Post
Topic
Board Reputation
Merits 13 from 7 users
Topic OP
Newbie account spreading malware using a fake link.
by
coupable
on 15/06/2020, 17:41:13 UTC
⭐ Merited by suchmoon (7) ,TalkStar (1) ,enhu (1) ,Coolcryptovator (1) ,dkbit98 (1) ,nutildah (1) ,Rikafip (1)
This topic was posted in Bitcoin Discussion board by a newbie account (created today) named Rizotolok. The topic contains a link pretending to be a screenshot but by checking, it leads to a page where the link to the image is downloadable zip file. I have checked it using virus total and it shows a Trojan malware.
Suspecious link:
Code:
[url=https://www.screenshȯt.net/lKtgMY.jpg]https://www.screenshȯt.net/lKtgMY.jpg[/url] 
VirusTotal scan result: https://www.virustotal.com/gui/file/45896fc99e6aa2bbaa7ea55ca1c465a0051fe9dfb93090dd2955b15194bb9db0/detection

After warning users, op had edited his original post and remove the link before i can archive it. But he forgot to remove it from his other posts which i succeeded to archive it: http://archive.vn/hZrL1

In the same topic, two other newbie accounts posted to confirm that the investment is safe. I had also archived it for reference: http://archive.is/fC99n
Suspecious accounts: (all are created today)
Rizotolok
FlorenceLove
Mathieuinve2018

I was about to just report the topic to mods but after op edited it, i decided to post here so detective users can check his unedited posts using LoyceV tool which i can't use it correctly yet.