Guide and advice for new Users before you Download anything from the Forum !

[Lafu]

The Reason why i write that is that the last weeks a lot of Download Links was posted that have different Links
behind of what you see when you read the Download Link.

The most of them are MALWARE

The most posted Links are in new created ANNs that you see and its possible that one of them are FAKE ANNs and here i will start my first Advice .

If you see new created ANNs or Threads and you are intressted in them and will follow the Project seriously make the following before you Click any download Link :

- 1  copy the Thread title and do some search on Google or use the search field here on the forum

( This will show you if there are other threads with the same name normaly when there is one )

( If you found another thread with the same Title look at it and maybe check the Dates of creation of the Thread and you will see what thread was created first )


- 2  look at the User that have created the new ANN

( Most created FAKE ANNs are created from newbies with not much activity and you also see it when you check the orginal ANN that there are diffrent Users that created the ANNs)

- 3  Use the quote button to look behind the Links that you can see on the ANNs

( This will show you the real link of what you can see on the ANN and please check it also with the orginal ANN if there is a Difference of the name of the Link )


Thats a Example what i would show you !

On the picture below you can see how it looks


But if you use the Quote button you can see that there is some other Link and that is suspicious

Code:

Wallets:
Windows: [url=https://bitbucket.org/develsoftware/gcc-coin/downloads/GCCcoin.rar]https://mega.nz/#!QPxEhQ5b!ICzbJn2wVveWsFazG_CDpY0GI_5RBjg1cIB7_lMxP04[/url]

You can see there is a other link hided of what you normal see !

- 4 Check how the Links are written when you looking with Quote on it

( I will use for this example something i have written on the Spambuster thread here : https://asktom.cf/index.php?topic=4720640.msg51869997#msg51869997 )

Look exactly how the names and letters are written and below you can see what i mean

Code:

Fake Github :  https_://github.com/cryptonexli

Real Github :  https_://github.com/cryptonexii

You can also use Virustotal to check the links or if you have downloaded the file already you can check the file directly on Virustotal : https://www.virustotal.com/gui/home/upload

The most FAKE ANNs have the download links from Bitbucket or they are wrong written with just a other letter in it , and they have MALWARE in it that steals your Account, Wallets and Emails login details !

Check it a few times before you download anything and i hope that will helps to safe a few Users there Coins and Money and some Action before they get effected .

Also that advice is going out to the Translators also and to everybody , if you find ANNs that are having such things or you think they suspicious , Report them to the Moderators !

Thanks to Pffrt for the Link below.

Here you can find another thread about such things from grue  :  https://asktom.cf/index.php?topic=935898.0
Pilipinas translation of this thread : [TAGALOG] Gabay at payo para sa mga bagong user bago mag-download mula sa Forum!


If you find something like that and you are not sure if its Malware or a Bad Software write in my other THREAD here:

Report Malware and Suspicious Links here so Mods can take Action !

[khaled0111]

Use the quote button to look behind the Links that you can see on the ANNs

This... or hover over the link before you click on it. You will see, on the bottom of your browser, the original link where you will be redirected. You should make this an habit.
If you are using a smartphone and can't hover links, just click the link and keep holding untill a menu window pops up, select "copy URL link", paste it anywhere and compare it with the link on OP.

@op, thank you for the tips.

[notocactus]

For shortened links, you can check them using the website: https://redirectdetective.com/
Or you can add a plus symbol (+) at the end of links to move to pages at which you can get final destination pages by redirect links.

For suspicious phishing links, you can check links by scrolling computer mouse above the link, then you will see link at the bottom of the web browser (right or left, it depends on browsers, but mostly on the left bottom). You can check this by scrolling computer mouse on the link to my post.

[Lafu]

If you find some other Links just let me know and post it here or write it in the Spambusters thread from iasenko !
So we can do at some stage some kind of List for it .

[Pffrt]

Thank you Lafu, this was really needed for the newbies of the forum. Here is an old thread by grue- https://asktom.cf/index.php?topic=935898.0
Add the link in the OP as well, it will be helpful as well for them.

[Aveatrex]

Another tip from me if you are still paranoid even after following the advices given in this thread, use a Sandbox software (Like Sandboxie, the most popular one) When you use Sandboxie to install something you've downloaded, it doesn't install it in your computer, it only installs it 'Sandboxed' which means even if it's a malware it won't affect your computer. Read more here: Sandboxie

[Lafu]

~~~

Thank you for the Link and i have added it to my first post .

if you are still paranoid even after following the advices given in this thread, use a Sandbox software (Like Sandboxie, the most popular one)

Exactly but that has nothing to do with paranoid , it just safe you a lot of action and secure your system for get infected with bad Software if you want test or install it.
I use it often for testing some stuff.

[Lafu]

Update for New Users and other Users too !

Here are the whole List for Malware Links in the last Months on the Forum :

Fake Github : https_://github.com/projectpixel-network/Project-Pixel
Fake Github : https_://github.com/XIROPHT-project/
Fake Github : https_://github.com/gonzo482/MimbleWimble/releases/tag/1.0
Fake Github : https_://raw.githubusercontent.com/QitmeerHLC/Kahf-Wallet/master/Kahf%20Wallet.rar
Fake Github : https_://github-production-release-asset-2e65be.s3.amazonaws.com/
Fake Github : https_://github.com/Qitmeer/qitmeer-cli
Fake Github : https_://github.com/cryptominin/Wallet-QT/raw/master/Wallet-QT.rar
Fake Github : https_://github.com/gonzo482/Goodness/releases/download/1.0/Goodness-CLI.rar
Fake Github : https_://github.com/ANN-Coin/
Fake Github : https_://github.com/ANN-Coin/Deesseel/releases/download/1.0/Deesseel_Windows.zip
Fake Source : https_://bitbucket.org/miningmentor/bluebeasts/downloads/BlueBeasts-Coin-qt_win32_V1.6.5.0.zip
Fake Source : https_://bitbucket.org/miningmentor/delorcoin/downloads/delor-ubuntu-16.04.tar.xz]delor-ubuntu-16.04.tar.xz
Fake Source : https_://bitbucket.org/miningmentor/blastx/downloads/blastx-v1.1.0-win64.zip
Fake Source : https_://bitbucket.org/miningmentor/coldwallet2020/downloads/Coldwallet2020-1.1-win64-setup.rar
Fake Github : https_://github.com/projects-mynt/mynt/releases/download/6.1.2/mynt-6.1.2-win64.zip
Fake Github : https_://github.com/SentinelOffcial/
Fake Source : https_://bitbucket.org/miningmentor/agouti/downloads/agu-win.zip
Fake Github : https_://github.com/CaiexCore/AmityCoinV3
Fake Github : https_://github.com/volta-lm
Fake Github : https_://github.com/Taonacoin/taona/raw/master/taona-2.2.2.0-win64.zip
Fake Source : https_://bitbucket.org/HaLass/pvpcoin/downloads/playervsplayercoin-qt-linux.tar.gz
Fake Github : https_://github.com/CoinMastersGGG/Multi_Currency/releases/download/1.0/mnpro-qt-x32.zip
Fake Github : https_://github.com/quark-projekts/quark
Fake Github : https_://github.com/Durovel/Haven-Protocol/releases/download/1.0/haven-gui-windows-3.0.0.zip
Fake Source : https_://bitbucket.org/tradebotcommunity/rainbowgoldcoin/downloads/rainbowgoldcoin_windows_wallet.rar
Fake Github : https_://github.com/Durovel/Vectorium/releases/download/1/vectorium-2.0.25-linux.tar.gz
Fake Github : https_://github.com/Durovel/BochaCoinMN/releases/download/BochaCoinMN/Bochacoin.Windows.zip
Fake Github : https_://github.com/Dunerous/cbet-coin
Fake Source : https_://bitbucket.org/Derbiz/dorobers/downloads/Pay2c-Windows-qt.zip
Fake Source : https_://bitbucket.org/tradebotcommunity/starnodes-qt/downloads/starnodes.rar
Fake Github : https_://github.com/cryptonexli
Fake Source : https_://bitbucket.org/develsoftware/gcc-coin/downloads/GCCcoin.rar
Fake Github : https_://github.com/cryptomilles/
Fake Source : https_://bitbucket.org/Derbiz/dorobers/downloads/Bochacoin.Windows.zip
Fake Github : https_://github.com/devaulltcrypto/devault/releases/download/1.0.4/devault-1.0.4-win64.zip
Fake Source : https_://bitbucket.org/astingl/resqchain/downloads/resq-3.1.2.1-Win.zip
Fake Source : https_://bitbucket.org/astingl/jmcminer/downloads/JMC.rar
Fake Source : https_://bitbucket.org/severokproject/severok/downloads/severok-1.0.0-win64.zip
Fake Source : https_://bitbucket.org/astingl/yllineum/downloads/Yllineum-qt.rar
Fake Source : https_://bitbucket.org/taonacoin/taonaproject/downloads/taona-2.2.2.0-win64.zip
Fake Source : https_://bitbucket.org/Deviljoes/deviljoe/downloads/GNET-qt.zip]www.gnet.work/GNET-qt
Fake Source : https_://bitbucket.org/astingl/new-jerusalem/downloads/New-Jerusalem_wallet.rar
Fake Github : https_://raw.githubusercontent.com/Fyd-Coin/Wallet-Release/master/Miner.zip
Fake Github : https_://raw.githubusercontent.com/Release-Z/wallet-core/master/Wallet-Qt.zip
Fake Github : https_://github.com/ANN-Join/-MAINNET-/releases/download/1.1.0/Win64GrimmWalletMainnet.rar
Fake Github : https_://raw.githubusercontent.com/AmityCoin/AmityCoinV3/master/Qitmeer.zip
Fake Github : https_://github.com/omotenashlcoin-project/OmotenashiCoin-binaries/releases/download/1.7.0/omotenashicoin-1.7.0-win64.zip
Fake Source : https_://bitbucket.org/miningmentor/vzuh/downloads/VZUH-coin.rar
Fake Github : https_://github.com/Random-Xcoin/random/releases
Fake Github : https_://github.com/CircultBreaker88/Konjungate/releases/download/1.0.0/Konjungate-Qt.zip
Fake Github : https_://raw.githubusercontent.com/CryptoAtlcProject/wallet-Qt-win64/master/wallet-qt-win64.zip
Fake Github : https_://github.com/Sugarchain/sugarchain-project/releases/tag/release
Fake Github : https_://github.com/Light-BitProject/LightBit/releases/
Fake Source : https_://bitbucket.org/diazcoin/diaz/downloads/diaz-window-64bit.zip
Fake Github : https_://github.com/uTip-Coin/Wallet-qt/releases/tag/1.0
Fake Source : https_://github-production-release-asset-2e65be.s3.amazonaws.com/
Fake Source : https_://bitbucket.org/miningmentor/kinkycoins-kink/downloads/kinkycoins-qt%20.rar
Fake Source : https_://bitbucket.org/miningmentor/dilithium_project/downloads/dilithium-1.0.1-win64.zip
Fake Github : https_://github.com/omotenashilcoin-project/OmotenashiCoin-binaries/releases/download/1.7.1/omotenashicoin-1.7.1-win64.zip
Fake Github : https_://bitbucket.org/cryptoperfeckt/masters/downloads/playervsplayercoin-qt-windows.zip
Fake Github : https_://github.com/contentnetswork/contentcoin/releases/download/5.01.02/ContentCoin-v5.1.2-win64.zip
Fake Source : https_://anonymousfiles.io/f/newyorkcoin-1.3.1.21-win-setup.zip
Fake Github : https_://github.com/AdzColn/adzcoin/blob/master/adzcoin-qt.zip
Fake Github : https_://github.com/AVANTAGE-coin/wallets/
Fake Source : https_://mega.nz/#!DOQVxabb!9Pa9Ttsa1vkuQH2GKuQmCbcWUR-hO6Aq0cIQFmz4ogY (SILENTIUM Wallet Windows)
Fake Source : https_://mega.nz/#!NEs00SBb!sYFTrENb_hv7-oZDk2GzuGCm1HD8DZ6X2ioI0FO6nm8 (SILENTIUM Wallet Windows)
Fake Source : https_://mega.nz/#!4E9Uzajb!9Z3HCc6ZglZBm05GGdU5aVjf9QVFesCuAJwbJbaSURU (SILENTIUM Wallet Linux)
Fake Github : https_://github.com/develisoftware/GMinerRelease/releases/download/1.76/gminer_1_76_windows64.zip

If you find or see one of this links please report the thread or post instant to the Moderator !

[Lafu]

If you see or find Fake Anns with some of the links in the List or you see new fake github or bitbucket links
please write them unclickable here in my reporting thread https://asktom.cf/index.php?topic=5182222.msg52373139#msg52373139
or when you have time for it write the thread and all information there !

So we have an record for the links and some statistics also .

[masulum]

i found fake MERO wallets, user just joining github 26 days ago. maybe you can add to your list

Code:

https:*//github.com/MeroCoin-network/mero/releases/download/v.2.0.0/mero-2.0.0-win32.zip
https:*//github.com/MeroCoin-network/mero/releases/download/v.2.0.0/mero-2.0.0-x86_64-linux-gnu.tar.gz

[notocactus]

People can protect their devices and their digital funds that stored in their devices by using Virustotal.com as well as other AV softwares.
For basic guide on Virustotal.com, please see it there: [Guide] Virustotal scan guideline to detect viruses, trojans, malwares, worms
Creating free account to have more free features to use, rather than use that site as a guest.

[Lucius]

People can protect their devices and their digital funds that stored in their devices by using Virustotal.com as well as other AV softwares.

It's much more efficient to have installed AV/antimalware software, then to manually check every link or file. But virustotal still has the advantage that user can check the link before visiting a specific page, and fact that virustotal scan sites/files with multiple AV engines, which provides extra security.

In any case, it is good practice to check everything before downloading or installing, too bad that most people think this is a waste of time. Link posted by some Senior/Hero or Legendary member does not mean that anyone should trust it is posted with good intention. Crypto means everything has to be checked several times, even when it seems unnecessary.

[Baltazarcasillas219]

Use the quote button to look behind the Links that you can see on the ANNs

This... or hover over the link before you click on it. You will see, on the bottom of your browser, the original link where you will be redirected. You should make this an habit.
If you are using a smartphone and can't hover links, just click the link and keep holding untill a menu window pops up, select "copy URL link", paste it anywhere and compare it with the link on OP.

@op, thank you for the tips.

[nakamura12]

There is also another way to know what link is hidden between the URL Bbcodes and it's very easy. When you are using computer and using a firefox browser for example. Let's just say I use firefox or chrome browsers and you saw a link that you think that there is a link behind it, just simply point the arrow at the link and see if there is a link that will be shown at the bottom just like this image.
Image Source: http://www.hyperlinkcode.com/images/hand-pointer-status-bar.gif

When using mobile device same procedure won't do/help you but there's still a way to avoid opening a hidden link. First, you have to tap the link until a pop-up will appear and select "COPY LINK" then paste it somewhere else like a Notepad for example.

Take Note: The mobile procedure in knowing the real url/link behind a hyperlink could also work in PC by copying the link and paste it in Notepad.

[TryNinja]

There is also another way to know what link is hidden between the URL Bbcodes and it's very easy. When you are using computer and using a firefox browser for example. Let's just say I use firefox or chrome browsers and you saw a link that you think that there is a link behind it, just simply point the arrow at the link and see if there is a link that will be shown at the bottom just like this image.
Image Source: http://www.hyperlinkcode.com/images/hand-pointer-status-bar.gif

http://www.hyperlinkcode.com/images/hand-pointer-status-bar.gif

When using mobile device same procedure won't do/help you but there's still a way to avoid opening a hidden link. First, you have to tap the link until a pop-up will appear and select "COPY LINK" then paste it somewhere else like a Notepad for example.

Take Note: The mobile procedure in knowing the real url/link behind a hyperlink could also work in PC by copying the link and paste it in Notepad.

Please, don't count on this. This is a bad behavior to think the URL is legit because the statusbar shows it so (and thus, a terrible suggestion).

Here is a simple workaround to bypass this "security" measure:

Code:

<a href="realwebsite.com" onclick="location.href='phishingwebsite.com';return false">Click here!</a>

Result: you hover the link and it shows realwebsite.com in the statusbar. Click it and you will end up on phishingwebsite.com

[Lafu]

Updated the list i have done here https://asktom.cf/index.php?topic=5167236.msg52277784#msg52277784 with newest Fake Github and Source links !

The newest is again from bitbucket but its a new or diffrent bitbucket link as the normal was !

Fake Source : https_://bitbucket.org/cryptoperfeckt

So if you see or find this Link or any other links please report it.

[nakamura12]

Please, don't count on this. This is a bad behavior to think the URL is legit because the statusbar shows it so (and thus, a terrible suggestion).

Here is a simple workaround to bypass this "security" measure:

Code:

<a href="realwebsite.com" onclick="location.href='phishingwebsite.com';return false">Click here!</a>

Result: you hover the link and it shows realwebsite.com in the statusbar. Click it and you will end up on phishingwebsite.com

I didn't know that hovering the arrow to the hyperlink would show the real url/site just like what is shown in the image I provide. Does the code you provide would really bypass this security measure I suggest?. I'd like to know more about this bypass since the security measure can be bypass which is a bad sign. Any reference that I can check if you don't mind.

[TryNinja]

Please, don't count on this. This is a bad behavior to think the URL is legit because the statusbar shows it so (and thus, a terrible suggestion).

Here is a simple workaround to bypass this "security" measure:

Code:

<a href="realwebsite.com" onclick="location.href='phishingwebsite.com';return false">Click here!</a>

Result: you hover the link and it shows realwebsite.com in the statusbar. Click it and you will end up on phishingwebsite.com

I didn't know that hovering the arrow to the hyperlink would show the real url/site just like what is shown in the image I provide. Does the code you provide would really bypass this security measure I suggest?. I'd like to know more about this bypass since the security measure can be bypass which is a bad sign. Any reference that I can check if you don't mind.

This code literally makes it show whatever you want in the statusbar. Just try yourself. Or google "fake link hover statusbar" or similar.

This is in no way a security measure. You just took it like that. It's like saying that having a "100% legit" bolded text in a website makes it legit.

[Lafu]

Just an short update here!

As the fake github links with Malware and suspicious Links was reduced i have seen in the last week they changed there style of posting !

The Last Week i have seen more and more Ann's and Fake Ann's have now there download link from mega.nz !

I just can advice again for new users:

" Check the download links and if you downloaded the File check it first with Virustotal or any other Antivirus software before you unpack the File or start the *.exe "

[Lafu]

pump