Tens of Fake accounts promoting scam (Bumping)

[IIV]

Almost all of post from these New members (mostly 1 merit) account are on Malwarechain announcement thread. https://bitcointalk.org/index.php?topic=5210851

They are doing a bumping service as well as abusing merits. As well creating spam on a single thread.

1. https://bitcointalk.org/index.php?action=profile;u=1837611
2. https://bitcointalk.org/index.php?action=profile;u=1653300
3. https://bitcointalk.org/index.php?action=profile;u=1539515
4. https://bitcointalk.org/index.php?action=profile;u=1288664
5. https://bitcointalk.org/index.php?action=profile;u=933175
6. https://bitcointalk.org/index.php?action=profile;u=642457
7. https://bitcointalk.org/index.php?action=profile;u=543940
8. https://bitcointalk.org/index.php?action=profile;u=932173
9. https://bitcointalk.org/index.php?action=profile;u=1653300

Everytime they post, they mostly act like they don't know anything about the project or ask question while others answer to themselves.
It's not just these bumpers there are several more and the whole team of this project are said to be a serial scam coin creators. But I have no time to research and find proof of that. Anyone researching over that are welcome.

[1715392193]

1715392193

[1715392193]

1715392193

[1715392193]

1715392193

[1715392193]

1715392193

[1715392193]

1715392193

[YOSHIE]

But I have no time to research and find proof of that. Anyone researching over that are welcome.
8. https://bitcointalk.org/index.php?action=profile;u=932173

They are indeed multi-accounts, so many accounts they have, I take one of them, that account: bitcok, Let's see where he takes us, of course to the connected and banned Alt account.

Alt account, which involved a conversation in the campaign.

Accounts Connected:

1. Arek gagu
2. batagor225
3. Koko UK
4. cimong371

Proof:

Bitcoin Address: 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

http://archive.is/wip/otW9Q

Link: https://bitcointalk.org/index.php?topic=1738683.msg17401051#msg17401051

Your Bitcointalk Username: Koko UK
Your BTC Address:18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

http://archive.is/wip/n2KhR

BTC Address: 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

http://archive.is/wip/xJqss

my address : PGN7F4Yr7DMJcKsSu5zB7AP8XK1MjXTrzZ

http://archive.is/wip/6jwPT

address : PGN7F4Yr7DMJcKsSu5zB7AP8XK1MjXTrzZ

http://archive.is/wip/el5Q5

Miscellaneous:

The old Alt account is partially banned, more.

Topic: why is it prohibited

Maybe this can be proof for you.
Your suspicion is correct, the Alt account I linked above was involved in a conversation in the MalwareChain campaign.

Proof:

Topic: 📢 [ANN][POS/MN] 🔥 MalwareChain - Cybersecurity Lab on Blockchain 🔥

http://archive.is/wip/SJadM

[nutildah]

Good find. All of these accounts woke up to start posting specifically on this thread, or else have large gaps in their posting, and now have been only shilling for this project. They are likely all owned by the same person, who probably runs a Fiverr thread bumping service.

I took a look at the white paper and it seems to be all original. The fact that they don't have any sort of team is suspicious, though.

[Bttzed03]

It appears that they are also doing the same on other social media channels like discord according to this post Beware: Black Hat team working at BitcoinTalk to mislead newcomers. MalwareChain

[nutildah]

It appears that they are also doing the same on other social media channels like discord according to this post Beware: Black Hat team working at BitcoinTalk to mislead newcomers. MalwareChain

And now they've locked the thread! Wonder what that's all about... Maybe they will only open it for their spammers, we'll see.

[hugeblack]

I hope to ask a trusted member "someone who is good at finding links between accounts" to do it (in private) or research on your own.
It seems that there are a large number of those accounts, and banning some of them will make them stop abusing for a while and then come back again with a more difficult strategy to discover.

In general, it appears that the person who created the topic has something to do with this abuse, as he locks the topic and only opens it for these accounts.

[dkbit98]

And now they've locked the thread! Wonder what that's all about... Maybe they will only open it for their spammers, we'll see.

All Malwarechain project is very suspicious, and I am not surprised with fake conversation and clocking of topic.
Lets wait and see what will happen next

[rhomelmabini]

This is my investigation regarding the matter and look at what I've found. I'll just use the submission form from "Known Alts of any-one - A User Generated List Mk III" in this investigation because it seems more nice to look here.

29 or more Accounts Connected:

bitcok - active
bitLeap - active and wear Yobit signature
koko UK - with negative trust
cimong371 - inactive
zorbig - inactive
brontak994 - inactive
batagor225 - inactive
menjest - inactive
rempong054 - inactive
frezycroos - inactive
pecandubtc - inactive
stenein - inactive
bitcoinminer566 - inactive
Bidomax - inactive
riburg - inactive
elweiller - inactive
dzofir - inactive
Arek gagu - inactive
Gogum1 - inactive
Slavyanskiy - Autoban user
Bitcoinsupervisor - inactive
raisting - inactive
Yasin58 - inactive
balbirbit786 - inactive
mridulhasan - inactive
kaka manteng - with negative trust
Ekaterina32 - inactive
szafek - inactive
Billgates710 - Autoban user


Proof:

https://web.facebook.com/lukman.alwi.18/posts/408676619502121?pnref=story

BTC 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

Archived

Twitter url: https://twitter.com/KokoUK3

Facebook url: https://www.facebook.com/lukman.alwi.18

Archived

twitter : https://mobile.twitter.com/KokoUK3/status/831683519957004288

Archived

its name is koko UK

Archived

my account twitter : https://twitter.com/cimong371

Archived

Twitter account URL: https://twitter.com/cimong371

Archived

Account bitleap joined the BWEX signature campaign here and this is the link of its spreadsheet and he used this ETH address: 0x9EDBd018B6Db2905a87fF803A568fAB68883F0c4.
Archived link of the spreadsheet

Then base on ethplorer transaction history these are the linked addresses of the ETH address he used that are only searchable here in the forum and there's a possibility that they are connected to one another, there is more information in this thread: [v2] Need DT Member.


https://ethplorer.io/tx/0xeda31f5de8c9d5a7abe6ed85564c95cd65298f77489b101f69b670778ac6f2a7 - brontak994 - Archived

https://ethplorer.io/tx/0x475894524007ab5195a0140c3efc51f87da40ececa318df3a128db24390bf5a6 - batagor225 - Archived

https://ethplorer.io/tx/0x0807055f642dc47a00dea1abeefe9ae03825305700355a6b607fa8837685634f - menjest - Archived

https://ethplorer.io/tx/0xe5ac6024d972c0d66a846d3a82d943aee5d9e4da89582ba6f5f2104ea49b76dd - rempong054 - Archived

https://ethplorer.io/tx/0x9678f8a256fb8f6b709449447d4a2985df77aa8eac38a225805d9c1b339ff0ac - frezycroos - Archived


Continuation from the above accounts

Twitter account: https://twitter.com/menjest09

Archived

Twitter account URL: https://twitter.com/menjest09

Archived

twitter url: https://twitter.com/menjest09

Archived

Telegram: @menjest09

Archived

twitter profile   : https://twitter.com/Frezycroos

Archived

Twitter account URL: https://twitter.com/frezycroos

Archived

twitter url: https://twitter.com/rempong054

Archived

Twitter account URL: https://twitter.com/rempong054

Archived

twitter url: https://mobile.twitter.com/brontak994

Archived

Twitter account URL: hhttps://twitter.com/brontak994

Archived

Twitter account: https://twitter.com/KokoAllebas

Archived

Link: https://mobile.twitter.com/KokoAllebas

Archived

Twitter account:https://twitter.com/KokoAllebas

Archived

Facebook account URL: https://www.facebook.com/pavel5858

Archived

Link to Facebook: https://www.facebook.com/pavel5858

Archived

Profile URL: https://www.facebook.com/pavel5858

Archived

Facebook Link: https://www.facebook.com/pavel5858

Archived

Twitter link : https://twitter.com/pecandubtc

Archived

Twitter account URL: https://twitter.com/pecandubtc

Archived

Twitter profile Link: https://www.twitteraudit.com/i4u_nowshin
ETH address: 0xB4204E4D7B3baCeAC1d85B875E12Ced89905E915

Archived

ETH: 0xB4204E4D7B3baCeAC1d85B875E12Ced89905E915

Archived

Twitter Link: https://twitter.com/i4u_nowshin

Archived[/ur]

     
Twitter profile link: [url]https://twitter.com/[/url]i4u_nowshin

Archived

Facebook account URL: https://www.facebook.com/muksal.mantong

Archived

Facebook profile: https://m.facebook.com/muksal.mantong

Archived
More connection can be found here: https://bitcointalk.org/index.php?topic=2544574.msg31846934#msg31846934

Facebook account URL: https://www.facebook.com/profile.php?id=100014232122548

Archived

Facebook URL:https://www.facebook.com/profile.php?id=100014232122548

Archived

BTC Address: 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

Archived

Bitcoin Address: 18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p

Archived

Facebook account URL: https://www.facebook.com/Piotrus.Szafraniec

Archived

Link to Facebook Account: https://www.facebook.com/Piotrus.Szafraniec

Archived

ETH Address: 0xCB045CA0121Be769cf552B890f8BE56129469eDB

Archived

ETH address: 0xCB045CA0121Be769cf552B890f8BE56129469eDB

Archived



Related Addresses:

Code:

0x9EDBd018B6Db2905a87fF803A568fAB68883F0c4
0xbdab08225141BcD78414Fe2f62FC6687Eb57381d
0x5065433E47a943098D114A862930e4BaFAD344af
0xa938c7B62C167D42E6F79ea445756b124b54b594
0x7376593337759f40cbAE88Ba92D339cdE58867bE
0x99Cde962dfe942d9402a0123D082baA72F212274
0xCB045CA0121Be769cf552B890f8BE56129469eDB
18LnfvNc3MjqMRVZKkgnoqRMf3qpa9DV4p
0xB4204E4D7B3baCeAC1d85B875E12Ced89905E915

Miscellaneous:

I guess I've missed some other connections, if you found it I thank you for that. To DT members I guess it's better if they are tagged, most of them are inactive but I have a hunch that they'll get back if somehow other accounts of them are compromised  and they'll get back to use these accounts instead.

[Harlot]

Are thery aware that posting and creating fake conversation doesn't work anymore if you want to bump a thread? Or are they just faking it out for the project to think that what they are doing is really working? Well I don't feel bad for the project either as what they are doing is already illegal, they are just wasting there money on a really bad conversation that isn't even working for then. I just hope that this posts can give awareness to people who will attempt on availing their services.

[Rikafip]

Are thery aware that posting and creating fake conversation doesn't work anymore if you want to bump a thread? Or are they just faking it out for the project to think that what they are doing is really working? Well I don't feel bad for the project either as what they are doing is already illegal, they are just wasting there money on a really bad conversation that isn't even working for then. I just hope that this posts can give awareness to people who will attempt on availing their services.

I think that most of their clients have no idea how exactly thread bumping works, they just want "buzz" around the project, without realising that it only makes things worse for them as noone will fall for those fake conversations.

Additionally, some ICO trackers are checking Ann thread activity of listed project, and based on that they give them score, so that might be another reason why they keep hiring Ann thread bumping services.