Report Malware and Suspicious Links here so Mods can take Action !

[cryptobaht]

  Our bad, we were probably too complacent, but we are commenting now: no malware was ever posted from our account. The recent s**tstorm was caused by NiceHash when they saw an opportunity to smear us, and steer their users to their in-house miner instead. Here is our quite long overview about this: https://bitcointalk.org/index.php?topic=2647654.msg56526051#msg56526051

  MEGA deleted our account but as far as we know they never tried to replace the actual legitimate files with something malicious (even NiceHash admitted so, when pressed if they were distributing a fake version of PhoenixMiner). Just to be on the safe side, we removed all (now dead) links to MEGA from our messages.

  There is constant stream of newbie accounts posting fake "new versions" and "hotfixes" of PhoenixMiner in our thread but certainly you can't hold us responsible for everything that is posted there?


  And now there is another one but this time from seemingly reputable user. We don't know if the account is hacked, or the user is really pushing this fake, and most probably malicious release of PhoenixMiner

User : JorisK  

Post : https://bitcointalk.org/index.php?topic=2647654.msg56529405#msg56529405

Check this

PhoenixMiner 5.5d - hotfix available

Notes

-Greatly improved the work of video cards with 4 gb

-Fixed global problems for video cards from Nvidia/AMD
-Fixed errors and crashes when the miner was running
-Improved work on Win7 and 10xx series video cards
-Increased hashrate on video cards series 20xx,30xx
-Increased hashrate on Ethash by an average of 10%
-Increased hashrate on ETCHash by an average of 7%
-Improved the work of the miner in general

Download
Windows: [removed url]
Linux: [removed url]

[mod note: removed potentially malicious URLs for an already deleted post]

Just finished reading 20+ pages in your thread regarding this issue. I use your miner on my rigs and buy did it get me scared at one point... Was very close to reinstalling the system etc when I saw your post. Please don't disappear again for so long, especially when any sort of FUD starts.

[1714035633]

1714035633

[1714035633]

1714035633

[1714035633]

1714035633

[1714035633]

1714035633

[1714035633]

1714035633

[Lafu]

Check this

PhoenixMiner 5.5d - hotfix available

Notes

-Greatly improved the work of video cards with 4 gb

-Fixed global problems for video cards from Nvidia/AMD
-Fixed errors and crashes when the miner was running
-Improved work on Win7 and 10xx series video cards
-Increased hashrate on video cards series 20xx,30xx
-Increased hashrate on Ethash by an average of 10%
-Increased hashrate on ETCHash by an average of 7%
-Improved the work of the miner in general

Download

Code:

Windows: https://mega.nz/file/t8wC2QAC#-LjBlHxE-sMOYlm4hB5hC4vVQUZbyNd4sBYZigZOf3Y
Linux: https://mega.nz/file/JP4yQbSC#OiAa76fJFx9CywywCjXFvgTao5xbIdV3D9RwStco-ec

Can you please edit your post you have done so its not anymore possible that someone can click on it as i have done ! Just to be sure nobody downloads the Malware shit !

There is constant stream of newbie accounts posting fake "new versions" and "hotfixes" of PhoenixMiner in our thread but certainly you can't hold us responsible for everything that is posted there?

We fighting and reporting the Fake Links from them much longer now as there was no beef between you and NH and they have changed a few times there Links !
The Fake Malware Links got reported first manually most times in the beginning i have done this and a few other has done that also.

Big thanks goes on this way to Mitchell and his special friend MindlessElectron that helping to get rid of them instant after they have done a post.
Its for sure a big awesome help on this case and makes it possible to focus on other Spam and Scam things, Thanks Mitchell and Rizzrack

[PhoenixMiner]

We greatly appreciate the efforts of the moderators in removing these links, and we are fully aware that it didn't start with us, and we are not that significant in the great scheme of things. Please take our sincere apologies about the situation - it wasn't our intention to start any dispute with NiceHash, or anybody else, and we hope this storm in a teacup will die down soon.

If there is anything we can do in order to help filter out the malicious links, please let us know.

[lovesmayfamilis]

1. Malware and Fake Wallet

Thread:  https://bitcointalk.org/index.php?topic=5323461.0

Profile Link: ekkakon

[ archive ]

Virus Total Link/s:

https://www.virustotal.com/gui/file/e4c2dcb50c5e751fec7832eb5a45cfad53be6e9db15d05e77c84adfc517ea8aa/detection

[SiNeReiNZzz]

We greatly appreciate the efforts of the moderators in removing these links, and we are fully aware that it didn't start with us, and we are not that significant in the great scheme of things. Please take our sincere apologies about the situation - it wasn't our intention to start any dispute with NiceHash, or anybody else, and we hope this storm in a teacup will die down soon.

If there is anything we can do in order to help filter out the malicious links, please let us know.

I have removed the negative rating in your profile.
Thank you for your comprehensible statement on this.

Of course, I do not want to accuse anyone unjustly...

[Lafu]

I have removed the negative rating in your profile.
Thank you for your comprehensible statement on this.

Of course, I do not want to accuse anyone unjustly...

Maybe take a deeper look next time into all and the case before you give instant an negative Feedback as the Miner was used already for month for many Users.
And they dont got realy anything to do with the Malware Link postings they got in there Thread.
But im glad that they moved now all there things to github as you have a better looking over the things there and its easier to catch Fake Versions of them now.

[qwertyup23]

1. Malware from Github link and Fake Wallet

Thread: [ANN] 🚀🚀 WallStreetBets Coin 🚀🚀 **JUST RELEASED!!** 🤑 Join WallStreetBets! <---- DELETE

Profile Link: wallstreetbetscoin
----> BRAND NEW: Last post January 31, 2021


Archive: https://archive.fo/J80v1

Virus Total Link/s:

• https://www.virustotal.com/gui/file/4057b7248e23ab6d6d6233fa891737150d0bcac20d28ad328977eba0c12699ad/detection

Code:

https://github.com/wsbc-coin/wallstreetbets/releases/download/v0.7.1.1/windows-release-v0.7.1.1.zip

[morvillz7z]

Please ban/nuke newbie CohenB and delete their fake announcement thread: [ANN] Chia Network - Official Thread
Chia Network does not have an official thread here on bitcointalk, the one started by CohenB contains links to fake Github account and mega . nz files!

You can find and cross-check Chia Network downloads either on their website or on their official Twitter account:
https://chia.net/
https://twitter.com/chia_project

Original Chia Network thread and GitHub:
https://chia.net/
https://github.com/Chia-Network

Fake Chia Network thread and GitHub:
https://bitcointalk.org/index.php?topic=5333119
https_://github.com/Chla-Network  (404 error, it's either being deleted by mods or does not exist)
https://archive.fo/3ULTI

Code:

https://github.com/Chla-Network
https://mega.nz/file/pxg3mKzY#YbwuEb0gAbuwWcJlrHWgoSSRY6zJNCUukdjALkfkacA

Miscellaneous:

CohenB got 105 merits from three separate accounts that i suspect are compromised, they have either recently awoken or haven't posted in years. 100 merits have been sent to the following post:

archive: https://loyce.club/archive/posts/5686/56860793.html

nice

jobsbuell - https://bitcointalk.org/index.php?action=profile;u=863226
majestymage - https://bitcointalk.org/index.php?action=profile;u=533079
Erickvand - https://bitcointalk.org/index.php?action=profile;u=966944

[Lafu]

~~~~~

Nice found buddy !
Hope that this is not the next wave starting with shitloads of new Fake Announcement Threads again.
But it can be as it was a long time quiet now from them , maybe the collected in this time new Accounts and starting again.
Will be more have an eye out there for sure now .

[qwertyup23]

1. Malware from Github link and Fake Wallet

Thread: 🔥[ANN]🔥[BTO]💰BITOCOIN⚡️CPU mining⚡️FREE AND MINABLE🔥🚀🔥🚀🔥🚀 <---- DELETE

Profile Link: Bitosim
----> BRAND NEW: Last post April 07, 2021


Archive: https://archive.fo/asOKb

Virus Total Link/s:

• https://www.virustotal.com/gui/file/deda6fe8bbe1c2a4f7630cac8793e39433fbf4760f9fcf23a85a7cf20a8fe52d/detection

Code:

https://github.com/redstone5561/Bitocoin/raw/main/bitocoin-qt%201.exe

[Lafu]

1. Malware from Github link and Fake Wallet

Thread: 🔥[ANN]🔥[BTO]💰BITOCOIN⚡️CPU mining⚡️FREE AND MINABLE🔥🚀🔥🚀🔥🚀 <---- DELETE

Profile Link: Bitosim
----> BRAND NEW: Last post April 07, 2021
Archive: https://archive.fo/asOKb

Nice found !
And i also have looked on the Whitepaper there and there is nothing special written in there !
They used a few Lines in there from diffrent papers like from LiteCoin and others .
And at the moment the Website dosnt work , cant get there !

[morvillz7z]

Please ban/lock user XperiaZ4 and delete their fake announcement thread: [ANN] SharkCoin (SKN) POS + MASTERNODE

It's worth noting that the GitHub account they're using is named Chia-Netvvork, and it has two repositories, one for SharkCoin and one for Chia (empty). I believe they will use the same GitHub tomorrow or in the coming days, as Chia holders will be able to spend/sell their coins beginning May 3rd. So everyone, be on the lookout for more fake Chia threads...

Original SharkCoin thread and GitHub:
https://bitcointalk.org/index.php?topic=5253754
https_://github.com/sharkcoin32/Sharkcoin

Fake SharkCoin thread and GitHub:
https://bitcointalk.org/index.php?topic=5334702.0
https_://github.com/Chia-Netvvork  (created less than a day ago)
https://archive.fo/PVxI0

Code:

WALLETS:
Win64: https_://github.com/Chia-Netvvork/SharkCoin/raw/main/sharkcoin-3.4-win64.rar

[Lafu]

For sure the Account got sold or hacked as the last post was done in January 29, 2020 from this Account !
Also the Exchange that he is writing in there Ann are at the moment in maintenance as they got hacked a few days ago.
The Github Account was created 17 hours ago , nice found buddy and will try to report the Github Account.

[Lafu]

Next Fake ANN !

Thread : [ANN] [LCNT] LUCENT POW/HYBRID MASTERNODE/DARKSEND

User : yetiripper   <-----   Please ban or lock that Account

This user recently woke up from a long period of inactivity.
Last post from this User was in August 22, 2018, possible Hacked or sold Account
Github Account was just an Hour ago created

Archive : https://web.archive.org/web/20210510122808/https://bitcointalk.org/index.php?topic=5336472.0

Virustotal : https://www.virustotal.com/gui/file/73fbc45552927c7a7ec5d93896917040d3d8075a5ae6e63e0a1d2b7cee4824c2/detection

Code:

Windows: [URL=https://github.com/LCNT-coin/Lucent/raw/main/lucent-qt-windows64.zip] https://github.com/LucentCoin/Lucent/releases/download/v0.13.0.1/lucent-qt-windows64.zip[/URL]

Fake Github : https_://github.com/LCNT-coin/Lucent/raw/main/lucent-qt-windows64.zip

Real Github : https_://github.com/LucentCoin/Lucent/releases

Original ANN

Thread : [ANN] HYBRID MASTERNODE/POW/DARKSEND LUCENT [LCNT]

User : OfficialLCNT

Code:

https://github.com/LucentCoin/Lucent/releases

[qwertyup23]

1. Malware from Github link and Fake Wallet

Thread: [ANN] COINBE - POW/POS - Anonymous, Secure, Independent <---- DELETE

Profile Link: bemoney
----> BRAND NEW: Last post May 10, 2021


Archive: https://archive.fo/vOz1d

Virus Total Link/s:

• https://www.virustotal.com/gui/file/20a581386b498193cb86d8cd4b787322dc7f27611a8e8404fca3eb1dea775d9d/detection
• https://www.virustotal.com/gui/file/663ca396efeb72f7eb3a2e128cb34d214a4102d7082ef526c81cbcc106d82af4/detection

Code:

https://github.com/coin-be/core/releases/download/1.0/coinbe-qt-linux.tar.gz

Code:

https://github.com/coin-be/core/releases/download/1.0/coinbe-qt-windows.zip

[PhoenixMiner]

Probably compromised account, posting suspicious links in PhoenixMiner thread, pretending to be an official release of the miner.

User : stef_stef  

Post : https://bitcointalk.org/index.php?topic=2647654.msg56991906#msg56991906

Last post from this User was in June 25, 2019
The Github that is used for the links is created today (May 12, 2021)

The new beta version is finally ready. You can download PhoenixMiner 5.6d from here:

PhoenixMiner_5.6d_Windows.zip (GitHub) link removed
PhoenixMiner_5.6d_Linux.tar.gz (GitHub) link removed



The new features in this release are:

• The problem with the missing GPU temperatures on Nvidia GPUs is fixed
• Added native kernels for AMD RX6700 GPUs. These are faster than the generic kernels and produce a lot less stale shares
• Increase the max supported DAG epoch to 550 (should be enough to about Jan 2023)
• Full support for setting clocks, fan speeds, voltages, and memory timings of AMD RX6900/6800/6700 cards
• The specific hashrate is now shown in the form of kilo hashes per joule (kH/J). Example: if a GPU has hashrate of 30 MH/s with 100W power usage, the specific hashrate is 300 kH/J
• Added new command-line parameters -ttj and -ttmem, allowing automatic fan speed control based on GPU hotspot (junction), and memory temperatures respectively. Example: -ttmem 83 will keep the GPU memory temperature at or bellow 83C by increasing the fan speed as necessary. These parameters can be combined with -tt, as well as with each other. These options are supported only on AMD GPUs that report junction and memory temperatures
• Added new command-line parameters -tmaxj and -tmaxmem, allowing to decrease the GPU usage when the GPU hotspot (junction), or GPU memory temperatures are above the specified thresholds. These options are supported only on AMD GPUs that report junction and memory temperatures
• Added support for AMD Windows drivers 21.3.2, and 21.3.1
• Added support for AMD Linux drivers 20.50.x. Use this drivers only if you have Polaris or older GPUs, or the latest RX6x000 GPUs. WARNING: Vega, Radeon VII, and Navi GPUs won't work with these drivers!
• Turn off the zero fan feature on AMD cards whenever a fixed fan speed is used (e.g. -tt -40), or when an auto fan with min fan speed is used (e.g. -tt 63 -minfan 35). To disable this feature, add -fanstop 1 command-line parameter
• When -mcdag 1 is specified under Linux, the miner will not wait for the daggen.sh script to finish before starting to generate the DAGs. Instead it will for a fixed 7 seconds. This allows you to do all the following in the daggen.sh: turn off the overclocking of Nvidia GPUs, sleep for 30-60 seconds to allow time for DAG generation, and then re-apply the overclocking of the Nvidia GPUs
• Other small improvements and fixes

The support for -ttj, -ttmem, -tmaxj, and -tmaxmem for Nvidia 3090 and 3080 GPUs is not yet ready for release. We hope to have it ready for the final 5.6 release.

For more robust integrity check, you can use our GPG public key, which was verifyed with ETH transaction from our main devfee account as explained here: https://bitcointalk.org/index.php?topic=2647654.msg56755869#msg56755869.

Please let us know if you have any problems or questions related to PhoenixMiner 5.6d.

[Lafu]

Probably compromised account, posting suspicious links in PhoenixMiner thread, pretending to be an official release of the miner.

The new beta version is finally ready. You can download PhoenixMiner 5.6d from here:

Code:

[url=http_://PhoenixMiner_5.6d_Windows.zip]PhoenixMiner_5.6d_Windows.zip[/url] (GitHub) [i]link removed[/i]
[url=http_://PhoenixMiner_5.6d_Linux.tar.gz]PhoenixMiner_5.6d_Linux.tar.gz[/url] (GitHub) [i]link removed[/i]

Looks like that the bot from mitchell already catching this kind of posts and links on your thread and from the forum!
As i have seen a few there and was on the way to report it to the moderators but the most got deleted instant.
Reported a few of them , thanks for let us know about the new links and post .

[qwertyup23]

1. Malware from Github link and Fake Wallet

Thread: ANN - PrivatePay [XPP] <---- DELETE

Profile Link: Yoko19v
----> BRAND NEW: Last post March 12, 2021


Archive: https://archive.fo/0k5V8

Virus Total Link/s:

• https://www.virustotal.com/gui/file/bb51e233e3070cdd89159ef6c14c07737d9eb97b491517172b79da33dd42acfa/detection

Code:

https://github.com/PrivatePay-Reborn/PrivatePay/releases/download/v1.0/privatepay-win64.zip

[Lafu]

~~~~

Dont know if you have seen or readed the old and original Ann !
Maybe take a look there as the User have written there also that there is will be a new thread for it !
https://bitcointalk.org/index.php?topic=4496100.msg57028243#msg57028243

There are a few Malware detections but also it look like a few false positive one from the Wallet link and Virustotal .
Have to look more into it laters .

[qwertyup23]

Dont know if you have seen or readed the old and original Ann !
Maybe take a look there as the User have written there also that there is will be a new thread for it !
https://bitcointalk.org/index.php?topic=4496100.msg57028243#msg57028243

There are a few Malware detections but also it look like a few false positive one from the Wallet link and Virustotal .
Have to look more into it laters .

Thanks for the heads-up! Will definitely check again the wallet links posted. I'm also going to scan it in a different platform to see if it is indeed a false-positive garnered by virustotal. Nevertheless, thank you for the heads-up, Lafu!