Report Malware and Suspicious Links here so Mods can take Action !

[nc50lc]

-snip-
Already got a reply from Mprep, it wasn't him who deleted the topic, so i went further and wrote to the big boss, i hope he gets some time to help me

Big boss who, admin theymos?

You can also ask the other Global Moderators aside from mprep: hilariousandco and Mr. Big.
They can moderate the whole forum as well.

[1715023677]

1715023677

[1715023677]

1715023677

[1715023677]

1715023677

[1715023677]

1715023677

[Chikito]

to help me

I found Trojan on your another thread on mega link SRBPolaris V3.5 - BIOS editor for AMD RX4XX and RX5XX cards
I don't think so, are mining needs trojan?
Here :
https://www.virustotal.com/gui/file/3e220ebba6512ec09e526b5e0859f0c567419f28ff130dd910c2af4ad5951ae7/detection

[doktor83]

to help me

I found Trojan on your another thread on mega link SRBPolaris V3.5 - BIOS editor for AMD RX4XX and RX5XX cards
I don't think so, are mining needs trojan?
Here :
https://www.virustotal.com/gui/file/3e220ebba6512ec09e526b5e0859f0c567419f28ff130dd910c2af4ad5951ae7/detection

Please stop trying to prove something that you are wrong about.
I know you want to help, nice of you, but better go after newbie accounts and suspicious activities.

I have my miner topic here for a long time, people are using it. Go in that topic, download the .zip and run it through your online av. It will report malware.
Now go into Claymore Miner thread and scan that too. It will report malware. Go into ANY miner topic and scan their binary. Always the same result.

I think i wouldnt have 367 pages on my miner topic if it was malware, don't you think ?

Please educate : https://en.wikipedia.org/wiki/Executable_compression

[malevolent]

I understand that but i thought the rank (hero member) + that i never had any trouble with the 'law and moderators' means something (trust), but it looks like it's not the case.

Being a Hero Member isn't enough, too many accounts are trading hands, or changing ownership (hacks or phishing) for anyone to be above suspicion.

[Lafu]

New Fake ANN here !

[ANN] - WeChain Coin - GPU & CPU Mining | Low Investment!

User : pandao  <-------    Please Nuke that user !

Code:

[b][size=15pt]DOWNLOAD[/size] [/b]

[size=13pt][url=https://[Suspicious link removed]/y3or2nf7]https://[Suspicious link removed]/y3or2nf7[/url][/size]

The Link is or was already removed from the system or an Moderator !


Original Ann are here :

[ANN] - WeChain Coin - GPU & CPU Mining

User : wechaincoin

Code:

[center][b][u][color=red]WALLETS[/color][/u][/b]

[b]WINDOWS[/b]
GUI [url=https://github.com/wechaincoin/wallets/blob/master/wechaincoin_wallet_gui_v1.0.0-ok.zip]https://github.com/wechaincoin/wallets/blob/master/wechaincoin_wallet_gui_v1.0.0-ok.zip[/url]
CLI [url=https://github.com/wechaincoin/wallets/blob/master/wechaincoin_wallet_cli_windows.zip]https://github.com/wechaincoin/wallets/blob/master/wechaincoin_wallet_cli_windows.zip[/url]

[b]LINUX[/b]
CLI [url=https://github.com/wechaincoin/wallets/blob/master/wechaincoin_wallet_cli_linux.zip]https://github.com/wechaincoin/wallets/blob/master/wechaincoin_wallet_cli_linux.zip[/url]
[/center]

[DaveF]

https://bitcointalk.org/index.php?topic=5191234.0
and
https://bitcointalk.org/index.php?topic=5191244

User that needs to be nuked: https://bitcointalk.org/index.php?action=profile;u=2472096

Reported to mod as a virus. Shows as virus on virustotal.com

-Dave

[doktor83]

Just want to say thank you to the moderator/admin who returned back my topic! 

[masulum]

FAKE ANN
PopUp Coin | X11 | Private | Bounties | No ICO | Retail Focused | POW/MN |
ANN THREAD: https://bitcointalk.org/index.php?topic=5191560.0 (Reported to mod)
Archives: https://archive.is/fsXhu
Profile: https://bitcointalk.org/index.php?action=profile;u=2692616 - neg trust given, please support

https://www.popup.money/

Domain:popup.money
Registrar:GoDaddy.com, LLC
Registered On:2019-05-24
Expires On:2020-05-24
Updated On:2019-05-29

Code:

STAY AWAY FROM THIS URL!
https://mega.nz/#!HLoDzSDL!P9SgoQC-xD6d0Zhoo21H3ywG5chU9Ew_dozRSowHmvw

https://www.virustotal.com/gui/url/71216ea7e98991af2c7f6226d581d2ba513e14cc585f8e8d0f6cf04bf112f755/detection

============= ORIGINAL THREAD & GITHUB =============
https://bitcointalk.org/index.php?topic=5161775.0
https://github.com/popupcoin/PopUp-Coin

[nc50lc]

A very important information for reporters:
Do not just paste the direct link to virustotal's url scanner as it will scan the host/server of that url instead of the file to be downloaded.
And apparently; when you paste mega.nz, it will always result with "CLEAN MX: Phishing" and "URLhaus: Malicious" regardless of the link.

Like for example (just MEGA's home URL):
https://www.virustotal.com/gui/url/71216ea7e98991af2c7f6226d581d2ba513e14cc585f8e8d0f6cf04bf112f755/detection
Same results, "CLEAN MX: Phishing" and "URLhaus: Malicious"

Another (safely reproduce-able) Example:
Try it with Electrum windows executable(s): https://electrum.org/#download <- It's safe but with false positives.
Copy the direct download link (https://download.electrum.org/3.3.8/electrum-3.3.8-setup.exe) and paste it to virustotal,
the result will be clean: VT URL Results. Virustotal didn't download the file in the link, it doesn't work that way.
But if you downloaded the file and uploaded to virustotal, there will be positives: VT uploaded result (v3.3.6) <- Again, false positives

[Chikito]

But if you downloaded the file and uploaded to virustotal, there will be positives

Thank you for your information and I am sorry to doktor83 was reported yours thread.

[Lafu]

You also can still download the Files as long you dont open it or unzip the file when its from github and upload the file to Virustotal !
After that deleted it and you should be fine .
But i advice to doing this just to be safe to use the Sandboxie browsing function or an VM .
Dont do it with Mega files , i dont trust the download there .

[masulum]

<snip>

Thank you very much for this explanation,

After case of Decracy (on pages 3), I am making a report, because I think something wrong with that project, hidden original link with short link. So, I have not downloaded their files, because I never know linktree before. But I am happy dev team make it clear with his clarify. For Popup, I reported above, I am not downloading file because as many users say not safe for download file from Mega. so I am just sharing their links and check it on VT. Because I found original thread for PopUp coin, of cours,e this wallet is fake, so I reported here.

<snip>

Yup, this is how I check their wallets, downloading files and check it on virus desk, but I'm just downloading if their files hosted on github or bitbucket.

[Lafu]

Next Fake ANN again !

NinjaCoin (NINJA) - digital cryptocurrency to exchange with friends

User : bithuman

Code:

[b]Releases[/b]
Ninjacoin Daemon: https://github.com/NinjaCoin-Master/NinjaCoin/releases/latest
NinjaWallet GUI: https://github.com/NinjaCoin-Master/Ninja-Wallet-Pro/releases/latest
Mobile Wallet: https://github.com/NinjaCoin-Master/ninjacoin-mobile-wallet/releases/latest
Paper Wallet: https://www.ninjacoin.org/wallet

Dont know whats wrong with that Fake ANN as the Github is the same as the Original ANN have !
But anyway its an Fake Ann and the Original Ann was created at April 28, 2019, 09:22:42 AM

Maybe a Moderator can delete the thread !

Archive : https://archive.fo/DPufo

Original ANN :

NinjaCoin (NINJA) - digital cryptocurrency to exchange with friends 

User : NinjaTrust

Code:

[b]Releases[/b]
Ninjacoin Daemon: https://github.com/NinjaCoin-Master/NinjaCoin/releases/latest
NinjaWallet GUI: https://github.com/NinjaCoin-Master/Ninja-Wallet-Pro/releases/latest
Mobile Wallet: https://github.com/NinjaCoin-Master/ninjacoin-mobile-wallet/releases/latest
Paper Wallet: https://www.ninjacoin.org/wallet

[morvillz7z]

Dont know whats wrong with that Fake ANN as the Github is the same as the Original ANN have !
But anyway its an Fake Ann and the Original Ann was created at April 28, 2019, 09:22:42 AM

Yeah, i can't find any differences between the two. They have either forgot to change/add the links to infected wallets or they will add them at a later stage (to avoid suspicion). I don't know what to make out of this screenshot though:



https://bitcointalk.org/index.php?topic=2063263.0

The topic title was changed from "BITHUMAN Coin - secure, private, untraceable - start 05/08/2017" to "www.ninjacoin.org"

and what's bothering me is the date this happened - August 1st, 2019. Does this mean they have prepped this shit up two months ago?

[Lafu]

https://bitcointalk.org/index.php?topic=2063263.0

The topic title was changed from "BITHUMAN Coin - secure, private, untraceable - start 05/08/2017" to "www.ninjacoin.org"

and what's bothering me is the date this happened - August 1st, 2019. Does this mean they have prepped this shit up two months ago?

Wow nice catch !
And yes it looks like the missed to change the links to infected wallets or was on the way to add them laters .
Maybe the Account of the User was hacked or maybe sold from them and they just changed the thread title.
Dont know whats wrong with change of the Title and this thread but it looks very strange to me

[Lafu]

Next Fake ANN !

YEP COIN | POS Staking : 20% | MASTERNODE : 80% | A DOOR FOR DREAM

User : str8x  <----  Please nuke that user

Code:

[center][b][size=30pt]   MAC want to explain you what YEP COIN is  [/size][/b][/center]

[center][url=https://drive.google.com/uc?export=download&id=1JQ__5tkHyNuC1MbvHSMYer3SK0OpDg7O][img width=200 height=200 alt=image loading...]https://i.imgur.com/kiK6Yks.png[/img][/url][/center]
[center][url=https://github.com/YEPCOIN/Yep-Core][img width=200 height=200 alt=image loading...]https://i.imgur.com/AXWawtM.png[/img][/url][/center]

The Github is the same again as the last Fake ANN we got here but the difference is the MAC Explaining on that Thread !
In the fake ann there you have an google drive download and on the original ann you have an youtube video !
Looks like the google drive download is infected.

Please can Moderator delete this ANN and nuke the User !

Original ANN :

[ANN] YEP COIN | POS Staking : 20% | MASTERNODE : 80% | A DOOR FOR DREAM

User : Gentleman92

Code:

[center][b][size=30pt]   MAC want to explain you what YEP COIN is  [/size][/b][/center]

[center][url=https://youtu.be/A2gATngYWtI][img width=900 height=500 alt=image loading...]https://i.imgur.com/9SeyzuP.png[/img][/url][/center]

[center][b][size=20pt] WALLET YEP COIN [/size][/b][/center]
[center][url=https://github.com/YEPCOIN/Yep-Core/releases/download/1.0/yep-qt-win-64bit.exe][img width=200 height=200 alt=image loading...]https://i.imgur.com/kiK6Yks.png[/img][/url][/center]

Next fake anns

Fake ann :   https://bitcointalk.org/index.php?topic=5192664.0  

User : vladlencik  <----   Please Nuke

Original ann : https://bitcointalk.org/index.php?topic=5148524.0


Fake ANN :  https://bitcointalk.org/index.php?topic=5192658.0

Code:

[b]Wallets[/b]
[url=https://bitbucket.org/cryptoperfeckt/masters/downloads/newcachcoin.rar]https://github.com/NewCashExchange/NEWC-Wallet/releases/newcachcoin.rar[/url]

User : ktc45   <----   Please Nuke

Original ANN :  https://bitcointalk.org/index.php?topic=5189592.0

Fake ANN : https://bitcointalk.org/index.php?topic=5192648.0

User : Sibkaz_dima   <----    Please nuke

Original ANN : https://bitcointalk.org/index.php?topic=5146098.0


Fake ANN :  https://bitcointalk.org/index.php?topic=5192669.0

Code:

[url=https://bitbucket.org/cryptoperfeckt/masters/downloads/gexp-windows-amd64.zip]gexp-windows-amd64.zip[/url]
[url=https://bitbucket.org/cryptoperfeckt/masters/downloads/gexp-windows-386.zip]gexp-windows-386.zip[/url]

User : candeche23  <----   Please nuke

Original ANN : https://bitcointalk.org/index.php?topic=5146098.0

Code:

[url=https://github.com/expanse-org/go-expanse/releases/gexp-darwin-amd64.tar.gz]gexp-darwin-amd64.tar.gz[/url] 
[url=https://github.com/expanse-org/go-expanse/releases/gexp-darwin-386.tar.gz]gexp-darwin-386.tar.gz[/url] 
[url=https://github.com/expanse-org/go-expanse/releases/gexp-linux-amd64.tar.gz]gexp-linux-amd64.tar.gz[/url] 
[url=https://github.com/expanse-org/go-expanse/releases/gexp-linux-386.tar.gz]gexp-linux-386.tar.gz[/url] 
[url=https://github.com/expanse-org/go-expanse/releases/gexp-windows-amd64.zip]gexp-windows-amd64.zip[/url] 
[url=https://github.com/expanse-org/go-expanse/releases/gexp-windows-386.zip]gexp-windows-386.zip[/url]

Fake ANN :  https://bitcointalk.org/index.php?topic=5192636.0

Code:

[b]Windows-QT:[/b]
[url=https://bitbucket.org/cryptoperfeckt/masters/downloads/VADE-QT.zip.Windows.Binaries.zip]

User : Sibkaz_dima  <----   Please nuke

Original ANN : https://bitcointalk.org/index.php?topic=1373179.0

[JeromeTash]

Here is another ANN of a project with malware

[ANN][IEO] ZOPTAX - 📞 DISRUPTING VOIP WITH BLOCKCHAIN

Zoptax wallet: https://zoptax.com/zoptax-windows.zip
Virus Total results: https://www.virustotal.com/gui/file/38a2acbfe7469e5fd5a14793922ec63911a0b3cdb28f3461982c37e9c758127f/detection
32/69 Engines detected malware

[Lafu]

Next Fake Ann here !

[ANN] [UPD] [ADZ] Adzcoin||ADZbuzz - Replacing The Ad-Supported Web!

User : KaribuBlanco  <-----  Please nuke that user !

Code:

GitHub Source Code:

https://github.com/AdzCoin/adzcoin
-----------------------------------------------
[center][b]Wallets:[/b][/center]

[center][b][url=https://github.com/AdzColn/adzcoin/blob/master/adzcoin-qt.zip]Adzcoin-qt Windows[/url] 

The Source github is right github.com/AdzCoin/adzcoin but if you looking at the download github link for the wallets you can see its the wrong one and fake.
Fake source : github.com/AdzColn/

For the wallets of the Original ANN they use there some other link you can see.

Original ANN :

[ANN] [ADZ] Adzcoin||ADZbuzz - Replacing The Ad-Supported Web!

User : coinstatic

Code:

[b][color=black][size=25pt]GitHub Source Code:[/size][/color][/b]

[size=19pt][b]https://github.com/AdzCoin/adzcoin[/b][/size]

[b][url=https://adzbuzz.com/adzcoin-files.zip][color=black][size=15pt]Download Windows wallet here:[/size][/color]

[img]https://i.imgur.com/dS34Pa4.png[/img][/url]   

[Lafu]

New Fake ANN here !

[ANN][Hybrid POW+MN][CN TRTL] ContentCoin - Made for content users

User : pendente  <-------- Please Nuke that user !

This user recently woke up from a long period of inactivity.

Code:

[b]WALLET[/b]
CLI Windows: [url=https://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip]https://github.com/contentnetwork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip[/url]
CLI Linux: [url=https://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-linux64.tar.gz]https://github.com/contentnetwork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-linux64.tar.gz[/url]

[b]LINKS[/b]
Website : new website soon. Old website : https://theblogcoin.xyz

Fake Github : https_://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip <--- Account created 3 hours ago

Real Github : https_://github.com/contentnetwork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip  

The original coin  uses a diffrent Github but if you look at the fake Ann there is a fake github behind the Github link you can read !

Downloading at the moment the file to check it and will post my result here.

But looks very strange to me and i guess its full of bad things .

And i have looked around the 2 Gihubs and in the fake one is nothing as only you can download the file .
In the other there is all the source code and stuff

They are using the same website and on the Original ann i have nothing readed about that something will change and thats why i think its fake !

Original ANN :

Blogcoin ,A social media based blogging Platform.

User : turtlegirl

Code:

Blogcoin.
[b]Website:[/b]
https://theblogcoin.xyz

GITHUB
Coin sourcecode: https://github.com/blognetwork/blogcoin
GUI electron wallet: https://github.com/blognetwork/BlogCoin-electron-wallet

Also there is a other ANN that looks the real one for !

https://bitcointalk.org/index.php?topic=5194370.0

User : semiPOOL

Code:

[center][b]WALLET[/b][/center]
[center]CLI : https://github.com/contentnetwork/contentcoin/releases[/center]

Update : Checked file for the Fake Github is full of shit.

Fake Github : https_://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip

https://www.virustotal.com/gui/file/9257d761fd3a304acfe1baab34563eb5da8aade8aa59790d4cc6138197f456b0/detection

[masulum]

New Fake ANN here !

[ANN][NYC] NEW YORK COIN at 2017 MACY'S THANKSGIVING DAY PARADE IN NYC!
FAKE PROFILE: scryptenthuslast

Real Profile: scryptenthusiast

Archives: https://archive.is/N364c

ORIGINAL ANN: https://bitcointalk.org/index.php?topic=2016963.0

Fake Github link on his ANN, under github link goes to:

Code:

https://anonymousfiles.io/f/newyorkcoin-1.3.1.21-win-setup.zip

Scan files result by VirusDesk Kaspersky: