Report Malware and Suspicious Links here so Mods can take Action !

[Lafu]

~~~~~~

They have switched to a new Github Link !!!!

The Old Github was:

Code:

Fake Github : https_://github.com/sonexcore/SONEX/releases/download/v.1.0.0/Sonex-qt.zip

And they now using the Github :

Code:

https://github.com/sonex-core/sonex/releases/download/v.1.0.0.0/SONEX-qt.zip

Nice catch and watching !

I updated the first page with the Fake Github links.

[1713854450]

1713854450

[1713854450]

1713854450

[1713854450]

1713854450

[Rizzrack]

User : mokbor  please ban that User for plagiarism

I would add this one also to the fake ann / malware group.
All our evidence points to that

[Lafu]

I would add this one also to the fake ann / malware group.
All our evidence points to that

Ok will do that so we have some Records in the future and i was guessing that because he joind only an hour before on Github and has only the wallet download there !

Thread : [ANN] [SEVS] Sevastopol - gpu mineable cryptocurrency [POW/MN/X21S]  <---- Thread is already deleted

User : mokbor

Archive : https://archive.fo/wip/MMrL4

SEVASTOPOL

Code:

WALLETS
Windows: https://github.com/ProjectSevastopol/Sevastopol/releases/download/1.0.1.0/sevastopol.v1.0.1.0.zip
Linux: https://github.com/ProjectSevastopol/Sevastopol/releases/download/1.0.1.0/sevastopol-v1.0.1.0-aarch64-linux-gnu.zip

Updated the first page with the link

[garmin]

restore my account   mcrex666,please)and yet, how could my account be hacked if I didn’t download or install anything?)

For restore your account you have to look here : Recover Hacked / Lost Accounts and write an Email to recoveries...@bitcointalk.org

How your account got hacked i dont know , possible you downloaded something or clicked and link !!
Also maybe its possible that you dont got an strong Password.

What we know is that Users that post Sonex and Chancoin Threads and things mostly got hacked because the download links have Trojan and Malware in it.


In this Sonex case we have now 5 !

• leond  Account is restored to the real owner
• zenhu Account is restored to the real owner
• garmin Hacked and for now not restored
• mcrex666 Hacked and for now not restored
• fancyfutwork Hacked and for now not restored

My account was hijacked and has been restored.

[Lafu]

My account was hijacked and has been restored.

Thanks for let me know that your Account is restored and back in your hands !

This also is confirmed from Rizzrack via PM to me.

This is from seclog

Today at 03:42:15 PM - garmin - password reset via email
Today at 03:25:02 PM - garmin - manual recovery, previously-queued ownership change completed

Will remove my negative Feedback shortly !

Thanks to the Recovery team , awesome Work !


For the Sonex case now !

• leond  Account is restored to the real owner
• zenhu Account is restored to the real owner
• garmin Account is restored to the real owner
• mcrex666 Hacked and for now not restored
• fancyfutwork Hacked and for now not restored

[Rikafip]

Suspicious Ann with possible malware, all classic signs are here, like self-moderated topic, user join github less than 30 minutes ago etc

Account durvalfd
Archive  https://archive.fo/mlOU7

About us
SONS is a mineable coin based on a whole new blockchain technology. It’s the core asset of the new Crypto Energy project that will lead us into a new era, the aim of the whole project is change the way we actually use and exchange electricity in order to allow electric power to be peer to peer tradeable. SONS is an equihash based coin mineable from everyone, and brings some core assets from lastest Zcash 2.0 codebase implementing sapling and overwinter security support. A faster blocktime allows you to send and receive coins in a matter of milliseconds.

Wallets
Windows: https://github.com/ProjectSONS/SNS/releases/download/1.0.0/sons.v1.0.0.x64.zip

[Lafu]

Suspicious Ann with possible malware, all classic signs are here, like self-moderated topic, user join github less than 30 minutes ago etc

Account durvalfd
Archive  https://archive.fo/mlOU7

Have seen it and you was faster then me , was on the way to post the thread too !

Possible the Sonex posting Dude changed the posting style and a bit the name.
Looks like .

About us
SONS
Ticker SNS

Joined on Github 29 minutes ago

Code:

[b]Wallets[/b]
Windows: https://github.com/ProjectSONS/SNS/releases/download/1.0.0/sons.v1.0.0.x64.zip

[Jawhead999]

Account :  Hienphan
Reason : Phising and Malicious link

Archived : https://web.archive.org/web/20200219112531/https://bitcointalk.org/index.php?topic=5226945.0

https://www.virustotal.com/gui/url/d77368feeb9ee70c2e8cded0678c072c704455924e83056f230117aa604950f2/detection

🚀🔥 REFERRAL BONUS


💥 Unlimited promotion - The more invite, the bigger the reward


💣List Houbi and Binance


🔻 Start for introduction:
🔹Fill out the registration form
🔹Register a Botschain account
🔹Invite friends to earn $10

💣 Get now to your account


💣 Start here: https://forms.gle/VmZRLuuX9wjXWk6h7

Archived : https://web.archive.org/save/https://bitcointalk.org/index.php?topic=5226876.new

https://www.virustotal.com/gui/url/2bde9f9de85efaa88ef5721644ddf2f948d1c4dda345487cf696bac45646a649/detection

🚀🔥SUPER REFERRAL BOTSCHAIN

💣 Immediately receive $ 10 when registering an account and at least $ 10 for each successful referral

💣 Unlimited offers, the more people you bring, the bigger reward you get.

💣 List Houbi and Binance

🔻 Start Referral:
🔹Fill out the registration form
🔹Register a BotsChain account
🔹Invite friends

💣 Receive gifts immediately to your account

💣 Join now: https://forms.gle/q2Ch55mMTDhznYS56

Another Account : JayceAn123

Archived :  https://web.archive.org/save/https://bitcointalk.org/index.php?topic=5226938.0

https://www.virustotal.com/gui/url/d77368feeb9ee70c2e8cded0678c072c704455924e83056f230117aa604950f2/detection

💣 CONNECTING COMMUNITY BOTSCHAIN 💣

🎁 BIG REWARD: $15.000.000

❓ How about getting rewarded for using Bot's referral link?
💸 Get commision now.

💪  Click here to get started: hhttps://forms.gle/VmZRLuuX9wjXWk6h7

[Chlotide]

Account :  Hienphan
Reason : Phising link

So your proof is that a VT engine says it is a phishing link ... that's not very conclusive.
forms.gle is => google survey forms (and as in any survey can ask for sensitive info... but that's not phishing)

I added this thread to my watch list to see what's going on with this malware spree, but this one seems to be a false positive.
But hey, that's just my opinion                                                                                                                                                                                                                                                                                                            

[Rikafip]

Suspicious Ann with possible malware. User joined github very recently, an hour ago. After almost 2 years break on bitcointalk, he just came back with this self-moderated ann, so all signs are there.

User rohankothekar
Archive https://archive.fo/FHZfE

About
RadiumX is a blockchain protection project with the ability to send signed transactions. The project has
fast transactions, low commission for transfers.
Windows(beta): https://github.com/radium-core/radium/releases/download/v.1.2.0.0/radium-qt.zip

[Lafu]

Good and Nice catch Rikafip  !!!

Thats our Sonex Dude you can see that in the pictures below !
He just changed the Name for the Coin all other is the same .

Sonex post :

   


RadiumX post :




Will add it to the list on the first Page.

[Rikafip]

Another Radiumx fake Ann with malware, and based on github looks like the  same guy as earlier today, but he got himself  another bitcointalk account.

User xxtestaxx
Archive https://archive.fo/53S9K

RadiumX is a blockchain protection project with the ability to send signed transactions. The project has

Wallets
Windows(beta): https://github.com/radium-core/radium/releases/download/v.1.2.0.0/radium-qt.zip

[Lafu]

Thanks for looking about that kind of threads.
I am at the Moment not at home and cant looking for it.
The thread is already deleted. Thanks to the Moderators.
Lets see how long the Radiumx posts will be before they change to another Name.

[Lafu]

Next Fake ANN from the RadiumX with Malware !


[ANN] RadiumX . New RandomX coin

User : nukecookie <----- possible hacked account , please ban that User or lock the Account

Archive : https://archive.fo/wip/VfEAF

Code:

[b]Wallets[/b]
Windows(beta): https://github.com/radium-core/radium/releases/download/v.1.2.0.0/radium-qt.zip

[b]Site[/b]
radiumxcoin.info (in maintenance)

Same Ann as the others !

About

RadiumX is a blockchain protection project with the ability to send signed transactions. The project has

fast transactions, low commission for transfers.
This is Pre launch RadiumX blockchain.

[Jawhead999]

User : thereinto
Reason : Malicious link
Archived : https://web.archive.org/save/https://bitcointalk.org/index.php?action=profile;u=2751753;sa=showPosts

https://www.virustotal.com/gui/url/30ea295ee1ae44e02301f9d83a46375effb4708fad8b073b36d87a68be7bc27c/detection

[Lafu]

New Fake ANN again from RadiumX with Malware download link !

[ANN] RadiumX . New X16S coin

User : devttys0  <----  Ban or lock that User please

Possible Hacked Account

Archive : https://archive.fo/wip/IZKnk

Code:

[b]Wallets[/b]
Windows(beta): https://github.com/radium-core/radium/releases/download/v.1.2.0.0/radium-qt.zip
[b]Site[/b]
radiumxcoin.info (in maintenance)

About

RadiumX is a blockchain protection project with the ability to send signed transactions. The project has

fast transactions, low commission for transfers.

The User demon193d also checked the File
Virustotal :    https://www.virustotal.com/gui/file/a2579764c6b0fae3b6fae34a08dbc584044f1c7ac94c9a89978c7711973f8924/detection



edit :

Can a Moderator please delete the thread from this User please so others dont dowloand this shit

[Jawhead999]

User : poundoperation
Reason : Malicious file
Archived : https://web.archive.org/save/https://bitcointalk.org/index.php?topic=5227823.0

https://www.virustotal.com/gui/url/d5036221baa5432771038014ee5dbf7f08158d15492a3bc2bd20e402d66dadf3/detection

New wallets ! 19/02/2018

Everyone should be using these new wallets from now on:
https://www.sendspace.com/file/d1ak47 win


Source:
http://github.com/new-crypt-source/2017_fork

Blockchain file (use that for faster syncing)
https://mega.nz/#!6uogiQ4S!gFdMFUr3RudnFh10so5UAw3pHOaUHYs2V--iERGV_e4

Node list
Code:
addnode=1.34.180.245
addnode=105.154.218.116
addnode=108.170.1.134
addnode=144.202.82.232
addnode=45.76.126.234
addnode=45.76.133.91
addnode=46.186.151.15
addnode=86.57.220.62

Create an empty text file and place all those nodes there,  name it cryptcoin.conf and place it in your cryptcoin folder. Make sure to regulary check https://chainz.cryptoid.info/crypt/#!network under /Satoshi:1.0.0/ Protocol 60014 you will find node list, click on it to see newer nodes. Soon we will make dedicated nodes (also if someone knows how to set them up with digital ocean please PM us)

-snip-

[Lafu]

~~~~~~

Thats just the URL you scanned !
Did you downloaded the file and scanned it also ?
Can be false positive also but have seen the thread and it looks a bit phishy because he has written to use the Link

Code:

Everyone should be using these new wallets from now on:
https://www.sendspace.com/file/d1ak47 win

Will watching this thread for sure and check the file laters.

[morvillz7z]

There are two full member accounts i'm suspicious of being compromised and now used to spread malware.

Bones972 and firehawk71 both accounts have years of posting gaps and are now all of a sudden making announcement threads for old projects, recommending specific miners.

Some of the threads started by them:

[ANN] [CKB] Nervos Network - Store of Value Blockchain [POW/Eaglesong]
[ANN] [KDA] Kadena - Ethereum replacement [POW/Blake, 2s-Kadena/Exchanges]
[ANN] [HNS] HandShake - peer-to-peer naming system [POW/New Algo/Exchanges]

firehawk71 edited two of his threads today, after being questioned by TakeItEasy, he removed links to a suspicious miner (4 days old)

Change can be seen here: http://loyce.club/archive/posts/5389/53890380.html
http://archive.fo/wip/tqWvi

The very same miner is being recommended by Bones972 in a different thread for Nervos Network.
The GitHub in question: https://github.com/damominergpu/

[Jawhead999]

Another RadiumX scam ANN
User ZafotheNinja
Archived : https://web.archive.org/save/https://bitcointalk.org/index.php?topic=5227911.0

About

RadiumX is a blockchain protection project with the ability to send signed transactions. The project has

fast transactions, low commission for transfers.