Beware of Increasingly Sophisticated Malware Infection Attempts

[Dolapoemmanuel]

thank you for this information, it is very useful for the community. because it is a target for people who are seeking free crypto mine

[1715259737]

1715259737

[1715259737]

1715259737

[1715259737]

1715259737

[1715259737]

1715259737

[Cryptojimmy555]

thanks for the infpo

[cf_mm]

Thank you guys been warning my crowd too.

[spacedis]

Thanks for all the information guys. There is a lot of stuff out there to keep an eye on. It's scary that there is so many malicious pieces of software out there. I guess someone has to keep an eye one it.

[Nastydawg6r]

Any thoughts ?

EDIT
SPR, ORB and at least one or two other coins are using this faucet/ block explorer site.

BE VARY WARY OF THE MULTIFAUCET BLOCK EXPLORER !

I searched an for an address and was left with having to fight virus scan pop ups for a few minutes.

http://img.techpowerup.org/150126/SPRbe1.jpg

http://img.techpowerup.org/150126/SPRbe2.jpg

http://img.techpowerup.org/150126/SPRbe3191.jpg

Be aware, most of the time your browser gets jacked it’s due to malware on the host server. Most of the time the site owner doesn’t even know there’s an issue until they show up on a blacklist.

[CryptoAllDay]

Thanks for creating this post, one that totally slipped my mind is the false quotations on the forums with the links changed to the malicious software.  This gave me a few more things to pay attention to.

[Alex Foman]

Daya also advise you to control your PC and programs. When it comes to protecting personal data, excessive paranoid and caution will not interfere.

[tdtduy]

Electronic wallets containing Bitcoins and Altcoin are valuable assets. So, here are the assets that hackers look at. Collection and accumulation of Bitcoin and Altcoin is extremely difficult. So be careful and work hard to protect your personal property from the bad guys. Thank you very much for the warning information.

[tdtduy]

I have received some email scams that are trying to link me to change passwords and there they are picking your details and maybe a password. Never trust senders like these and always check if the address is right. For example (i.instagram..... is a well thought out fake insta address) that is not too easy to be realize. To stay safe just use two (or more) steps authentication everywhere if that is possible!

Thanks for sharing information from you. With the knowledge of technology security of individuals, we should apply a combination of measures to be able to protect our personal information in the best way. Absolutely do not click on any links, software, even ad pages to avoid the penetration of malicious software. Careful is never excess, especially in the present stage.

[Tamila]

Some steps must be taken which are good enough to protect your systems to be hacked such as not to use unknown exe, use of linux which seems to be less vunarable to virus.

[leavefifa]

Nowadays, malicious software spreads very quickly and unexpectedly. They are hidden in various forms of electronic information, such as harmless software, information links, etc. They can get your personal data if the intrusion is complete, even offline. Personal property stolen by hackers happens regularly. Choose safe and appropriate security measures, at the same time, always beware of uncertainty.

[commander11]

I am so unlucky that I fall for this kind of attack today. Some kind of pop-up tab that contains malware. And after a few hour the hacker transfer every cent of ETHER from my wallet. I should to be more careful next time.

[alex massi]

Is there still malware infection attempst? Thank you!!

[harjiy]

we really need to be extra careful when trying any alt bitcoin some are not real has they seem....

[armchair-84]

two days ago the friends of mine were robbed through mew, likely compromised, so I started to think how to protect ourselves cos we thought that this won't happen to us...well, guys, is it real to track their further transactions down? But if they'll try to launder money through the darknet, it will no longer be reality(

[boing747]

Thank you article provides me the knowledge required to enter into this market

[Carlsen]

I always try to browse without the activation of javascript.
I think that prevents many attacks from happening. Unfortunatelly many sites require it, so browsing becoms more difficult.

[Bros_3]

In the past months, malware infection attempts on this forum has become increasingly sophisticated. Below is a summary of infection techniques that I have encountered. With the most sophisticated attacks, common sense and virus scans is no longer sufficient to ensure safety.

"latest wallet"/"custom wallet"/"faster miner"
A newbie asks for the latest wallet, or wallet that doesn't have any tx fees, or the latest/fastest miner, and the attacker posts his in response. This type of attempt Usually gets spotted pretty quickly.

Copied/new ANN
The attacker creates a new ANN topic and posts a malware link as the wallet (or a legit one and changes it to a malware one later).

Replacing links in quotes
The attacker quotes a legitimate post containing a download link written by the real developer (usually the OP or a update post) and changes the link within the quote to a malware link.

Compromised dev account
The developer account (usually responsible for making the OP) is compromised and a "mandatory update" is posted. This usually happens with old/abandoned coins so the real developer isn't there to notice the rogue update.

Packed/FUD executables
In most of the cases above, the malware has little to now detections on virustotal. This is because any script kiddie can pay $30 and have their malware crypted, rendering them fully undetectable.

Modified source with backdoor
This was recently brought to my attention via a user report. A newbie, under the guise of reviving a coin posted a new client along with source. However, the source was modified to include a backdoor in the IRC bootstrapping mechanism.

[Stormspirit]

Knowledge is a power, we have to be safe out there. Cybercriminals are more cunning now and cryptomining malware are increasing in number, type and attacks. Be very careful about clicking links, downloading or installing programs etc related to cryptocurrencies. It's better to ask from someone who is expert in such issues rather than try to make any blunder.  If you should have you desktops wallet / private keys and so on, on your mail (internet connected machine) then do make sure to only install software, say mining scripts and so on from the official sources. Of course we, in this very thread, have learnt of exploits even from he get go, dev aware or not.

[jayveesap18]

i'm afraid of the many issues nowadays but the team always help us to fix all the problems. thanks for the info