Bitcoin Forum
December 16, 2017, 05:16:05 PM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: WARNING! bitcoin stealing malware is being spreaded in speculation subforum  (Read 904 times)
zeroday
Donator
Hero Member
*
Offline Offline

Activity: 784


EU: Welcome to the world of financial slavery


View Profile
December 27, 2014, 05:29:32 PM
 #1

Some bastard is posting "sensational news" threads from stolen bitcointalk accounts.

He includes a fake "news" website (i.e. bitcoingreatnews.com) with a video that asks you to install fake Adobe Flash Player. This installer contains trojan virus that will steal your coins.

His last thread is https://bitcointalk.org/index.php?topic=896947.0

If you see any unknown "news" site that asks you to install any plugins, report it to moderator immediately.

If you suspect that site may be harmful, scan in from https://www.virustotal.com/

You may also report malware posters and their URLs at these sites
https://www.google.com/safebrowsing/report_badware/
http://www.ic3.gov


1513444565
Hero Member
*
Offline Offline

Posts: 1513444565

View Profile Personal Message (Offline)

Ignore
1513444565
Reply with quote  #2

1513444565
Report to moderator
1513444565
Hero Member
*
Offline Offline

Posts: 1513444565

View Profile Personal Message (Offline)

Ignore
1513444565
Reply with quote  #2

1513444565
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1513444565
Hero Member
*
Offline Offline

Posts: 1513444565

View Profile Personal Message (Offline)

Ignore
1513444565
Reply with quote  #2

1513444565
Report to moderator
ssmc2
Legendary
*
Offline Offline

Activity: 1120


View Profile
December 27, 2014, 05:52:49 PM
 #2

And if you're not doing so already, install Flashblock along with Noscript!!
gargantuar
Member
**
Offline Offline

Activity: 71


View Profile
December 27, 2014, 05:54:42 PM
 #3

Although I condemn such things and see thieves as vermin like rats and mice, it seems like a logical place to start. 
thejaytiesto
Legendary
*
Offline Offline

Activity: 1134



View Profile
December 27, 2014, 07:47:58 PM
 #4

Only install plugins from the official websites...

unent
Sr. Member
****
Offline Offline

Activity: 326


View Profile
December 27, 2014, 07:48:45 PM
 #5

I read a few threads by the malware creator with shock fake titles like "5k bitcoin dump due on btc-e today". They all included a link to bitcoingreatnews.com
jbrnt
Hero Member
*****
Offline Offline

Activity: 672



View Profile
December 27, 2014, 08:03:40 PM
 #6

Here are two of them, anyone on trust list should give them negative trust.

syahrere (Member) https://bitcointalk.org/index.php?action=profile;u=344575

Cache of post:
http://webcache.googleusercontent.com/search?q=cache:UbA8pR0HlogJ:https://bitcointalk.org/index.php%3Ftopic%3D896947.0+&cd=3&hl=en

lordbaltimore (Jr. Member) https://bitcointalk.org/index.php?action=profile;u=390415

Cache of post:
http://webcache.googleusercontent.com/search?q=cache:nBpqdMLX1iMJ:https://bitcointalk.org/index.php%3Ftopic%3D904513.0+&cd=4&hl=en
unent
Sr. Member
****
Offline Offline

Activity: 326


View Profile
December 27, 2014, 11:21:13 PM
 #7

Here is a thread by coinmaster222 in which he says "SomeB***D has hijacked my account".

https://bitcointalk.org/index.php?topic=906121.0

The thread is locked and there is no link to the fake "news" website (bitcoingreatnews.com), yet.
zeroday
Donator
Hero Member
*
Offline Offline

Activity: 784


EU: Welcome to the world of financial slavery


View Profile
December 28, 2014, 11:34:22 AM
 #8

And if you're not doing so already, install Flashblock along with Noscript!!

Even if you have these plugins working, his website lures you to download and install fake adobe update manually.
Genuine Adobe Flash will never ask to install its update directly from browser.

This is serious issue and everybody around must be careful.

HeroC
Legendary
*
Offline Offline

Activity: 857


GPG: FA122C1A | IRC: HeroCC


View Profile WWW
December 28, 2014, 05:06:44 PM
 #9

I suspect when Theymos sees this he will block the domain.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!