Be careful of scammers who promote fake exploit methods for Amazon gift cards

[FatFork]

Something I've just noticed on the forum. There was a thread about Amazon gift cards that seemed harmless enough at first.  But there's a sinister motive hidden beneath the surface.

A couple of newbies popped up, just chatting about how to use or sell these cards.  But I could tell something was off. Turns out, they were lowkey promoting some fake method to generate Amazon cards.  Shady enough on its own.  But that wasn't even their real endgame.  They were trying to get people to download these malicious browser scripts.  And you just know those things were packed with nasty code ready to steal your crypto or whatever else.

It's a classic bait-and-switch tactic.  They lure you in with promises of easy money and free gift cards.  But before you know it, your system's infected with garbage you don't want.  

Scammers Profile Links:
https://bitcointalk.org/index.php?action=profile;u=3647855 - Revaniz
https://bitcointalk.org/index.php?action=profile;u=3647856 - WARtoze99

Reference Links:
https://bitcointalk.org/index.php?topic=5505793.0
https://bitcointalk.org/index.php?topic=5505792.0
(I have reported both threads to the moderators, so they may be deleted. You can find them in the archives if you are interested.)


Here's a link to a suspicious greasemonkey/tampermonkey script. It's heavily obfuscated and beyond my ability to analyze, so if anyone has more experience with it, feel free to give it a try.

Code:

Link #1 https://paste.sh/7vnaa5T9#rnL_3Gbklz9HKMIUKuPPG3yf
Link #2 (backup) https://files.catbox.moe/1evss2.txt

(don't install this in your browser unless you know exactly what you're doing!)

[Don Pedro Dinero]

So, you have reported them and not tagged them? The opposite of what is usually done in the case of a scam, although I suppose that if it is a trap to install malicious software the moderators will act.

Anyway, it's been a while now that to use gift cards, Amazon asks you to complete KYC, so I stopped using them some time ago (although KYC is only necessary to buy products from third party sellers).

[FatFork]

So, you have reported them and not tagged them? The opposite of what is usually done in the case of a scam, although I suppose that if it is a trap to install malicious software the moderators will act.

I reported them for violating forum rules. The moderators will decide whether the report is valid. I didn't tag them mainly because they are likely throwaway accounts and I doubt they will return. Besides, I only have circumstantial evidence, so I believe a negative tag is unwarranted at this point.

[Crypto Library]

So, you have reported them and not tagged them? The opposite of what is usually done in the case of a scam, although I suppose that if it is a trap to install malicious software the moderators will act.

I reported them for violating forum rules. The moderators will decide whether the report is valid. I didn't tag them mainly because they are likely throwaway accounts and I doubt they will return. Besides, I only have circumstantial evidence, so I believe a negative tag is unwarranted at this point.

I have already reported this few hours ago on the Report Malware and Suspicious Links here so Mods can take Action ! and I want to also mention that these are not new in the forum .
I have reported these scammers multiple (more than 10 times) actually they are not only scammer they are also phishing people.

https://www.virustotal.com/gui/url/7e77225a88bab643cce7f1b795e3064937af1bed4708fbfd54c7f8b5342e8791

They are particularly a gang in the previous day they worked on the exploit gambling site now they have changed their plan and working on exploiting the amazon. But the interesting thing is every time we have kicked their ass before trapping someone

Here you can saw some example-

- https://bitcointalk.org/index.php?topic=5182222.msg64176811#msg64176811
- https://bitcointalk.org/index.php?topic=5182222.msg64244763#msg64244763
- https://bitcointalk.org/index.php?topic=5182222.msg64267124#msg64267124
- https://bitcointalk.org/index.php?topic=5182222.msg64279501#msg64279501
- https://bitcointalk.org/index.php?topic=5182222.msg64283359#msg64283359

[FatFork]

I have already reported this few hours ago on the Report Malware and Suspicious Links here so Mods can take Action ! and I want to also mention that these are not new in the forum .

Yeah! Sounds like a persistent bunch, but we're a persistent community too.  Good call on reporting them. Account's already nuked, mods waste no time with these scammers here.

[BitcoinGirl.Club]

Yeah! Sounds like a persistent bunch, but we're a persistent community too.  Good call on reporting them. Account's already nuked, mods waste no time with these scammers here.

There were not point to tag the accounts. Good that you reported them and mods took quick action.

[PX-Z]

They are particularly a gang in the previous day they worked on the exploit gambling site now they have changed their plan and working on exploiting the amazon. But the interesting thing is every time we have kicked their ass before trapping someone

If i remember correctly these are the peeps who are sharing "refund tricks" from different site they think it works. I saw this kind even way back 2020 if i remember it right. They are so determined to get their next victims lmao.