BABY SHOES
Sr. Member
Offline
Activity: 322
Merit: 444
HODL - BTC
|
|
September 23, 2023, 11:38:52 PM Last edit: September 23, 2023, 11:54:11 PM by BABY SHOES Merited by ajiz138 (2), Lafu (1) |
|
It seems that these gangs are not tired of continuing to spread malware by spreading it in self-moderated threads. With accounts created in 2021 created simultaneously and now waking up again to spread it. Account name: Fatendisto - Create October 01, 2021, 06:38:54 PM vikolkolpet - Create October 01, 2021, 06:40:37 PM hafuterkina - Create October 01, 2021, 06:42:27 PM jugujikolesad - Create October 01, 2021, 06:49:15 PM Kerikostaw - Create October 01, 2021, 06:53:15 PM
ANNBerto Coin - Your Very Own 3D Printed BitcoinAlfalah Coin - The Ultimate Crypto Innovation for Charity & Local BusinessesPID Coin - Empowering Internet Users with Personal Data OwnershipModic Coin (MODIC) - Your Modern Investment CoinStefanCoin - Your Politically Correct, Decentralized Coin
Fake Githubhttps://github.com/berto-coin/berto-coin/releases/tag/v1.2.0 https://github.com/Alfalah-Coin/Core/releases/tag/v1.1.3 https://github.com/Pid-Coin/Core/releases/tag/v1.1.1 https://github.com/Modic-Coin/modic-coin/releases/tag/v1.3.3 https://github.com/Stefan-Coin/Core/releases/tag/v1.0.2
The file size is the same as yesterday above
Checking on Virustotal detected a trojan virus/malwarehttps://www.virustotal.com/gui/file/1d5a517283b717ceb309b1a524de9e34d3ae9553f5111ba4b87be1c907e7e9a3 https://www.virustotal.com/gui/file/c47fde0015a1f5f3d39ffb4522b54f37c3528833ccca7b24e2839c9077388b3a?nocache=1 https://www.virustotal.com/gui/file/1362f6dd1a93d80b8134512f2848890b812326feb3c55b0cd95e1f6a4b38653c?nocache=1 https://www.virustotal.com/gui/file/a512218aa9ce5b4dd1619679d34ed8d944c08348ed5009840ac2721f37f4b088?nocache=1 https://www.virustotal.com/gui/file/4810f16c9f6dec19a9fe38405634a893cf12cbb1f78dfa84232356a84591a6df?nocache=1
|
| | | SHUFFLE.COM | | | | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | ████████████████████ ████ ██ .
| ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | |
|
|
|
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
BABY SHOES
Sr. Member
Offline
Activity: 322
Merit: 444
HODL - BTC
|
|
September 27, 2023, 01:58:00 AM Last edit: September 27, 2023, 09:02:19 AM by BABY SHOES |
|
Spreading Malware with fake ANN Although it has been tagged by @Lafu today but I think it is necessary to report here and action, Account name SirenaMoon - ban Thread: [ANN] [SRN] SirenaProject - collective help for profit [FiroPOW/Mineable now] & [ANN] [SRN] SirenaProject - collective help for profit [Mineable now]https://github.com/SirenaProject/SirenaCoin/blob/main/SirenaProject-main.zip
Check on Virustotal which detected Malware Additional edits Malware spreading fraudsters have created new accounts by creating the same thread and with the thread locked. Account name CoronelsNANN[ANN] [NSR] SIR - crypto messenger for communication (FiroPOW/Fast start)
|
| | | SHUFFLE.COM | | | | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | ████████████████████ ████ ██ .
| ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | |
|
|
|
Lafu (OP)
Legendary
Offline
Activity: 2968
Merit: 3046
|
|
September 27, 2023, 03:22:10 PM |
|
~~~~~~
Thanks afor keeping your eyes open and that reported the threads and things , i was just on the mobile earlier when i tagged the Account. Yes you are right as i have written a post earlier its always helpfull to collect the Fake Threads and there Links. Its good to have some help against the Hackers and Malware spreading hacked User Accounts .
|
|
|
|
BABY SHOES
Sr. Member
Offline
Activity: 322
Merit: 444
HODL - BTC
|
|
September 27, 2023, 10:20:45 PM |
|
Yes you are right as i have written a post earlier its always helpfull to collect the Fake Threads and there Links. Its good to have some help against the Hackers and Malware spreading hacked User Accounts .
Yes we must continue to report in every thread that is suspicious of spreading malware here, most of what I find are newbie accounts that have just been registered. Another one with a newbie account makes malware spread by continuing to create ANNs that are locked. I will not get tired of reporting them. Account name: SirkonaMomentANN: [ANN] [KRS] Sirkona - safety communication [ProgPow]Don't clickhttps://github.com/SirkonaCoin/Sirkona/releases/download/1.0.0/SirkonaProject-win-v1.0.0.zip
|
| | | SHUFFLE.COM | | | | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | ████████████████████ ████ ██ .
| ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | |
|
|
|
Lafu (OP)
Legendary
Offline
Activity: 2968
Merit: 3046
|
|
September 28, 2023, 01:38:37 AM |
|
Another one with a newbie account makes malware spread by continuing to create ANNs that are locked. I will not get tired of reporting them.
Yes you are right with the last Fake Ann , the Fake Github github.com/SirkonaCoin was just created 4 Hours ago. Nice to hear that you dont get tired of reporting them , thats for sure a big help fighting against this things. Looks like they got not anymore hacked Accounts that they can use as the last ones new Accounts.
|
|
|
|
BABY SHOES
Sr. Member
Offline
Activity: 322
Merit: 444
HODL - BTC
|
|
September 28, 2023, 12:33:53 PM |
|
There is an old thread in June still not reported, because their site is active and also the shitcoin is traded on the Xeggex exchange after making a deeper search by checking the downloaded wallet and then checking in Virustotal detected Malware. Even worse, they tried to create a new ANN with a new account to spread it, fortunately now we are reporting them. Account nameReactiveBitcoin Create Today SquishyCoin ANN[Re-ANN] [SQCN] SquishyCoin - rework and update coin [Equihash 200,9][ANN] Squishy Coin (SQCN) PoW / PoS | Equihash 200,9 --- June 23, 2023 Fake GitHubhttps://github.com/sqcndev/SquishyCoin/releases/tag/v0.7.2
Detected https://www.virustotal.com/gui/file/e5fd4a1d67f8366c67117a3a0a64385b4177adf4b66e45ae622d5e34a579c466?nocache=1
|
| | | SHUFFLE.COM | | | | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | ████████████████████ ████ ██ .
| ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | |
|
|
|
|
Lafu (OP)
Legendary
Offline
Activity: 2968
Merit: 3046
|
|
October 21, 2023, 05:10:23 PM |
|
And we have a new Fake Miner Topic with a new Fake download Github Account Link with Malware for Pooler CPUMiner ! The Fake Github Account was created 3 days ago. Fake Github : github.com/poooIer/cpuminerReal Github : github.com/pooler/cpuminerAccount : BitTargetPlus <--- Please ban or Lock that Account and delete the ThreadIts a new Fake Account from the Hackers and was just Registered yesterday. Fake Miner Thread : The latest release of Pooler CPUMiner v2.5.2 is now available.Current Version: 2.5.2 (Okt 19, 2023) https://github.com/poooIer/cpuminer/blob/v2.5.2 There is no new Version of that CpuMiner! Original CpuMiner Thread : An (even more) optimized version of cpuminer (pooler's cpuminer, CPU-only)Account : poolerThis post is also a reference for the Github Report !
|
|
|
|
light_warrior
In memoriam
Copper Member
Hero Member
Offline
Activity: 602
Merit: 922
|
|
October 27, 2023, 07:56:10 PM Last edit: October 27, 2023, 08:14:43 PM by light_warrior |
|
|
|
|
|
Lafu (OP)
Legendary
Offline
Activity: 2968
Merit: 3046
|
|
October 28, 2023, 01:14:17 PM |
|
One comrade here is spamming with his miner, in which virustotal detected a trojan. I don't know if the fact that only two virustotal antivirus engines detected a trojan in this file is enough.
Its enough and the detections from Virustotal are not false positive and you was right to report them here. Thanks for keeping your eyes open , i also reported posts from all 2 Users and they are already deleted. I also reanalyzed the file again on Virustotal and it got now 3 detections , thanks again for let me know about that.
|
|
|
|
|
BABY SHOES
Sr. Member
Offline
Activity: 322
Merit: 444
HODL - BTC
|
There was recently a fake Ann with a trojan in the Github download. Fake Gituhub: github.com/AgloranProjectUser: Lonyee665 - This user has 282 activities and suddenly spreads a trojan with a fake ANN, maybe this account was hacked. ANN Fake: [ANN] [AGL] Agloran - perfect health area [FiroPow/Fast exchanges]Virustotal : https://www.virustotal.com/gui/file/278356ef057c422d04bc8d4d46e5c05ebac66b6b1cccfb8b5738aed161dd8385
|
| | | SHUFFLE.COM | | | | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | ████████████████████ ████ ██ .
| ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | |
|
|
|
|
BABY SHOES
Sr. Member
Offline
Activity: 322
Merit: 444
HODL - BTC
|
|
November 04, 2023, 12:01:08 AM |
|
This user appears again with his fake ANN, even though he has been tagged by you, at least I am reporting again here so that this user is banned. ANN Fake: [ANN] [OGR] OgreCoin (Ghostrider)User: vesko_savov - Please ban this user and lock the thread.
|
| | | SHUFFLE.COM | | | | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | ████████████████████ ████ ██ .
| ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | |
|
|
|
pinggoki
Sr. Member
Offline
Activity: 1470
Merit: 415
★Bitvest.io★ Play Plinko or Invest!
|
|
November 04, 2023, 02:51:22 AM |
|
This user has 282 activities and suddenly spreads a trojan with a fake ANN, maybe this account was hacked.
I've checked the 5 pages of his post and it's just bounty related posts so I might not be too inclined to believed that this account is hacked, there's not a lot of effort invested in this account so it's easy for him to just use it to share a Trojan, if I were on that person's shoes and there's an opportunity for me to do it with an account that has some significant activity to hide my intentions (sharing links in the posts most of the time so it's likely that someone will click on my links without thinking about it.), I would probably do it too. Although I could be wrong though and this account really is hacked but that's unlikely since the hacker won't really get anything out of hacking this account wouldn't they?
|
|
|
|
BABY SHOES
Sr. Member
Offline
Activity: 322
Merit: 444
HODL - BTC
|
|
November 04, 2023, 10:40:12 AM |
|
|
| | | SHUFFLE.COM | | | | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ ███████████████████████ | ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | ████████████████████ ████ ██ .
| ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██████ | |
|
|
|
Lafu (OP)
Legendary
Offline
Activity: 2968
Merit: 3046
|
|
November 04, 2023, 08:02:27 PM |
|
This user appears again with his fake ANN, even though he has been tagged by you, at least I am reporting again here so that this user is banned.
Thanks for keeping your eyes open and reporting this kind of posts and topics. Yeah it was late when i saw that user and just tagged him and reported the thread , would have written it the other day but you was faster. Oh and can you please use the code function and edit your last posts so that nobody can click on the Links , would be nice. Looks like after a short break they starting again to post there Malware shit Links , but i am ready. Although I could be wrong though and this account really is hacked but that's unlikely since the hacker won't really get anything out of hacking this account wouldn't they?
They dont care about the Accounts or what is related to them , they just want to spread there Fake Malware Links and sometimes somenody falls in that trap. Then they can use this Account again and doing the same with it and on top of that they get all his coins if they lucky.
|
|
|
|
Lafu (OP)
Legendary
Offline
Activity: 2968
Merit: 3046
|
|
November 06, 2023, 09:16:38 AM Last edit: November 06, 2023, 11:42:56 AM by Lafu |
|
And we have a new Fake Ann with an Fake Github Malware download Link for Etica !Fake github : github.com/etilcaReal Github : github.com/eticaAccount : Redox778 <--- Please ban or Lock that Account and delete the ThreadLooks like that Account got hacked as the last year it just posted in the Bountie section. Fake Ann Thread : [ANN] ETICA - open source medical research (Rework blockchain/ETChash)https_://github.com/etilca/etlca-gui/releases/download/1.0.7/Windows-eticawallet-1.0.7.zip/ Original Ann Thread : [ETI] Etica - A cryptocurrency for Open Source medical researchAccount : etica And again from a other User posted the same Fake Ann and Fake Github !Account : tasin78 <--- Please ban or Lock that Account and delete the ThreadLooks like this Account also got hacked or sold. Fake Ann Thread : ETICA COIN - open source protocol for medical research (etchash)Walletshttps://github.com/etilca/etlca-gui/releases/download/1.0.7/Windows-eticawallet-1.0.7.zip This post is also a reference for the Github Report !
|
|
|
|
Lafu (OP)
Legendary
Offline
Activity: 2968
Merit: 3046
|
|
November 07, 2023, 12:47:13 PM |
|
And we have again a new Fake Ann Thread with an Fake Github Account for nikitonium !Fake Github was just created 5 Hours ago. Fake Github : github.com/nikitonumReal Github : github.com/nikitoniumAccount : voelker <--- Please ban or Lock that Account and delete the ThreadRegistered on January 31, 2016 and today first post , possible hacked or sold Account Fake Ann Thread : [ANN] [NIK] Nikitonum - Secure Cryptocurrency Blockchain (Ghostrider)Windows: https://github.com/nikitonum/nikito/releases/download/2.0.2.3/windows-nikito-2.0.2.3.zip Original Ann Thread : [ANN] WITHOUT A BLOCKCHAIN, $NIKI CANNOT EXISTAccount : nikitoniumThis post is also a reference for the Github Report !
|
|
|
|
Lafu (OP)
Legendary
Offline
Activity: 2968
Merit: 3046
|
|
November 08, 2023, 09:31:00 AM Last edit: November 08, 2023, 01:04:09 PM by Lafu |
|
And there is again a new Fake Ann Thread with a new Fake Github Account with Malware for DoubleNode !The Fake Github Account was just created 1 Hour ago. Fake Github : github.com/DoubleNodeCoinReal Github : github.com/DoubleNodeAccount : Henrique250 <--- Please ban or Lock that Account and delete the ThreadThe Account is Registered since September 08, 2017 without any post , possible Hacked or sold Account. Fake Ann Thread : [Pre-ANN] DoubleNode - experimental mining project [ProgPow/MN]Wallethttps://github.com/DoubleNodeCoin/Experimental/releases/download/1.1.1/doublenodecore.zip A testnet is currently being conducted to test all systems. Coins mined on the testnet will be transferred to the mainnet in a 1:1 ratio First Red Flag is that normaly no Coins mined from the testnet will be transferred to the mainnet. Next Red Flag is:When you install the Github download file it will create a lot of bad things. One of them is the File C:\Windows\Supremo.exe that is a Remote Control Program. Virsutotal : https://www.virustotal.com/gui/file/79c7262e1335c522daa70fc65fb58b1435b28e0bbf2b21a88d6c03f8135a4da5/behavior And again there is another new Fake Ann with a new Fake Github Account for nikitonium !Fake Github was created 1 Hour ago. Fake Github : github.com/nikitoniumsReal Github : github.com/nikitoniumAccount : mrhakas565 <--- Please ban or Lock that Account and delete the ThreadLooks like the Account got hacked. Fake Ann Thread : [ANN] WBS - without blockchain and compromise system (CPU algo)Our walletsWindows: https://github.com/nikitoniums/nikito-wbs/releases/download/2.0.2.3/nikitonium-core-2.0.2.3.zip Linux: https://github.com/nikitoniums/nikito-wbs/releases/download/2.0.2.3/ubuntu-nikitonium-2.0.2.3.tar.gz Our socialsWebsite: https://nikitonium.com/Discord: https://discord.gg/QFSvSuvgGq Original Ann Thread : [ANN] WITHOUT A BLOCKCHAIN, $NIKI CANNOT EXISTAccount : nikitoniumThis post is also a reference for the Github Report !
|
|
|
|
|