Bitcoin Forum
May 01, 2024, 05:36:55 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Spam wave attack on the Spanish Forum – Hardware y Minería (and others)  (Read 188 times)
DdmrDdmr (OP)
Legendary
*
Offline Offline

Activity: 2296
Merit: 10748


There are lies, damned lies and statistics. MTwain


View Profile WWW
October 15, 2021, 01:44:29 PM
Last edit: October 15, 2021, 02:22:08 PM by DdmrDdmr
Merited by Welsh (2), suchmoon (1), ABCbits (1), Charles-Tim (1), Imran232 (1), Symmetrick (1)
 #1

There seems to be an ongoing wave of spam posts on the Spanish forum, posting referenced to https[colon]//goodhash[dot]io. The attack started less than 20 minutes ago, and is carried out by an army of newbie accounts that post one or two posts at most. The said subboard, Hardware y Minería , now spans 3 pages and a half of threads, bumped by the addition of a trailing post of the sort. The posts are also "bot" type posts, and not human made (almost as fast as my meriting sprees).

I’ve reported a few, but I’m sure there’s likely a better way than doing that.

Which is the best procedure to deal with it?


Edit: Also happening in:
Mining (India)

Edit 2:
I see most, if not all, are now deleted, figuring as "AutoTrash" on my search window, and no longer visible on the Spanish board. The post message on my search window is now figuring as "Re: Bнимaниe, нoвый лoxoтpoн" ("Re: Attention, new scam"), which I presume is part of the counter action.

Cheers.
1714541815
Hero Member
*
Offline Offline

Posts: 1714541815

View Profile Personal Message (Offline)

Ignore
1714541815
Reply with quote  #2

1714541815
Report to moderator
1714541815
Hero Member
*
Offline Offline

Posts: 1714541815

View Profile Personal Message (Offline)

Ignore
1714541815
Reply with quote  #2

1714541815
Report to moderator
1714541815
Hero Member
*
Offline Offline

Posts: 1714541815

View Profile Personal Message (Offline)

Ignore
1714541815
Reply with quote  #2

1714541815
Report to moderator
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714541815
Hero Member
*
Offline Offline

Posts: 1714541815

View Profile Personal Message (Offline)

Ignore
1714541815
Reply with quote  #2

1714541815
Report to moderator
stompix
Legendary
*
Offline Offline

Activity: 2870
Merit: 6282


Blackjack.fun


View Profile
October 15, 2021, 01:51:57 PM
 #2

Probably banning the URL, but that is up to theymos

That being said, I knew I've heard that name before:
https://ninjastic.space/topic/5363412

Quote
We just want to promote our project in any way we can, because we've been working on it for so long.

Well, sometimes even spammer is true to his word.

.
.BLACKJACK ♠ FUN.
█████████
██████████████
████████████
█████████████████
████████████████▄▄
░█████████████▀░▀▀
██████████████████
░██████████████
████████████████
░██████████████
████████████
███████████████░██
██████████
CRYPTO CASINO &
SPORTS BETTING
▄▄███████▄▄
▄███████████████▄
███████████████████
█████████████████████
███████████████████████
█████████████████████████
█████████████████████████
█████████████████████████
███████████████████████
█████████████████████
███████████████████
▀███████████████▀
█████████
.
TopTort777
Legendary
*
Offline Offline

Activity: 2282
Merit: 1436



View Profile
October 15, 2021, 01:54:33 PM
 #3

I see they now has switched to Indian local board. Just don't get what they intend to achieve with it ? Promote their crap? Or to ddos forum with one line posts ? Their better run bounty if they want to promote their product. Instead they are raising negative around it. So stupid.

.
.DuelbitsSPORTS.
▄▄▄███████▄▄▄
▄▄█████████████████▄▄
▄██████████████████████▄
██████████████████████████
███████████████████████████
██████████████████████████████
██████████████████████████████
█████████████████████████████
███████████████████████████
█████████████████████████
▀████████████████████████
▀▀███████████████████
██████████████████████████████
██
██
██
██

██
██
██
██

██
██
██
████████▄▄▄▄██▄▄▄██
███▄█▀▄▄▀███▄█████
█████████████▀▀▀██
██▀ ▀██████████████████
███▄███████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
███████████████████████
▀█████████████████████▀
▀▀███████████████▀▀
▀▀▀▀█▀▀▀▀
OFFICIAL EUROPEAN
BETTING PARTNER OF
ASTON VILLA FC
██
██
██
██

██
██
██
██

██
██
██
10%   CASHBACK   
          100%   MULTICHARGER   
Welsh
Staff
Legendary
*
Offline Offline

Activity: 3262
Merit: 4110


View Profile
October 15, 2021, 02:24:31 PM
Last edit: October 15, 2021, 02:43:51 PM by Welsh
Merited by DdmrDdmr (8), Symmetrick (2)
 #4

Seemed to have curbed it for now. They have likely run out of accounts for the time being, or potentially nuking their account before posting broke their script. Whatever the cause of the current slow down, I'll contact the appropriate users on getting this automatically flagged/moderated. However, meanwhile continue reporting them, I don't expect you to report every single one, but just report one in each section that it's happening, and put in the report message field that this is widespread, and not only that post you reported.

I'll then sit down, and battle these until they stop. I'll be keeping an eye out anyway for them. Indian section, Spanish section, and the Altcoin section were attacked, most of them should have been nuked. If I've missed any or they continue while not being dealt with report them for me, and other staff so we can handle it in a timely manner.

Update: I'm already aware of the everswap spam attack, which seems why we had a temporary lull for a little bit, probably swapped scripts or tinkered with it.

Update 2: Sorted all that I can see on patrol, reports, cleaned up Spanish, and Indian sections, as well as Tokens, and Altcoin announcements. Seems to be all quiet on these fronts now. I've also contacted the appropriate users to see if we can get these automatically identified in the future.

The return of the spam bots that the forum fought a year ago. New wave. Only this time, someone decided to spam with links to cloud mining. So far, everything is calm in the Russian section, but it can also get there. Based on the registrations, the attack was planned in advance. Hopefully the moderators will react quickly, or we will again get fake activity statistics for this month in future reports.
Ah we get loads. I've been fighting the same bots for months now, I've probably nuked well over thousand accounts, they're obviously linked, but they keep adapting to avoid any sort of automated detection. Plus, I know other staff have been fighting this particular one so likely they've had thousands upon thousands of accounts.

Which is the best procedure to deal with it?
Basically did the right thing. Report a couple, then if it does seem widespread, make a post here.
Mitchell
Copper Member
Legendary
*
Offline Offline

Activity: 3906
Merit: 2198


Verified awesomeness ✔


View Profile WWW
October 15, 2021, 02:56:30 PM
Merited by DdmrDdmr (6), suchmoon (1), NotATether (1), Symmetrick (1)
 #5

I've added the goodhash stuff to MindlessElectron, which will deal with them if they are a newbie. If you see any other spam waves, feel free to PM/ping me. Smiley

.
Duelbits
            ▄████▄▄
          ▄█████████▄
        ▄█████████████▄
     ▄██████████████████▄
   ▄████▄▄▄█████████▄▄▄███▄
 ▄████▐▀▄▄▀▌████▐▀▄▄▀▌██

 ██████▀▀▀▀███████▀▀▀▀█████

▐████████████■▄▄▄■██████████▀
▐██████████████████████████▀
██████████████████████████▀
▀███████████████████████▀
  ▀███████████████████▀
    ▀███████████████▀
.
         ▄ ▄▄▀▀▀▀▄▄
         ▄▀▀▄      █
         █   ▀▄     █
       ▄█▄     ▀▄   █
      ▄▀ ▀▄      ▀█▀
    ▄▀     ▀█▄▄▄▀▀ ▀
  ▄▀  ▄▀  ▄▀

Live Games

   ▄▄▀▀▀▀▀▀▀▄▄
 ▄▀ ▄▄▀▀▀▀▀▄▄ ▀▄
▄▀ █ ▄  █  ▄ █ ▀▄
█ █   ▀   ▀   █ █  ▄▄▄
█ ▀▀▀▀▀▀▀▀▀▀▀▀▀ █ █   █
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█  █▄█
█ ▀▀█  ▀▀█  ▀▀█ █  █▄█

Slots
.
        ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄
        █         ▄▄  █
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄       █
█  ▄▄         █       █
█             █       █
█   ▄▀▀▄▀▀▄   █       █
█   ▀▄   ▄▀   █       █

Blackjack
|█▀▀▀▀▀█▄▄▄
       ▀████▄▄
         ██████▄
▄▄▄▄▄▄▄▄█▀    ▀▀█
████████▄        █
█████████▄        █
██████████▄     ▄██
█████████▀▀▀█▄▄████
▀▀███▀▀       ████
   █          ███
   █          █▀
▄█████▄▄▄ ▄▄▀▀
███████▀▀▀
.
                 NEW!                  
SPORTS BETTING 
|||
[ Đ ][ Ł ]
AVAILABLE NOW

Advertisements are not endorsed by me.
Welsh
Staff
Legendary
*
Offline Offline

Activity: 3262
Merit: 4110


View Profile
October 15, 2021, 03:02:01 PM
 #6

I've added the goodhash stuff to MindlessElectron, which will deal with them if they are a newbie. If you see any other spam waves, feel free to PM/ping me. Smiley
Ah, see I wasn't sure if this was public knowledge, and that's why I was alluding to it rather than outright saying it. I thought I remember a discussion about MindlessElectron before, but wasn't sure if it was in Meta or not, and didn't have the time to check.

Good, I can go back to my tea now.

Which is the best procedure to deal with it?
So, to expand on this now pretty much did the right thing, but if you don't get any luck with that you can always send a personal message to Mitchell, and when they get on they'll add it to MindlessElectron bot.
Mitchell
Copper Member
Legendary
*
Offline Offline

Activity: 3906
Merit: 2198


Verified awesomeness ✔


View Profile WWW
October 15, 2021, 03:05:01 PM
 #7

Ah, see I wasn't sure if this was public knowledge, and that's why I was alluding to it rather than outright saying it. I thought I remember a discussion about MindlessElectron before, but wasn't sure if it was in Meta or not, and didn't have the time to check.

Good, I can go back to my tea now.
I've mentioned the bot before and it's trust rating has a message from me, so it's not a super secret thing or anything. Tongue

.
Duelbits
            ▄████▄▄
          ▄█████████▄
        ▄█████████████▄
     ▄██████████████████▄
   ▄████▄▄▄█████████▄▄▄███▄
 ▄████▐▀▄▄▀▌████▐▀▄▄▀▌██

 ██████▀▀▀▀███████▀▀▀▀█████

▐████████████■▄▄▄■██████████▀
▐██████████████████████████▀
██████████████████████████▀
▀███████████████████████▀
  ▀███████████████████▀
    ▀███████████████▀
.
         ▄ ▄▄▀▀▀▀▄▄
         ▄▀▀▄      █
         █   ▀▄     █
       ▄█▄     ▀▄   █
      ▄▀ ▀▄      ▀█▀
    ▄▀     ▀█▄▄▄▀▀ ▀
  ▄▀  ▄▀  ▄▀

Live Games

   ▄▄▀▀▀▀▀▀▀▄▄
 ▄▀ ▄▄▀▀▀▀▀▄▄ ▀▄
▄▀ █ ▄  █  ▄ █ ▀▄
█ █   ▀   ▀   █ █  ▄▄▄
█ ▀▀▀▀▀▀▀▀▀▀▀▀▀ █ █   █
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█  █▄█
█ ▀▀█  ▀▀█  ▀▀█ █  █▄█

Slots
.
        ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄
        █         ▄▄  █
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄       █
█  ▄▄         █       █
█             █       █
█   ▄▀▀▄▀▀▄   █       █
█   ▀▄   ▄▀   █       █

Blackjack
|█▀▀▀▀▀█▄▄▄
       ▀████▄▄
         ██████▄
▄▄▄▄▄▄▄▄█▀    ▀▀█
████████▄        █
█████████▄        █
██████████▄     ▄██
█████████▀▀▀█▄▄████
▀▀███▀▀       ████
   █          ███
   █          █▀
▄█████▄▄▄ ▄▄▀▀
███████▀▀▀
.
                 NEW!                  
SPORTS BETTING 
|||
[ Đ ][ Ł ]
AVAILABLE NOW

Advertisements are not endorsed by me.
Csmiami
Copper Member
Legendary
*
Offline Offline

Activity: 1596
Merit: 1319


I'm sometimes known as "miniadmin"


View Profile WWW
October 19, 2021, 08:17:13 PM
 #8

---
Sorry to bring more bad news, but I've found the following spammer spamming this very same thingy. He is member-ranked so that's why he most likely got away with it:

User: ADEMNL

Has made 11 posts on 11 different languages about the same product in under 40 minutes, the GoodHash whatever the hell that is. He did also post a few other threads about this last week. (Ninjasticspace)

Going to report this and ask for a GM on the report; @mprep , this may be a good new thing to add to the potential spam bot I've read about in the past (in case you read this).


Mitchell
Copper Member
Legendary
*
Offline Offline

Activity: 3906
Merit: 2198


Verified awesomeness ✔


View Profile WWW
October 19, 2021, 08:18:21 PM
 #9

Sorry to bring more bad news, but I've found the following spammer spamming this very same thingy. He is member-ranked so that's why he most likely got away with it:
The spam bot works only for newbies. I cannot do anything about higher members. Sorry.

.
Duelbits
            ▄████▄▄
          ▄█████████▄
        ▄█████████████▄
     ▄██████████████████▄
   ▄████▄▄▄█████████▄▄▄███▄
 ▄████▐▀▄▄▀▌████▐▀▄▄▀▌██

 ██████▀▀▀▀███████▀▀▀▀█████

▐████████████■▄▄▄■██████████▀
▐██████████████████████████▀
██████████████████████████▀
▀███████████████████████▀
  ▀███████████████████▀
    ▀███████████████▀
.
         ▄ ▄▄▀▀▀▀▄▄
         ▄▀▀▄      █
         █   ▀▄     █
       ▄█▄     ▀▄   █
      ▄▀ ▀▄      ▀█▀
    ▄▀     ▀█▄▄▄▀▀ ▀
  ▄▀  ▄▀  ▄▀

Live Games

   ▄▄▀▀▀▀▀▀▀▄▄
 ▄▀ ▄▄▀▀▀▀▀▄▄ ▀▄
▄▀ █ ▄  █  ▄ █ ▀▄
█ █   ▀   ▀   █ █  ▄▄▄
█ ▀▀▀▀▀▀▀▀▀▀▀▀▀ █ █   █
█▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀█  █▄█
█ ▀▀█  ▀▀█  ▀▀█ █  █▄█

Slots
.
        ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄
        █         ▄▄  █
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▄       █
█  ▄▄         █       █
█             █       █
█   ▄▀▀▄▀▀▄   █       █
█   ▀▄   ▄▀   █       █

Blackjack
|█▀▀▀▀▀█▄▄▄
       ▀████▄▄
         ██████▄
▄▄▄▄▄▄▄▄█▀    ▀▀█
████████▄        █
█████████▄        █
██████████▄     ▄██
█████████▀▀▀█▄▄████
▀▀███▀▀       ████
   █          ███
   █          █▀
▄█████▄▄▄ ▄▄▀▀
███████▀▀▀
.
                 NEW!                  
SPORTS BETTING 
|||
[ Đ ][ Ł ]
AVAILABLE NOW

Advertisements are not endorsed by me.
Csmiami
Copper Member
Legendary
*
Offline Offline

Activity: 1596
Merit: 1319


I'm sometimes known as "miniadmin"


View Profile WWW
October 19, 2021, 08:22:49 PM
 #10

---
Thought it was that way... Still, I made the post to use as a reference for the report, and so that mprep can take that into account for his bot, if that's still a thing. Even if it only works on newbies, I don't know what we'd do without mindlesselectron... (I do, I remember at least one time it was down and the rate I was reporting at was... savage)

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!