Warning! Do not open any files sent by users

clear your history fully or maybe delete the Chrome and resinstall

What an ■■■■■■■!! what do i do??

File upload button should be disabled ASAP.

android phones can get malware, not really familiar with how to secure/remove malware from an android phone but i’d take time to research it yourself

Data-Stealing Android App Impersonates Word Doc | Threatpost.

“Once the malware is installed on the phone, for example, it drops a Word doc icon onto the home screen. The victim taps to open the file, but instead executes the malware, which also delivers an error message to the user and removes the icon from the home screen.”

reminder to all of you that opened the file on windows: the programs that create these malicious doc files let the hackers enter fake ‘error’ messages to deceive you after the payload has been deployed. if you downloaded the file, but more importantly clicked on the file. treat it as your machine being hacked

3 Likes

And this is why I refused to open a link in my ticket the other day. Thankfully you and @Brant was on it straight away and explained about the private chat.

2 Likes

I am on Mac OS, should I be good then?

Windows = Start scanning right now
Android = Unsure
iOS = Fine
MacOS = Fine

11 Likes

well thank god I didn’t download the file

2 Likes

maybe you should check the tickets he did before as well and inform this users. I hope no one got affected. :pray:

5 Likes

window 69 HAHAHA

I scanned ,the file creates Win32/Beareuws.A!ml virus and automatically allows it to run on Windows. Now I am scanning via microsoft defender antivirus offline.

Windows users, immediately turn off the internet.

7 Likes

If any of you accidentally downloaded the file the main thing there going for is your crypto.

Move your crypto for now just to be safe.

System restore your system

And never download a file again even from somebody trusted.

Thankfully we have admins that will tell us straight away and we can cover ourself.

If your totally worried you can even open a trust wallet and a MetaMask on a mobile/cell phone. Send your crypto there for tonight and turn your phone to airplane mode and then turn the phone of.

It’s better to be safe then sorry.

10 Likes

Doesn’t scanning the full pc with Kaspersky or similar security anti-virus help?

Or I need to wipe everything on windows?

Can’t get rid of photos and videos. If I backup opening the Internet wouldn’t this risk it?

I currently have my Internet disabled.

Btw @Santan helping everyone and me through PM. He deserves a “helpful” badge today @SWAPD
Can’t forget to be kind. Even when I’m confused what to do now in this situation.

4 Likes

It can’t access Ledger ?

2 Likes

Most likely not same with a trezor as it will need your pin code. But if he has a spoofer that monitors your account for a couple days maybe so.

If your disconnected from the internet he can’t touch you.

Simply unplug your ledger or trezor

2 Likes

Thank you!

1 Like

I have it disabled. I did it before this thread as soon as I thought it looked suspicious, What to do next? I want to save my Data.

Changed passwords and ensured about crypto though.

I don’t own any anyway :joy:

1 Like

i know of like 1-2 people that offer services to hack ledger/trezor/cold wallets and its done through putting a phishing page ‘locked’ over the top of the real software from the cold wallets.

if you open ledger and its asking you to input your seed phrase or something looks different from normal then do not enter it, instead move to a different device and use the cold wallet there.

apart from that, just make sure the address you enter is YOUR address, there are tools they use that will change 1-2 characters of the address you enter making it hard to tell

3 Likes