Report Malware and Suspicious Links here so Mods can take Action !

[Zaka1221]

If you want to learn about that all read this Topic from the first post on.
Every User have different skills and some style to report and find some kind of things , in the end the whole community works together to catch the shady things.

Thank you very much for your kind words and for your guidance as well. I will continue to learn more about this and I will also read posts on these topics so I can get more help.

Apologies for disturbing you but I find suspicious activity of this user Ominira because they posted ANN is Announcements (Altcoins) section multiple times but moderators deleted it. However, this user recently posted same ANN again. I researched this topic and scanned files available in it and I found some viruses in files which I believe could be malware.

Lastly i request you @Lafu please do your own research on this. If there is indeed any malicious activity present then take against this user and their topic.

User: Ominira

Topic: [ANN] [RANDOMX] Ominira Network (OMI)

File Files:

Code:

https://github.com/Ominirex/ominira-server/releases/tag/1.0

Reference: [1] https://www.virustotal.com/gui/file/4c105c4b3a7c723721956274aebbbb8faa4d416572f98f5257e2df344a84224b/detection
[2] https://www.virustotal.com/gui/file/1a84d2386cb7c0d027e600157b93fe16290b1f451140b93c3e1571306b03adb2

[$crypto$]

Fake Baseus Thread - POW spreading Malware via Github link

Account: Visdome Please Ban
Fake ANN: [ANN] Baseus - POW | Testnet |

Code:

[b]Beta wallet (testnet) :[/b] https://github.com/Baseus-chain/Baseus/releases/tag/1.3.0

Virustotal: https://www.virustotal.com/gui/file/325fabd48189a8759982d5dc87fe8e65d53d1680d32ea202f55ac0187a5b8ac2/detection

[Lafu]

Lastly i request you @Lafu please do your own research on this. If there is indeed any malicious activity present then take against this user and their topic.

To be honest here , i dont have to be proof here something , if you have something that proof that is something wrong with some Ann that are made write here.
Dont request ,me to proof or research anything if not to be 100% sure about that.
If you dont know about the whole thing and you have some thoughts about write it , but please try to do your one research about it.

[Zaka1221]

Today, I have returned to this thread with new report. Few hours ago user BoopCoin created topic for fake project and after analyzing it I found Trojan and other malicious viruses in wallet files. I request that I am submitting details here and I hope you all will do your own research and take action against this user and the topic.

User: BoopCoin
 
Topic Link: [ANN][BOOP] BoopCoin — Fair Launched | Pure PoW | No Presale |Meme to Metaverse

Reference: https://www.virustotal.com/gui/file/52598a215504f6e99e72a164c6f9c5bdd7084ed1f2c8cb01ddc82e26b3775eac

Fake File:

Code:

https://github.com/booopcoin

[Zaka1221]

I am back again today with new report. The user xParasite has created fake project topic and after conducting my research and scanning download file I found Trojan and other malware viruses. I request all scam busters members and moderators to do their own research on this and take action against user and thread.

User: xParasite
 
Topic Link: [ANN] xPARASITE: The Parasitic Blockchain

Reference: https://www.virustotal.com/gui/file/5bc5a2ba65e07fbe9f3012c9c63aac33d1693cf87bf6c720720d628ae9b09a6d

Fake File:

Code:

https://xpara.site

 
[/quote

[Lafu]

I am back again today with new report. The user xParasite has created fake project topic and after conducting my research and scanning download file I found Trojan and other malware viruses. I request all scam busters members and moderators to do their own research on this and take action against user and thread.

From that Link : https://www.virustotal.com/gui/file/5bc5a2ba65e07fbe9f3012c9c63aac33d1693cf87bf6c720720d628ae9b09a6d you posted there are 2 or 3 things that maybe will be shaddy.
Its not to 100% clear if that File on that Topic is really a try to only catch other Users Coins and stuff , most of the detections are for the Miner Software that integrated in the Wallet.
But its always good bring that warning , to be honest i dont know how to handle this case.
Maybe i will look more into this when i have more time.

[beveryu778]

User - lanhho1006 - Probably promoting a fake and Malware software. he/she should be banned before victimizing someone

ANN- https://bitcointalk.org/index.php?topic=5555531

Code:

https://github.com/RocketMinerCore/RocketMiner/blob/main/README.md
https://github.com/RocketMinerCore/RocketMiner/releases/download/RocketMiner/RocketMiner.zip

Virustotal: https://www.virustotal.com/gui/file/c05067932c5cc8ee9ace30b778272364f079f8a801d06c86bdd043f4de51c445/detection

Another Allegation
This user woke up yesterday after a long time. and post this Malware ANN. So, this account is probably hacked or a sold account.


https://bpip.org/Profile?id=1190243

[DYING_S0UL]

This guy seems to be promoting some kind of ETH trading bot. I made a quick scan at virusTotal and it came out as malicious/suspicious for Phishing.

User: braaandon000
Post: https://ninjastic.space/post/65714590
VirusTotal: https://www.virustotal.com/gui/url/eee53c2071ffd7fc69554252f150c4648e3508e9d4019771454e06c26e0f5d1f?nocache=1

Code:

https://xmonad.xyz/

[$crypto$]

Beware of fake threads saying FLASH BTC TRANSACTION.

Account: beleha653
Fake ANN: [VIP] FLASH BTC TRANSACTION (Send Fake Transaction) 2025 + Tested

Code:

Download Link:
https://fex.net/s/pm9crrr
https://upload.nolog.cz/download/779f76225b96a994/#SDbyxob8_Dpk742SD7usfw
https://ydray.com/get/t/u17561162928402GxXsb2d16c33443dSY
https://limewire.com/d/V7vQU#r2uFRdTvTV

https://www.virustotal.com/gui/file/a9be5b8dde709c6b03dd4af62712f59b60741206d8067356666d145c8b46f0af/detection

[N.O]

Beware scammer spreadimg fake and malware things on forum.

Account Link: yibog1299 <<< Please Ban this Account

Fake Topic: [UHQ] SEED PHRASE GENERATOR & CHECKER MINER - ETH BTC LTC DOGE TRX <<< Please Remove Topic

Code:

https://upload.nolog.cz/download/46337d71b36e34cc/#NyjRzlMeW9J8sv6uj1-myQ
https://ufile.io/jvyxst1r
https://fex.net/s/fmpcofa
https://ydray.com/get/t/u17561622888169eYfD276dcacb6792sP
https://anonymfile.com/rND6E/chain-miner.zip
https://uploadnow.io/f/c53KVLZ
https://gofile.to/6Lm/chain-miner.zip
https://limewire.com/d/T1qpW#5MeKGlO0KC

Report link: https://www.virustotal.com/gui/file/67de6012bbdd163ba876377e9c7881fd7408d4bc3c0d58708127609ad444e98a

[Ambatman]

I find the link in this thread suspicious Interesting method to make huge profit on BTC trading
Not only did the account posted for the first time since 2018
The only one that replied before they locked it posted last few years ago.

And I don't really trust people that supposedly voluntary share method to make money.


They used another title in posting in the Altcoin Announcement board
🔥 Make money with older Node on Swapzone 🔥 3000$ in 1 day

[Ambatman]

https://bitcointalk.org/index.php?topic=5557496.0
They are back at it again
Though now more aggressive with some changes on the doc file
And topic titles
Don't account That do this get nuke? I'm aware they can make another one
But an account with merit is more effective in pushing scam than one without.

[Shishir99]

https://bitcointalk.org/index.php?topic=5557496.0
They are back at it again
Though now more aggressive with some changes on the doc file
And topic titles
Don't account That do this get nuke? I'm aware they can make another one
But an account with merit is more effective in pushing scam than one without.

I also came here to report the same shit and saw you already reported it.
But this time with a Full member rank account, and I am kind of certain that the account was hacked. When the scammers use some kind of high-ranked account, the newbies may fall into this trap. I already reported all three threads one by one using the report to moderator button, and only then came here to report it. If Mods are offline, it may take a while to get removed. If I remember correctly, Mitchell had a bot which removes these threads automatically. Not sure why it didn't worked this time.

[btc_angela]

https://bitcointalk.org/index.php?topic=5557496.0
They are back at it again
Though now more aggressive with some changes on the doc file
And topic titles
Don't account That do this get nuke? I'm aware they can make another one
But an account with merit is more effective in pushing scam than one without.

I also came here to report the same shit and saw you already reported it.
But this time with a Full member rank account, and I am kind of certain that the account was hacked. When the scammers use some kind of high-ranked account, the newbies may fall into this trap. I already reported all three threads one by one using the report to moderator button, and only then came here to report it. If Mods are offline, it may take a while to get removed. If I remember correctly, Mitchell had a bot which removes these threads automatically. Not sure why it didn't worked this time.

Yeah, they always start when I'm sleeping. My bot did report them, properly dealing with them now.

And most likely we will go see them probably in the next days of so as this could be part of a whole gang that just recently woke up. I also reported most of them when I saw it. Need more vigilance against as again, an army could be in the wild here.

[Hazink]

User CapGelatik

Have repeatedly been posting phishing links on the forum in different threads, which most have been deleted and some are still up and counting.

The thread all have links to

Code:

 https://docs.google.com/document/d/1fKP_TeMdlRJ6zIKTPR3s8xj1fWvWUOytgb_Av9hu9VI/edit?usp=sharing

[Mitchell]

[...]If I remember correctly, Mitchell had a bot which removes these threads automatically. Not sure why it didn't worked this time.

My bot can't do anything against members that aren't newbies. It does report them when it sees them (and it knows about the latest scam texts/links/etc), but that's about it.

Attackers are now using hacked/sold accounts with a higher rank, so it will be less effective.

[Despairo]

User - easybtcearn07

Doc with instructions: https.//docs.google.com/document/d/1LrbFlADmKzPOj7qw3ciV6Y67jonr5xw1xPjnD0e3C6M/edit?usp=sharing

[logfiles]

I am not sure how this user managed to go under the radar for days. Maybe because he posted in a less active board? But his post screams of malware only. Please ban As soon as possible

User: catico564

Thread: ⚡️Crypto Checker Reborn v4.0 Cracked by Grizzly | Crypto Log Checker⚡️  Archive ---> https://ninjastic.space/topic/5557498

Malicious links

Code:

https://anonymfile.com/OE7BQ/crypto-checker.zip
https://upload.nolog.cz/download/e62f09fd4fa59e17/#GqjaWv4-oidN_YumHJdyDw
https://fex.net/s/oypxplr
https://uploadnow.io/f/ybZpHJl
https://ufile.io/azm012lo
https://limewire.com/d/RR3cB#qfmIDJqoHm
https://gofile.to/ex6/crypto-checker.zip
https://ydray.com/get/t/u17566211948969LYKUb95d5bdd6020SL

Virustotal results: https://www.virustotal.com/gui/file/c6a0b9f72318e565e9e41586023f689008b9fe820658f786722ad3014a1b8278?nocache=1

[beveryu778]

User - wahyuagung26 - promoting 2nd time a fake and Malware software. he/she should be banned before victimizing someone

ANN- [ANN] DigitalNode [XDT] - PoW/PoS, Masternodes, Untraceable encrypted messaging

Windows: https://github.com/DigitalNode-main/Wallet-GUI/releases/download/2.0.1/DigitalNode-qt.win64.zip
Linux: https://github.com/DigitalNode-main/Wallet-GUI/releases/download/2.0.1/DigitalNode-qt.linux.arm64

Full list of current pools will be there: https://miningpoolstats.stream/digitalnode

Virustotal For Windows Wallets: https://www.virustotal.com/gui/file/06b55497eeed961d659283f7f6c74a130a117640b828c582c5caaeb7ba3578ac/detection


Virustotal For Linux Wallets: https://www.virustotal.com/gui/file/229b04adc20ccdb6f02476e543a185ca3e49328392ea0b1d67c2aeb16dea5236/detection

Another Allegation in past by Lafu - Posting Fake Ann with Malware download Link ! Hacked or sold Account ! but this account not banned yet. now posting Malware again.

[ovcijisir]

Just wanted to see if someone is promoting phishing or malware links in his profile info, can mods do something about that (disabling links on profile info page or something similar or disabling it alltogether)?