Report Malware and Suspicious Links here so Mods can take Action !

[$crypto$]

I don't know if this is legit or Malware, but still suspicious because this(ripple) account woke up recently after 8years and posts this thread first.

[ANN] Timbre (TMB) Fair launch · No premine · No ICO · Fixed supply · MIT


Can anyone check and verify this?

Code: https://github.com/timbre-dev/timbre-wallet/releases/download/v0.1.0/timbre-wallet-windows-0.1.0.zip

Don't download it , this is for only verify


I tried on the virust total but still it shows the file doesn't contain any malware.

So are they using any special method through which they can bypass VirusTotal?

Scanning in virustotal using that link is often undetectable, when you upload a file then Virustotal will work very well.

The thread you reported is the same as we reported above Kestrel thread, from the created site or its Github, including virustotal detection is also almost the same.

Virustotal: https://www.virustotal.com/gui/file/47538ec4f7e9549f49ae536d1fd0463df50878959ee120518c32bc3cbc235822


GitHub is only two weeks old, the file was entered into the repository 1 hour ago.

I will report ANN's thread with Github account to be blocked.

Account: ripple please ban

[Crypto Library]

Scanning in virustotal using that link is often undetectable, when you upload a file then Virustotal will work very well.

Thanks for verifying.

But I have one more things to know if I give the link of zip file for download it still not detecting any malware so I have to upload the file but for that I also need to download that file, Wouldn't it be risky for us to download a malware file to our computer?

I just want to know if there is any way for checking without downloading the file ? So that I/we can also be more active to detect them ?

[Mitchell]

This guy has been busy for weeks. If it's a newbie I can easily deal with it, but alas.

[Charcol]

Scanning in virustotal using that link is often undetectable, when you upload a file then Virustotal will work very well.

But I have one more things to know if I give the link of zip file for download it still not detecting any malware so I have to upload the file but for that I also need to download that file, Wouldn't it be risky for us to download a malware file to our computer?

Yes, if you download an executable or archive to your computer, then there is definitely a risk. But downloading the zip files does not launch the malware. But if you accidentally execute the file or extract it and open it, then it creates unnecessary risk.

But when we scan Virustotal, we do not actually extract it, but rather we just download the file and then upload it to Virustotal. Although there is a risk here, it is very low.

[DYING_S0UL]

Scanning in virustotal using that link is often undetectable, when you upload a file then Virustotal will work very well.

Thanks for verifying.

But I have one more things to know if I give the link of zip file for download it still not detecting any malware so I have to upload the file but for that I also need to download that file, Wouldn't it be risky for us to download a malware file to our computer?

I just want to know if there is any way for checking without downloading the file ? So that I/we can also be more active to detect them ?

In that case, you can use Vmware or virtrual box, run the checks inside them, and when done, simply delete/remove that specific test environment. But make sure your your network settings, shared storage, and clipboard access settings are property configured. So that it cannot reach or talk to your main system/OS. I hope you understood what I meant.

Otherwise if you are rich, you can buy a really cheap VPS for these kind of things and test (or experiment with) unsure files there. Completely away from your own system.

And lastly there is windows own sandbox mode, but I'm not sure how reliable that is.

[Crypto Library]

In that case, you can use Vmware or virtrual box, run the checks inside them, and when done, simply delete/remove that specific test environment. But make sure your your network settings, shared storage, and clipboard access settings are property configured. So that it cannot reach or talk to your main system/OS. I hope you understood what I meant.

I am seeking for more simple way if there is,,,

Although I am already have the VM in my potato laptop,,,,with kali_linux hacking lab LOL
But now it's tough to run a VM on my laptop that I use for work, so opening the VM again & again and downloading it to check this thing  is extra pressure.

Otherwise if you are rich, you can buy a really cheap VPS for these kind of things and test (or experiment with) unsure files there. Completely away from your own system.

Thanks for your advice, but I am a poor guy 

[DYING_S0UL]

I am seeking for more simple way if there is,,,

Although I am already have the VM in my potato laptop,,,,with kali_linux hacking lab LOL
But now it's tough to run a VM on my laptop that I use for work, so opening the VM again & again and downloading it to check this thing  is extra pressure.

Man, use a disposable device then, or a very cheap android phone that doesn't have anything financial things on it or doesn't effect you if infected with viruses.
Then do you things, download those zip files, extract if necessary and then run the checks. And lastly after finishing it up, format the whole device (factory reset).
As simple as as. Everything gets removed, nobody gets hurt, and you are back with a fresh start.

I actually did this when flashing custom ROMs/OS, testing different tools, modules and stuff (things that might contain malicious payloads).

[Crypto Library]

Same shit from another account.

bryankek woke up from a long period of inactivity, and the first post of his after 2016 this fake ANN thread with phishing link at the end which contain the malwares.


bryankek  Should be banned ASAP


[ANN] Lantern (LTRN) - Fair launch · No premine · No ICO · Fixed supply · MIT

Code: https://github.com/lantern-core/lantern-wallet/releases/tag/v0.1.0

Don't download this





VirusTotal result source: https://www.virustotal.com/gui/file/57dbfe991dde67981246ef28c13baa7f7e5bf9182b3dd620f9fc089709149389

Man, use a disposable device then, or a very cheap android phone that doesn't have anything financial things on it or doesn't effect you if infected with viruses.
Then do you things, download those zip files, extract if necessary and then run the checks. And lastly after finishing it up, format the whole device (factory reset).
As simple as as. Everything gets removed, nobody gets hurt, and you are back with a fresh start.
I actually did this when flashing custom ROMs/OS, testing different tools, modules and stuff (things that might contain malicious payloads).

Again, thanks for this idea; I think my old phone could be used like that way.

Anyway, I felt that this issue needed to be officially reported directly to Virustotal, so I sent a detailed report to their support about why the malware is not identified in the direct download link URL and why the malware is identified when the same file is manually downloaded and uploaded.

[lightbit]

Looks like this is the same person behind the older scams we’ve reported. They seem to have changed their process slightly this time — they’re now adding a GitHub dev website to the ANN to make the projects appear more legitimate. However, the overall pattern remains the same: the ANNs follow virtually the same format, structure, wording, and wallet-release approach. It looks like they’ve simply refined the presentation rather than changed the underlying method. I don't understand why they keep doing this when we are here 24/7 to report them and protect the community.  

[Crypto Library]

I don't know why they don't get tired, they have tried dozens of times but unsuccessfully, and they are doing this shits almost every day.

And the more interesting thing is that they were posting from member, full-member, and even sometimes from Sr. member. I don't know where they actually manage these accounts from? 



Here is another one with same formation-

unreborn  should be banned ASAP


[ANN] Plumb (PLMB) — RandomX is memory-hard \ No premine, no ICO \ MIT license

Code: https://github.com/plumb-core/plumb-wallet/releases/download/v0.1.0/plumb-wallet-windows-0.1.0.zip

Don't download this

[lightbit]

Another one from the same person!!

User: AlanDogg <----- Please Ban this User

Fake ANN thread: [ANN] BUSBAR - Welcome to the official BUSBAR thread

Fake File:

Code:

https://github.com/busbar-core/busbar-wallet/releases/download/v0.1.0/busbar-wallet-windows-0.1.0.zip