Report Malware and Suspicious Links here so Mods can take Action !

[elmo40]

You guys are QUICK!
I was going to say https://bitcointalk.org/index.php?topic=5579574 AUREXIA(ARX) was a scam... but it is already gone ;-)

[Zaka1221]

Found another fake of Aurexia coin which contain malware

User: tommy7 Please Ban user

Fake Topic: [ANN]AUREXIA (ARX) — Fast • Secure • Own Wallet

Fake File:

Code:

https://github.com/Aurexia-ARX/AUREXIA/releases/download/Wallet/AUREXIA.Wallet.zip

https://www.virustotal.com/gui/file/b242f5001ad938cb9aa7809d3d6179435bfab1984bb30aa565860d9a19743566

[BitcoinBTGS]

User: https://bitcointalk.org/index.php?action=profile;u=1929413  Please Ban user

Fake Topic: https://bitcointalk.org/index.php?topic=5579593.0

Malware Payload:  hxxps:[-]github.com/Aurexia-ARX/AUREXIA/releases/download/Wallet/AUREXIA.Wallet.zip

https://www.virustotal.com/gui/file/b32716fbd5298c1659b9a430966a3f3a7ea3c23a7f96c30633b4610c85d3d972?nocache=1

[Zaka1221]

Today Found another fake of GRIND which contain Trojan

User: wizshop420 Please Ban user

Fake Topic: [ANN][GRIND] A fair-launch CPU coin for people who still want mining to be real

Fake File:

Code:

https://github.com/GRIND-chain/GRIND/releases/download/v1.0/Grind.Wallet.zip

https://www.virustotal.com/gui/file/c9d47e98e1a6632c00b9225fd02ea24756434788495bd476fc030bbd91f824dc?nocache=1

[$crypto$]

I am again reporting a fake thread here that spreads malicious links ---Malware/trojan.

Account: raregem009 This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN][CPU ONLY] Threadborn (THB) - Fair Launch | CPU Mineable | Wallet Released

Code:

[size=12pt]Windows Wallet:[/size] https://github.com/Threadborn-chain/Threadborn/releases/download/0.10.0/Threadborn.Wallet.zip

Previously this user had created a malicious thread containing malware links, the moderators managed to delete the thread, and I am reporting here as a reference the user could be banned.
https://bitlist.co/topic/5451518

[Charcol]

I am again reporting a fake thread here that spreads malicious links ---Malware/trojan.

Account: raregem009 This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN][CPU ONLY] Threadborn (THB) - Fair Launch | CPU Mineable | Wallet Released

This same thread has been found again. Please take action against this thread and the user.

User: Jaggo <-----  Please Ban this User

Fake ANN thread:[ANN][CPU ONLY] Threadborn (THB) - Fair Launch | CPU Mineable | Wallet Released

Fake File:

Code:

https://github.com/Threadborn-chain/Threadborn/releases/download/0.10.0/Threadborn.Wallet.zip

[Charcol]

A fake ANN thread has been found. Which has harmful malware including Trojan in its wallet. I am submitting all the details here. Please take action against the user and the topic.

User: ahmedaneba <-----  Please Ban this User

Fake ANN thread: [ANN]Coreveil (CVL) - Fair Launch | Wallet Live | Mine the Hidden Power

Fake File:

Code:

https://github.com/Coreveil/Coreveil/releases/download/0.10.0/Coreveil-Wallet-Win-x64.zip

Reference:

https://www.virustotal.com/gui/file/0c897bca0204b08d548749fff51a94d1e758011d1c5987493e3290663943c5b5/detection

[juttsab@]

Hello guys!
Recently, new project topic has been launched on altcoin announcement board which seems very suspicious. There are few reasons behind this:

User became active after long time with their last activity in 2017.

There is no source code only direct wallet link.

And topic is self-moderated.

I have not checked it using any detection tools but it still seem suspicious to me.

baopham25880 - [KAWPOW] Blackforge (BKF) - Built for Miners

[Zaka1221]

Found fake topic of Norium which contain Trojan

User: Gusfall Please Ban user

Fake Topic: [ANN] NORIUM (NRM) | Fair Launch | CPU-Mineable Cryptocurrency

Fake File:

Code:

https://github.com/NORIUM-chain/NORIUM/releases/download/1.0/NORIUM.Wallet.zip

Reference: https://www.virustotal.com/gui/file/40b7e45e6fcbc367e1cc769af91f53e085e77aab5da2626aeb622acc966e2b68?nocache=1

[ryozen]

First time post 

Could you ban this user SirOcelot https://bitcointalk.org/index.php?action=profile;u=3753395

This post is fake ann https://bitcointalk.org/index.php?topic=5579962.0 . The links are pointing to suspicious repos and binaries and also an unofficial discord server.

Please take action by deleting the post or disabling the links.

Zeicoin has not been announced as its still in active development by me. I've also suspended the only working test node.

Thanks

Ryo

[albon]

After two accounts promoting the Flow Protocol project were banned based on this post → #1912

Two other accounts started sharing different fake links for the project.

After analyzing and carefully checking the files, they were found to contain malware.

Fake Github : https_://github.com/haruki-tanaka-tech/flowcoin + https_://github.com/KristianPilatovich/flowcoin

Real Github : https_://github.com/onflow/flow

ANN thread:
1. [ANN] FlowCoin — Mining = Training AI | Proof-of-Training
2. [ANN] FlowCoin [FLOW] — Keccak-256d PoW | ASIC-proof | GPU mining | Not a fork

User :

[1] Haruki Tanaka  <-----   Please Ban this User
[2] PilatovichKristian2  <-----   Please Ban this User

VirusTotal scan result: https://www.virustotal.com/gui/file/93aca9deeec72979ec935edaad212a954e043f3fde329bb19e6faea51aa4bef5/behavior [flowcoin-windows-x64.zip]

VirusTotal scan result: https://www.virustotal.com/gui/file/5e6d298b2fb8366f108d50298f2b27c685ef5e3f5ebb2979199bfaf18aa27905/summary [flowcoin-v0.3.0-linux-x86_64.tar.gz ]




This detection confirms that the entire FlowCoin suite is a front for illicit mining and wallet stealing, masquerading as a legitimate wallet.

These accounts keep coming back, spreading fake repos everywhere to spread malware is a high risk to users and their funds. these accounts should be banned ASAP  to stop more damage

[Zaka1221]

Today found another fake thread, user ronbluu spread malware via Telegram that were shared in thread.

User: ronbluu Please ban this user

Fake Topic: [ANN] VAREON (VRN) | Fair Launch | CPU-Mineable Cryptocurrency

Code:

https://github.com/VAREON-VRN/VAREON/releases/download/1.0/VAREON.Wallet.zip

Virustotal result: https://www.virustotal.com/gui/file/17a0b56bc74a790e609d9f865546b66cf0314148930f6b13cf92163ead25457b?nocache=1

[Ms_Mining]

Account: Crypto-Universe<= Please Banned
Fake Ann topic: [ANN][AURA] AURANIUM - Fair Launch KawPoW Coin | Mine Now |

Wallet download:

Code:

https://github.com/AURANIUM-core/AURANIUM/releases/download/1.0/AURANIUM.Wallet.zip

[Zaka1221]

Today found another fake topic, user Answermycall spread malware via Telegram that were shared in thread.

User: Answermycall Please ban this user

Fake Topic: [ANN] CinderVolt (CDV) | Pure GPU Mining | Fair Launch | No Premine |

Code:

https://github.com/CinderVolt/CinderVolt/releases/download/1.0/CinderVolt-Wallet-Winx64.zip

Virustotal result: https://www.virustotal.com/gui/file/d3e04e353f281cbcf34d20c7ec4b52b09ec92e5e596c4dfbd21b888c5faf65ff?nocache=1


User: chronospher Please ban this user

Fake Topic: [ANN] CinderVolt (CDV) | Pure GPU Mining | Fair Launch | No Premine |

[AakZaki]

This account continues to update its ANN, even though the contents of the wallet in the thread contain malicious files

Account: SirOcelot<= Please Banned
Fake ANN Thread: [ANN] (zei) ZeiCoin - fast and lightweight Layer 1 blockchain (RandomX)



VirusTotal Scan Result: https://www.virustotal.com/gui/file/84005cc7f524bd1106a5a3123eb550d7337d7b42685ba534e2cea3467bb51f6f/detection

[ryozen]

                                                                                                                                                                                                    
User: ZeiRX <-----  Please Ban this User

Fake ANN thread: [ANN] (zei) ZeiCoin - first cryptocurrency on ZIG (MAINNET, RandomX)

The README advertises: "Dev fee - 0%"                                                                                                                                                                                                                        
The actual source code in zenrx/src/Miner.h says:

DEV_POOL_HOST  = xmr.kryptex.network       (a Monero pool, not ZeiCoin)
DEV_WALLET     = 47MYbwgXPbXLDtU9mtg7n...  (a Monero wallet, not ZeiCoin address)
DEV_FEE_INTERVAL = 5940 seconds             (every 99 minutes)          
DEV_FEE_DURATION = 60 seconds               (for 1 minute)

This means: every 100 minutes, the miner silently switches the CPU to mine Monero (XMR) for the scammer's wallet for 1 minute. That is a 1% hidden fee — paid not in ZeiCoin, but in Monero, directly to the scammer. You will never see it. It runs in the background while you think you are mining ZEI.                                        

HOW IT WORKS:  
=============

Minutes 0-99: your CPU mines Monero for you (normal)
Minute 100: your CPU secretly mines Monero for the scammer
Minutes 101-199: back to Monero for you
Minute 200: secretly mines Monero for the scammer again ...repeats forever

The scammer collects XMR payouts from kryptex.network to their own wallet.

You never know it is happening.                                                                                                                                                                                                                    
  
ADDITIONAL RED FLAGS:
=====================
                      
- Instructs users to add the binary to antivirus exceptions
- No association with the real ZeiCoin development team
- GitHub account created 17 days ago with no history
- The real ZeiCoin team has never released a standalone miner

Anyone who has downloaded zenrx-linux-x64.tar.gz or zenrx-windows-x64.zip from this repo should stop running it immediately. You can verify everything above by reading the source code yourself at:

github.com/zeicoin/zeicoin-miner/blob/main/zenrx/src/Miner.h

Fake Miner Repo
Miner.h source (hidden dev fee)

What it actually miner is doing.                                                                                                                                                                                                                                          
  ────────────────────                                                                                                                                                                                                                                                              
A standard MoneroOcean XMR miner                                                                                                                                                                                                                                                  
- 99% of the time: mines Monero/other coins for the user (real)                                                                                                                                                                                                                
- 1% of the time:  mines Monero for the scammer (hidden)

Please Ban and remove post

There has been no announcement of ZeiCoin on this forum by me the creator of ZeiCoin, please remove any future post regarding [ANN] ZeiCoin.

Thanks

Ryo
zeicoin.com