Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Please report malicious forks of BTCRecover so they can be removed from Github (Has been requested and they are still there, but more reports may help) #534

Open
loupiote opened this issue Dec 11, 2024 · 4 comments

Comments

@loupiote
Copy link

https://github.com/pywallet-cli/btcrecover contains malicious code that sends recovered seeds to the website www.recowallet.com

Maybe request it to be deleted by github?

@DesWurstes
Copy link

done, reported

@3rdIteration
Copy link
Owner

3rdIteration commented Dec 11, 2024

I have requested them to be removed multiple times and they are still there... (And there are others)

It is probably worth compiling a list of known-bad repositories to include in the documentation and basically ask others to report them as well.

The problem on the flip side is that scammers will also just pile a few thousand reports onto the legitimate repo... So it will probably end up getting nuked (at least temporarily) by Github as well.

An alternative would be to report them as malicious websites to lists like the ones that wallet plugins like Metamask check by default, as this doesn't rely on Github to actually do anything.

@3rdIteration 3rdIteration changed the title You might want to get malicious forks of BTCRecover removed from Github Please report malicious forks of BTCRecover removed from Github (Has been requested and they are still there, but more reports may help) Dec 11, 2024
@3rdIteration 3rdIteration changed the title Please report malicious forks of BTCRecover removed from Github (Has been requested and they are still there, but more reports may help) Please report malicious forks of BTCRecover so they can be removed from Github (Has been requested and they are still there, but more reports may help) Dec 11, 2024
@DesWurstes
Copy link

Would you like to report it to abuse at ionos.com the domain registrar that the domain is being used maliciously?

@3rdIteration
Copy link
Owner

Already done that but nothing changed, so more reports will probably help

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants