# BEWARE of Suspicious Links

**URL:** <https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632>\
**Category:** General\
**Created:** [October 30, 2016, 6:19pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632 "2016-10-30T18:19:30Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shawn](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/shawn/32/187_2.png) [@Shawn](https://forum.zcashcommunity.com/u/Shawn)\
**Post date:** [October 30, 2016, 6:19pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/1 "2016-10-30T18:19:30Z")

</div>

There have been some users posting links to wallets, miners, and even GUI’s that contain Trojan viruses! These often claim to be for Windows but a new one claims to be a miner for Linux.

**Do not trust Links** from users you do not know, especially new users just registered. We make every effort to remove threads and Ban these users as fast as possible if they are posting links to questionable content.

Please Flag and report suspicious posts or threads immediately and notify [@moderators](https://forum.zcashcommunity.com/groups/moderators)

---

<div class="post-metadata">

**Author:** ![Shawn](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/shawn/32/187_2.png) [@Shawn](https://forum.zcashcommunity.com/u/Shawn)\
**Post date:** [October 30, 2016, 6:20pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/2 "2016-10-30T18:20:45Z")

</div>

Pinned globally on October 30, 2016, 6:20pm UTC



---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [October 31, 2016, 6:12am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/3 "2016-10-31T06:12:18Z")

</div>

just a thought, can users share the suspect posts and threads they come across here and can the mods share their own finds and reports sent from usrs?

---

<div class="post-metadata">

**Author:** ![BitHoumd](https://avatars.discourse-cdn.com/v4/letter/b/7c8e57/32.png) [@BitHoumd](https://forum.zcashcommunity.com/u/BitHoumd)\
**Post date:** [October 31, 2016, 7:54am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/4 "2016-10-31T07:54:10Z")

</div>

I am a new to this site but ave been checking out different sites for the last several weeks, and was wondering when someone was going to start spreading fake links to wallets or the links will lead to some breach of info on your pc I have been visiting the zcash forum for a couple of weeks, but this time when I went to read some postings on the a blog I received a warning that the website was not safe, it was not a secure connection, warning of stolen passwords, financial information, and malicious software. I visited the site yesterday and it was fine, and now not so much… be careful everyone

---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [October 31, 2016, 8:01am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/5 "2016-10-31T08:01:16Z")

</div>

and that link to the blog was?

---

<div class="post-metadata">

**Author:** ![BitHoumd](https://avatars.discourse-cdn.com/v4/letter/b/7c8e57/32.png) [@BitHoumd](https://forum.zcashcommunity.com/u/BitHoumd)\
**Post date:** [October 31, 2016, 8:07am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/6 "2016-10-31T08:07:09Z")

</div>

I will send you the name of a couple links that I received a warning from, I took a photo of the warning stating the website was not safe, warning of malicious activities.

---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [October 31, 2016, 8:10am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/7 "2016-10-31T08:10:23Z")

</div>

no need to send through directly, just share here.

---

<div class="post-metadata">

**Author:** ![skinnykinney1](https://avatars.discourse-cdn.com/v4/letter/s/278dde/32.png) [@skinnykinney1](https://forum.zcashcommunity.com/u/skinnykinney1)\
**Post date:** [October 31, 2016, 8:11am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/8 "2016-10-31T08:11:40Z")

</div>

does anyone know if this is safe?

> **[GitHub - vaklinov/zcash-swing-wallet-ui: DEPRECATED: not to be used! -...](https://github.com/vaklinov/zcash-swing-wallet-ui)**
>
> DEPRECATED: not to be used! - Desktop GUI Wallet for ZCash - GitHub - vaklinov/zcash-swing-wallet-ui: DEPRECATED: not to be used! - Desktop GUI Wallet for ZCash

---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [October 31, 2016, 8:59am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/9 "2016-10-31T08:59:50Z")

</div>

from brief skim of their README.md, one could say that vaklinov means well.  
this is based on the fact of them requesting users to file problems and bugs etc. to issues, recommending to always build from source (yet fail to sign their commits, however do ask to verify checksums of the elf binaries) and state their non-affiliations.  
do note mind you that this is their first repo, the account only opened late september this year and their are no other links which show this dev’s past track record.

---

<div class="post-metadata">

**Author:** ![gunzeon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/gunzeon/32/663_2.png) [@gunzeon](https://forum.zcashcommunity.com/u/gunzeon)\
**Post date:** [November 2, 2016, 3:46pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/10 "2016-11-02T15:46:53Z")

</div>

like this i suppose ? downloaded from flypool ?

![](https://global.discourse-cdn.com/zcash/original/2X/a/af064aebe1b590fe09d38c0c4ae6e272d734489d.PNG)

---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [November 3, 2016, 2:18am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/11 "2016-11-03T02:18:21Z")

</div>

av of all breeds has a tendency to flag any miners as allegedly a threat due to past abuse, so don’t take this at face value.  
with that said, you should still look at compiling the exe from source if possible instead of just blindly trusting unknown binaries from the web.  
upload that binary to [https://virustotal.com](https://virustotal.com) and send through the result link here along with the originating download url and k can take a further look for you

---

<div class="post-metadata">

**Author:** ![gunzeon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/gunzeon/32/663_2.png) [@gunzeon](https://forum.zcashcommunity.com/u/gunzeon)\
**Post date:** [November 5, 2016, 10:49am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/12 "2016-11-05T10:49:28Z")

</div>

thanks man, i thought about it and i had the same thing with other miners since they spread around … normally i use linux and am not tooled up to build windoze stuff … taking the risk for now; separate non admin accounts, supposed stuff on github is clean by the rules … till there’s some good cuda linux miners around

---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [November 5, 2016, 5:27pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/13 "2016-11-05T17:27:33Z")

</div>

you’d be surprised. not even github is free of maliciousness.  
for example, hekingrteam and mirai mirrors, exploit-db, one could go on 😤

---

<div class="post-metadata">

**Author:** ![bugmenot](https://avatars.discourse-cdn.com/v4/letter/b/7c8e57/32.png) [@bugmenot](https://forum.zcashcommunity.com/u/bugmenot)\
**Post date:** [November 15, 2016, 7:54pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/14 "2016-11-15T19:54:31Z")

</div>

_“a new one claims to be a miner for Linux”_

That one was probably from me: **the official static build of nheqminer** 0.4b compiled on Fedora 24 64 meant for all Linux distros (since it’s static - it can even run as an init process). I take _full responsibility for it_. After all, I’ve been known on the Internet since 2009 and I have no reasons to deceive anyone. Anyway, if you google for

‘nheqminer miner for linux download’ - you’ll find it right away.

You can go build one and link it statically yourself and compare the resulting checksums. What sucks about you removing the link to my build is that you didn’t even bother to verify it. A knee jerk reaction in its finest.

Also, to all security “pros” here: [virustotal.com](http://virustotal.com) is a joke in regard to unknown viruses and Linux binaries. Almost all AVs on its list are pure shat - they look for signatures and don’t even try to analyze the code - for that you’ll need certain sandbox technologies or/and AI.

---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [November 16, 2016, 3:33pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/15 "2016-11-16T15:33:56Z")

</div>

> After all, I’ve been known on the Internet since 2009 and I have no reasons to deceive anyone.

Self-verification won’t save you.

> Also, to all security “pros” here: [virustotal.com](http://virustotal.com) is a joke in regard to unknown viruses and Linux binaries.

why hello master cissp, tell us who said anything about blindly trusting AV?

---

<div class="post-metadata">

**Author:** ![bugmenot](https://avatars.discourse-cdn.com/v4/letter/b/7c8e57/32.png) [@bugmenot](https://forum.zcashcommunity.com/u/bugmenot)\
**Post date:** [November 16, 2016, 6:03pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/16 "2016-11-16T18:03:43Z")

</div>

> [@anon](#):
>
> Self-verification won’t save you.

Yeah, right, except I have a reputation to keep unlike you, “anon” or in other words anybody. Anyways, this thread has wandered away too much and I won’t comment on it any longer.

---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [November 16, 2016, 7:54pm UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/17 "2016-11-16T19:54:11Z")

</div>

you joined two days, use the name of a service as your chosen pseudonym which provides creds to allow users bypass mandatory registration on websites and somehow think that this qualifies as worthy reputation?!

---

<div class="post-metadata">

**Author:** ![bugmenot](https://avatars.discourse-cdn.com/v4/letter/b/7c8e57/32.png) [@bugmenot](https://forum.zcashcommunity.com/u/bugmenot)\
**Post date:** [November 17, 2016, 8:43am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/18 "2016-11-17T08:43:27Z")

</div>

> [@anon](#):
>
> you joined two days

So? How can this be my fault? And why are the users, who registered earlier, say weeks ago, more reputable? For what exact reasons?

> [@anon](#):
>
> use the name of a service as your chosen pseudonym which provides creds to allow users bypass mandatory registration on websites

Yes, because nothing on this forum feels real. Not a single real person. On other websites I use either my real name or most used nickname (both can be easily googled for). Also I have exactly zero reasons to trust this forum with my e-mail. I’ve already got enough SPAM in my mailbox.

> [@anon](#):
>
> somehow think that this qualifies as worthy reputation?!

Nope. My reputation has been built on other websites: my personal website which has existed since 2009, and various news websites and forums like Slashdot, techpowerup, [devtalk.nvidia.com](http://devtalk.nvidia.com) and others.

Anyways, feck it. Don’t use my malware infested binary. Please. Spare me.

---

<div class="post-metadata">

**Author:** ![anon](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/anon/32/4181_2.png) [@anon](https://forum.zcashcommunity.com/u/anon)\
**Post date:** [November 21, 2016, 12:48am UTC](https://forum.zcashcommunity.com/t/beware-of-suspicious-links/5632/19 "2016-11-21T00:48:18Z")

</div>

It’s your fault if you could have joined earlier, got a reputation with the forum and then started plugging your builds instead of emerging out of no where and asking for something which is earned over time; trust.

The realness factor is entirely subjective seeing as its based on personal interactions with other users.

> [@bugmenot](#):
>
> Also I have exactly zero reasons to trust this forum with my e-mail. I’ve already got enough SPAM in my mailbox.

You’re speaking to someone who used a dea, even though the mods here have been nothing but trusting.

> [@bugmenot](#):
>
> Nope. My reputation has been built on other websites: my personal website which has existed since 2009, and various news websites and forums like Slashdot, techpowerup, [devtalk.nvidia.com](http://devtalk.nvidia.com) and others.

You’re self-verifying again.  
Just because you have a reputation elsewhere, doesn’t mean that you carry that rep elsewhere, especially under a differing handle.

> [@bugmenot](#):
>
> Anyways, feck it. Don’t use my malware infested binary. Please. Spare me.

Have no need seeing as compiling from source is a thing.  
Others however should be cautious.
