About a topic - Lucky did not do it from my laptop

[AB de Royse777]

Topic: https://bitcointalk.org/index.php?topic=5347035.0
https://ninjastic.space/topic/5347035

User: https://bitcointalk.org/index.php?action=profile;u=3348684
A brand new account so possibly it does not matter at all but the story matters.

What happened?
As you see on the topic I was interested to help the guy. And who would not like to use thier free time to get some rewards?

On teletram I agreed to help him. He gave me the site url:

Code:

https://fitincoin.wixsite.com/fitincoin

He asked me if I have Acunetix account. I had no idea what it is but later figured what it does. Problem is that I do not have an account with them and a demo will take time. So, the guy suggested me to use a cracked versionm gave me a link to download and also said that not to worried about it in case I feel insecure to install it.

Code:

https://violetsociety.webflow.io/acunetix9-3-0premium

I did not want to experiement with something that I do not know in the laptop I use. Requested him to wait so that I can use my spare desktop for it as in there I do not have any important files. I do not care much about the desktop at all.

We were having nice conversations while I was figureing out how to install this cracked version. The guy seems very nice. He was hasitating to pay me upfront and said he will pay half and the other half after the job. He was having difficulties to pay the half, it was taking too long. I was also working, trying to disable my windows defender etc to install the crack but it was not working. We were having conversations on telegram on my laptop. Since he was facing difficulties to pay the first half he was saying like I am so patience and even if the job can not be done still he will pay me for my time.

Since the file was not working he game me another link to try.

Code:

https://shanghaiblackgoons.com/1444-acunetix-web-vulnerability-scanner-12019051514-full-crack.html

While I was tring this 2nd link it was also having difficulties. I thought just to update him on Telegram that it's taking time. But to my surprise I found somehting unusual. All the chat history gone! One or two minutes later he changed his telegram display name and username too. I was just seeing things were happening in front of me very fast. I realized what was happening with me. Thank God that I did not use the laptop which has all important files and stuffs.


tl;dr
I have wasted my entire evening with this guy, I had to reset my desktop PC and for extra security I reinstalled my windows on this laptop too.

[1714966191]

1714966191

[The Sceptical Chymist]

I don't quite understand what that second link does, but I'm assuming it was intended to hack your computer?

Unfortunately, this is why you can't trust newbies around here as a general rule, especially when they're asking someone to do something like this.  I'm pretty sure if you're a computer geek (no offense intended), you're not going to register on bitcointalk and hope you find someone to test something for you.  Even if you intended to pay in bitcoin, I'd say it's more than likely there are many forums out there dedicated to computer stuff like this where members would be happy to receive bitcoin for their efforts.

Why do newbies like this come to bitcointalk?  To scam, of course.  It's been that way ever since I became a member and most likely well before that.  Glad you took the time to write out this sorry excuse for a scam attempt, Royse777.

[lovesmayfamilis]

I don't quite understand what that second link does, but I'm assuming it was intended to hack your computer?

There is a version of the program on the Internet that a newbie wanted to "test". In addition to the fact that he used a cracked program, it is also not worth rejecting the moment that he could add to it some of his solutions for scanning other people's computers.
https://www.XXXXXXXXXXXrussia.com/1444-acunetix-web-vulnerability-scanner-12019051514-full-crack.html(Link closed)

Crawling - Making use of Acunetix DeepScan, Acunetix automatically analyzes and crawls the website in order to build the site's structure. The crawling process enumerates all files, folders, and inputs and is vital to ensure that all your website is scanned.
Scanning - Acunetix launches a series of web vulnerability checks against each component in your web application - in effect, emulating a hacker. The results of a scan include comprehensive details of all the vulnerabilities found within the website.

Just look at the contacts provided by the author of this hacked program. Only one nickname should arouse suspicion, and fears that the thoughts of people using this program are unclean



Sometimes our good intentions to help someone can play a cruel joke on us.

[cryptoaddictchie]

I don't quite understand what that second link does, but I'm assuming it was intended to hack your computer?

Me either but probably it is somehow a virus that can hacked something when opened or downloaded.

He just obviously lay the trap on the first link as it is not probably working so he send the major trap that once Royse installed or download then there is the chance he is gonna seize ( to hack his victim). Thanks for letting us know about this modus.

Can you tell more if ever you knew what kind of hacking we are dealing. Interested how these scammers can do a crime using those f******* viruses.

[NeuroticFish]

I had to reset my desktop PC and for extra security I reinstalled my windows on this laptop too.

Try to get use to keep virtual PCs for this kind of jobs. It may be of great help, you won't waste that much time and you will not be forced to waste the time in the moments you'd do something else (your main computer will remain operational).

And yes, scammers' ingenuity is increasing... sadly...

[Obito]

You almost got scammed by a social engineering/phishing attack if I am right? Two of the most dangerous kind of scams that is in existence. Good thing that you really did  not put it in a laptop with all the important files because I think that that person has already entered the desktop with the 1st link and that he was already looking for something but he can't find it. Also you mentioned about a payment, have you been paid because the job was paid in half and the next half is after the job right?

[The Sceptical Chymist]

Try to get use to keep virtual PCs for this kind of jobs.

Jeez, that's another piece of tech I'm going to have to look into.  I think I've heard of virtual PCs, but I can't say I know what they are--though they sound pretty cool.

s.
And yes, scammers' ingenuity is increasing... sadly...

There wasn't much new about this scam.  It was basically someone looking to prey on another person's desire to help (or on their need for money), and that's as old as time.  The details might keep changing, but the basic concept will remain the same for as long as humanity exists.

You almost got scammed by a social engineering/phishing attack if I am right?

Sounds like both, though I have to say I'm not a big fan of that phrase "social engineering" even though I know quite well what it means.  I'd just call it manipulation, but social engineering is trendier and sexier to say I guess.  Good thing Royse777 isn't a sucker and pulled out when he realized what was happening--but I have no doubt that's not going to deter the scammer from seeking out another target.  Beware of newbies especially, but be careful about anyone you try to help on this forum.  You never know who has control of an account or what they're really up to.

Edit:  Thanks, NeuroticFish!  I know it was a bit off-topic, but thanks for answering my question.  I appreciate it.

[NeuroticFish]

Jeez, that's another piece of tech I'm going to have to look into.  I think I've heard of virtual PCs, but I can't say I know what they are--though they sound pretty cool.

It's not a big deal, it's a program you install and when you run it, it behaves like another computer. You'll install there the OS and everything like on a fresh machine.
VirtualBox is free, play with it a little: https://www.virtualbox.org/wiki/Downloads
I use to install https://download.virtualbox.org/virtualbox/6.1.22/VirtualBox-6.1.22-144080-Win.exe on my windows and install a Win10 inside it.
The only thing you may have to look a bit is to mount an ISO as CD/DVD to install the OS.

The details might keep changing, but the basic concept will remain the same

Indeed, but they tend to be more and more careful to the details. And that worries me.

[Lucius]

Newbie account, Telegram as a means of communication and easy earnings, what is not suspicious in this story? Well, even when crack software is added to that, it's not clear to me that an experienced member can bite into such bait - no matter what the profit is or that we may want to help someone.

Luckily, you've only wasted your time, but I'm sure you won't do it again - unless you enjoy formatting your hard drives

[sujonali1819]

We were having nice conversations while I was figureing out how to install this cracked version. The guy seems very nice. He was hasitating to pay me upfront and said he will pay half and the other half after the job.

This is one of the main trap of any scammer to make someone fool. They always looking very friendly and very kind person. We should not go to help such unknown people. You are very lucky that you did not use you laptop. Otherwise can you guess what could be happen for this 150$?

All who are seeing this thread should take it as a lesson and don't be ultra kind people to help such unknown people through telegram.

[shasan]

I didn't understand why you have did anything for a guy who is a newbie without taking any upfront. They guy wanted to give you partial payment so, you should take that before starting the task. And also, while the guy told you not to be worried if shows something insecure also did not understand the reason of stopping security while you are working for an unknown person and who had no activity on the forum. You have done nothing but act like a foolish.

[lovesmayfamilis]

OP, why don't you leave a neutral comment on his abnormal behavior with a link to this thread? Sometimes newbies come back and repeat their "requests" with other users. I understand that you have not lost anything except your personal time. But his "tests and experiments" can happen to someone else and may not be all that harmless.

[shasan]

OP, why don't you leave a neutral comment on his abnormal behavior with a link to this thread? Sometimes newbies come back and repeat their "requests" with other users. I understand that you have not lost anything except your personal time. But his "tests and experiments" can happen to someone else and may not be all that harmless.

I think the user deserve negative trust so that same thing cant happen to others or cant try to waste time or make any loss of any forum users. Atleast to make awareness should give a negative trust. Though there had not any loss but there was a chance to be hacked and loss necessary files/information.

[AB de Royse777]

OP, why don't you leave a neutral comment on his abnormal behavior with a link to this thread? Sometimes newbies come back and repeat their "requests" with other users. I understand that you have not lost anything except your personal time. But his "tests and experiments" can happen to someone else and may not be all that harmless.

I think the user deserve negative trust so that same thing cant happen to others or cant try to waste time or make any loss of any forum users. Atleast to make awareness should give a negative trust. Though there had not any loss but there was a chance to be hacked and loss necessary files/information.

Vegetative feedback left.

Newbie account, Telegram as a means of communication and easy earnings, what is not suspicious in this story?

I have helped several newbie or low rank users in this forum. There are genuine people too who really needs help but there are this kind of tricky scammers too who makes a bad name for them. 

[Lorence.xD]

There's a YouTuber that I watch and he tries this different kinds of phishing scams from emails and he uses 2 layers of virtual machine in his Arch Linux computer to completely protect himself from the attack that might and I think that I have seen this kind of attack before although I am not sure if he was talking to the scammer, probably it was an email sent to him and he tries to track where it originally came from. Next time, you might want to try doing what he did although there's a lot of technical knowledge needed for the utmost safety even in a virtual machine because some trojan can penetrate and bypass the virtual machine.

[logfiles]

It's good you used an alternate machine. Most of those "cracked" apps are filled with all kinds of malware. When someone tells you to download a crack version of some software. You should be careful.

So just below the download link of the second malicious file, Someone made a comment in Spanish

Este sitio no sirve, lo que contiene son troyanos en los archivos que estan disponibles

Translating to;

This site does not work, what it contains are Trojans in the files that are available

I downloaded the zip file and checked using virus total. In the zip file, there are 2 other exe files
1. acunetix_12.0.19051514.exe - Seems untouched
(https://www.virustotal.com/gui/file/4a3a7574de176a2e3f665ac9727d52c20336bfa3d29790cab2b779ea3e140b79/detection)

2. Service Provider License.exe - 57/69 Antivirus engine detected malware
(https://www.virustotal.com/gui/file/94f91117169345bb74d112a0af7e6ee4bb1f55eb689dbd5b1691d3e36f339d5a/detection)