DrG
Legendary
 Offline
Activity: 2086
Merit: 1035
|
 |
October 13, 2020, 04:45:56 AM |
|
The reason why people are falling for this scam is because most of the time its posted by a user who is NOT a newbie. They got some rank and makes people feel comfortable and they download the virus.
The accounts that post this virus is usually some account where they re-used their username and password from somewhere else and they don't change the password to cause a flag.
Lately I noticed the mods quickly delete the posts and usually someone requotes the post and says its a virus and to avoid downloading. However I am wondering how much longer this will go on for.
You know what's sad is that Windows Defender will manage to block pretty much every miner you put on your PC. Malwarebytes will do the same thing. Neither of these programs will give you a decent warning about a fake Github link, at least not until somebody like Google has pinged it as a bad actor and that can take ages. Crypto is still not popular enough that there isn't a "ignore mining software" option of most Antivirus... guess it doesn't fit with their agenda. |
|
|
|
|
|
|
|
|
|
|
|
You get merit points when someone likes your post enough to give you some. And for every 2 merit points you receive, you can send 1 merit point to someone else!
|
|
|
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
|
|
|
|
|
Lafu
Legendary
 Online
Activity: 2954
Merit: 3037
|
|
October 13, 2020, 05:42:44 AM |
|
Lately I noticed the mods quickly delete the posts and usually someone requotes the post and says its a virus and to avoid downloading. However I am wondering how much longer this will go on for.
We looking everyday for them and reporting the posts and threads instant as we see this shady posts. Also we track them and the most times we know when they have posted , but there is not much we can do as reporting . So if you see one of them just report the Account , so more reporting so faster they get deleted. I also keep a record of the most of users in my thread . |
|
|
|
Lafu
Legendary
Online
Activity: 2954
Merit: 3037
|
|
October 19, 2020, 08:47:23 PM |
|
Just to let you all know the Link for the Fake Ethpil with Malware included has changed ! Dont click or quote any kind of posts with this Link if you see it ! Its Malware and dangeroushttps://github.com/ProjectEthereum/ Just report the posts and threads and the Users that posting that Link ! Regards Lafu |
|
|
|
|
alucard20724
|
|
October 19, 2020, 10:46:07 PM |
|
Just to let you all know the Link for the Fake Ethpil with Malware included has changed ! Dont click or quote any kind of posts with this Link if you see it ! Its Malware and dangeroushttps://github.com/ProjectEthereum/ Just report the posts and threads and the Users that posting that Link ! Regards Lafu they've been super active today. report one message, and 10 minutes later another pops in it's place. |
|
|
|
|
waywoos
Jr. Member
Offline
Activity: 124
Merit: 2
|
|
October 19, 2020, 10:50:32 PM |
|
Why are there well over 50 different people now with well over 200 posts doing this?
Ban everyone who does it.
Seems sketchy
|
|
|
|
|
Lafu
Legendary
Online
Activity: 2954
Merit: 3037
|
Why are there well over 50 different people now with well over 200 posts doing this?
Ban everyone who does it.
Seems sketchy
They getting banned and the most of this Accounts are hacked and or sold ! The person behind all that use them to post this shady links , sadly there are some Users that fall into this trap and get hacked! Also its possible that there coins and personal details also gets stolen. We fighting them over half of a year now or longer. |
|
|
|
|
alucard20724
|
|
October 19, 2020, 11:18:15 PM |
|
Why are there well over 50 different people now with well over 200 posts doing this?
Ban everyone who does it.
Seems sketchy
We fighting them over half of a year now or longer. thank you for your time and dedication to this.  |
|
|
|
|
Vispilio
Legendary
Offline
Activity: 2044
Merit: 1603
|
|
October 19, 2020, 11:44:10 PM |
|
Thanks for the heads up, so can we safely conclude that at the moment there is no "ETH Pill" product in the market that greatly enhances hash rates for Nvidia cards,
in particular I haven't found any modification that creates a considerable improvement for 1080 TI's, in the style of ETHlargement pill, so let me know if there is anything which actually works...
|
|
|
|
|
alucard20724
|
|
October 20, 2020, 02:05:06 AM |
|
Thanks for the heads up, so can we safely conclude that at the moment there is no "ETH Pill" product in the market that greatly enhances hash rates for Nvidia cards,
in particular I haven't found any modification that creates a considerable improvement for 1080 TI's, in the style of ETHlargement pill, so let me know if there is anything which actually works...
no... there's that old one from ohgadagirl... or something like that from a couple years ago for nvidia cards.. i.e. 1080 series... don't know if it worked for 2080 cards as i never had any 2080 cards nor 30xx cards. However, there is no "Eth Pill" product for AMD cards. Never has been for AMD cards. |
|
|
|
|
Lafu
Legendary
Online
Activity: 2954
Merit: 3037
|
|
October 22, 2020, 03:36:25 PM |
|
I got the old Github Account of them deleted! So i guess you all have already seen it that they have a new Fake github link with what they spreading there Malware ! Here is the new link they posting ! Please dont download or click on the link if you find them its Malwarehttps://github.com/ProjectPill/EthereumPill/releases/tag/1.1.0
If you see this kind of link in any Post , please report them to the Moderators Regards Lafu |
|
|
|
|
JayDDee
|
|
October 22, 2020, 05:53:26 PM |
|
A new URL to avoid:
http:// ethereumpill . info / Project Ethereum Pill . zip
|
|
|
|
Lafu
Legendary
Online
Activity: 2954
Merit: 3037
|
|
October 22, 2020, 06:14:43 PM |
|
A new URL to avoid:
http:// ethereumpill . info / Project Ethereum Pill . zip
Thanks Buddy for let me know ! I got the Github Account banned and deleted already that they have created today ! So i guess that why they open up this website , but i just forwarded the website to possible get blacklisted here on bitcointalk so the link cant posted anymore ! Fingers crossed this will work and is possible. |
|
|
|
|
JayDDee
|
|
October 22, 2020, 08:11:42 PM |
|
Since the Ethpill scam has been accused of stealing wallets it might be a good time to remind people to protect their wallet.
Best practice is to install the wallet on a seperate system that isn't used for mining, preferably firewalled from mining rigs.
If that's not practical or you have a multi-purpose system create a seperate non-root user for all mining related software.
Be very suspicious of any software that requires root/admin. User protection doesn't work against root processes.
If root/admin is needed for mining, do it only on dedicated mining rigs. Never mix a wallet with root mining on the same system.
Allways password protect and backup the wallet.
I'm sure there are more.
|
|
|
|
|
miner29
|
|
October 25, 2020, 06:06:10 PM |
|
The scammer (appears to be russian and the whois shows an individual in russia is owner) has been very active last few days. Keep reporting when you see it.
Replying here so it gets back on main page to warn others.
|
|
|
|
|
DrG
Legendary
Offline
Activity: 2086
Merit: 1035
|
|
October 25, 2020, 09:24:30 PM |
|
Just had to report 3 posts for this again. It's the same person logging into multiple accounts and spamming it in the Claymore and Phoenix miner threads. New users will of course click the link and get malware/trojans on their system/network. Hopefully it's just limited to crypto and does not proliferate into keylogging or other vectors that would result in drained bank accounts and identity theft.
|
|
|
|
|
|
alucard20724
|
|
October 28, 2020, 12:53:27 PM |
|
I think there's a bot posting all of these, because as soon has one gets moderated, another pops in it's place almost immediately.
|
|
|
|
|
|
JayDDee
|
|
October 28, 2020, 01:00:28 PM |
|
I think there's a bot posting all of these, because as soon has one gets moderated, another pops in it's place almost immediately.
Agreed. I also wonder where the're getting all the userids. |
|
|
|
Lafu
Legendary
Online
Activity: 2954
Merit: 3037
|
|
October 30, 2020, 05:10:02 AM |
|
I think there's a bot posting all of these, because as soon has one gets moderated, another pops in it's place almost immediately.
Yes it looks like they have some kind of bot for it , or some script that instant post the same post with another User. I was thinking that the last weeks or days when a few posts got deleted and the Users banned , a few minutes later there is posting a punch of other Users . But as far as we keep reporting them and they get deleted its a waste of Accounts and there time ! |
|
|
|
temp_macho
Newbie
Offline
Activity: 16
Merit: 0
|
|
October 30, 2020, 08:32:38 AM |
|
lately an incredible amount of scam has appeared in posts that post links to software  |
|
|
|
|
Lafu
Legendary
Online
Activity: 2954
Merit: 3037
|
|
October 30, 2020, 05:13:23 PM |
|
lately an incredible amount of scam has appeared in posts that post links to software Not only lately , its over the last year that there some posts and ANN threads that are Fake ones with Malware download links and Fake Github Accounts. Just check 2 or 3 times the link if you download anything and maybe use google for searching if there is already something like it. Helps you maybe to be safe and that you dont get hacked of a shady software. |
|
|
|
|
