Beware of Increasingly Sophisticated Malware Infection Attempts

[krypticcoin]

I'm adding this to the list of possible scams:

https://bitcointalk.org/index.php?topic=951827.0

will simply a http link and not a https link indicate a possible malware or scam link, if you have any info on this , please give some explanation on this ?

Thanks!

[1713893761]

1713893761

[1713893761]

1713893761

[blockchainlion.com]

I'm adding this to the list of possible scams:

https://bitcointalk.org/index.php?topic=951827.0

will simply a http link and not a https link indicate a possible malware or scam link, if you have any info on this , please give some explanation on this ?

Thanks!

Well.. http and not https simply indicates there is no encryption in the http packets coming on/off that link's server.

If the link points to a page that has HTTP where you have to insert user and passwords or credit cards -> IT IS A SCAM! because that information will be out in cleartext and somebody might be able to snatch it.

if the link points to a HTTP page that has only informations and data to display to you (a static website), then https is not strictly necessary and it does not indicate a scam necessarily.

if the link points to a page that has HTTPS there is encryption, but still don't be 100% sure and always investigate further!!!

[COINISM0001]

I've stopped downloading Images or clicking unknown links from strangers. I think this is the most important part. Plus make sure to do the following as well:

1) Use separate devices for exchange logins

2) Don't use public Wifi

3) Dont share screenshots of your mobile network with people (read how John MAcfee's mobile network being hacked and his twitter account being compromised)

[Alexeu000111]

The recipe is simple - do not go to suspicious links and make sure the address is correct!

[boybadbi]

I did not encounter similar problems. But thanks will be kept in mind that this is possible. Fortunately, I got on this topic. In general, I am against installing third-party software on my computer.

[ahaghighi]

is there any good application to block all the malwares from online websites?

[mega_carnation]

is there any good application to block all the malwares from online websites?

You need to install a nice anti virus and it also depends on the browser you are using. If you will disable those blocks and you will start to install Adblock you might be free from those malware that we can get from suspicious websites that we never noticed coming in to our computers. You can download it and it's for free but if you want to invest for security too, there are paid versions that you can purchase.

[rapi]

Thanks for your sharing. Now hackers are becoming more dangerous. Protect your property.

I agree. We have to be careful with hackers.

[jim_crypto]

Thanks for the insight - there are alot of devious people out there trying to advantage of people. Good work
"latest wallet"/"custom wallet"/"faster miner"
A newbie asks for the latest wallet, or wallet that doesn't have any tx fees, or the latest/fastest miner, and the attacker posts his in response. This type of attempt Usually gets spotted pretty quickly.

Copied/new ANN
The attacker creates a new ANN topic and posts a malware link as the wallet (or a legit one and changes it to a malware one later).

Replacing links in quotes
The attacker quotes a legitimate post containing a download link written by the real developer (usually the OP or a update post) and changes the link within the quote to a malware link.

Compromised dev account
The developer account (usually responsible for making the OP) is compromised and a "mandatory update" is posted. This usually happens with old/abandoned coins so the real developer isn't there to notice the rogue update.

Packed/FUD executables
In most of the cases above, the malware has little to now detections on virustotal. This is because any script kiddie can pay $30 and have their malware crypted, rendering them fully undetectable.

Modified source with backdoor
This was recently brought to my attention via a user report. A newbie, under the guise of reviving a coin posted a new client along with source. However, the source was modified to include a backdoor in the IRC bootstrapping mechanism.
here is the relevant source code:

[annam2017]

My friend was transferred token / coin where to go without knowing, now be careful as possible to not lose money.
- do not receive coin free when the source is not clear
- do not click on strange links
- no strange software downloads
Please protect your money!

[HappyDevil]

 8)Please protect your money!
Always be careful and make the right choices.do not click on strange links, no strange software downloads.
I think this is the most important part.

[yytcoin]

This is terrible, I really thank you, because I almost caught, and now I start to install Adblock, I hope to block all the malwares from online websites.

[Sunil Timo]

Thanks for making this thread. additional knowlegde again for this day thanks a lot 

[BeEvil]

No antivirus will protect you from the 0-day vulnerability. But following the rules of hygiene on the Internet, you at least protect yourself from 98% of threats.
I add that if you really want to go to the link, check it at first with the service virusotal:

[ZenMonke]

Cheers for the information and keeping the many noobs like myself a little safer from harm!

[GavenJack]

I led a large number of bounty, recorded everything on a flash drive, all tables, all the links, and what do you think? All burned, all my work, all I did for weeks. I'm tired of this, really it is impossible to fight?

[Kaan53]

Always beware of increased sophisticated malware infection attempts and just believe.

[idgaf007]

Thanks! I am pretty paranoid with all these hacks now I only use a device for crypto, no browsing other sites. It is also good to see this kind of post because awareness is the best kind of prevention.

[rainforestbrad]

Because this is unregulated the temptation for fraud is becoming more and more frequent! Its scary as a newer person getting involved.

RFB

[hefo73]

i never klick shortened URLs.
i have all my stuff offline as long as possible
you can make offline transactions via MEW for ETH and erc20 token
https://myetherwallet.github.io/knowledge-base/offline/making-offline-transaction-on-myetherwallet.html
i also use a hardwarewallet
i use a good antivirus-program
i do my own research for new investments.
i never send coins somewhere if someone promises meto send more back!
i know i can not mine btc or other coins via visiting a website. they only want my money
i know websites with 'free bitcoins' is a waste of time or scam.

no one will make me rich because he is so nice
i can only get rich if i do the right investments and be patient!

i don't trust others promising me big earnings!

i do not become greedy!
 

so i never had an infection....