Bitcoin Forum
October 25, 2020, 02:13:49 PM *
News: Latest Bitcoin Core release: 0.20.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: [SCAM] WHO - WhoCoin - Wallet is a confirmed Ransomware!  (Read 176 times)
logfiles
Copper Member
Hero Member
*****
Offline Offline

Activity: 770
Merit: 816


Guard Your Bitcoins Jealously


View Profile WWW
June 23, 2019, 03:18:34 AM
Last edit: May 16, 2020, 09:04:34 AM by logfiles
Merited by bones261 (2), marlboroza (1), witcher_sense (1), Coolcryptovator (1), Juliya_D (1), TalkStar (1), ICOEthics (1)
 #1

What happened: Whocoins wallet is infected with a ransomware, website is created using wordpress.com

Scammer's Profile Link: https://bitcointalk.org/index.php?action=profile;u=2633179

ANN: https://bitcointalk.org/index.php?topic=5157425.0 (archived) - http://archive.fo/W4KZS

Website: https://whocoincrypto1.wordpress.com/2019/06/22/welcome/ - [Archived]

Scammer also had an article about his scam on one of the blogs
- https://coinhub.news/cs/article/bitcointalk-ann-who-whocoin-a-new-tor-based-anonymous-cryptocoin-using-new-cryptography



5 Antivirus Engines Positively detected that the wallet is malicious
Virus Total results: https://www.virustotal.com/gui/file/22e4eabd8b8afd31ab692eccf7fc0d4da79ddbaa5b01afd1cefc112d6c6c18a5/detection






Reports from users also show that the wallet asks for 3 Monero after locking the files

1.
do not download
it is virus!!!!
it will lock all your files and ask 3 XMR
what a fukcing!!!!!!!!!!!!!!!!

2.
good thing i put this crap in a VM; looks just like that spritecoin crap I got last year

and just a reminder: DONT RUN THIS ITS RANSOMWARE AND THEY WANT 3 MONERO

Additional Notes:

DO NOT DOWNLOAD THE WALLET AND RUN IT ON YOUR WINDOWS PC

..bustadice..         ▄▄████████████▄▄
     ▄▄████████▀▀▀▀████████▄▄
   ▄███████████    ███████████▄
  █████    ████▄▄▄▄████    █████
 ██████    ████████▀▀██    ██████
██████████████████   █████████████
█████████████████▌  ▐█████████████
███    ██████████   ███████    ███
███    ████████▀   ▐███████    ███
██████████████      ██████████████
██████████████      ██████████████
 ██████████████▄▄▄▄██████████████
  ▀████████████████████████████▀
                     ▄▄███████▄▄
                  ▄███████████████▄
   ███████████  ▄████▀▀       ▀▀████▄
               ████▀      ██     ▀████
 ███████████  ████        ██       ████
             ████         ██        ████
███████████  ████     ▄▄▄▄██        ████
             ████     ▀▀▀▀▀▀        ████
 ███████████  ████                 ████
               ████▄             ▄████
   ███████████  ▀████▄▄       ▄▄████▀
                  ▀███████████████▀
                     ▀▀███████▀▀
           ▄██▄
           ████
            ██
            ▀▀
 ▄██████████████████████▄
██████▀▀██████████▀▀██████
█████    ████████    █████
█████▄  ▄████████▄  ▄█████
██████████████████████████
██████████████████████████
    ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
    ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
       ████████████
......Play......
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1603635229
Hero Member
*
Offline Offline

Posts: 1603635229

View Profile Personal Message (Offline)

Ignore
1603635229
Reply with quote  #2

1603635229
Report to moderator
1603635229
Hero Member
*
Offline Offline

Posts: 1603635229

View Profile Personal Message (Offline)

Ignore
1603635229
Reply with quote  #2

1603635229
Report to moderator
witcher_sense
Legendary
*
Online Online

Activity: 1050
Merit: 1562



View Profile WWW
June 23, 2019, 10:03:00 AM
 #2

Hello OP, good find! Why not go further and create a flag for such obvious try to steal money? This guy who officially represents this scam - whocoincrypto, truly deserves his own yellow flag.

███████████████████████████
█████████▀▄▄▄▄▄██▀▀████████
█████▀▄█▀▀▄▄▄▄▄▄▄▀▀▄▄▀█████
████ █▀▄███████████▄▀██████
███▄█ ███████▀ ██████ █ ███
██▀█ ███  ▀▀█  ▀██████ █ ██
██ █ ████▄▄      ▀▀▀██ █ ██
██ █ █████▌        ▄██ ████
███▄█ █████▄▄   ▄▄███ █▀███
████▀█▄▀█████▌  ▀██▀▄█ ████
█████▄▀▀▄▄▀▀▀▀   ▄▄█▀▄█████
████████▄██▀▀▀▀▀▀██████████
███████████████████████████

        ▄     ▀
         █ ▄▀
   ▄▀     █    ▄▀
  ▄   ▄▄  ██▄▄▀
 ▀      ▀▄▄██   ▄ ▄▄▀▀

          ▀██ ▄▀▀▀▄ ▀▄
           ███▀
 ▀▄
  ▄  ▀▄ ██▌  ▀▄
    ▀  ▄  ▐██
    ▄
   ▐██      ▄
     ▀
   ▄███▌ ▄▄   ▀
  ▄▄
▄▄ ▄█████▄ ▄▄ ▄▄
★ ‎‎
‎ ★
UP
TO
15%...CASH BACK
EVERY SPIN

‎ ★
       ▄▄██████▄▄▄
      ██▄▄▀▀█▀▀
     ████▄▀▀▄██▀
     ▄▀▀▄▄▄██▀
    ▀  ▀▀▀▀▀
             ▄▄▄▄▄▄▄
          ▄███▄▄▄████▄  ▄▄▀
        ▄████████▀▀▀█▄▀▀
     ▄███▀▀▄▄██▄▄▀▀█████
 ▄▄████▄▄▄▄▄▄▀▀████████
▀▀██▀▀▀▄▀███████▄▀████
   ▀▀██████████████▀
       ▀▀▀███████▀▀
.
..PLAY NOW..
LFC_Bitcoin
Legendary
*
Offline Offline

Activity: 2240
Merit: 3825


One of the world's leading Bitcoin-powered casinos


View Profile
June 23, 2019, 10:14:55 AM
 #3

Hello OP, good find! Why not go further and create a flag for such obvious try to steal money? This guy who officially represents this scam - whocoincrypto, truly deserves his own yellow flag.

I’ve created a flag, support it here please -

https://bitcointalk.org/index.php?action=trust;flag=259

TalkStar
Copper Member
Hero Member
*****
Offline Offline

Activity: 812
Merit: 664


#Stay clean #Stay safe


View Profile
June 23, 2019, 05:10:44 PM
 #4

I’ve created a flag, support it here please -

https://bitcointalk.org/index.php?action=trust;flag=259
Support submission done from my end. Thanks for opening the flag LFC_Bitcoin. As much as we will use our new flag system as much as we will be able to keep our forum users and investors far from those heartless scammers. 
 
 





.
.




░██████████████████░
████████████████████
█████████▀░░░███████
█████████░░▄████████
███████▀▀░░▀▀███████
███████▄▄░░▄▄███████
█████████░░█████████

█████████░░█████████

█████████▄▄█████████

████████████████████

░██████████████████░
░██████████████████░
████████████████████
████████████▀▀▀█▀███
███░▀█████▀░░░░░▀███
███▌░░░▀▀▀░░░░░░████
████▄░░░░░░░░░░░████
█████▀░░░░░░░░░█████

██████▄░░░░░▄▄██████

█████▄▄▄▄███████████

████████████████████

░██████████████████░
░██████████████████░
████████████████████
████████████████████
███████████▀▀░░▐████
███████▀▀░░░░░█████
████▀░░░▄█▀░░░▐█████
█████▄▄█▀░░░░░██████

███████▌▄▄▄▐██████

████████████████████

████████████████████

░██████████████████░
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!