Beware: Fake KMSPico Windows activator carries crypto wallet info stealing malware

[Charvelx04]

Just some information on how to spot what's real, and what's not.

This new one is being spread pretty fast from what I can tell. Remember, when using this kind of stuff... either ask questions about it, or find a truly reputable source.

Like our forums.

https://www.neowin.net/news/beware-fake-kmspico-windows-activator-carries-crypto-wallet-info-stealing-malware/

https://redcanary.com/blog/kmspico-cryptbot/

 

[RobustPatcher24]

Aside From Pico Being abandon for 5+ years I Would Recommend verifying hashes:

The Official Releases From Daz
File : KMSpico_setup.exe
Size : 3,08 MB
CRC32 : 683a3351
MD5 : a02164371a50c5ff9fa2870ef6e8cfa3
SHA1 : 060614723f8375ecaad8b249ff07e3be082d7f25


File : AutoPico.exe
Size : 728,19 KB
CRC32 : f88139fe
MD5 : cfe1c391464c446099a5eb33276f6d57
SHA1 : 9999bfcded2c953e025eabaa66b4971dab122c24

KMS_VL_ALL is the newest tool as far as I am aware.

and for Ratiborus releases(recent ones atleast):
https://rentry.org/verifychecksumkms

 

[EMS]

I'm not going to use win 10 unless I absolutely have to. Yes, most of our posters will post what they advertise, there is still the odd one or two that don't care what they post but we won't know about them unless we get a report.

If you are in doubt use a sandbox app, to test software first....

 

[Weaserlorian]

I don’t don’t use digital currency.

 

[Charvelx04]

I don’t don’t use digital currency.

I won't either... it takes way too much money to make it.. and it's no more guaranteed then the actual dollar you can hold in your hand. And if something happens to the drive your crypto wallet is stored on, all that hard earned "cash" is gone with no way to get it back... as far as I know, no bitcoin is backed by insurance like a bank. (don't directly quote, this could have changed or maybe other countries do)

However, crypto bots can not only be installed on your system and run in the background, some compromised websites can do the same. There are hosting sites that have been known to cause everyone that visited them, to immediately start mining bitcoin using your browser engine.

https://www.investopedia.com/news/sites-are-using-your-browser-mine-crypto-it-could-be-good-thing/

If you are in doubt use a sandbox app, to test software first....

Agreed... and in this case, a full on VM because KMSAuto needs to create a simulated server to keep Windows activated, and create files Windows will use.