Report Malware and Suspicious Links here so Mods can take Action !

[$crypto$]

Wallet Contains Trojan Malware - Self-moderated thread.

User: Shark-Wallet
Thread: SharkWallet — Windows Desktop Wallet for EVM, Bitcoin, Solana, and Custom Coins

Code:

https://sharkwallet.org/Shark-Wallet-0.6.1-win.7z

www.virustotal.com/gui/file/52177c8aa98a7f957adf4fa166b04b801814b58b889ab75270ca6885a35f153e
8/63 security vendors flagged this file as malicious

A new user is spreading fake wallets that may be infected with a Trojan/Malware virus.

Account: Khdml02 please ban
Post: https://bitcointalk.org/index.php?topic=5585639.msg66844698#msg66844698

Code:

I recently came across SharkWallet (https://sharkwallet.org/).

This thread has been reported to the moderators for immediate action.

[Zaka1221]

Found another fake topic Aurelian and  i am submitting all detail here please take action against users and topic

User: cracker76 Please Ban this user

Fake ANN thread: [ANN] [AURE] Aurelian — Fair‑Launch Digital Gold | zk‑SNARKs | No Premine

Fake File:

Code:

https://github.com/Aurelian-proj/Aurelian/releases/download/v1.0.0/Aurelian-win-x64.zip

Reference:
https://www.virustotal.com/gui/file/3d58a97c2a2a13adbc2115c8af819923fe2ed5d2a28174c1465f3711ccb39f9e

[AakZaki]

The Wallet files on their GitHub are dangerous and contain a lot of Trojan Malware. 16/69 security vendors flagged this file as malicious

Account: btc-man21M<= Please Banned
Fake ANN Thread: [ANN][BC3][SHA3-256T][POW] BitcoinIII (BC3) - SHA3-256t Bitcoin relaunch
archive

Code:

https://github.com/PinkStarrySky/BitcoinIII-Core/releases

VirusTotal Scan Result: https://www.virustotal.com/gui/file/4d3761e149e5fcffaabf1064c3deca56c6a63fb3c8352b240fbac219d6e4a6e9/detection

[Zaka1221]

Found another fake topic QUORIX which contain malware and  i am submitting all detail here please take action against users and topic

User: hoangbao2106 Please Ban this user

Fake ANN thread: [ANN] QUORIX (QRX) \ Official ANN \ KawPoW Algorithm

Fake File:

Code:

https://github.com/QUORIX-proj/QUORIX/releases/download/v1.0.0/QUORIX-1.0.0-win-x64.zip

Reference:
https://www.virustotal.com/gui/file/ccb695a149c328daf40acf675fc4cb6199b515b3c263a3dc76a200a5dd718044

[$crypto$]

Fake thread --- Khalix thread] which is likely controlled by a hacked account, and then spreading malicious links in that thread which contain malware.

Account: xdisha This user recently woke up from a long period of inactivity. Please ban
Fake ANN: [ANN] - Khalix (KHX - Official ANN - GPU-only KawPoW

Code:

[b]Download from GitHub[/b] - https://github.com/Khalix-dev/Khalix/releases/download/v1.0.0/Khalix-1.0.0-win-x64.zip

Virustotal: https://www.virustotal.com/gui/file/9d3c6486771d1d7b019fa456fd8fefaae23e8267791ae8984ecb140a6967fb57?nocache=1

Reported!

[$crypto$]

ANN thread:
1. [ANN] FlowCoin — Mining = Training AI | Proof-of-Training
2. [ANN] FlowCoin [FLOW] — Keccak-256d PoW | ASIC-proof | GPU mining | Not a fork

As the Flowcoin thread is back again, they are controlled by the same person, creating two threads with different accounts, this has convinced them to spread dangerous files again via Github, because with your previous findings I think this clearly needs to be reported again.
   
[ANN] FlowCoin (FLC) — Post-Quantum (ML-DSA-44) ASIC-Resistant CPU PoW (xcrypt) --- Marsh Leo
[ANN] FlowCoin (FLC) — Post-Quantum (ML-DSA-44) ASIC-Resistant CPU PoW (xcrypt) --- kristian_pilatovich_2

[Charcol]

A fake ANN named SynapX has been found, which contains malware and I am submitting all the details here, please take action against the user and the topic.

User: sizzlingsoul31 <-----  Please Ban this User

Fake ANN thread: [ANN] SynapX (SNPX) ⚡ RandomX

Fake File:

Code:

[b]Download from GitHub[/b] - https://github.com/SynapX-dev/SynapX/releases/download/v1.0.0/SynapX-1.0.0-win-x64.zip

Download XMRig: [url=https://github.com/xmrig/xmrig/releases]https://github.com/xmrig/xmrig/releases[/url]

Reference:
https://www.virustotal.com/gui/file/0b3115f24bc9cea846ff709c8fdabf91a68a32aa7c0f74a416cc908c4ba97759/detection

[logfiles]

I have just come across a self-moderated fake ANN which looked highly suspicious. My gut was right

FAKE ANN - P-mine (PEARL) mining

The user was previous tagged for advertising scam - decello Please ban!

Malicious file link

Code:

https://github.com/perlmine1/pmine/releases/download/1.1/p-mine-v1.1.zip

Virus total results of extracted zip file;
12/70 Anti Virus vendors flagged the file as malicious - https://www.virustotal.com/gui/file/bb52fe251acdb474c333feed0bcb9017bf0ad6c234735f869b6decdb734278d9?nocache=1



On further analysis of the file. It appears that when executed, it will perform another download in the background.
The URL hardcoded in the binary is:

Code:

http://31.77.168.180:5000/niletos.exe

Further analysis of the niletos.exe file reveals that it's a Trojan
https://www.virustotal.com/gui/file/c75d8323a4288498f44893d1549ecc98be5b4dc3e89875189fe45f2eee0de36a

51/68 antivirus vendors flagged it as malware

[AakZaki]

According to what I found, this person often scatters GitHub links, and in the link, there is a wallet file that contains a lot of malware, here are two links that he created.

Account: FP91G<= Please Banned
Fake ANN Thread: Gaelium (GAEL) mining
Fake ANN Thread: Bitcoin III (BC3) mining

- archive
- archive

Code:

wallet
https://github.com/gaeliumcore/Gaelium/releases

VirusTotal Scan Result: https://www.virustotal.com/gui/file/e765a85f602b15e21d24d87d55bcfec2501a2700dc2de5293ef91ba85b93db53
24/66 security vendors flagged this file as malicious

Code:

wallet
https://github.com/PinkStarrySky/BitcoinIII-Core/releases

VirusTotal Scan Result: https://www.virustotal.com/gui/file/4d3761e149e5fcffaabf1064c3deca56c6a63fb3c8352b240fbac219d6e4a6e9
26/68 security vendors flagged this file as malicious

[Charcol]

A fake ANN named SynapX has been found, which contains malware and I am submitting all the details here, please take action against the user and the topic.

User: yanpep <-----  Please Ban this User

Fake ANN thread: [ANN] SynapX (SNPX) - CPU-only RandomX - Official ann

Fake File:

Code:

[b]Download from GitHub[/b] - https://github.com/SynapX-dev/SynapX/releases/download/v1.0.0/SynapX-1.0.0-win-x64.zip
https://github.com/xmrig/xmrig/releases

[FP91G]

According to what I found, this person often scatters GitHub links, and in the link, there is a wallet file that contains a lot of malware, here are two links that he created.

Account: FP91G<= Please Banned
Fake ANN Thread: Gaelium (GAEL) mining
Fake ANN Thread: Bitcoin III (BC3) mining

- archive
- archive

Why didn't you send me a private message?

I've been writing about mining and new projects for years, and new coins often have crap in them. I always put warnings, and any miner knows not to start mining on your main PC or install wallets.
Don't worry, I won't be posting any more new projects.

Official lolMiner thread
Let's ban the developer then
https://bitcointalk.org/index.php?topic=4724735
https://www.virustotal.com/gui/file/f3177f6e7f4ff9abccdf6bc74ccc2b78e0100bc6bcc1f9e81808d09c8cf35319


Official SRBMiner thread
https://bitcointalk.org/index.php?topic=5190081
https://github.com/doktor83/SRBMiner-Multi/releases
https://www.virustotal.com/gui/file/73451074129cda947c9c63c0b7a08230dc71d589606bbc0664a09a58bfcf0a81


Team Black Miner
https://bitcointalk.org/index.php?topic=5358334
https://github.com/sp-hash/TeamBlackMiner/releases/
https://www.virustotal.com/gui/file/230809dcbbed72ffa28872fe61c14e7cb82fe7c20a89e27accc000de919747e4

WildRig Multi
https://bitcointalk.org/index.php?topic=5023676
https://github.com/andru-kun/wildrig-multi/releases/tag/0.48.9
https://www.virustotal.com/gui/file/11bd3fdbb137f605ddb082b88a86c92056324daf449e23446003ebf7c6269ae7?nocache=1



Save our miners. VT is a bully

[Zaka1221]

User:[/b] yanpep <-----  Please Ban this User

Fake ANN thread: [ANN] SynapX (SNPX) - CPU-only RandomX - Official ann

I found another fake topic about SynapX and I am submitting its details, please take action against both user and topic.
 
User: rahul3001 Please Ban

Topic Link: [ANN] SynapX (SNPX) - Official ann - CPU-only RandomX

Fake File:

Code:

https://github.com/SynapX-dev/SynapX/releases/download/v1.0.0/SynapX-1.0.0-win-x64.zip

[Lafu]

I've been writing about mining and new projects for years, and new coins often have crap in them. I always put warnings, and any miner knows not to start mining on your main PC or install wallets.
Don't worry, I won't be posting any more new projects.

I also know for years now FP91G as i looking always in the Mining Section !
You have done well there 

But to be honest if you posting or making an announcement for a new Project you should be making some research about it !
If you want to be serious things then you should be checking the things what you post !
For now you dont get a tag from me even it should be done as the last things was really crazy stuff what they got in there files.

Hope you learned your Lesson as AakZaki is right !

@Moderators if he should be getting banned it should be a Temp one in my opinion but i am good with all others , just saying !

[joker_josue]

I've been writing about mining and new projects for years, and new coins often have crap in them. I always put warnings, and any miner knows not to start mining on your main PC or install wallets.
Don't worry, I won't be posting any more new projects.

I also know for years now FP91G as i looking always in the Mining Section !
You have done well there  

But to be honest if you posting or making an announcement for a new Project you should be making some research about it !
If you want to be serious things then you should be checking the things what you post !
For now you dont get a tag from me even it should be done as the last things was really crazy stuff what they got in there files.

Hope you learned your Lesson as AakZaki is right !

@Moderators if he should be getting banned it should be a Temp one in my opinion but i am good with all others , just saying !

But what mining software or small/new wallet doesn't flag any malware?

In over 10 years, during which I've experimented with a range of software of this type, there hasn't been one, or almost none, where the Windows system hasn't flagged it as containing malware. He always marked them as having malware.

My question now is: does this software actually contain malware, or is this just another common warning sign for this type of software?

Therefore, I don't think it's enough to run some generic tests to say that this software has malware.

[FP91G]

I've been writing about mining and new projects for years, and new coins often have crap in them. I always put warnings, and any miner knows not to start mining on your main PC or install wallets.
Don't worry, I won't be posting any more new projects.

I also know for years now FP91G as i looking always in the Mining Section !
You have done well there 

But to be honest if you posting or making an announcement for a new Project you should be making some research about it !
If you want to be serious things then you should be checking the things what you post !
For now you dont get a tag from me even it should be done as the last things was really crazy stuff what they got in there files.

Hope you learned your Lesson as AakZaki is right !

@Moderators if he should be getting banned it should be a Temp one in my opinion but i am good with all others , just saying !

I'm not saying AakZaki is wrong. He did the right thing.

You should also understand the miner's position. It's important to learn about the project in advance and start mining coins before anyone else. Miners understand the risks, so they run miners on separate mining farms. If you wait for all the checks, you'll lose the opportunity to mine first. These are the risks of mining new coins.

Here's the story of ForgeMiner
It's a real miner, but here are the check results.

https://bitcointalk.org/index.php?topic=5586260.msg66879730#msg66879730

https://www.virustotal.com/gui/file/6a649529fb64509c7377173224c7543480dbd306913068248e3de6d95cb9a3cf
The developer has already been painted for distributing viruses.

And his miner was added to the well-known pool.
https://pearl.herominers.com/#how-to-mine-pearl-prl
https://baikalmine.com/pools/pplns/pearl/how-to-connect

[AakZaki]

But what mining software or small/new wallet doesn't flag any malware?

In over 10 years, during which I've experimented with a range of software of this type, there hasn't been one, or almost none, where the Windows system hasn't flagged it as containing malware. He always marked them as having malware.

My question now is: does this software actually contain malware, or is this just another common warning sign for this type of software?

Therefore, I don't think it's enough to run some generic tests to say that this software has malware.

After all, who wants to try to test install on their precious device, what if it really has malware? For me, the early warning is already there so I don't have to fight it to make sure it has malware or not.

Security is more important than anything, there may be some that are clean of malware. But I thought, I would never try to do it.
I learned from a past experience that my friend had experienced, even though he had never installed such an app, but his crypto was once affected by draining the balance moving to someone else's wallet by itself.

Remember, prevention is better than a cure.

[logfiles]

But what mining software or small/new wallet doesn't flag any malware?

In over 10 years, during which I've experimented with a range of software of this type, there hasn't been one, or almost none, where the Windows system hasn't flagged it as containing malware. He always marked them as having malware.

My question now is: does this software actually contain malware, or is this just another common warning sign for this type of software?

Therefore, I don't think it's enough to run some generic tests to say that this software has malware.

I think members should be able to have a small idea about what the "flags" actually mean or what the supposed malware does once executed. Usually when I see Virus total tags like

Code:

RiskWare.CoinMiner
Win64/CoinMiner.PM Potentially Unwanted Application
Miner:Win/BitCoinMiner.ogdr

I try to look into the details just to be sure it's not a false negative positive like I did in this report. I think most Anti Virus software programs are programmed to think any mining software is malware (yes some of it is malware) so it's hard to sometimes draw a line between one with genuine intentions and one with malicious intentions.

[FP91G]

But what mining software or small/new wallet doesn't flag any malware?

In over 10 years, during which I've experimented with a range of software of this type, there hasn't been one, or almost none, where the Windows system hasn't flagged it as containing malware. He always marked them as having malware.

My question now is: does this software actually contain malware, or is this just another common warning sign for this type of software?

Therefore, I don't think it's enough to run some generic tests to say that this software has malware.

After all, who wants to try to test install on their precious device, what if it really has malware? For me, the early warning is already there so I don't have to fight it to make sure it has malware or not.

Security is more important than anything, there may be some that are clean of malware. But I thought, I would never try to do it.
I learned from a past experience that my friend had experienced, even though he had never installed such an app, but his crypto was once affected by draining the balance moving to someone else's wallet by itself.

Remember, prevention is better than a cure.

I've been mining for 11 years and have encountered malware while mining.
Setting up a single mining rig takes no more than 10 minutes for an experienced miner, and a virus can't harm it.
Wallets are also installed on separate PCs or mining rigs.
If you want to mine new coins, you'll have to learn to take care of antivirus security, or you'll wait for others to check it and lose your profits.
VT complains about many wallets; run an antivirus test on your Monero wallet and you'll be scared.

[joker_josue]

But what mining software or small/new wallet doesn't flag any malware?

In over 10 years, during which I've experimented with a range of software of this type, there hasn't been one, or almost none, where the Windows system hasn't flagged it as containing malware. He always marked them as having malware.

My question now is: does this software actually contain malware, or is this just another common warning sign for this type of software?

Therefore, I don't think it's enough to run some generic tests to say that this software has malware.

After all, who wants to try to test install on their precious device, what if it really has malware? For me, the early warning is already there so I don't have to fight it to make sure it has malware or not.

Security is more important than anything, there may be some that are clean of malware. But I thought, I would never try to do it.
I learned from a past experience that my friend had experienced, even though he had never installed such an app, but his crypto was once affected by draining the balance moving to someone else's wallet by itself.

Remember, prevention is better than a cure.

Perhaps I didn't explain myself well enough.
I never said that people shouldn't be careful or that safety isn't their top priority. That's not the point.

I don't know if you've ever mined Bitcoin or not, even just to test it. But you may not know that even the first Bitcoin mining software, back in 2013, issued malware warnings. They didn't actually have malware, but the way they interacted with the operating systems generated that alert.

But I can give a more current example: Feather Wallet (Monero) - https://featherwallet.org/
It is considered one of the best wallets for Monero.
If you install it on Windows, you'll be in a battle because Windows simply remove the program, considering it malware.

I support and understand all the effort you put into keeping us alert about potential malware that might be advertised on the forum. However, there are cases of false positives. It is up to each user, especially in specialized areas such as mining, to be aware of the dangers involved and take the necessary precautions. Several factors must be analyzed, and warnings must be issued, to minimize the impact of the risk and ensure everyone is alert.


EDIT:
One of these mining software programs was this one: https://bitcointalk.org/?topic=3878.0
Some of you may remember.

This software was often classified as a Trojan because it injected computationally intensive processes in the background.

[logfiles]

The scammer is back yet again with the same ANN and file as I reported earlier on. Again it's self-moderated

FAKE ANN - P-mine (PEARL) mining

The account was previous tagged for plagiarism - AdvanceNote Please ban!

All the contents of the ANN including the malicious link are the same as those in the earlier report. I will try to get GitHub to delete his profile.

Malicious file link

Code:

https://github.com/perlmine1/pmine/releases/download/1.1/p-mine-v1.1.zip

Virus total results of extracted zip file;
12/70 Anti Virus vendors flagged the file as malicious - https://www.virustotal.com/gui/file/bb52fe251acdb474c333feed0bcb9017bf0ad6c234735f869b6decdb734278d9?nocache=1



On further analysis of the file. It appears that when executed, it will perform another download in the background.
The URL hardcoded in the binary is:

Code:

http://31.77.168.180:5000/niletos.exe

Further analysis of the niletos.exe file reveals that it's a Trojan
https://www.virustotal.com/gui/file/c75d8323a4288498f44893d1549ecc98be5b4dc3e89875189fe45f2eee0de36a

51/68 antivirus vendors flagged it as malware