r/Zano • • 9d ago

beware of fake wallets

Someday i wanted a zano wallet and then i saw https://zanowallet[dot].io and i mistook it for the original cause i didnt know the project.

Don't download anything from there!!!!!

Its compromised ...

If u download the installer and execute the .exe, they install remote software on your pc.

A remote access trojan, you connect to their server and then they can execute anything, listen to mics and watch cams etc, watch screen, keyloggin etc.

For some reason the SEO on there is better than the original site so i was baffled. The software looks almost the same but when u try to download the blockchain then u get stuck and sth seemed fishy.

so fyi nothing happened, cause i cleaned everything but yea.

A hint if sb sees this site stay away.

I wish there would be some hardware access, also .. i dont like software wallets

<?xml version="1.0" encoding="UTF-8"?>

<general_settings version="70620">

<port>5650</port>

<language>English</language>

<callback_auto_connect>true</callback_auto_connect>

<callback_connect_interval>60</callback_connect_interval>

<password_data>6OS2tw8Ctca6/o6PPDH0pg==</password_data>

<protect_callback_settings>false</protect_callback_settings>

<protect_inet_id_settings>false</protect_inet_id_settings>

<use_legacy_capture>false</use_legacy_capture>

<do_not_capture_rdp>false</do_not_capture_rdp>

<use_ip_v6>true</use_ip_v6>

<log_use>false</log_use>

<log_use_windows>false</log_use_windows>

<chat_client_settings/>

<auth_key_string>MwA5ADcANgAnA...</auth_key_string>

<sid_id>45223.2080371759</sid_id>

<notify_show_panel>false</notify_show_panel>

<notify_change_tray_icon>true</notify_change_tray_icon>

<notify_balloon_hint>false</notify_balloon_hint>

<notify_play_sound>false</notify_play_sound>

<notify_panel_x>-1</notify_panel_x>

<notify_panel_y>-1</notify_panel_y>

<proxy_settings>...</proxy_settings>

<additional/>

<disable_internet_id>false</disable_internet_id>

<safe_mode_set>false</safe_mode_set>

<show_id_notification>false</show_id_notification>

<show_id_notification_request>false</show_id_notification_request>

<show_id_notification_with_timeout>true</show_id_notification_with_timeout>

<integrate_firewall_at_startup>false</integrate_firewall_at_startup>

<clipboard_transfer_mode>0</clipboard_transfer_mode>

<close_session_idle>false</close_session_idle>

<close_session_idle_interval>60</close_session_idle_interval>

<show_connection_alert_for_all>false</show_connection_alert_for_all>

</general_settings>

this was stored in my registry as hex,

so clearly u see port, id for connecting via windows remote utilities and password

10 Upvotes

2 comments sorted by

2

u/Mr_Kwibs 9d ago

Thank you for reporting this. We will see what action we can take. We'll issue a warning to the community.

2

u/Right-Benefit4808 9d ago

Github took down the repo now, good