Report Malware and Suspicious Links here so Mods can take Action !

[Lafu]

Here's another fake ann thread this time for COTI.
Links to wallets lead to a brand new GitHub account whereas COTI's GitHub is more than two years old. Please nuke newbie ivipopi


Original COTI GitHub account:
https://github.com/coti-io
CMC Source Code reference: https://coinmarketcap.com/currencies/coti/

Fake COTI thread and GitHub:
https://bitcointalk.org/index.php?topic=5237954
https://github.com/COTI-coin/
http://archive.md/yqYVP

Hope this thread gets soon deleted !
There are already Users asking for mining it and they have problems with the wallet!

Fake Github : https_://github.com/COTI-coin/

Real Github : https_://github.com/coti-io

Please delete the thread and nuke that user : ✅COTI - The ultimate power grid of payments

Update : Thread is deleted thanks

[1713543991]

1713543991

[1713543991]

1713543991

[CucakRowo]

Fake COTI thread and GitHub:
https://bitcointalk.org/index.php?topic=5237954
https://github.com/COTI-coin/
http://archive.md/yqYVP

Since all scammer (ivipopi) post deleted, although you already archived it. Here's the scrapped post :
http://loyce.club/archive/posts/5415/54157944.html

Same with Lafu request, To staff/global mods, please nuke this user ==> ivipopi

[Lafu]

Fake ANN with malware !

ANN | BITCOIN VAULT Listed on Coinneal | HIGH HASHRATE 1400PHs | POW SHA256

User : sdcnfgu   <------  Please nuke that User

Archive : https://archive.fo/wip/Wyh1K

Code:

[size=13pt][b]Wallet[/b][/size]
[url=https://bitbucket.org/walleters/cryptokill/downloads/electrum-vault-4.0.0a0-setup.zip]Windows[/url]
                                                                                                                          

Fake Source : https_://bitbucket.org/walleters/cryptokill/downloads/electrum-vault-4.0.0a0-setup.zip

Rear Github : https_://github.com/bitcoinvault/

Original ANN:

ANN | BITCOIN VAULT Listed on Coinneal | HIGH HASHRATE 1400PHs | POW SHA256

User : BlockMiner.me

Code:

[url=https://github.com/bitcoinvault]

And another one from the same User :

[ANN][BILCO] BillieCoin SHA256/Masternode Get Paid To Do Green Tasks

Code:

[size=13pt][b][color=green]Wallets:[/color][/b][/size]
[size=12pt][b][url=https://bitbucket.org/walleters/cryptokill/downloads/billiecoincore-3.2.0.0-win64.zip]Windows wallet[/url][/b][/size]
[size=12pt][b][url=https://bitbucket.org/pollsmaster/polls/downloads/billiecoincore-3.2.0.0-osx.dmg]MacOS wallet[/url]

Next Fake ANN !

[ANN] [HNS] HandShake - peer-to-peer naming system [POW/New Algo/Exchanges]

User : lynzoy  <------  Please nuke that User

Archive : https://archive.fo/wip/brVHX

Same bitbucket link as the other thread !

Code:

[b]Wallets[/b]
[url=https://bitbucket.org/walleters/cryptokill/downloads/Bob.0.2.4.zip]Windows [/url]
[url=https://github.com/kyokan/bob-wallet/releases/download/v0.2.4/Bob-0.2.4.dmg]MacOS[/url]

Fake Source : https_://bitbucket.org/walleters/cryptokill/downloads/Bob.0.2.4.zip

Real Github : https_://github.com/kyokano/bob-wallet/releases/download/0.2.5/Bob.0.2.5.zip

Original ANN :

[ANN] [HNS] HandShake - peer-to-peer naming system [POW/New Algo/Exchanges]

User : firehawk71

Code:

[b]Wallets[/b]
Windows: [url=https://github.com/kyokano/bob-wallet/releases/download/0.2.5/Bob.0.2.5.zip]https://github.com/kyokan/bob-wallet/releases/download/0.2.5/Bob.0.2.5.zip[/url]
Mac: https://github.com/kyokan/bob-wallet/releases/download/v0.2.5/Bob-0.2.5.dmg
Source: https://github.com/kyokan/bob-wallet

And another one from the same User

[ANN][ESN]EscudoNavacense the National currency of the Grand Duchy of Navassa

Code:

[size=15pt][b]Wallets:[/b][/size]

[size=15pt][url=https://bitbucket.org/walleters/cryptokill/downloads/escudonavacense-qt-windows.zip]Windows wallet[/url][/size]

[size=15pt][url=https://bitbucket.org/walleters/cryptokill/downloads/escudonavacense-qt-linux.tar.gz]Linux wallet[/url][/size]

[size=15pt][url=https://bitbucket.org/walleters/cryptokill/downloads/escudonavacense-qt.dmg]MacOS wallet[/url][/size]

[Lafu]

Fake Miner ANN with Malware and Trojan download Link !

TFC miner , An ccminer based miner with no DevFee

User : TFCminer  <-----  Please nuke that User

Archive : https://archive.fo/TBgpW

Code:

Download [url=https://mega.nz/folder/vrRlnCDC#YeUsldku_KLj_Vfu1Bqg6g]mega[/url]

Just for reference the BTC adress for them

Code:

Our btc donation adress 3Njn7mawhYmDZjspFmmZc8ABZxS119kUBE

Source : https://www.virustotal.com/gui/file/326d6f708e2143d01098afa7c513b84362de571ef9b8fa9377258a72905cb917/detection

Edit :

@mprep or any Global Mod

I accidentally reported myself with the first report on this thread  , lol , sry
Can you cancel the report i have reported myself , damn first time happend!
I have done another report with the right post !

[Rikafip]

Fake ANN with  malware. User woke up after two and a half  years break, and is using github account made few hours ago. Thread is of course self-moderated, few warning posts deleted so far.

User Wotoro
github https://github.com/Lybesproject
Archive https://archive.fo/2T14b

About
LYBES - peer-to-peer electronic system, a project exclusively for solo mining, with an algorithm allowing only GPU-based mining farms to work.
Among other things, the project uses the masternode to generate interest and profit. Access to the first exchanges will take place within three months.
Wallets
Windows: https://github.com/Lybesproject/Lybes/releases/download/1.0.0/Lybes-qt.win64.zip
Linux: https://github.com/Lybesproject/Lybes/releases/download/1.0.0/Lybes-linux-1.0.0.zip

[NotATether]

I can't tell if the link this guy's posting is malware but nuke him anyway. (link deliberately disabled by me) Deleted

 <a href="http:_//www.freebiebitcoin.com">Earn free bitcoin</a>

User profile ernestburest (this is his first post on this account, nuke might be needed)

VirusTotal doesn't seem to be working for me so I can't scan the link.

[Lafu]

I can't tell if the link this guy's posting is malware but nuke him anyway. (link deliberately disabled by me) Deleted

<a href="http:_//www.freebiebitcoin.com">Earn free bitcoin</a>

User profile ernestburest (this is his first post on this account, nuke might be needed)
VirusTotal doesn't seem to be working for me so I can't scan the link.

The link is no malware !

But it looks in some way for an phishing site maybe or just an faucet !
Anyway i reported it and nice to see it got deleted.

[Rizzrack]

The link is no malware !

But it looks in some way for an phishing site maybe or just an faucet !
Anyway i reported it and nice to see it got deleted.

Might be phishing or I found another explanation :

I just tried and it is very complicated as they are asking to post the link of HTML what they are giving to your webpage but i dont have any web page so i am not eligible to claim, and the offer is for only coinbase wallet holders

(quote from locked thread, link here)

They don't have a website and link the thread page so they can redeem some satoshi.

[morvillz7z]

Two more of those fake announcement threads need to be deleted. Both threads are self-moderated.
One of the GitHub links has been reported (used by the scammers) multiple times.


Original THOR thread and GitHub account:
https://github.com/NodeCoin-Dev
https://bitcointalk.org/index.php?topic=5237930.0

Fake THOR thread and GitHub:
https://bitcointalk.org/index.php?topic=5239268
https://github.com/CeshHad/
http://archive.md/2mvTa

CeshHad Github reported before: https://bitcointalk.org/index.php?topic=5182222.msg54153216#msg54153216

Original CHBToken thread and GitHub account:
https://github.com/CHBToken/
https://bitcointalk.org/index.php?topic=5234429.0

Fake CHBToken thread and GitHub: replaced with links to bitbucket
https://bitcointalk.org/index.php?topic=5239267.0
http://archive.vn/f3APO

Code:

https://bitbucket.org/walleters/cryptokill/downloads/CHBTInstaller5.3.7.zip

[Chlotide]

Two more of those fake announcement threads need to be deleted. Both threads are self-moderated.

Two more for the collection. These fuckers post in pairs... Actually more than that...

Fake: https://bitcointalk.org/index.php?topic=5239287
User: ovidiusava
Archive: http://archive.fo/95jcr

Original: https://bitcointalk.org/index.php?topic=5183735
Fake: https://bitcointalk.org/index.php?topic=5239256.0
User: Pit-R
Archive: http://archive.fo/qroP5

+

Fake: https://bitcointalk.org/index.php?topic=5239281
User: ovidiusava
Archive: http://archive.fo/zPlWk

Original: https://bitcointalk.org/index.php?topic=5238901
Fake: https://bitcointalk.org/index.php?topic=5239293
User: designsbyrebirth
Archive: http://archive.fo/4gx0g

[Jawhead999]

Fake ANN

User : martin11293
ANN : [ANN] [MRL] - MORELO Network - Official Posting Board
Archived : https://web.archive.org/web/20200410022231/https://bitcointalk.org/index.php?topic=5239305.0

MORELO (MRL)

- GUI wallet windows:
ht tps://bitbucket.org/walleters/cryptokill/downloads/morelo-electronic-wallet-1.0.2-win.zip

                                                                                                     

Fake Wallet : ht tps://bitbucket.org/walleters/cryptokill/downloads/morelo-electronic-wallet-1.0.2-win.zip

Real Wallet : ht tps://github.com/morelo-network/morelo-electron-wallet/releases/download/v1.0.2/morelo-electron-wallet-1.0.2-win.exe

Real ANN : [ANN] [MRL] - MORELO Network - Official Posting Board @ bitcointalk.org   

[Lafu]

Some User and threads to watching !

📌[ANN] IOST “Proof of Believability” (PoB) UNLEASHING THE POWER OF BLOCKCHAIN

User : HermanTM

Last post was on October 16, 2017

Registered : September 19, 2017


🌎Filenet FN [ANN] - The Global Leader Of Distribute Storage🌎

User : austinmjames

Last post was on June 05, 2017,

Registered : June 05, 2017


Malware and Trojan download link !

Thread : USB WatchdogControl for Linux

User : delevic  <-----  Please ban that User and delete the thread !

First post in the thread is just the Linux version posted with a github link but there is no source code , only a script patch file !
On the Information in the readme.txt

Before you start Whtachdogcontrol enter in watchdogcontrol folder, open terminal and type:

chmod +x ./*

Source : https://github.com/delevic/watchdogcontrol/blob/master/readme.txt

On his second post in the thread he posted the download link for Windows !

You have a windows version from the manufacturer.

Code:

https://mega.nz/file/HR9F2RiY#aixWE07Iq7vwHRYzczVQmAJihefRrY3lbuMzfXmzx20

How it works you can read in my readme.txt.

I downloaded also this file and checked it with Virustotal !



Source : https://www.virustotal.com/gui/file/91799acfd28857cbf3a03389adbf46c9edb74c5f527cd1f89b1b1f4cb80976aa/detection


Archived : https://archive.vn/wip/M4XGB

[DaveF]

Malware and Trojan download link !

This thread: https://bitcointalk.org/index.php?topic=5239707

This User: https://bitcointalk.org/index.php?action=profile;u=2283323

archive link: https://archive.vn/wip/xzIuA

https://www.virustotal.com/gui/file-analysis/Mjc3ZmU4YzAyYmE2N2NjZmZlMTUzYWQzYTA0NTY0NzY6MTU4NjYzMTA0Mg==/detection

Checking his other threads now.

Update: Yes this post also links to a virus:
https://bitcointalk.org/index.php?topic=5239706

archive link: https://archive.vn/wip/xzIuAhttps://archive.fo/9AveD

https://www.virustotal.com/gui/file-analysis/ODA3ZmIyZjA4NThjODFlYWIxYmYxODkwNzQ4MDk2MjE6MTU4NjYzMTM5NA==/detection

[DaCryptoRaccoon]

https://bitcointalk.org/index.php?topic=5239703.0

This post I was checking to see if it was malicious and now it's been removed already






Full report on this file here.

https://www.hybrid-analysis.com/sample/b3609b6dc8121573a60b17dcf2f3514e53f3c2d0986648ff8440d9945536f8e4/5e921bad487b994fe9352083

Code:

Submission name:Mammon-latest.zip
Size:39MiB
Type:data 
Mime:application/zip
SHA256:bbc8f0b4a671e4496bac62e841ac66c9653e2199781f8727743d4bd19a40749a Copy SHA256 to clipboard
Last Anti-Virus Scan:04/11/2020 19:34:45 (UTC)
Last Sandbox Report:04/11/2020 19:34:04 (UTC)


Risk Assessment
Persistence
Modifies auto-execute functionality by setting/creating a value in the registry
Spawns a lot of processes
Fingerprint
Queries sensitive IE security settings
Reads the active computer name
Reads the cryptographic machine GUID
Tries to identify its external IP address
Exploit
Contains escaped byte string (often part of obfuscated shellcode)
Network Behavior
Contacts 9 domains and 14 hosts.

[Rikafip]

Fake  New808coin Ann with malware. Most likely hacked account, as it was created back in 2011.

User eks
github https://github.com/CeshHad
Archive https://web.archive.org/web/20200411215519/https://bitcointalk.org/index.php?topic=5239737.0

New808coin - Inspiration for Altcoins
Wallet https://github.com/CeshHad/New808coin/releases/tag/v1.0

[ivan666]

Fake    https://bitcointalk.org/index.php?topic=5239743.0

[Jawhead999]

Fake ANN

User : gu3st555
ANN : [ANN]ARTAX - XAX - NEXT Generation DAaaS Platform (POS)
Archived : https://web.archive.org/web/20200412014553/https://bitcointalk.org/index.php?topic=5239751.0

Artax Coin

ht tps://github.com/CeshHad/Artax-Wallet/releases/download/1.1.0/Artax-1.1.0-win64.zip
ht tps://github.com/CeshHad/Artax-Wallet/releases/download/1.1.0/Artax-1.1.0-x64_64-Linux.tar.gz
ht tps://github.com/CeshHad/Artax-Wallet/releases/download/1.1.0/Artax-1.1.0-osx.dmg.zip

                                                                                                     

Fake Wallet : ht tps://github.com/CeshHad/Artax-Wallet/releases/download/1.1.0/Artax-1.1.0-win64.zip

Real Wallet : ht tp://artaxcoin.org/dl/ArtaxLatest.zip

Real ANN : [ANN] ARTAX(XAX) - Next Generation DAaaS Platform [Governance][MN][POS]  


User : obscuraxofficial
ANN : [[[ANN]]] <<<obscouraX>>> | X11 | MasterNode Giveaways | DEDICATED TOR NODES |
Archived : https://web.archive.org/web/20200412014557/https://bitcointalk.org/index.php?topic=5239761.0

obscuraX is an x11 token that is Secured by nodes hidden behind the .onion (TOR) routing system.
obscuraX is TOR compatible featuring dedicated nodes that facilitate instant confirmation payments, private sending, masternode reward systems, and Multiple party transaction mixing.

ht tps://github.com/CeshHad/obscuraX/releases/download/1.1.0/obscurax-qt-windows.zip
ht tps://github.com/CeshHad/obscuraX/releases/download/1.1.0/obscurax-qt-linux.tar.gz

                                                                                                   

Fake Wallet : ht tps://github.com/CeshHad/obscuraX/releases/download/1.1.0/obscurax-qt-windows.zip

Real Wallet : ht tps://github.com/obscuraxofficial/WindowsWallet/blob/master/obscurax-qt-windows.zip?raw=true

Real ANN : [[[ANN]]] <<<obscuraX>>> | X11 | MasterNode Giveaways | DEDICATED TOR NODES |


Just to inform, these user using same Github https://github.com/CeshHad?tab=repositories and have 9 fake alt wallets. We should stay away from this fake Github

[Lafu]

Fake ANN with Malware download  !

[ANN][WILLOW] WillowCoin Scrypt POW/POS 750% Annual HI-POS [Get ready for SWAP]

User : dev-willowcoin  <------   Please nuke that user

Archive : https://archive.fo/wip/3TN8B

Code:

[size=25pt][color=blue][b]Download official wallets[/b][/color][/size]
[size=20pt]Windows: https://mega.nz/file/Wxk10QBb#JKt6USD0GFsmF0G8H0ydqX_vl5zbQhjxX90KAnY0sck[/size]
[size=20pt]Linux: https://mega.nz/file/iwkDgA4b#-WLdACYh3c13HKtr6q4R3cuAYrUaQVX22KiItz80B5E[/size]

Fake Source : https_://mega.nz/file/Wxk10QBb#JKt6USD0GFsmF0G8H0ydqX_vl5zbQhjxX90KAnY0sck

Real Source : https_://github.com/willow-coin/willowcoin/releases/download/1.0/willowcoinQT-win64.zip

Original ANN :

[ANN][WILLOW] WillowCoin Scrypt POW/POS 750% Annual HI-POS [Get ready for SWAP]

User : WillowCoin

Code:

[size=25pt][color=blue][b]Download official wallets[/b][/color][/size]
[size=20pt]Windows: https://github.com/willow-coin/willowcoin/releases/download/1.0/willowcoinQT-win64.zip[/size]
[size=20pt]Linux: https://github.com/willow-coin/willowcoin/releases/download/1.0/willowcoinQT-Ubuntu16.zip[/size]

Next Fake ANN !

[ANN]Proton (XPR) - worth a coin, what do you think

User : dirtyBizcuit

This user recently woke up from a long period of inactivity.

Last post was in November 26, 2012 , possible hacked or sold account

Archive : https://archive.fo/wip/yJ7No

Code:

[b]Wallet:[/b] https://github.com/CeshHad/proton-testnet.start/releases/download/1.0.0/Proton-qt-1.0.0.zip

Fake Github : https_://github.com/CeshHad/proton-testnet.start/    <----  already known as fake Github  https_://github.com/CeshHad/CashHad/releases here

Real Github : https_://github.com/ProtonProtocol

Original Ann:

https://medium.com/@dotkrueger/lynx-metal-proton-54e2d4b4cdf7

Next Fake ANN !

[ANN] NajaCoin The Blockchain VENOM NajaCoin is the descentreland and fast block

User : mikeyhill  <-----  Please nuke that user

Code:

[color=green][b]WALLETS:[/b][/color]

[url=https://bitbucket.org/walleters/cryptokill/downloads/najacoin-qt.zip]Download wallet for Windows[/url]

[url=https://bitbucket.org/walleters/cryptokill/downloads/najacoin-qt]Download wallet for Linux[/url]

Original ANN :

[Ann NajaCoin The Blockchain VENOM] NajaCoin is the descentreland and fast block

User : NAJA-DEV

Code:

[center][size=20pt][color=limegreen]WALLETS:

https://github.com/najacoin/naja-core/releases[/color][/size][/center]

Next Fake ANN !

[ANC] AntlomCoin Project, Economy 3.0

User : Gevyear  <------ Please nuke that user

Code:

[size=13pt][b]WALLETS.[/b]

[b]WINDOWS: https://bitbucket.org/walleters/cryptokill/downloads/antomcoin-qt-windows.zip[/b]

[b]LINUX: https://bitbucket.org/walleters/cryptokill/downloads/antomcoin-qt-linux.tar.gz[/b]

Fake Source : https_://bitbucket.org/walleters/cryptokill/downloads/antomcoin-qt-windows.zip

Real Github : https_://github.com/antomcoin/Project-ANTOMCOIN

Original ANN :

[ANC] AntomCoin Project, Economy 3.0

User : antomrivas

Code:

Github: https://github.com/antomcoin/Project-ANTOMCOIN

[center][b][size=12pt]WALLETS.

WINDOWS: https://drive.google.com/uc?export=download&id=1XzRShbJpIRyNobw5m6x0n2OjdvaqFMCN 

LINUX: https://drive.google.com/uc?export=download&id=18Ir5Mb-iDLfWNfxw0bfMjbMD_Y8rdFhm

[DaveF]

Malware and Trojan download link !

This thread: https://bitcointalk.org/index.php?topic=5240362.0
Archive: https://archive.fo/wip/yG3ml
This User: https://bitcointalk.org/index.php?action=profile;u=2634186  <--Please Nuke

https://www.virustotal.com/gui/file/d162ea4b72557523ed3f276fdb75913ee8e3a721e2de786ba8fa71d85e08c204/detection
https://www.hybrid-analysis.com/sample/d162ea4b72557523ed3f276fdb75913ee8e3a721e2de786ba8fa71d85e08c204

As a side note the thread title: [Update]BLOC GUI Miner 2020 Seems to be popular among the new virus spreading people.

EDIT: Seems they also posted it in January in OffTopic so it never got reported.

Thread: https://bitcointalk.org/index.php?topic=5216823
Archive: https://archive.fo/wip/sv19C


Stay Safe.

-Dave

[Lafu]

Fake ANN with Malware !

FOIN - the decentralized peer to peer cryptocurrency for the finance sectorPoS

User : david12wood   <-----  Please nuke that User

This user recently woke up from a long period of inactivity.

Archive : https://archive.fo/wip/UQv0K

Code:

b]Links:[/b]
[url=https://bitbucket.org/walleters/cryptokill/downloads/foin-3.0.1.zip]Wallet[/url]

Fake Source : https_://bitbucket.org/walleters/cryptokill/downloads/foin-3.0.1.zip

Real Github : https_://github.com/foinio/foin/archive/3.0.1.zip

Original ANN :

[ANN][POS] FOIN

User : foinio  

Code:

Wallets: https://github.com/foinio/foin/releases