657218
• tiagoaugustobr : https://bitcointalk.org/index.php?action=profile;u=837611
• tydeovang : https://bitcointalk.org/index.php?action=profile;u=785919
• ezrando : https://bitcointalk.org/index.php?action=profile;u=628111
• kilvish : https://bitcointalk.org/index.php?action=profile;u=964217
• amandiovaz : https://bitcointalk.org/index.php?action=profile;u=957364
• chicangana01x : https://bitcointalk.org/index.php?action=profile;u=210889

Other ANN creators. Some of them created new topics in Altcoin announcements section and others in Mining

• Juvieg : https://bitcointalk.org/index.php?action=profile;u=1193613
• ottominne : https://bitcointalk.org/index.php?action=profile;u=824497
• Hetisbartmaar : https://bitcointalk.org/index.php?action=profile;u=786870
• dimadenisov : https://bitcointalk.org/index.php?action=profile;u=926844
• reqzx : https://bitcointalk.org/index.php?action=profile;u=292330
• teenik : https://bitcointalk.org/index.php?action=profile;u=370863
• krtliv : https://bitcointalk.org/index.php?action=profile;u=828211

Bumping those threads

• asifahmedkhi : https://bitcointalk.org/index.php?action=profile;u=2077661
• sravan4u : https://bitcointalk.org/index.php?action=profile;u=695924
• ElGringoMalo : https://bitcointalk.org/index.php?action=profile;u=1033250
• asifahmedkhi : https://bitcointalk.org/index.php?action=profile;u=2077661
• getbet : https://bitcointalk.org/index.php?action=profile;u=1061665

Unfortunately I think it's just the beginning of new waves as there are a lot of similar active accounts since a few days that were inactive for years.

[Lafu]

Found another Fake Ann with malware download link at the wallets !

https://bitcointalk.org/index.php?topic=5151235.msg51364509#msg51364509

Has the same download link as others has got !

Code:

[color=#9cb3bc]▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪[/color]

[size=19pt][b][url=https://raw.githubusercontent.com/Fyd-Coin/Wallet-Release/master/Wallet-Qt.zip][color=#1347bc]DOWNLOAD WALLETS FOR ANY PLATFORM[/color][/url][/b][/size]

[color=#9cb3bc]▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪▪[/color]

Same link as the anns got with malware links !

Orginal Ann is here  https://bitcointalk.org/index.php?topic=5136203.0


Edit: Is deleted already !

[LoyceV]

Has the same download link as others has got !

This link was recently posted by:
     1.wyj1306 (Trust: neutral) - Activity: 17 Autobanned! -- post > Report to moderator
     2.bogema126 (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
     3.yasinakas1357 (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
     4.djdj1992 (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
     5.SjnCoin (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
     6.varunranganath (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
     7.LackyMan (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
     8.mmeza (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
     9.antton (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    10.lukjn73 (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    11.Tsankov (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    12.dekdclub (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    13.noname9006 (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    14.NICOLAE12 (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    15.jaakola80 (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    16.minhhungtsbd (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    17.kobalt75 (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator
    18.mukulprasad (Trust: neutral) - Activity: 0 Nuked! -- post > Report to moderator

[franckuestein]

New wave. Reviewed 1 by 1
All of them created new topics with duplicated announcements. Same behaviour as always

• Petrush : https://bitcointalk.org/index.php?action=profile;u=958649 - Nuked
• lysandrej : https://bitcointalk.org/index.php?action=profile;u=909209 - Nuked
• ramau1971 : https://bitcointalk.org/index.php?action=profile;u=366768 - Nuked
• bharg123 : https://bitcointalk.org/index.php?action=profile;u=715385 - Nuked
• ts1608 : https://bitcointalk.org/index.php?action=profile;u=469114 - Nuked
• weezywalker : https://bitcointalk.org/index.php?action=profile;u=894920 - Nuked
• Teewhymix32 : https://bitcointalk.org/index.php?action=profile;u=935319 - Nuked
• REVANGELLARA : https://bitcointalk.org/index.php?action=profile;u=951146 - Nuked
• Waqas7290 : https://bitcointalk.org/index.php?action=profile;u=963316 - Nuked
• 78hrvoje : https://bitcointalk.org/index.php?action=profile;u=1147228 - Nuked
• cicerow : https://bitcointalk.org/index.php?action=profile;u=302278 - Nuked
• doumerg : https://bitcointalk.org/index.php?action=profile;u=1204974 - Nuked
• mictine : https://bitcointalk.org/index.php?action=profile;u=1065489 - Nuked
• zeteny08 : https://bitcointalk.org/index.php?action=profile;u=2453411 - Nuked
• ihasan605 : https://bitcointalk.org/index.php?action=profile;u=387548 - Nuked
• andreistalker : https://bitcointalk.org/index.php?action=profile;u=1073182 - Nuked
• sleona : https://bitcointalk.org/index.php?action=profile;u=1726519 - Nuked

[Lafu]

And another one with malware !

[ANN] Ulord UT PoW/PoS

User: Provy

https://www.virustotal.com/gui/file/72e8f412efcefd10961413c197a8a801ccf0b3bbf6035779982cb68c1a391265/detection

Code:

[size=15pt][url=https://raw.githubusercontent.com/walletsoft/Wallet-qt-win-x64/master/Wallet-Qt.rar]Wallet x64-bit[/url][/size]
[size=15pt][url=https://raw.githubusercontent.com/walletsoft/Wallet-qt-win-x64/master/Wallet-Qt.rar]Wallet x32-bit[/url][/size]
[size=15pt][url=https://raw.githubusercontent.com/walletsoft/Mining-Software/master/Miner.rar]Mining-Software[/url][/size]

Thats should be the Orginal github but there are no files to download !

Github: https://github.com/Ulord-UT/UlordChain


And another Ann with the same download link !

[ANN]PLATINCOIN (PLC) Proof of Work (PoW)

User: zurchaled07

Code:

[center][color=blue][size=24pt]Download Page:
[size=24pt][url=https://raw.githubusercontent.com/walletsoft/Wallet-qt-win-x64/master/Wallet-Qt.rar]Wallet x64-bit[/url][/size]
[size=24pt][url=https://raw.githubusercontent.com/walletsoft/Wallet-qt-win-x64/master/Wallet-Qt.rar]Wallet x32-bit[/url][/size]
[size=24pt][url=https://raw.githubusercontent.com/walletsoft/Mining-Software/master/Miner.rar]Mining-Software[/url][/size]

And more Fake ANNs with this Malware Links!

https://bitcointalk.org/index.php?topic=5151643.0    
https://bitcointalk.org/index.php?topic=5151654.0
https://bitcointalk.org/index.php?topic=5151649.0
https://bitcointalk.org/index.php?topic=5151653.0
https://bitcointalk.org/index.php?topic=5151647.0
https://bitcointalk.org/index.php?topic=5151651.0
https://bitcointalk.org/index.php?topic=5151646.0
https://bitcointalk.org/index.php?topic=5151644.0
https://bitcointalk.org/index.php?topic=5151641.0
https://bitcointalk.org/index.php?topic=5151639.0
https://bitcointalk.org/index.php?topic=5151638.0
https://bitcointalk.org/index.php?topic=5151645.0
https://bitcointalk.org/index.php?topic=5151655.0

Hope an Mod or Admin can delete them , all are reported and tagged !