[Warning] SeedMiner is Malware!!!

[SFR10]

What happened:
As soon as I noticed the same file was uploaded to various platforms, I knew something was wrong and VirusTotal results confirmed it for me:

• Result for the "first link".
• Result for the "second link".
• Result for the "third link".
• Result for the "fourth link".
• Result for the "fifth link".
  
  e.g., Screenshot of the third one:
  
  

Scammers Profile Link:
rojoga946

Reference Link:
[HOT] ✨SeedMiner✨ Blockchain Private Key Wallet Finder with Mining Software ✨ ^[archived]

Additional Notes:
This thread serves as a reference for my report.
Tagged and "created a flag".

[logfiles]

It appears rojoga946 has had his post(s) deleted, but not banned? I could be wrong but a user trying to spread malware around the forum especially a newbie should be banned without any questions. Anyway, I hope the moderators do the rightful thing,

[PX-Z]

It appears rojoga946 has had his post(s) deleted, but not banned? I could be wrong but a user trying to spread malware around the forum especially a newbie should be banned without any questions. Anyway, I hope the moderators do the rightful thing,

The user can easily create another account and post the same thread again if they really want to. Normally, mods would handle that and issue a ban, but in this case, I'm not sure why it wasn't done, there's no record of the user being banned in the modlog either.

[logfiles]

The user can easily create another account and post the same thread again if they really want to. Normally, mods would handle that and issue a ban, but in this case, I'm not sure why it wasn't done, there's no record of the user being banned in the modlog either.

Idea is that creating an account is a little harder than just continuing to post from the account that has not yet been banned. So I would expect if the account is brand new, and just came around to post malware, then it should be nuked without any hesitation

Anyway, maybe they just locked it (But I thought this applies to only old accounts that appear to have been stolen/hack and are used to spread malware)

[albon]

Good catch, SFR10, well done.

I did my research and found that after the scammer’s account was banned, he created a new one. Before that, there were also two other accounts that promoted this malware. I tagged all of their accounts.

1- jixos3791 [Archived] - NEW
2- doboya439 [Archived]
3- noyada792 [Archived]

This tool resembles SeedMiner, similar to SeedCheckPro that I previously posted about [here], but it differs slightly in that the scam lies in entering seed phrases into this malicious tool. We hope all members avoid testing tools they don't know and carefully scan them first. VirusTotal is a good website for this purpose. It's essential to use a sandbox if they wish to test anything they feel uncertain about. A sandbox provides a virtual environment that can be used safely as a testing ground.

[SFR10]

It appears rojoga946 has had his post(s) deleted, but not banned? I could be wrong but a user trying to spread malware around the forum especially a newbie should be banned without any questions.

Anyway, maybe they just locked it (But I thought this applies to only old accounts that appear to have been stolen/hack and are used to spread malware)

I'm a bit confused with this one as well... Based on the deletion/mod log, none of his/her accounts appear to be banned, but considering that he/she had to create new accounts, it makes me believe those accounts were locked as well ^{[this might also explain the lack of evil points that led to easily creating accounts (unfortunately)]}.

I did my research and found that after the scammer’s account was banned, he created a new one. Before that, there were also two other accounts that promoted this malware. I tagged all of their accounts.

1- jixos3791 [Archived] - NEW
2- doboya439 [Archived]
3- noyada792 [Archived]

Thank you for spotting, tagging and reporting the first one on your list. Out of curiosity, did you have to report the other two or did one of our moderators already handle those posts?
^{- IIRC, one of the moderators could add or rather blacklist such links through the use of a bot (auto-deletions).}

[albon]

Thank you for spotting, tagging and reporting the first one on your list. Out of curiosity, did you have to report the other two or did one of our moderators already handle those posts?
^{- IIRC, one of the moderators could add or rather blacklist such links through the use of a bot (auto-deletions).}

You're welcome. I expect that one of the moderators has already dealt with those posts and removed them.

If such a feature really exists for moderators, it would definitely make their work much easier, as any post from any member or multiple accounts containing those blacklisted links would be deleted automatically.

And if these links are not added to the blacklist, we can use the Ninjastic tool to search for more scammers who might use the same content and post it on the forum. If you happen to come across any newly created alt accounts, you can mention them in the thread so that we can tag and report them.