Bitcoin Forum
May 11, 2024, 02:52:25 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: WARNING! bitcoin stealing malware is being spreaded in speculation subforum  (Read 992 times)
zeroday (OP)
Donator
Hero Member
*
Offline Offline

Activity: 784
Merit: 1000



View Profile
December 27, 2014, 05:29:32 PM
 #1

Some bastard is posting "sensational news" threads from stolen bitcointalk accounts.

He includes a fake "news" website (i.e. bitcoingreatnews.com) with a video that asks you to install fake Adobe Flash Player. This installer contains trojan virus that will steal your coins.

His last thread is https://bitcointalk.org/index.php?topic=896947.0

If you see any unknown "news" site that asks you to install any plugins, report it to moderator immediately.

If you suspect that site may be harmful, scan in from https://www.virustotal.com/

You may also report malware posters and their URLs at these sites
https://www.google.com/safebrowsing/report_badware/
http://www.ic3.gov

1715439145
Hero Member
*
Offline Offline

Posts: 1715439145

View Profile Personal Message (Offline)

Ignore
1715439145
Reply with quote  #2

1715439145
Report to moderator
"If you don't want people to know you're a scumbag then don't be a scumbag." -- margaritahuyan
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
ssmc2
Legendary
*
Offline Offline

Activity: 2002
Merit: 1040


View Profile
December 27, 2014, 05:52:49 PM
 #2

And if you're not doing so already, install Flashblock along with Noscript!!
gargantuar
Member
**
Offline Offline

Activity: 71
Merit: 10


View Profile
December 27, 2014, 05:54:42 PM
 #3

Although I condemn such things and see thieves as vermin like rats and mice, it seems like a logical place to start. 
thejaytiesto
Legendary
*
Offline Offline

Activity: 1358
Merit: 1014


View Profile
December 27, 2014, 07:47:58 PM
 #4

Only install plugins from the official websites...
unent
Sr. Member
****
Offline Offline

Activity: 326
Merit: 250


View Profile
December 27, 2014, 07:48:45 PM
 #5

I read a few threads by the malware creator with shock fake titles like "5k bitcoin dump due on btc-e today". They all included a link to bitcoingreatnews.com
jbrnt
Hero Member
*****
Offline Offline

Activity: 672
Merit: 500



View Profile
December 27, 2014, 08:03:40 PM
 #6

Here are two of them, anyone on trust list should give them negative trust.

syahrere (Member) https://bitcointalk.org/index.php?action=profile;u=344575

Cache of post:
http://webcache.googleusercontent.com/search?q=cache:UbA8pR0HlogJ:https://bitcointalk.org/index.php%3Ftopic%3D896947.0+&cd=3&hl=en

lordbaltimore (Jr. Member) https://bitcointalk.org/index.php?action=profile;u=390415

Cache of post:
http://webcache.googleusercontent.com/search?q=cache:nBpqdMLX1iMJ:https://bitcointalk.org/index.php%3Ftopic%3D904513.0+&cd=4&hl=en
unent
Sr. Member
****
Offline Offline

Activity: 326
Merit: 250


View Profile
December 27, 2014, 11:21:13 PM
 #7

Here is a thread by coinmaster222 in which he says "SomeB***D has hijacked my account".

https://bitcointalk.org/index.php?topic=906121.0

The thread is locked and there is no link to the fake "news" website (bitcoingreatnews.com), yet.
zeroday (OP)
Donator
Hero Member
*
Offline Offline

Activity: 784
Merit: 1000



View Profile
December 28, 2014, 11:34:22 AM
 #8

And if you're not doing so already, install Flashblock along with Noscript!!

Even if you have these plugins working, his website lures you to download and install fake adobe update manually.
Genuine Adobe Flash will never ask to install its update directly from browser.

This is serious issue and everybody around must be careful.
HeroC
Legendary
*
Offline Offline

Activity: 858
Merit: 1000



View Profile
December 28, 2014, 05:06:44 PM
 #9

I suspect when Theymos sees this he will block the domain.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!