Report Malware and Suspicious Links here so Mods can take Action !

[$crypto$]

A fake thread, with the offer of a Gmeta airdrop they spread malicious files on its website.

Account: gmeta_prod please ban
Fake ANN: GMETA AIRDROP for metamask users

Code:

gmeta.i0

https://temp.sh/pAqVS/build.exe

https://www.virustotal.com/gui/file/9695879ed60ed2e7c5db6ff2266aac5a6a38ec1b5e30e8f712740611faecff98/detection

[Lafu]

@Lafu Sir, I need help. I am not able to understand or learn the whole thing mentioned in the OP. But I am very interested in learning about malware and suspicious fake links. Therefore, I request you to teach me about the subject in a simpler way. So that I can contribute here. Thanks in advance.

Why you need Help ?
There are 95 Pages in this Thread and from the first Post one if you can Read and also can read between the Lines you should be able to understand and learn how you can find them.
For sure there are some more Ways and Secrets to find it faster , lets get you some Help as you asked , patterns.
Perhaps behavioral patterns play a role, or perhaps none of this matters, because anyone who truly wants to do something about it will find their way if they are willing to learn and read.
But it's time for me to thank all the users who have supported me and helped the forum over the past few years ,to expose as many scammers as possible and will be in the future , you are the future !

Thank you to :
BitcoinGirl.Club , YOSHIE , pooya87 , hugeblack , Rizzrack , morvillz7z , masulum , Chikito , doktor83 , nc50lc , malevolent , DaveF , JeromeTash , Rikafip , mole0815 , Jawhead999 , ivan666 , notblox1 , Chlotide , NotATether , Chlotide , $crypto$ , albon , Zaka1221 , Ms_Mining , N.O , JollyGood , JeromeTash , Mitchell , Xal0lex  and all other Moderators , and Global Mods and for sure theymos and Cyrus and so many more !

[Zaka1221]

Found another fake thread of Freezium with malicious link and I am submitting all detail here please take action against user and topic.

User: Harindu12 Please ban

Topic Link: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

[Charcol]

A fake thread was found with malicious links and I am submitting all the details here. Please take action against the user and the topic. Harmful malware links were found in their Discord.

Account: nucash_  please ban
Fake ANN: [ANN] WATTx blockchain

Code:

DISCORD: https://discord.gg/JTDtSXQBnh

Virustotal:
https://www.virustotal.com/gui/url/7df52ec428d6ad320e08d442a6d8a9cea8514a38c5e6c660644619e7a2dd3c92
[/s]

Code:

Malicious

Edit: I'm really sorry. I probably submitted this report incorrectly. Please ignore this report. I'll check more carefully in the future.

[Zaka1221]

Today, found another fake topic of Volt with malware wallet link and I am submitting detail here please take action against user and topic.

User: Volt Core Please ban

Topic Link: [ANN][VLT] Volt Blockchain | Layer 1 Rust PoW | Smart Contracts | Fair Launch

Fake File:

Code:

https://github.com/eslamsheref5000/volt-core/releases
https://github.com/eslamsheref5000/volt-core/releases

Reference:
https://www.virustotal.com/gui/file/3fb32762f79baad373fa80dfeda33b0b14944dfaeb43941c46b14d5ff8c279db/detection

[$crypto$]

This person created an ANN in the Altcoin discussion thread by spreading a malware-filled Github link

Account: JonathanLukeCrisp please ban
Fake ANN: FLO: https://bitcointalk.org/index.php?topic=5570218.msg66244670#msg66244670

Code:

https://github.com/floblockchain/flo

Code:

Malware/Win32.Generic.C3649248
Win/grayware_confidence_60% (D)

https://www.virustotal.com/gui/file/c7d1ea1dbfa8a042188dffc0c391800dd42364fc469d245365410d3b98a8c51c

[Zaka1221]

Found another fake thread of Volt Blockchain malicious wallet link and I am submitting detail here please take action against user and topic.

User: Best_Of_Luck Please ban

Topic Link: [ANN][VLT] Volt Blockchain | Layer 1 Rust PoW | Smart Contracts | Fair Launch

Fake File:

Code:

https://github.com/eslamsheref5000/volt-core/releases
https://github.com/eslamsheref5000/volt-core/releases

[Xal0lex]

Found another fake thread of Volt Blockchain malicious wallet link and I am submitting detail here please take action against user and topic.

Why did you decide that this is a fake topic and a malicious wallet?

[Charcol]

Found another fake thread of Volt Blockchain malicious wallet link and I am submitting detail here please take action against user and topic.

Why did you decide that this is a fake topic and a malicious wallet?

There is strong evidence that the recent ANN thread created by @Best_Of_Luck is a fake thread. This same ANN thread was posted a few days ago by a user named @Volt Core. At that time, Trojan malware was detected from the file or link associated with the thread, which was first pointed out by @Zaka1221.After receiving evidence related to malware, the concerned moderators completely deleted the ANN thread and it is believed that @Volt Core was banned after that incident. Looking at the current situation, it is clear that the previous fake ANN thread has been re-posted from the account @Best_Of_Luck using a new alternative account to relaunch it. That is, it is very likely that this is a repeated fraudulent activity by the same person.
Below is the reference to the fake ANN thread created earlier by @Volt Core and later deleted by the moderators, so that the matter can be verified more clearly.
https://bitlist.co/post/66242724


Same fake thread created by @Best_Of_Luck: https://bitcointalk.org/index.php?topic=5570506.msg66255895#msg66255895

[Charcol]

A fake thread was found where harmful malware including an obvious trojan was found.

User: kristianXXI  please ban
Fake ANN: [ANN] FTC — Flow Token Chain | Keccak-256 GPU Mining | Fair Launch | MAINNET LIV

Code:

https://github.com/flowcore-sys/flow-protocol/releases/tag/v0.1.0
https://github.com/flowcore-sys/flow-protocol/releases/download/v0.1.0/flow-protocol-v0.1.0-windows-x64-cuda.zip

https://www.virustotal.com/gui/file/93447c83166d94b56b032d44f0edaf0253625accdd1d67c7d6d903d7c4142ebf/detection

[Zaka1221]

Another fake thread of Freezium (FRZ) project has been posted which contain malware wallet link and I am submitting all detail here please take action against user and topic.

User: funkbungus Please ban

Topic Link: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

Another fake thread of Freezium (FRZ)

User: md500gb Please ban

Topic Link: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

[albon]

This member posted a promotional thread about FlashCoin Core, which included a wallet.

Upon downloading and scanning it, 2 out of 71 security vendors flagged this file as malicious.

It was detected by CrowdStrike Falcon as Win/grayware_confidence_60% (D) and by Microsoft as Trojan:Win32/Wacatac.B!ml.



ANN thread: [ANN] [FLASH] FlashCoin Core - POW Sha256

User : FlashCoinCore  <-----   Please Ban that User

Archived ANN thread: https://bitlist.co/post/66165020
 
VirusTotal scan result: https://www.virustotal.com/gui/file/779e57c570ee378517afc4eacf3e762802f70c6ce126173961b78d09f2025590

[Zaka1221]

Today I found another fake topic of Freezium with malicious link and I am submitting all detail here please take action against user and topic.

User: kian123 Please ban

Topic Link: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

Another Fake topic with malware

User: noeh Please ban

Topic Link: Re: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW • Penguin Mascot

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

[AuchanX]

I found a fake topic on Freezium with malicious links and I am submitting all the details here. Please take action against the user and topic.

User: Jack-john PLEASE BAN

Topic Link: [ANN] FREEEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

What I found after checking with Virus total.
Popular threat label trojan.

https://www.virustotal.com/gui/file/807198d6b3a1e21ee1e901e0572c6c6e21bee9f343c16c9db5ffa5a74690ac0d/detection

[AuchanX]

Another fake topic with malware was found.

User: alito80 PLEASE BAN

Topic Link: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW • Penguin Mascot

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

What I found after checking with Virus total:

https://www.virustotal.com/gui/file/c1c075b03df83d619c836e37e11a21e248b0186b82eeee0ead8a2f24941897af/detection

[Zaka1221]

Today again I found another fake topic of Freezium with malware link and I am submitting all detail here please take action against user and topic.

User: Philipsino Please ban

Topic Link: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

[$crypto$]

Fake RavexCoin thread --- it contains a malware virus

Account: RavexCoin
Fake ANN: [ANN] [RVX] Ravexcoin - 21B supply, community focused, kawpow

Code:

Source: https://github.com/Ravex-coin/Ravex
Wallet: https://github.com/Ravex-coin/Ravex/releases/tag/v1.0.0

Code:

CAPE Sandbox flags this file as: RAT STEALER
ET MALWARE Observed Malicious SSL Cert (Quasar CnC)
ET MALWARE Generic AsyncRAT/zgRAT Style SSL Cert

https://www.virustotal.com/gui/file/4775be5e37b615fddfe7cb40f78b3fd395bc2d299132f9645da1fecea53e9acb/behavior

[Zaka1221]

Today again I found another fake thread of Ravexcoin with malware link and I am submitting all detail here please take action against user and topic. This fake topic has already been reported.

User: RevexxCoin Please ban

Topic Link: [ANN] [RVX] Ravexcoin - 21B supply, community focused, kawpow

Fake File:

Code:

https://github.com/Ravex-coin/Ravex
https://github.com/Ravex-coin/Ravex/releases/tag/v1.0.0

Another Fake Freezium thread and this thread contains malware

User: Money897 Please ban

Topic Link: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

One more fake thread of Freezium (FRZ)

User: onlinetips786 Please ban

Topic Link: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

[AuchanX]

And here is another fake ANN posted by the same person.A fake RavexCoin ANN Thread was found.

User: RevexxCoin PLEASE BAN

Fake ANN: [ANN] [RVX] Ravexcoin - 21B supply, community focused, kawpow

Code:

https://github.com/Ravex-coin/Ravex
 https://github.com/Ravex-coin/Ravex/releases/tag/v1.0.0

Another fake FREEZIUM  thread was found.

User: Ahmed Attia PLEASE BAN

Fake ANA: [ANN] FREEZIUM (FRZ) — Ice-Powered PoW

Fake File:

Code:

https://github.com/Freezium-coin/freezium/releases/download/1.1/Freezium-coin.zip

[Zaka1221]

Found Another fake topic of WoofyCash and contain Malware

User: Shifa111 Please ban

Topic Link: [ANN] WoofyCash — Meme Coin on Scrypt PoW | Fair Launch |

Fake File:

Code:

https://github.com/Woofy-cash/WOOFY/releases/download/0.1.1/WoofyCash-win64-qt.zip

Reference: https://www.virustotal.com/gui/file/8faf411c44e27168f113aebd46461d039ad049f5c23c3623b3923109834f1d16?nocache=1