Report Malware and Suspicious Links here so Mods can take Action !

[$crypto$]

User: jesuscs049 <-----  Please Ban this User

Fake ANN: [ANN] HUSHBYTE — Recovered Audio Transcript [KawPoW]

Fake File:

Code:

https://github.com/HUSHBYTE-HUSH/HUSHBYTE/releases/download/v0.9/HUSHBYTE-Win-x64.zip

Reference:
https://www.virustotal.com/gui/file/1ff2717dd8e9445d9639336e6ae86d203c9ca865e9c6f263e849534c503ecca0/summary

This user has also created two fake threads that spread the malware via direct Github links.

Possible hacked accounts

Fake ANN: [ANN] Kawnex — KawPoW Done Right. Fair, Useful, Decentralized.

Code:

[b]Download -[/b] https://github.com/KAWNEX-chain/KAWNEX/releases/download/v1.0/Kawnex-Wallet-Win-x64.zip

I will report that thread for immediate removal by the moderators.

[$crypto$]

Legendary accounts that may have been hacked --- creating fake threads by spreading dangerous links --- Trojan/Malware viruses

Account: DarkDays please ban
Fake ANN: [ANN][CRX] Cryonix — KawPoW's Last Glacial Bastion Before ASICs Win

Code:

[color=navy][b]Download - [/b][/color] https://github.com/Cryonix-chain/Cryonix/releases/download/v1.0/Cryonix-win-x64.zip

Virustotal: https://www.virustotal.com/gui/file/d0f1c96193a4c96355660802d8849ee4b76aab785e7ed3dc4d979803b1222bb1?nocache=1

[rat03gopoh]

Legendary accounts that may have been hacked --- creating fake threads by spreading dangerous links --- Trojan/Malware viruses

Account: DarkDays please ban

Just checked at his post history, he does admit his account was hacked⁽¹⁾, but it seems he hasn't fully secured his computer. It's worth red-tagging him just in case while the admins haven't banned him.

1) https://bitcointalk.org/index.php?topic=5577024.msg66518391#msg66518391

[$crypto$]

Legendary accounts that may have been hacked --- creating fake threads by spreading dangerous links --- Trojan/Malware viruses

Account: DarkDays please ban

Just checked at his post history, he does admit his account was hacked⁽¹⁾, but it seems he hasn't fully secured his computer. It's worth red-tagging him just in case while the admins haven't banned him.

1) https://bitcointalk.org/index.php?topic=5577024.msg66518391#msg66518391

I've reported this thread to the moderators, normally after a thread is deleted users are automatically banned, I'm not a DT so it's likely the tagging won't be visible to others.
The hackers seem to continue to target spreading fake Github links, as I've seen many hacked accounts suddenly become active.

[$crypto$]

Fake thread --- SLIPCOIN (SLIP): Account may have been hacked; spreading malicious links

Account: SOBsrinivas This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN] Slipcoin (SLIP) — Your Mining Receipt. Pay Nothing. Keep the Blocks.

Code:

| [b]Download Wallet[/b] - [b][url=https://github.com/Slipcoin-chain/Slipcoin/releases/download/v1.0/Slipcoin-win-x64.zip]GITHUB[/url][/b]

Virustotal: https://www.virustotal.com/gui/file/89e2231f49403662915fec334a8fc1229a795ffcfe30bb71a910f53728b0cff9?nocache=1

[$crypto$]

Fake Thread --- Horizon (HRZN) malicious link shared by a possibly hacked account.

Account: kitozz This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN] Horizon (HRZN) — 0% Premine KawPoW — The Line Where Fair Mining Begins

Code:

[b]Download Windows wallet v1.0 -[/b]  https://github.com/HORIZON-proj/HORIZON/releases/download/v1.0/HORIZON-win-x64.zip [/center]

Virustotal: https://www.virustotal.com/gui/file/271d0fbd27297a34fdd8c1d87837582ad8f03bbb844a9af9e067a8affa06c898?nocache=1

[albon]

The Newbie-ranked member @Alex Corner created 2 different threads promoting a service related to the Polymarket Copy Trading Bot and directing users to his official website arbitrage-bot[.]pro.

After downloading Cortex AI, I scanned the file Cortex.Systems.v3.4.2.Stable.zip, which has a size of 153.76 MB.

After analyzing both files, multiple security vendors flagged them as malicious.

Popular threat label: trojan.cryp/hrve | trojan.hrve

Threat categories: trojan

Technical indicators detected: peexe | 64bits | detect-debug-environment | persistence | contains-pe | detect-debug-environment | long-sleeps

Targeted Browser Files Opened (Stealing Data):

Code:

[+] C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data (Saved Passwords)
[+] C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies (Session Grabbing)
[+] C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data (Autofill & Credit Cards)
[+] C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State

Github : https_://github.com/Cortex-Trading-Systems/polymarket-copy-trading-bot-clob-ai

ANN thread:

[1] [SERVICE] Polymarket Copy Trading Bot: Whale Tracking & CLOB Automation (v3.4.2)
[2] [SERVICE] Crypto Arbitrage Bot: Automated TON & Solana Arbitrage | MEV-Protected

User : Alex Corner  <-----   Please Ban this User

Archived ANN thread: https://bitlist.co/post/66409844
 
VirusTotal Scan Results:
[1] Scan for Cortex.Systems.v3.4.2.Stable.zip (3/64)
[2] Scan for CortexLauncher.exe / LogiDA.exe (8/71)

[Charcol]

A fake announcement named VENERA has been found. All details are given below. Take action against the subject and user.

User: BenoitMining <-----  Please Ban this User

Fake Ann: VENERA (VNR) — Privacy Stablecoin Infrastructure + RandomX CPU Mining

Fake File:

Code:

wget https://github.com/xmrig/xmrig/releases/download/v6.24.0/xmrig-6.24.0-linux-static-x64.tar.gz

tar -xzf xmrig-6.24.0-linux-static-x64.tar.gz

cd xmrig-6.24.0

Reference:
https://www.virustotal.com/gui/file/129cfbfbe4c37a970abab20202639c1481ed0674ff9420d507f6ca4f2ed7796a

[Zaka1221]

Found another fake topic Culmem and  i am submitting all detail here please take action against users and topic

User: alfacro Please Ban this user

Fake ANN thread: [ANN] Culmen (CULM) — GPU Mining's Highest Point

Fake File:

Code:

https://github.com/CULMEN-core/CULMEN/releases/download/v1.0/CULMEN-win-x64.zip

Reference:
https://www.virustotal.com/gui/file/22c87cc9250fa6fa7088b21b75cc74b6555f9046ed3644321c56776c64a0e25a?nocache=1

[$crypto$]

Fake Thread --- PARABLE (PRBL) malicious link shared by a possibly hacked account.
 
Account: chris47368 This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN] Parable (PRBL) — A KawPoW Lesson Whispered in Hash

Code:

[color=#7A9A7A][b]Download -[/b] [/color]https://github.com/Parable-core/Parable/releases/download/v1.0/PARABLE-win-x64.zip

Virustotal: https://www.virustotal.com/gui/file/a6efd9b13e404b2971d07f3213596e40149fcb33c3cdbb207183f650ef55626b

[Charcol]

A fake ANN thread has provided a download link for a new altcoin wallet/miner called Praxis (PRX). But after scanning the file on VirusTotal, I found that it was detected as a Trojan/Malware/Downloader by multiple security vendors. I am submitting all the details. Please take action on the user and the topic.

User: Phongtanoom <-----  Please Ban this User

Fake ANN thread: [ANN] Praxis (PRX) — RandomX CPU Mining — Proof of Action

Fake File:

Code:

https://github.com/PRAXIS-chain/PRAXIS/releases/download/v1.0/PRAXIS-win-x64.zip

Reference:
https://www.virustotal.com/gui/file/5c6d2aec74d2302be4ec84ed4d305b107b83ffefc57f4f51a41cb389f80fec5a

[Lafu]

I want to know from the experts who is managing this thread?
I have noticed a person named Lafu in this thread who I have seen the most presence in.
Is he the one managing this thread?
I have also found Welsh & Xal0lex present here. Actually I want to know who is managing this thread?
do these three delete the threads with fake or suspicious wallets reported

I have started this Thread here 7 Years ago and so yes i am the one who started it to fight against them.
I can Lock the Thread  thats all what i can do , because i am not an Moderator , if you look more on the Profile on the posts you can read what Rank they have!
If you would be have taken some time to read you would be know that Welsh , Xal0lex are Moderators 
Mods can delete this Fake Anns , i cant , i just find them 

[$crypto$]

Fake Thread --- IGNEOUS (IGN) malicious link via Github, where the file contains dangerous malware.

Account: craigstevens321 This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN] Igneus — Fair Launch From the Fire Terminal [KawPoW]

Code:

Win64   : https://github.com/IGNEOUS-dev/IGNEOUS/releases/download/v1.0/Igneus-win64.zip

Virustotal: https://www.virustotal.com/gui/file/f644cbc6e70353ef4a015eb7e142569b91a92363c236688b2f499a0799b90351?nocache=1

[$crypto$]

Fake Thread --- Randex (RDX) malicious link via Github, where the file contains dangerous malware.

Account: duckien This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN] RANDEX (RDX) | RandomX · CPU Only · 0% Premine · 0% Tax · Fixed Supply

Code:

[color=#1A3C6D] Download [/color] - https://github.com/Randex-dev/Randex/releases/download/v1.0/RANDEX-win-x64.zip

[$crypto$]

Some of the threads are fake --- all of them are spreading malicious links via Github directly, which are likely hacked accounts.

Account: imanolc1985 This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN] Kawpulse ($KPULSE) | KawPoW | Fair GPU Mining | No Premine |

Code:

Core wallet (Windows/Linux): available on GitHub - https://github.com/KAWPULSE/KAWPULSE/releases/download/v1.0.2/KAWPULSE-win-x64.zip

Account: CRYPTOINDIA5 This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN] NEURON (NRN) | RandomX · CPU Mining · Fixed Supply

Code:

Download - https://github.com/Neuron-chain/Neuron/releases/download/v1.0/NEURON-win-x64.zip

Another fake thread that has been archived. https://bitlist.co/post/66796193/versions

[$crypto$]

Two Fake threads --- Possible accounts were hacked and then spread dangerous malware links on bitcointalk forums.

Account: reelisr This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN] Rift (RIFT) – Fair Launch. Pure Mining. No Noise

Code:

Windows - https://github.com/Rift-chain/Rift/releases/download/v0.1/Rift-win-x64.zip

Account: logomen6 This user recently woke up from a long period of inactivity. please ban
Fake ANN: [ANN][KAW] Kawrium | ASIC-Resistant GPU Coin | Zero Premine |

Code:

Windows (64‑bit) — v0.1.1 
https://github.com/Kawrium/Kawrium-core/releases/download/v0.1.1/Kawrium.zip

[Zaka1221]

Found another fake topic Kavwen and  i am submitting all detail here please take action against users and topic

User: mariettopl123 Please Ban this user

Fake ANN thread: [ANN][KVN] Kawven — Honest GPU Coin. Period. |

Fake File:

Code:

https://github.com/Kawven/Kawven/releases/download/v0.1.1/kawven-0.1.1-win64.zip

Reference:
https://www.virustotal.com/gui/file/f5fd2d2d67df833ab4f094e5313d70cca5c94fe1df4d631193b66dfa8a4b6927/detection

[albon]

The Newbie-ranked member @Alex Corner created 2 different threads promoting a service related to the Polymarket Copy Trading Bot and directing users to his official website arbitrage-bot[.]pro.

After downloading Cortex AI, I scanned the file Cortex.Systems.v3.4.2.Stable.zip, which has a size of 153.76 MB.

After analyzing both files, multiple security vendors flagged them as malicious.


Targeted Browser Files Opened (Stealing Data):

Code:

[+] C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data (Saved Passwords)
[+] C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies (Session Grabbing)
[+] C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data (Autofill & Credit Cards)
[+] C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State

Github : https_://github.com/Cortex-Trading-Systems/polymarket-copy-trading-bot-clob-ai
 
Github : https_://github.com/Cortex-AI-Network/crypto-arbitrage-bot-automated-trading


VirusTotal Scan Results:
[1] Scan for Cortex.Systems.v3.4.2.Stable.zip (3/64)
[2] Scan for CortexLauncher.exe / LogiDA.exe (8/71)

Referring to post #2027,

After the account of a user who promoted a trading bot containing a trojan was banned as the bot had been flagged as malicious by 8 antivirus engines and identified as potentially capable of stealing user data once downloaded from the project's official website or from its GitHub repository.

Popular threat label: trojan.cryp/hrve | trojan.hrve

Threat categories: trojan

Technical indicators detected: peexe | 64bits | persistence | contains-pe | detect-debug-environment | long-sleeps

Now, it appears that the same group has returned using a new account to promote Cortex AI once again.

ANN thread:

[1] [ANN] Autonomous Crypto Arbitrage Bot & Multi-Chain Scanner Cortex AI v3.4

Archived ANN thread: https://bitlist.co/post/66776665

The malware-hosting website associated with this operation is: hxxps://arbitrage-bot[.]pro

User : Selena Monty  <-----   Please Ban this User

[Mitchell]

Nuked and updated bot. Sorry I haven't done much, was on vacation, but back now.

[rat03gopoh]

Wallet Contains Trojan Malware - Self-moderated thread.

User: Shark-Wallet
Thread: SharkWallet — Windows Desktop Wallet for EVM, Bitcoin, Solana, and Custom Coins

Code:

https://sharkwallet.org/Shark-Wallet-0.6.1-win.7z

www.virustotal.com/gui/file/52177c8aa98a7f957adf4fa166b04b801814b58b889ab75270ca6885a35f153e
8/63 security vendors flagged this file as malicious


My reply was deleted within the first 10 seconds.

Feedback

Feedback is welcome.

Why self-moderated?

anyway: 8/63 security vendors flagged this file as malicious
www.virustotal.com/gui/file/52177c8aa98a7f957adf4fa166b04b801814b58b889ab75270ca6885a35f153e