Do not download, install, or run any software from samfw.com!
After I submitted my request, Malwarebytes Senior Research Engineer ran a test on SamFwToolSetup and found a malicious payload.
“Trojan.dropper” in SamFw Tool means it’s typically installs or delivers additional malicious software to your system after it runs.
This malware designed to install other malicious software, such as spyware, ransomware, or backdoors, onto your computer.
It is a stealer (Infostealer) onto your machine. This type of malware is designed to scrape your browser data, cookies, saved passwords, and private keys/seed phrases to empty your wallets.
Malicious payload found in samfwsetup:
Trojan.Dropper, C:\1\1\1\SAMFWTOOLSETUP.EXE, No Action By User, 90, 1416795, 1.0.111810, , ame, , A8BB817630386982FEB98106FED8EA89, E640A65EFCAE264AD6F758BB3B9DA0D37ED8C690BDA6F113416558D4BCBBCF3A
What exactly happened to us is that all my files and private crypto wallet seeds were stolen after I installed SamFwToolSetup_v5.4.zip. Then few hours later, my funds were drained.
I’m doing my best to provide all the details to the community so no one gets scammed by this scam tool created by Đặng Thanh Tùng (also shown as Tungtata / Đặng Thanh Tùng). I will continue to share my findings, and he will stay online and be watched. I will expose his scam network, which has been operating for years to earn trust. Now he has decided to scam people secretly, but if we keep the community tight, I believe everyone can see the truth.
Keywords:
samfw trojan.dropper malware, samfw trojan.dropper, samfwtool trojan.dropper, samfw tooldropper, samfw trojan dropper malware, samfwtoolsetupp.exe trojan.dropper, SAMFWTOOLSETUP.EXE trojan.dropper, samfwtoolsetup trojan.dropper, samfwsetup trojan.dropper, samfw tool trojan.dropper, samfw trojan.dropper infostealer
Malwarebytes reported that SamFwToolSetup (samfw) contains Trojan.dropper, meaning it may run and then install other malware on your computer. This is often associated with infostealers that steal browser data, cookies, saved passwords, and potentially wallet seed phrases. Do not download, install, or run anything from samfw.com
SamFWToolSetup is a Trojan. Malwarebytes flagged it as a dropper that injects additional threats, stealing browser data, passwords, and crypto wallet seeds, then draining funds. Urgent community warning to avoid installation.
SamFwToolSetup Trojan: Wallet & Data Theft Exposed
Don’t Trust the SamFwTool — It’s Stealing Crypto (samfw virus)
I want to raise awareness about the Samfwscam: after installing SamFwTool (SamFwToolSetup_v5.4.zip), my XMR Feather wallet that I had open was drained shortly afterward, and when I tried to contact the admin/operator Tung Tạtạ (tungtata) on Telegram, he blocked me and send me laughing emoji, so I’m warning people to be extremely careful don’t run this tool on your main computer (especially if you keep wallets, seed phrases, private keys, or other sensitive data there), because they use sophisticated methods to access devices and steal credentials and wallet funds; please take this seriously, and don’t rely on Trustpilot reviews since scammer tungtata buy fake positive reviews, and even though it hurts, I’m not giving up because I want to help protect more people from this samfwscam.
What I need from you:
Post warnings about Samfw scams on Twitter/X, Reddit, Youtube, and other social platforms.
Share awareness through forum posts, community threads, and blog posts.
Goal: prevent more people from falling for this samfw scam and drive attention to it publicly. Even Malwarebytes Senior Research Engineer confirmed that the tool contain malware by running a test on SamFwToolSetup and detecting a malicious payload.
They found “Trojan.dropper” in SamFw Tool means it’s typically installs or delivers additional malicious software to your system after it runs.
Compensation: I will pay you based on the what you did (e.g., posts, engagement, and visibility).
If you’re willing to help, please reach me on simpleX
This is meant to warn people about samfw tool scams: don’t download or install unknown tools on your computer. I was scammed by samfw, and I’m doing my best to alert others and raise public awareness.
Keywords:
Samfw virus, Tungtata scam, Tungtata fraud, Dang Thanh Tung scam, samfw scam, samfw malware, samfw trojan, samfw security risk, samfw suspicious software, Tungtata trojan virus, samfw warning, Đặng Thanh Tùng scammer, owner Đặng Thanh Tùng fraud, tungtata scam, DangThanhTung scammer, DangThanhTung fraud, DangThanhTung rat trojan
Warning: Samfw/Samfwtool Scam | Do Not Install
Malicious payload found in samfwsetup:
Trojan.Dropper, C:\1\1\1\SAMFWTOOLSETUP.EXE, No Action By User, 90, 1416795, 1.0.111810, , ame, , A8BB817630386982FEB98106FED8EA89, E640A65EFCAE264AD6F758BB3B9DA0D37ED8C690BDA6F113416558D4BCBBCF3A
Keywords:
samfw trojan.dropper malware, samfw trojan.dropper, samfwtool trojan.dropper, samfw tooldropper, samfw trojan dropper malware, samfwtoolsetupp.exe trojan.dropper, SAMFWTOOLSETUP.EXE trojan.dropper, samfwtoolsetup trojan.dropper, samfwsetup trojan.dropper, samfw tool trojan.dropper, samfw trojan.dropper infostealer
Keywords:
Samfw virus, Tungtata scam, Tungtata fraud, Dang Thanh Tung scam, samfw scam, samfw malware, samfw trojan, samfw security risk, samfw suspicious software, Tungtata trojan virus, samfw warning, Đặng Thanh Tùng scammer, owner Đặng Thanh Tùng fraud, tungtata scam, DangThanhTung scammer, DangThanhTung fraud, DangThanhTung rat trojan
SamFwToolSetup Trojan: Wallet & Data Theft Exposed
Don’t Trust the SamFwTool — It’s Stealing Crypto (samfw virus)