Report Malware and Suspicious Links here so Mods can take Action !

[morvillz7z]

Could you please nuke minerszone and his thread : [ANN] [BFC] Bitfree - New electronic cash [POW/Cuckaroo29]. It's a fake website with malware wallets.

I see that Lafu has caught them but didn't post here, so let me quote him (and add some additional information):

Can you explain ?

Code:

[b]Wallets[/b]
Windows: [url=https://www.bitcfree.vip/downloads/bitfree-0.18.5-win32.tar.gz]https://www.bitfree.vip/downloads/bitfree-0.18.5-win32.tar.gz[/url]
Linux: [url=https://www.bitcfree.vip/downloads/bitfree-0.18.5-x86_64-linux-gnu.tar.gz]https://www.bitfree.vip/downloads/bitfree-0.18.5-x86_64-linux-gnu.tar.gz[/url]

Why you hide the real download link behind the other link ?

Looks like fake Download link for malware or something !

https_://www.bitcfree.vip/downloads/bitfree-0.18.5-win32.tar.gz  <----  suspicious

https_://www.bitfree.vip/downloads/bitfree-0.18.5-win32.tar.gz

Watch out when downloading here something , suspicious !

Fake domain is regestered just one day ago, whereas original back in May '19.

Domain Name: BITCFREE.VIP
Registry Domain ID: D_014FC94F_E1B63E46E42348DC834EBFF13BCE7A2A_0000016DEDB3835F-VIP
Registrar WHOIS Server:
Registrar URL:
Updated Date: 2019-10-21T09:43:52Z
Creation Date: 2019-10-21T09:43:47Z
Registry Expiry Date: 2020-10-21T09:43:47Z

Domain Name: BITFREE.VIP
Registry Domain ID: D_00F9C038_B01DFEE6593F4D17B913EED5966F577F_0000016B0183F82D-VIP
Registrar WHOIS Server:
Registrar URL:
Updated Date: 2019-05-29T02:55:55Z
Creation Date: 2019-05-29T02:55:54Z
Registry Expiry Date: 2020-05-29T02:55:54Z

https://github.com/bitfreecash/bitfree

[1715044381]

1715044381

[1715044381]

1715044381

[1715044381]

1715044381

[1715044381]

1715044381

[alanst]

Could you please nuke minerszone and his thread : [ANN] [BFC] Bitfree - New electronic cash [POW/Cuckaroo29]. It's a fake website with malware wallets.

~snip

We've also been looking at this account earlier today as it looked as though it may have possibly been compromised at some point so, as a result, it has now been security locked in order to prevent it from doing any more damage with these phishing attempts.

[morvillz7z]

Isn't it better to have their thread deleted and account nuked? Links to wallets are still there and that's priority imo. I think it's pointless to sec lock a newbie account with no other/ or deleted posts. These guys have an unlimited amount of compromised accounts at hand, they've probably lost 400 + since April, what's another newbie account to them?

thread got Trashed in the meantime !

Nice!

[Rizzrack]

... Links to wallets are still there and that's priority imo..These guys have an unlimited amount of compromised accounts at hand, they've probably lost 400 + since April, what's another newbie account to them?

That is the main priority but I see thread got Trashed in the meantime !

There's method in this madness

[Lafu]

~~~~~~

Hey thanks buddy for posted it here and look more on it , and i dont have forgot it because i was on the jump to an meeting !

I was realy sure that there is something about that link and the file also i have downloaded it but my browser stoped it and normaly my Browser dont doing that.
So looks like there was some real shit software in it .

Thanks again ! 


@alanst and @Rizzrack

Thanks for your support and work also , awesome and realy appreciate that !

[morvillz7z]

Five-digit UID wakes up just 4 hours ago and the first thing he does is post a Cuckaroo29 algo, non-existent coin.
 
Of course, it comes with direct link to a wallet and a brand new GitHub, not obvious at all. I mean, you know what to do...


Account - zerqzee

Fake ANN - [ANN] [GRED] Greden - security, anonymity, ASIC resistance [POW/Cuckaroo29]

Archive - http://archive.fo/yCrB2

[Lafu]

Fake ANN with Quote from the Orignal ANN and edited download link !

🔴🔴🔴🔴🔴【✅ANN】ZOOMBACLIX【BETA LAUNCH✅ZOOMBAPLATFORM

User : shapov22   <-----    Please nuke that user

Code:

[quote author=shapov22 link=topic=5197632.msg52941290#msg52941290 date=1572546850]
[quote author=zoombacoin link=topic=4457816.msg39910629#msg39910629 date=1528750792]

[center][b][u]Wallet:[/u][/b][/center]
[center]https://www.sendspace.com/file/edl9qq[/center]

[/quote]

Fake Source Download : https_://www.sendspace.com/file/edl9qq

Real Source Download : https_://github.com/zoombacoin/zoomba/releases

Original ANN :

[ANN] ZOOMBACOIN - BETA LAUNCH - ZOOMBA PLATFORM

User : zoombacoin

Code:

[quote author=zoombacoin link=topic=4457816.msg39910629#msg39910629 date=1528750792]

[center][b][u]Wallet:[/u][/b][/center]
[center]https://github.com/zoombacoin/zoomba/releases[/center]

[/quote]

Archive : https://archive.md/Uc0hR

Maybe you can share your thoughts about that because the thread name is others as the Original but i guess its the Fake to catch people with the download !

Edit : its a fake ann , cheers

[masulum]

FAKE ANN: Obyte: Totally new consensus algorithm + private untraceable payments
Archives: https://archive.is/EgcF0

User : developernat    <-----    Please nuke that user

Code:

[quote author=developernat link=topic=5197963.msg52954498#msg52954498 date=1572666960]
For full technical description, read the white paper: [url=https://www.docdroid.net/X3pnfsJ/byteball.pdf]READ HERE[/url]
Former name: Byteball.
Download the wallet: [url=https://gofile.io/?c=gc3hHp][color=green][size=20pt]DOWNLOAD[/size][/color][/url]
[/quote]

Fake download: https:_/srv-file4.gofile.io/download/gc3hHp/ObyteWin64.exe
Virustotal: https://www.virustotal.com/gui/file-analysis/OWRkOWIwODkwMWQ5Mjc4YTdkMjVjZWM2YWMwZmZmMTA6MTU3MjY5NTY0Nw==/detection
VirusTotal: File Hash: 5649c298735ea546eb597dbc1aea8a061f6db7818dc67008fe026cd34be37a2e

Original link: https://github.com/byteball/obyte-gui-wallet


Original Thread: Obyte: Totally new consensus algorithm + private untraceable payments
Archives: https://archive.ph/w4BlO

[morvillz7z]

Could you please nuke user dcb33 and their fake announcement thread for [ANN] - [MediaCoin][MC] [FREE COINS].

Original Mediacoin thread and GitHub:
https://bitcointalk.org/index.php?topic=5179834.0
https://github.com/mediacoin-club

Fake Mediacoin thread and GitHub (two days old):
https://bitcointalk.org/index.php?topic=5197697.0
https://github.com/project-mediacoin/
archive: http://archive.md/1LoXj

My report for GREDEN (just two posts above) is still unhandled. It's obviously a fake ann and needs to be deleted/nuked.

[Lafu]

Fake ANN !

[ANN] Tickets (TKTS) - POW/Argon2id (CPU/GPU only) - Crypto e-Commerce

User : ishwor92  <----  Ban or nuke for plagiarism

There is nothing i can find thats diffrent from the Original Ann , Links and all is the same if i dont missed something or havnt seen .

The only thing thats diffrent from the Original ANN is the time when the ANNs was cretaed .

Fake ANN created : November 01, 2019, 09:32:42 PM

Real ANN created : November 01, 2019, 12:11:17 AM

Archive : https://archive.md/SvG38

So i report it for plagiarism


Original ANN :

[ANN] Tickets (TKTS) - POW/Argon2id (CPU/GPU only) - Crypto e-Commerce

User : TicketsCoin

[morvillz7z]

Please nuke user AyePhung and delete their fake announcement thread  [ANN][MPO+] Mpower+ Coin - new reward system [{POW/X11/Rework]

Original Mpower Coin thread and GitHub:
https://bitcointalk.org/index.php?topic=5162647.0
https://github.com/MpowerMPO/

Fake Mpower Coin thread and GitHub (created an hour ago):
https://bitcointalk.org/index.php?topic=5199534.0
https://github.com/mpowernew/
http://archive.md/ul2Ky

Fake ann called out by the real Mpower Coin dev:

Original tread here:
https://bitcointalk.org/index.php?topic=5162647.new#new

No Idea why you trying to copy our project. Please Desist!

I've tagged the account in the meantime.

edit; wow, that was fast, thread is gone!

[Lafu]

I've tagged the account in the meantime.
edit; wow, that was fast, thread is gone!

Nice catch on that !

Also updated the first post with useful links .
If anybody has some links that can be useful post it please .

[morvillz7z]

Here's another fake thread with links to malware wallets: [Pre-ANN] [SONA] SONATA - help for young music groups [Ethash/POW/No ICO]
Please nuke Unersame, 2011 account wakes up today and posts a direct link to brand new GitHub.

Fake SONATA thread and GitHub (created 5 hours ago):
https://bitcointalk.org/index.php?topic=5200532.0
https://github.com/SonataMusicCoin
http://archive.md/fvGJZ

Today at 12:17:32 PM - Unersame - woke up

Props to busminer for scanning the exe file, here are the results:
https://www.virustotal.com/gui/file/e446fe2f725fec1a36f60e6e2b6eb50ce0fd8ba291db646f0ba1afa737741820/detection

I've tagged the account in the meantime.

[Lafu]

Here's another fake thread with links to malware wallets: [Pre-ANN] [SONA] SONATA - help for young music groups [Ethash/POW/No ICO]
Please nuke Unersame, 2011 account wakes up today and posts a direct link to brand new GitHub.

Fake SONATA thread and GitHub (created 5 hours ago):
https://bitcointalk.org/index.php?topic=5200532.0
https://github.com/SonataMusicCoin
http://archive.md/fvGJZ

Today at 12:17:32 PM - Unersame - woke up

Props to busminer for scanning the exe file, here are the results:
https://www.virustotal.com/gui/file/e446fe2f725fec1a36f60e6e2b6eb50ce0fd8ba291db646f0ba1afa737741820/detection

I've tagged the account in the meantime.

What i have seen the last month and for a lot of Fake Anns that was created here is that they also instant was posted on this Page https://coinhub.news.

And for the latest Fake ANN here you  are posted the same again and its posted at the same time when the Fake ANN are posted here .
https://coinhub.news/cs/article/bitcointalk-pre-ann-sona-sonata-help-for-young-music-groups-ethashpowno-ico

I dont know if that has something to do with the creator of the Fake Anns or they pay them for push this Informations.
But i guess they are just an service to bring news about new coins .

The other thing is specialy for your posted Fake ANN i cant find an real ANN .

[Lafu]

Fake ANN here again !

[ANN][BTSC] Beyond The Scene Coin [POS/MN/X11]

User : merz  <---------   Please nuke that User !

Code:

[b]Wallets[/b]
Windows: https://github.com/btsbtsc/BTSCOIN/releases/download/3.0.1.0/BTSC_WINDOWS.zip
Linux: https://github.com/btsbtsc/BTSCOIN/releases/download/3.0.1.0/BTSC_LINUX.zip

Source
github https://github.com/btscbtsc/BTSCOIN

Look how the github is written exactly and you see that there is something diffrent !

Fake Github : 

https_://github.com/btsbtsc/BTSCOIN/releases/download/3.0.1.0/BTSC_WINDOWS.zip

https_://github.com/btsbtsc/BTSCOIN/releases/download/3.0.1.0/BTSC_LINUX.zip


Real Github :

https_://github.com/btscbtsc/BTSCOIN/releases/download/3.0.0.1/BTSC_WINDOWS.zip

https_://github.com/btscbtsc/BTSCOIN/releases/download/3.0.0.1/BTSC_LINUX.zip

The Fake one has missing an small " c "


Archive :  https://archive.md/hN5SA


Original ANN :

[ANN][BTSC] Beyond The Scene Coin [POS/MN]

User : manocoin

Code:

[b]Wallets[/b]
Windows Wallet 3.0.0.1 https://github.com/btscbtsc/BTSCOIN/releases/download/3.0.0.1/BTSC_WINDOWS.zip
Linux Wallet 3.0.0.1 https://github.com/btscbtsc/BTSCOIN/releases/download/3.0.0.1/BTSC_LINUX.zip

[b]Source[/b]
github https://github.com/btscbtsc/BTSCOIN

Archive : https://archive.ph/dkILs

[morvillz7z]

Please nuke user Lulloz and delete their fake self-moderated thread for 2X2 coin 2X2 PoS COIN | STAKING REWARDS 1% EVERY DAY | 365% ROI.

Original 2X2 PoS COIN thread and GitHub:
https://bitcointalk.org/index.php?topic=5187844.0
https://github.com/2X2coin/

Fake 2X2 PoS COIN thread and GitHub (week old):
https://bitcointalk.org/index.php?topic=5200946.0
https://github.com/2X2-coin/
http://archive.md/QZ6TS

This is also a fake ann, both threads are posted back to back:

Fake KORECY thread and GitHub: (created less than an hour ago):
https://bitcointalk.org/index.php?topic=5200959.0
https://github.com/KORECYnew/KORY
http://archive.md/Md0Io

Today at 07:24:54 PM - purpnsourd - woke up

Both accounts tagged just in case.

[Lafu]

This is also a fake ann, both threads are posted back to back:

Fake KORECY thread and GitHub: (created less than an hour ago):
https://bitcointalk.org/index.php?topic=5200959.0
https://github.com/KORECYnew/KORY
http://archive.md/Md0Io

Today at 07:24:54 PM - purpnsourd - woke up

Both accounts tagged just in case.

Just update for this case and quote an Users Virustotal result that he has posted !

well, considering the wallet didn't open... plus virustotal doesnt like the dll, that came with the wallet. I dont trust it lol...
https://www.virustotal.com/gui/file/152090c189d1e808810930a24ed50c6b3c2fe0946d2d30d94a493afbd0662283/detection

And the Result looks realy shady and dangerous when look at it .

Gen:Variant.Ulise.85600
W64/Agent.ETX!tr.dldr
Trojan-Downloader.Win32.Agent
Malware (ai Score=88)
Trojan.Ulise.D14E60

Source: https://www.virustotal.com/gui/file/152090c189d1e808810930a24ed50c6b3c2fe0946d2d30d94a493afbd0662283/detection

There are some new ones since i done my other thread for the explain on the things . Will look at them and add them there maybe when i have the time.

[masulum]

Fake ANN here again !

{ANN} PoS Coin 800%✨-The one and only proof of stake coin with wicked daily!🚀

User : PoS Team  <---------   Please nuke that User !

Code:

[b]Wallets[/b]
https://mega.nz/#!FXZDASyY!JRuG4FOkSX9HO6dzqMp7aV2A6pENeQoW2id538fsStA

MAC wallet - https://mega.nz/#!zUoCHQaL!uUSJGPumbBvd6RALoClojkpogmfICFYeejYOsgutDh0

Linux wallet - https://mega.nz/#!pDI1UJDA!JgQekizxxzztneyAI0D0maUvBqlQecVKUnQHff9hFt8

Official Thread
Thread link: https://bitcointalk.org/index.php?topic=5062584.0
Real BitcoinTalk Profile: PoS Coin


Archive : https://archive.is/0TlwU

[DaveF]

User: https://bitcointalk.org/index.php?action=profile;u=2715861
2 posts. Both the same.
Malware link in post: h t t p s : / / a n o n y m o u s f i l e s .  i o /cJUhTJdQ/

When you fix the link virustotal shows:

https://www.virustotal.com/gui/url/2ba37ee91c7b05de45f1badb57a6ccd4d6a5a146920746d6590e561cf1653394/detection

[Lafu]

Fake Ann here again !

AVANTAGE (AVN) - Blockchain Reward Loyalty System! POS/MN/SN

User : Coinna   <-----    Please nuke that User

This user recently woke up from a long period of inactivity.

Code:

[center][b]Wallets:[/b][/center]

[url=https://github.com/AVANTAGE-coin/wallets/releases/download/v.1.0.0.0/Avantage-qt-v.1.0.0.0.zip]https://github.com/AVANTAGE-coin/wallets/releases/download/v.1.0.0.0/Avantage-qt-v.1.0.0.0.zip[/url]
[url=https://github.com/AVANTAGE-coin/wallets/releases/download/v.1.0.0.0/avantage-qt.dmg]https://github.com/AVANTAGE-coin/wallets/releases/download/v.1.0.0.0/avantage-qt.dmg[/url]
[url=https://github.com/AVANTAGE-coin/wallets/releases/download/v.1.0.0.0/avantage-qt.tar.gz]https://github.com/AVANTAGE-coin/wallets/releases/download/v.1.0.0.0/avantage-qt.tar.gz[/url][/center]

Archive : https://archive.md/O1IrC

Fake Github : https_://github.com/AVANTAGE-coin/wallets/

Real Github : https_://github.com/y3tiq/avantage


Original ANN :

AVANTAGE (AVN) - Blockchain Reward Loyalty System! - Funding phase

User : Noojna

Code:

[center][b][size=24pt][color=grey]Wallet Download[/color][/size][/b][/center]

[center][url=https://workupload.com/file/KmFAF3SW][img]https://i.imgur.com/G5abxCF.png[/img][/url]    
[url=https://workupload.com/file/Hab33NmV][img]https://i.imgur.com/y6NNZOz.png[/img][/url] 
[url=https://workupload.com/file/yST8A4xs][img]https://i.imgur.com/GRRk6EX.png[/img][/url][/center]

And if look on the Website there are link to the real github : https://github.com/y3tiq/avantage

Im in there Discord too and thats why i know that , got an write with the Dev about it .



Source : https://discordapp.com/channels/621293609609723904/621401652418707476