New Fake Electrum Wallet BEWARE!

[yampi]

Recently there is an ad to a fake Electrum wallet which installs DarkComet TROJAN onto your computer.
The official electrum wallet site has https, the fake one does not.
Oh and the domain is OBVIOUSLY different than the official's.
Please validate file signatures.
Here's a virustotal anlysis report of the fake wallet file: here

[DarkHyudrA]

And where you got the fake electrum?
You mean an ad here on the forum?

[abyrnes81]

And where you got the fake electrum?
You mean an ad here on the forum?

I am interested to know the same thing, where do you downloaded the "fake" one? Can you give use the link between the (code) (/code) tag for security.

[jbrnt]

Thank you for the warning. Where is the fake Electrum? Is it from a thread here on the forum?

[dezoel]

ehm, where is you find it?
can us see the link?

[niktitan132]

Recently there is an ad to a fake Electrum wallet which installs DarkComet TROJAN onto your computer.
The official electrum wallet site has https, the fake one does not.
Please validate file signatures.
Here's a virustotal anlysis report of the fake wallet file: here

Report the domain and they will hopefully take it down.

Also, he must share the domain name here so we can report it too (the website will be faster taken down by host).

[lacomepollos]

Thanks for this

[LiteCoinGuy]

thx for the warning. download the original here:

https://electrum.org/#home

[avatar_kiyoshi]

Thanks for the warning us.
This official thread https://bitcointalk.org/index.php?topic=973768.0 by ThomasV
How to report that fake electrum wallet?

[abyrnes81]

Thanks for the warning, I always download the official software from the real site and not from an unknown thread or site. Beware !

[innocent93]

Never download any kind of wallet beyond their official website if you don't want to lose your money.

[koelen3]

This should rather be share on the Beginners Section too , just to make them aware of it!
THank you for sharing it

[9000]

Thanks for the warning, one is never too careful online...

[luv2drnkbr]

Verify PGP sigs!!!

[A10010]

Just another reminder why we need to be extra careful online, scams everywhere!

[Bralex]

Was only yesterday i downloaded electrum for the first time believe it or not, i checked the signature though so all was good. If everyone done this then the fake wallet would be useless but of course not everyone pays attention to what they download, which is crap because then the hackers will keep going while there are people to steal from.

[twister]

The official electrum wallet site has https, the fake one does not.

Is that possible, can a hacker host files to someone else's domain with http?

Verify PGP sigs!!!

Sorry for the stupid ques but how does one exactly do that with the downloads?

[DarkHyudrA]

The official electrum wallet site has https, the fake one does not.

Is that possible, can a hacker host files to someone else's domain with http?

Verify PGP sigs!!!

Sorry for the stupid ques but how does one exactly do that with the downloads?

First question: nope, with or without SSL/TSL, you're connecting to the same website. He probably confused with a phishing someting like el3ctrum or electrun.

Second question, he probably meant the md5 hash for checksum, it's always said on the official website so that you can guarantee that you're downloading the right version.

[mistercoin]

Recently there is an ad to a fake Electrum wallet which installs DarkComet TROJAN onto your computer.
The official electrum wallet site has https, the fake one does not.
Oh and the domain is OBVIOUSLY different than the official's.
Please validate file signatures.
Here's a virustotal anlysis report of the fake wallet file: here

Thanks for the heads up. I will send a newsletter out to my subscribers about it.

[Bizmark13]

The official electrum wallet site has https, the fake one does not.

Is that possible, can a hacker host files to someone else's domain with http?

Verify PGP sigs!!!

Sorry for the stupid ques but how does one exactly do that with the downloads?

First question: nope, with or without SSL/TSL, you're connecting to the same website. He probably confused with a phishing someting like el3ctrum or electrun.

Second question, he probably meant the md5 hash for checksum, it's always said on the official website so that you can guarantee that you're downloading the right version.

If you go to the official download page for Electrum, next to each download link you will see a PGP signed signature from one of the devs.

As for the MD5 hash, you can get it by right clicking on the file and choosing "properties". A window should appear with some tabs on the top. Click on the "checksums" tab to see the MD5 hash:



Note however that the encryption behind MD5 hashes isn't completely resistant to forgeries, i.e. it is possible to construct collisions that result in two different files having the same MD5 hash.