[Envy]

⚠ This thread does not apply to everyone. ⚠
⚠ This is a public service announcement! ⚠

Only those who use/have used PheonixMiner in the past, or NiceHash mining software should be concerned.

Sources to read:

⚠ 'Stop Using Pheonix Miner Immediately'  - NiceHash Blog, March 6th 2021 ⚠
https://www.nicehash.com/blog/post/stop-...mmediately

⚠ 'PheonixMiner - How/Why/What?' - NiceHash IT via Reddit, March 7th 2021 ⚠
https://www.reddit.com/r/NiceHash/commen...it_expert/

⚠ 'PheonixMiner developer, PheonixMiner is MIA and inactive' - Bitcointalk.org, profile link ⚠
https://bitcointalk.org/index.php?action...;u=1522040

⚠ 'NiceHash Founder responsible for notorious Mariposa botnet, infected over 1 million in 2010' - Wikipedia.org, NiceHash ⚠
https://en.wikipedia.org/wiki/NiceHash#Controversies

TL:DR
(See source links)
Spoiler (Click to View)
NiceHash is pushing their QuickMiner software suspiciously hard. (1) (2) People believe this commotion is a marketing tactic by NiceHash to promote QuickMiner and to get clueless people to switch over based on the instability of "anonymous, packaged executables" needed to be ran within NiceHash. Evidence has been provided that PheonixMiner dev is inactive, and scam attempts (links to new version uploads, etc) have already been made. NiceHash claims PheonixMiner users are most likely compromised and are encouraging to reinstall operating system, changed passwords and switch over to QuickMiner because they claim the "code is safe considering they watched every piece that went into it". They are getting hit from all angles and their responses are poor.

As a new negligent miner, I've been using NiceHash for approximately a week now. I receive the best hash rates with PheonixMiner, so it was automatically my go-to within the NiceHash software. NiceHash rolled out an from PheonixMiner 15.8 to PheonixMiner 15.9 one day prior to their blog and Reddit post, but the update/install never executes within the NiceHash mining software - they were asked about this, and addressed it as a "blank update" to remove the ability to install PheonixMiner.

⚠ You can still use PheonixMiner 15.8 via NiceHash mining software, which they claimed to have removed but works as per usual. ⚠
I was very unaware of the software and company I was supporting, let alone trusting with my mining business and holding my cryptos:

(Source): On December 6, 2017, approximately 4,700 Bitcoins (US$64 million at the time of the hack) were stolen from NiceHash allegedly by a spear phishing attack, aka "Bitcoin Heist". Due to the open and transparent nature of the blockchain, the security breach received an influx of attention as the stolen sum and movement of bitcoins were visible to anyone on the internet. Based on NiceHash's own excuse, one of their own employees supposedly was susceptible enough to a phishing attack it lost his company $64 million in crypto, then ironically on December 21st, 2017 the CEO of NiceHash, Marko Kobal resigns? Okay. NiceHash reopened their marketplace THAT day. Inside job?

⚠ If you believe you have been compromised, take immediate action. ⚠

Thoughts? Comments? Concerns?
Sorry about the butchered thread, I am not a writer.

[double chocolate muffin]

Nicehash quickminer is digititally signed so it should not contain virus?

[Envy]

Nicehash  quickminer is digititally signed so it should not contain virus?

A digital signature scheme typically consists of three algorithms;

• A key generation algorithm that selects a private key uniformly at random from a set of possible private keys. The algorithm outputs the private key and a corresponding public key.
  


• A signing algorithm that, given a message and a private key, produces a signature.
  


• A signature verifying algorithm that, given the message, public key and signature, either accepts or rejects the message's claim to authenticity.
  

Does not keep you safe.

Digital signature attacks exist as well:

• In a key-only attack, the attacker is only given the public verification key.
  


• In a known message attack, the attacker is given valid signatures for a variety of messages known by the attacker but not chosen by the attacker.
  


• In an adaptive chosen message attack, the attacker first learns signatures on arbitrary messages of the attacker's choice.