btcrecover icon indicating copy to clipboard operation
btcrecover copied to clipboard

Please report malicious forks of BTCRecover so they can be removed from Github (Has been requested and they are still there, but more reports may help)

Open loupiote opened this issue 11 months ago • 4 comments

https://github.com/pywallet-cli/btcrecover contains malicious code that sends recovered seeds to the website www.recowallet.com

Maybe request it to be deleted by github?

loupiote avatar Dec 11 '24 09:12 loupiote

done, reported

DesWurstes avatar Dec 11 '24 11:12 DesWurstes

I have requested them to be removed multiple times and they are still there... (And there are others)

It is probably worth compiling a list of known-bad repositories to include in the documentation and basically ask others to report them as well.

The problem on the flip side is that scammers will also just pile a few thousand reports onto the legitimate repo... So it will probably end up getting nuked (at least temporarily) by Github as well.

An alternative would be to report them as malicious websites to lists like the ones that wallet plugins like Metamask check by default, as this doesn't rely on Github to actually do anything.

3rdIteration avatar Dec 11 '24 14:12 3rdIteration

Would you like to report it to abuse at ionos.com the domain registrar that the domain is being used maliciously?

DesWurstes avatar Dec 11 '24 16:12 DesWurstes

Already done that but nothing changed, so more reports will probably help

3rdIteration avatar Dec 11 '24 18:12 3rdIteration