Tag: samfw trojan.dropper

  • Warning: Samfw/Samfwtool Confirmed Scam | Do Not Install

    Warning: Samfw/Samfwtool Confirmed Scam | Do Not Install

    Do not download, install, or run any software from samfw.com! Many new accounts on internet are posting “samfw is safe” and claiming any detections are false positives. These accounts are being created by tungtata, a Vietnamese scammer. Samfwtool actually contains malware, even if it appears to work.

    My own experience is that after installing samfwtool (SamFwToolSetup_v5.4.zip), my xmr feather wallet I had open with about $3 million was drained shortly afterward. Because of this samfw, I’m warning people to be extremely careful: don’t run it on your main computer, especially if you have wallets, seed phrases, private keys, or other sensitive data stored there. If you want to still use, only get a “burner” laptop with nothing important on it.

    They are using sophisticated methods to connect to your device and steal credentials, accounts, and wallet funds. Please take this seriously and protect yourselves. Also do not believe Trustpilot reviews. Scammer tungtata buys them to fake it. During my daily checks everyday 20-50 positive reviews keep adding. He also keeps buying blog reviews and posting reviews to show his tool working without issue and that there is no malware inside. This is SEO work done by them to lie to the community.

    Do not download, install, or run any software from samfw.com!

    samfw wallet seed theft, crypto wallet seed phrase theft, browser data stealer, password stealer malware, cookie stealer malware, private key theft, crypto malware warning, malicious payload, malwarebytes samfw detection, malwarebytes trojan.dropper,
    Samfw virus, Tungtata scam, Tungtata fraud, Dang Thanh Tung scam, samfw scam, samfw malware, samfw trojan, samfw security risk, samfw suspicious software, Tungtata trojan virus, samfw warning, Đặng Thanh Tùng scammer, owner Đặng Thanh Tùng fraud, tungtata scam, DangThanhTung scammer, DangThanhTung fraud, DangThanhTung rat trojan
    https://forums.malwarebytes.com/topic/337471-undected-malware

    You need to register to see more.

    After I submitted my request, Malwarebytes Senior Research Engineer ran a test on SamFwToolSetup and found a malicious payload.

    “Trojan.dropper” in SamFw Tool means it’s typically installs or delivers additional malicious software to your system after it runs.

    This malware designed to install other malicious software, such as spyware, ransomware, or backdoors, onto your computer.

    It is a stealer (Infostealer) onto your machine. This type of malware is designed to scrape your browser data, cookies, saved passwords, and private keys/seed phrases to empty your wallets.

    Malicious payload found in samfwsetup:
    Trojan.Dropper, C:\1\1\1\SAMFWTOOLSETUP.EXE, No Action By User, 90, 1416795, 1.0.111810, , ame, , A8BB817630386982FEB98106FED8EA89, E640A65EFCAE264AD6F758BB3B9DA0D37ED8C690BDA6F113416558D4BCBBCF3A

    What exactly happened to us is that all my files and private crypto wallet seeds were stolen after I installed SamFwToolSetup_v5.4.zip. Then few hours later, my funds were drained.

    I’m doing my best to provide all the details to the community so no one gets scammed by this scam tool created by Đặng Thanh Tùng (also shown as Tungtata / Đặng Thanh Tùng). I will continue to share my findings, and he will stay online and be watched. I will expose his scam network, which has been operating for years to earn trust. Now he has decided to scam people secretly, but if we keep the community tight, I believe everyone can see the truth.

    Keywords:
    samfw trojan.dropper malware, samfw trojan.dropper, samfwtool trojan.dropper, samfw tooldropper, samfw trojan dropper malware, samfwtoolsetupp.exe trojan.dropper, SAMFWTOOLSETUP.EXE trojan.dropper, samfwtoolsetup trojan.dropper, samfwsetup trojan.dropper, samfw tool trojan.dropper, samfw trojan.dropper infostealer