Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Marketplace Bazaar Marketplace Discussions › [Community Alert] imsorri1 | UID: 4233147

Thread Closed 
Community Alert 

imsorri1 | UID: 4233147
Harald
Harald Offline
IF THE WORLD IS REAL...
**********
Legends
Posts:
396
Threads:
30
Credibility:
3400
Popularity:
1,690
βytes:
β 39.87
Game XP:
0
Dec 10, 2019 02:37 AM
(Dec 10, 2019 02:35 AM)Bastille Wrote:  Natas Thanks for mentioning, old my beer

Harald Can you send me the link ?

By the way, should we move this thread to the White hat section admins ?

I have provided you with the link.
SIM-1729678
SIM-1729678 Away
[ssh@HF:]
****
Infamous
Posts:
7,677
Threads:
369
Credibility:
5000
Popularity:
1,888
βytes:
β 15,691.77
Game XP:
2,627
Dec 10, 2019 02:42 AM
(Dec 10, 2019 02:35 AM)Dracaryzs Wrote:  It;s not a RAT. It's a JavaScript Tamper Monkey script to change Bitcoin receiving address.

You sure about this?
[Image: 8ogV22y.gif]
cryp
cryp Offline
[closed@HF:]
Posts:
1,884
Threads:
119
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
1,433
Dec 10, 2019 02:44 AM (This post was last modified: Dec 10, 2019 02:45 AM by cryp.)
Under closer inspection, this is not your typical "virus". It is a bitcoin address replacer for G2a. Similar to the LocalBitcoins one we saw recently which is just a tampermonkey script which replaces the payment address on payment coupled with an ebook saying the script is to trick (website) into refunding you. Ex. Timezone exploit, double spend exploit, etc.

The script is encrypted.

https://www.blockchain.com/btc/address/3...SvQ2AhfhWd

His btc addy ^

Seems he just scammed someone for $40. :(

(Dec 10, 2019 02:42 AM)SIM-1729678 Wrote:  You sure about this?

I have confirmed this. Above! :)

(Dec 10, 2019 02:35 AM)Bastille Wrote:  Natas Thanks for mentioning, old my beer

Harald Can you send me the link ?

By the way, should we move this thread to the White hat section admins ?

Edit : Get the link into the Virus Total link

I already did the digging. Read my post :)
Bastille
Bastille Offline
🌙 Embrace the darkness 🌙
*****
Infamous
Posts:
14,211
Threads:
213
Credibility:
1300
Popularity:
2,931
βytes:
β 7,232.42
Game XP:
250,000
Dec 10, 2019 03:05 AM
(Dec 10, 2019 02:44 AM)cryp Wrote:  Under closer inspection, this is not your typical "virus". It is a bitcoin address replacer for G2a. Similar to the LocalBitcoins one we saw recently which is just a tampermonkey script which replaces the payment address on payment coupled with an ebook saying the script is to trick (website) into refunding you. Ex. Timezone exploit, double spend exploit, etc.

The script is encrypted.

https://www.blockchain.com/btc/address/3...SvQ2AhfhWd

His btc addy ^

Seems he just scammed someone for $40. :(


I have confirmed this. Above! :)


I already did the digging. Read my post :)

Found the same thing, don't need be worried about the PDF's file it's clean, thanks cryp

[Image: Lemei7x.png]
Dracaryzs
Dracaryzs Offline
HackThemAll
*
Registered
Posts:
51
Threads:
6
Credibility:
101
Popularity:
20
βytes:
β 0
Game XP:
0
Dec 10, 2019 03:18 AM
(Dec 10, 2019 02:42 AM)SIM-1729678 Wrote:  You sure about this?

Pretty sure. 🤝
Eagle 95
Eagle 95 Offline
[ssh@HF:]
****
Infamous
Posts:
8,761
Threads:
120
Credibility:
11500
Popularity:
1,692
βytes:
β 0
Game XP:
169
Dec 10, 2019 03:26 AM
Thank you for reporting.
Staff member 10th Jan 2017 - 30th May 2020.
HF Administrator 30th May 2020 - 14th July 2022.

It was a blast being on staff. I stepped down as it's time for me to move on. I wish you all the best and if you were hit by my warnings and/or bans, it was nothing personal.

Peace out!
Omniscient
Omniscient Offline
Official HF Bug Hunter
******
Admin
Posts:
51,063
Threads:
5,240
Credibility:
21000
Popularity:
4,555
βytes:
β 68,912.59
Game XP:
3,275
Dec 10, 2019 10:29 AM
He sent mass PM spam. Probably infected but he is closed now just for the mass PM.
My Amazon Wishlist
Next Oldest | Next Newest
Thread Closed 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Community Alert] by oSumAtrIXDec 11, 2019 04:17 PM 1 108 Dec 11, 2019 04:17 PM
Last Post: Blogger
[Community Alert] by DracaryzsDec 10, 2019 02:00 AM 2 288 Dec 10, 2019 02:00 AM
Last Post: rsx
[Community Alert] by Bob WhiteDec 2, 2018 11:23 AM 16 750 Dec 2, 2018 11:23 AM
Last Post: † S A V A G E †