{
  "op": [
    "comment",
    {
      "body": "Congratulations @ultratech! You received a personal award!\n\n<table><tr><td>https://steemitimages.com/70x70/http://steemitboard.com/@ultratech/birthday3.png</td><td>Happy Birthday! - You are on the Steem blockchain for 3 years!</td></tr></table>\n\n<sub>_You can view [your badges on your Steem Board](https://steemitboard.com/@ultratech) and compare to others on the [Steem Ranking](https://steemitboard.com/ranking/index.php?name=ultratech)_</sub>\n\n\n###### [Vote for @Steemitboard as a witness](https://v2.steemconnect.com/sign/account-witness-vote?witness=steemitboard&approve=1) to get one more award and increased upvotes!",
      "title": "",
      "author": "steemitboard",
      "permlink": "steemitboard-notify-ultratech-20190715t190136000z",
      "json_metadata": "{\"image\":[\"https://steemitboard.com/img/notify.png\"]}",
      "parent_author": "ultratech",
      "parent_permlink": "malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand"
    }
  ],
  "block": 34691430,
  "trx_id": "96f620c185c1da64498b0a5fa52b1e329de18e56",
  "op_in_trx": 0,
  "timestamp": "2019-07-15T19:01:39",
  "virtual_op": false,
  "trx_in_block": 10
}

{
  "op": [
    "comment",
    {
      "body": "Congratulations @ultratech! You have received a personal award!\n\n[![](https://steemitimages.com/70x70/http://steemitboard.com/@ultratech/birthday2.png)](http://steemitboard.com/@ultratech)  2 Years on Steemit\n<sub>_Click on the badge to view your Board of Honor._</sub>\n\n\n**Do not miss the last post from @steemitboard:**\n[SteemitBoard World Cup Contest - Play-off for third result](https://steemit.com/steemitboard/@steemitboard/steemitboard-world-cup-contest-play-off-for-third-result)\n\n---\n**Participate in the [SteemitBoard World Cup Contest](https://steemit.com/steemitboard/@steemitboard/steemitboard-world-cup-contest-collect-badges-and-win-free-sbd)!**\nCollect World Cup badges and win free SBD\nSupport the Gold Sponsors of the contest: [@good-karma](https://v2.steemconnect.com/sign/account-witness-vote?witness=good-karma&approve=1) and [@lukestokes](https://v2.steemconnect.com/sign/account-witness-vote?witness=lukestokes.mhth&approve=1)\n\n---\n\n> Do you like [SteemitBoard's project](https://steemit.com/@steemitboard)? Then **[Vote for its witness](https://v2.steemconnect.com/sign/account-witness-vote?witness=steemitboard&approve=1)** and **get one more award**!",
      "title": "",
      "author": "steemitboard",
      "permlink": "steemitboard-notify-ultratech-20180715t183954000z",
      "json_metadata": "{\"image\":[\"https://steemitboard.com/img/notify.png\"]}",
      "parent_author": "ultratech",
      "parent_permlink": "malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand"
    }
  ],
  "block": 24204625,
  "trx_id": "099e42471500e02bc802b9db9fe204c379648cd4",
  "op_in_trx": 0,
  "timestamp": "2018-07-15T18:39:57",
  "virtual_op": false,
  "trx_in_block": 13
}

{
  "op": [
    "vote",
    {
      "voter": "branniganslaw",
      "author": "ultratech",
      "weight": 10000,
      "permlink": "attack-sweet32-allows-you-to-retrieve-data-to-and-from-https-and-openvpn"
    }
  ],
  "block": 19246735,
  "trx_id": "8d2e8948ad5f7678bea991436febe3644b6b93ec",
  "op_in_trx": 0,
  "timestamp": "2018-01-24T02:50:15",
  "virtual_op": false,
  "trx_in_block": 38
}

{
  "op": [
    "comment",
    {
      "body": "Congratulations @ultratech! You have received a personal award!\n\n[![](https://steemitimages.com/70x70/http://steemitboard.com/@ultratech/birthday1.png)](http://steemitboard.com/@ultratech) Happy Birthday - 1 Year on Steemit\nClick on the badge to view your own Board of Honor on SteemitBoard.\n\nFor more information about this award, click [here](https://steemit.com/steemitboard/@steemitboard/steemitboard-update-8-happy-birthday)\n> By upvoting this notification, you can help all Steemit users. Learn how [here](https://steemit.com/steemitboard/@steemitboard/http-i-cubeupload-com-7ciqeo-png)!",
      "title": "",
      "author": "steemitboard",
      "permlink": "steemitboard-notify-ultratech-20170715t183517000z",
      "json_metadata": "{\"image\":[\"https://steemitboard.com/img/notifications.png\"]}",
      "parent_author": "ultratech",
      "parent_permlink": "malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand"
    }
  ],
  "block": 13711761,
  "trx_id": "b5a73df7a8b96f42fbfd95a89f20e45db25315f1",
  "op_in_trx": 0,
  "timestamp": "2017-07-15T18:35:18",
  "virtual_op": false,
  "trx_in_block": 26
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand"
    }
  ],
  "block": 5422347,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-30T13:01:48",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "trojan-mutabaha-1-bypasses-uac-and-sets-fake-chrome"
    }
  ],
  "block": 5421483,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-30T12:18:33",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "the-researchers-used-a-mitm-attack-against-operators-encryptor-alma"
    }
  ],
  "block": 5355544,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-28T05:19:27",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-steemcleaners-re-ultratech-whatsapp-going-to-share-with-facebook-phone-users-20160830t114348854z"
    }
  ],
  "block": 5350958,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 5,
  "timestamp": "2016-09-28T01:28:18",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "whatsapp-going-to-share-with-facebook-phone-users"
    }
  ],
  "block": 5350958,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-28T01:28:18",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-thompsonj-2vz5lu-imfo-news-20160828t024229056z"
    }
  ],
  "block": 5350750,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 4,
  "timestamp": "2016-09-28T01:17:54",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-thompsonj-2vz5lu-imfo-news-20160828t012403198z"
    }
  ],
  "block": 5350750,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 3,
  "timestamp": "2016-09-28T01:17:54",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "bitmain-technologies-announced-the-start-of-sales-antminer-r4"
    }
  ],
  "block": 5350355,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-28T00:58:09",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "the-trigger-for-the-mind-25-year-old-boy-was-taken-out-of-the-coma-focusing-ultrasound-on-a-small-area-in-the-center-of-the"
    }
  ],
  "block": 5349123,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-27T23:56:33",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "semyon-slepakov-obrashenie-k-narodu-tekst-pesni"
    }
  ],
  "block": 5316101,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-26T20:25:21",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "thinking-about-big-data"
    }
  ],
  "block": 5315993,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-26T20:19:57",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "the-highest-point-of-the-russian-federation-mount-elbrus-5642-m-downhill-skiing-from-3850-m-height-difference-1-5-km"
    }
  ],
  "block": 5313073,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-26T17:53:54",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "detected-botnet-of-android-devices-controlled-via-twitter"
    }
  ],
  "block": 5309582,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-26T14:59:21",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-lennon15-re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160828t051807960z"
    }
  ],
  "block": 5309581,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 7,
  "timestamp": "2016-09-26T14:59:18",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "hackers-stole-usd-346000-thai-bank-caused-the-shutdown-of-3300-atms-in-country"
    }
  ],
  "block": 5308752,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-26T14:17:48",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "found-to-be-commercially-spyware-pegasus-uses-three-0-day-bugs-to-crack-ios"
    }
  ],
  "block": 5307677,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-26T13:24:00",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "attack-sweet32-allows-you-to-retrieve-data-to-and-from-https-and-openvpn"
    }
  ],
  "block": 5306775,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-26T12:38:54",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "wordfence-found-botnet-of-wordpress-site-created-by-one-person"
    }
  ],
  "block": 5305916,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 2,
  "timestamp": "2016-09-26T11:55:57",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-jonathanyoung-what-is-cryptocurrency-20160828t061043475z"
    }
  ],
  "block": 5235434,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 4,
  "timestamp": "2016-09-24T01:09:45",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-wpalczynski-truth-about-the-onecoin-scam-exposed-with-supporting-documents-please-read-and-share-this-information-too-many-people-have-been-20160828t053602139z"
    }
  ],
  "block": 5112818,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 28,
  "timestamp": "2016-09-19T18:19:39",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-thompsonj-ir8qh-imfo-news-20160828t022024193z"
    }
  ],
  "block": 5096167,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 5,
  "timestamp": "2016-09-19T04:25:45",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-thompsonj-ir8qh-imfo-news-20160828t014303841z"
    }
  ],
  "block": 5096167,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 4,
  "timestamp": "2016-09-19T04:25:45",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ultratech",
      "author": "shieha",
      "weight": 25548440141092,
      "rshares": 114644385,
      "permlink": "can-you-guess-what-this-is-super-macro-photography-week-3",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 2279166242153233
    }
  ],
  "block": 4533364,
  "trx_id": "e271d111fa51cb289dd177873d6b8d143283acac",
  "op_in_trx": 1,
  "timestamp": "2016-08-30T13:30:06",
  "virtual_op": true,
  "trx_in_block": 0
}

{
  "op": [
    "vote",
    {
      "voter": "ultratech",
      "author": "shieha",
      "weight": 10000,
      "permlink": "can-you-guess-what-this-is-super-macro-photography-week-3"
    }
  ],
  "block": 4533364,
  "trx_id": "e271d111fa51cb289dd177873d6b8d143283acac",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T13:30:06",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment",
    {
      "body": "EEW",
      "title": "",
      "author": "anns",
      "permlink": "re-ultratech-malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand-20160830t130955101z",
      "json_metadata": "{\"tags\":[\"news\"]}",
      "parent_author": "ultratech",
      "parent_permlink": "malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand"
    }
  ],
  "block": 4532961,
  "trx_id": "7d518e60ed5cf5e83c80b66084e4973de850b934",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T13:09:57",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ultratech",
      "author": "ultratech",
      "weight": 0,
      "rshares": 116937273,
      "permlink": "malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 539262221963709
    }
  ],
  "block": 4532799,
  "trx_id": "e49040ec054b62f141f974e97922a9bbfc31f0e7",
  "op_in_trx": 2,
  "timestamp": "2016-08-30T13:01:51",
  "virtual_op": true,
  "trx_in_block": 0
}

{
  "op": [
    "vote",
    {
      "voter": "ultratech",
      "author": "ultratech",
      "weight": 10000,
      "permlink": "malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand"
    }
  ],
  "block": 4532799,
  "trx_id": "e49040ec054b62f141f974e97922a9bbfc31f0e7",
  "op_in_trx": 1,
  "timestamp": "2016-08-30T13:01:51",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment",
    {
      "body": "https://xakep.ru/2016/08/29/ripper-atm-malware/\n\n![](https://xakep.ru/wp-content/uploads/2016/08/2160546793_2afc57f6d8_b.jpg)\n\nResearchers at FireEye discovered malware, which, according to them, involved in recent robberies of ATMs in Thailand and Taiwan. Malware called RIPPER, because the source code has been detected ATMRIPPER ID. FireEye experts reported they had never seen anything like it.\n\nThis summer in Thailand and Taiwan loud robbery took place , during which the attackers abducted from ATMs of various financial institutions more than 12.3 million dollars. Criminals have acted very strange according to law enforcement officials , the attackers used malware, which infects machines and forced them to give all the money. \n\nFireEye researchers write that they found the malware is most likely associated with these incidents. Separately, analysts emphasize the fact that a few minutes before the first article in the edition of Bangkok Post, which reported massive robbery of ATM Thailand, an unknown person has uploaded to VirusTotal sample RIPPER. Loading was carried out with the Thai IP- address.\n\nMalware analysis showed that, among other things, the RIPPER demonstrates the same techniques previously used malware Padpin (Tyupkin), SUCEFUL and GreenDispenser. As SUCEFUL, RIPPER can control the operation of the card reader and able to command him to read information from the card, or return it. RIPPER can disable the ATM network interface, as did [Padpin](https://www.symantec.com/security_response/writeup.jsp?docid=2014-051213-0525-99&tabid=2). Для удаления всех следов своей работы, malware применяет инструмент sdelete, который был замечен в арсенале [GreenDispenser](https://www.proofpoint.com/us/threat-insight/post/Meet-GreenDispenser). Also, malware is able to bypass the limits set by the manufacturer of ATMs , and can cause the machine to issue more than 40 notes at a time.\n\nBut there are differences RIPPER. The researchers report that RIPPER aimed at ATMs of three well-known manufacturers. Their names have not been disclosed for security reasons, but the report said that the robbery of ATMs in Taiwan and Thailand just touched the machine vulnerable producers. Recall that according to reports the data of the authorities of countries affected ATMs were manufactured by the German company Wincor Nixdorf and the US by NCR.\n\n![](https://xakep.ru/wp-content/uploads/2016/08/Capture-2.png)\n\nRIPPER infects the machine immediately, as soon as the ATM bank card is inserted (created by hackers with the EMV- chip). Although malicious programs resemble tactics showed family [Skimmer](http://news.drweb.com/show/?i=4167&lng=en), it's not a very common technique.\n\n\"Besides the fact that this method requires a high degree of technical ingenuity, attacks like the one that fell on the Thai ATM, require the coordination of physical and virtual operations. This shows an impressive preparation robbers\", - experts say.\n\nWith detailed technical analysis of malware can be found [in the company's blog](https://www.fireeye.com/blog/threat-research/2016/08/ripper_atm_malwarea.html).\n\nPhoto : [William Grootonk](https://www.flickr.com/photos/catatronic/)\n\n\n\n\n\n\nultratech",
      "title": "Malware RIPPER, probably used while robbing banks in Taiwan and Thailand.",
      "author": "ultratech",
      "permlink": "malware-ripper-probably-used-while-robbing-banks-in-taiwan-and-thailand",
      "json_metadata": "{\"tags\":[\"news\",\"money\",\"techreview\",\"hack\"],\"image\":[\"https://xakep.ru/wp-content/uploads/2016/08/2160546793_2afc57f6d8_b.jpg\",\"https://xakep.ru/wp-content/uploads/2016/08/Capture-2.png\"],\"links\":[\"https://xakep.ru/2016/08/29/ripper-atm-malware/\",\"https://www.symantec.com/security_response/writeup.jsp?docid=2014-051213-0525-99&tabid=2\",\"https://www.proofpoint.com/us/threat-insight/post/Meet-GreenDispenser\",\"http://news.drweb.com/show/?i=4167&lng=en\",\"https://www.fireeye.com/blog/threat-research/2016/08/ripper_atm_malwarea.html\",\"https://www.flickr.com/photos/catatronic/\"]}",
      "parent_author": "",
      "parent_permlink": "news"
    }
  ],
  "block": 4532799,
  "trx_id": "e49040ec054b62f141f974e97922a9bbfc31f0e7",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T13:01:51",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment",
    {
      "body": "![](https://xakep.ru/wp-content/uploads/2016/08/outfire00-1040x797.png)\n\nhttps://xakep.ru/2016/08/30/trojan-mutabaha-1/\n\nThe specialists of \" Doctor Web \" warns about the discovery of the [Trojan.Mutabaha.1.](http://vms.drweb.com/virus/?_is=1&i=8477920&lng=en) Malware does not just attack the user's browser, but sets on the infected computer 's own assembly Chrome browser, replacing the original. \n\nThe main feature of malware is its ability to bypass the security mechanism User Accounts Control (UAC). The researchers write that the first information about the UAC bypass technology was published online August 15, 2016, and after only three days of viral lab discovered the first example of malware (Trojan.Mutabaha.1.), who used this method. \n\nThe first thing after the infection on the computer runs the malware dropper, which increases their privileges on the system by modifying the registry branch HKCU\\ Software\\ Classes\\mscfile\\shell\\open\\command. Then malware saves to disk and launches setup_52.3.2743.82_1471853250.exe application and maintains and runs the .bat- files designed for the removal of the dropper. When everything is ready, malware communicates with the management server and receives the configuration file, in which the address to download a fake version of the browser. Fake browser is installed in the folder C:\\Program Files\\Outfire and recorded in the registry. \n\nEn build Google Chrome, created by hackers, it has Outfire name. In addition to the registration in the registry, the browser also runs several system services and creates a task in Scheduler to download and install its own updates. Outfire replaces the currently installed browser Google Chrome: modify existing shortcuts (or delete them and create new ones), as well as copies of the new browser is an existing user profile. Since attackers use Chrome standard icons , the victim may not notice the change.\n\n![](https://xakep.ru/wp-content/uploads/2016/08/outfire01-1040x784.png)\n\nHaving dealt with the main objective, Trojan.Mutabaha.1 looking in the system other fake browsers. Their names Trojan generates, testing combinations of the values ​​of the two lists-dictionaries, offering a total of 56 options. If the system detects a competitor, Trojan.Mutabaha.1 stops its operation, removes its entries from the Task Scheduler, and from the registry.\n\nWhy do they need a fake browser? The starting page of the browser can not be changed and it uses add-on (it can not be disabled) that replaces all the ads on user to browse the pages. This is a proven and well-known way to monetize.  In addition, Outfire uses its own default search provider, but it is still possible to change the settings.\n\n\n\nultratech",
      "title": "Trojan.mutabaha.1 bypasses UAC and sets fake Chrome.",
      "author": "ultratech",
      "permlink": "trojan-mutabaha-1-bypasses-uac-and-sets-fake-chrome",
      "json_metadata": "{\"tags\":[\"techreview\",\"news\",\"chrome\",\"hack\",\"\"],\"image\":[\"https://xakep.ru/wp-content/uploads/2016/08/outfire00-1040x797.png\",\"https://xakep.ru/wp-content/uploads/2016/08/outfire01-1040x784.png\"],\"links\":[\"https://xakep.ru/2016/08/30/trojan-mutabaha-1/\",\"http://vms.drweb.com/virus/?_is=1&i=8477920&lng=en\"]}",
      "parent_author": "",
      "parent_permlink": "techreview"
    }
  ],
  "block": 4531979,
  "trx_id": "c84a0cf468b427eced2834159487f9e1183880d6",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T12:20:27",
  "virtual_op": false,
  "trx_in_block": 1
}

{
  "op": [
    "comment",
    {
      "body": "![](https://xakep.ru/wp-content/uploads/2016/08/outfire00-1040x797.png)\n\nhttps://xakep.ru/2016/08/30/trojan-mutabaha-1/\n\nThe specialists of \" Doctor Web \" warns about the discovery of the [Trojan.Mutabaha.1.](http://vms.drweb.com/virus/?_is=1&i=8477920&lng=en) Malware does not just attack the user's browser, but sets on the infected computer 's own assembly Chrome browser, replacing the original. \n\nThe main feature of malware is its ability to bypass the security mechanism User Accounts Control (UAC). The researchers write that the first information about the UAC bypass technology was published online August 15, 2016, and after only three days of viral lab discovered the first example of malware (Trojan.Mutabaha.1.), who used this method. \n\nThe first thing after the infection on the computer runs the malware dropper, which increases their privileges on the system by modifying the registry branch HKCU\\ Software\\ Classes\\mscfile\\shell\\open\\command. Then malware saves to disk and launches setup_52.3.2743.82_1471853250.exe application and maintains and runs the .bat- files designed for the removal of the dropper. When everything is ready, malware communicates with the management server and receives the configuration file, in which the address to download a fake version of the browser. Fake browser is installed in the folder C:\\Program Files\\Outfire and recorded in the registry. \n\nEn build Google Chrome, created by hackers, it has Outfire name. In addition to the registration in the registry, the browser also runs several system services and creates a task in Scheduler to download and install its own updates. Outfire replaces the currently installed browser Google Chrome: modify existing shortcuts (or delete them and create new ones), as well as copies of the new browser is an existing user profile. Since attackers use Chrome standard icons , the victim may not notice the change.\n\n![](https://xakep.ru/wp-content/uploads/2016/08/outfire01-1040x784.png)\n\nHaving dealt with the main objective, Trojan.Mutabaha.1 looking in the system other fake browsers. Their names Trojan generates, testing combinations of the values ​​of the two lists-dictionaries, offering a total of 56 options. If the system detects a competitor, Trojan.Mutabaha.1 stops its operation, removes its entries from the Task Scheduler, and from the registry.\n\nWhy do they need a fake browser? The starting page of the browser can not be changed and it uses add-on (it can not be disabled) that replaces all the ads on user to browse the pages. This is a proven and well-known way to monetize.  In addition, Outfire uses its own default search provider, but it is still possible to change the settings.\n\n\n\nultratech",
      "title": "Trojan.mutabaha.1 bypasses UAC and sets fake Chrome.",
      "author": "ultratech",
      "permlink": "trojan-mutabaha-1-bypasses-uac-and-sets-fake-chrome",
      "json_metadata": "{\"tags\":[\"techreview\",\"news\",\"chrome\",\"hack\",\"\"],\"image\":[\"https://xakep.ru/wp-content/uploads/2016/08/outfire00-1040x797.png\",\"https://xakep.ru/wp-content/uploads/2016/08/outfire01-1040x784.png\"],\"links\":[\"https://xakep.ru/2016/08/30/trojan-mutabaha-1/\",\"http://vms.drweb.com/virus/?_is=1&i=8477920&lng=en\"]}",
      "parent_author": "",
      "parent_permlink": "techreview"
    }
  ],
  "block": 4531953,
  "trx_id": "5c18052e755164bf470ea43c36090210a964a9ea",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T12:19:06",
  "virtual_op": false,
  "trx_in_block": 2
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ultratech",
      "author": "ultratech",
      "weight": 0,
      "rshares": 116937273,
      "permlink": "trojan-mutabaha-1-bypasses-uac-and-sets-fake-chrome",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 539262221963709
    }
  ],
  "block": 4531943,
  "trx_id": "0e26a5f402e2a830685986d76772acf623be25a2",
  "op_in_trx": 2,
  "timestamp": "2016-08-30T12:18:36",
  "virtual_op": true,
  "trx_in_block": 0
}

{
  "op": [
    "vote",
    {
      "voter": "ultratech",
      "author": "ultratech",
      "weight": 10000,
      "permlink": "trojan-mutabaha-1-bypasses-uac-and-sets-fake-chrome"
    }
  ],
  "block": 4531943,
  "trx_id": "0e26a5f402e2a830685986d76772acf623be25a2",
  "op_in_trx": 1,
  "timestamp": "2016-08-30T12:18:36",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment",
    {
      "body": "![](https://xakep.ru/wp-content/uploads/2016/08/outfire00-1040x797.png)\n\nhttps://xakep.ru/2016/08/30/trojan-mutabaha-1/\n\nThe specialists of \" Doctor Web \" warns about the discovery of the [Trojan.Mutabaha.1.](http://vms.drweb.com/virus/?_is=1&i=8477920&lng=en) Malware does not just attack the user's browser, but sets on the infected computer 's own assembly Chrome browser, replacing the original. \n\nThe main feature of malware is its ability to bypass the security mechanism User Accounts Control (UAC). The researchers write that the first information about the UAC bypass technology was published online August 15, 2016, and after only three days of viral lab discovered the first example of malware (Trojan.Mutabaha.1.), who used this method. \n\nThe first thing after the infection on the computer runs the malware dropper, which increases their privileges on the system by modifying the registry branch HKCU\\ Software\\ Classes\\mscfile\\shell\\open\\command. Then malware saves to disk and launches setup_52.3.2743.82_1471853250.exe application and maintains and runs the .bat- files designed for the removal of the dropper. When everything is ready, malware communicates with the management server and receives the configuration file, in which the address to download a fake version of the browser. Fake browser is installed in the folder C:\\Program Files\\Outfire and recorded in the registry. \n\nEn build Google Chrome, created by hackers, it has Outfire name. In addition to the registration in the registry, the browser also runs several system services and creates a task in Scheduler to download and install its own updates. Outfire replaces the currently installed browser Google Chrome: modify existing shortcuts (or delete them and create new ones), as well as copies of the new browser is an existing user profile. Since attackers use Chrome standard icons , the victim may not notice the change.\n\n![](https://xakep.ru/wp-content/uploads/2016/08/outfire01-1040x784.png)\n\nHaving dealt with the main objective, Trojan.Mutabaha.1 looking in the system other fake browsers. Their names Trojan generates, testing combinations of the values ​​of the two lists-dictionaries, offering a total of 56 options. If the system detects a competitor, Trojan.Mutabaha.1 stops its operation, removes its entries from the Task Scheduler, and from the registry.\n\nWhy do they need a fake browser? The starting page of the browser can not be changed and it uses add-on (it can not be disabled) that replaces all the ads on user to browse the pages. This is a proven and well-known way to monetize.  In addition, Outfire uses its own default search provider, but it is still possible to change the settings.\n\n\n\nultratech",
      "title": "Trojan.mutabaha.1 bypasses UAC and sets fake Chrome.",
      "author": "ultratech",
      "permlink": "trojan-mutabaha-1-bypasses-uac-and-sets-fake-chrome",
      "json_metadata": "{\"tags\":[\"techreview\",\"chrome\",\"browser\",\"hack\",\"\"],\"image\":[\"https://xakep.ru/wp-content/uploads/2016/08/outfire00-1040x797.png\",\"https://xakep.ru/wp-content/uploads/2016/08/outfire01-1040x784.png\"],\"links\":[\"https://xakep.ru/2016/08/30/trojan-mutabaha-1/\",\"http://vms.drweb.com/virus/?_is=1&i=8477920&lng=en\"]}",
      "parent_author": "",
      "parent_permlink": "techreview"
    }
  ],
  "block": 4531943,
  "trx_id": "0e26a5f402e2a830685986d76772acf623be25a2",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T12:18:36",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "custom_json",
    {
      "id": "follow",
      "json": "[\"follow\",{\"follower\":\"ultratech\",\"following\":\"steemcleaners\",\"what\":[\"blog\"]}]",
      "required_auths": [],
      "required_posting_auths": [
        "ultratech"
      ]
    }
  ],
  "block": 4531253,
  "trx_id": "9abb7bf9f7300a2b72d55085cdb5b0c3cc75a4f5",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T11:44:03",
  "virtual_op": false,
  "trx_in_block": 4
}

{
  "op": [
    "comment",
    {
      "body": "The news did not really mine.\nsource: http://bigstory.ap.org/article/48e45fd4838b4e5d9f19166ef57841d4/whatsapp-going-share-your-phone-number-facebook   \nCheetah bot identifies plagiarism if there has been a direct copy content. I'm still experimenting, but I will keep in mind your comment.",
      "title": "",
      "author": "ultratech",
      "permlink": "re-steemcleaners-re-ultratech-whatsapp-going-to-share-with-facebook-phone-users-20160830t114348854z",
      "json_metadata": "{\"tags\":[\"whatsapp\"],\"links\":[\"http://bigstory.ap.org/article/48e45fd4838b4e5d9f19166ef57841d4/whatsapp-going-share-your-phone-number-facebook\"]}",
      "parent_author": "steemcleaners",
      "parent_permlink": "re-ultratech-whatsapp-going-to-share-with-facebook-phone-users-20160828t011320099z"
    }
  ],
  "block": 4531249,
  "trx_id": "bf83cd4352eee9ce6ee7caf854f4d6aa94f75f95",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T11:43:51",
  "virtual_op": false,
  "trx_in_block": 3
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ultratech",
      "author": "steemcleaners",
      "weight": 0,
      "rshares": 116937273,
      "permlink": "re-ultratech-whatsapp-going-to-share-with-facebook-phone-users-20160828t011320099z",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 0
    }
  ],
  "block": 4530890,
  "trx_id": "0e9671ce341a1cd22bbb4efa25ed4d9415b51030",
  "op_in_trx": 1,
  "timestamp": "2016-08-30T11:25:48",
  "virtual_op": true,
  "trx_in_block": 0
}

{
  "op": [
    "vote",
    {
      "voter": "ultratech",
      "author": "steemcleaners",
      "weight": 10000,
      "permlink": "re-ultratech-whatsapp-going-to-share-with-facebook-phone-users-20160828t011320099z"
    }
  ],
  "block": 4530890,
  "trx_id": "0e9671ce341a1cd22bbb4efa25ed4d9415b51030",
  "op_in_trx": 0,
  "timestamp": "2016-08-30T11:25:48",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-satoshifpv-re-acidyo-re-satoshifpv-lol-one-coin-vs-ethereum-this-is-the-funniest-meme-of-the-week-20160828t055217003z"
    }
  ],
  "block": 4504277,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 8,
  "timestamp": "2016-08-29T13:09:27",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "comment_payout_update",
    {
      "author": "ultratech",
      "permlink": "re-satoshifpv-re-acidyo-re-satoshifpv-re-acidyo-re-satoshifpv-lol-one-coin-vs-ethereum-this-is-the-funniest-meme-of-the-week-20160828t055029714z"
    }
  ],
  "block": 4504277,
  "trx_id": "0000000000000000000000000000000000000000",
  "op_in_trx": 7,
  "timestamp": "2016-08-29T13:09:27",
  "virtual_op": true,
  "trx_in_block": 4294967295
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "satoshifpv",
      "author": "ultratech",
      "weight": "22490138252007390",
      "rshares": 4882724333,
      "permlink": "re-satoshifpv-re-acidyo-re-satoshifpv-re-acidyo-re-satoshifpv-lol-one-coin-vs-ethereum-this-is-the-funniest-meme-of-the-week-20160828t055029714z",
      "pending_payout": "0.002 HBD",
      "total_vote_weight": "22490138252007390"
    }
  ],
  "block": 4476820,
  "trx_id": "d4e969c469cd1ecc4422aca0f7729e2149013713",
  "op_in_trx": 1,
  "timestamp": "2016-08-28T14:15:03",
  "virtual_op": true,
  "trx_in_block": 1
}

{
  "op": [
    "vote",
    {
      "voter": "satoshifpv",
      "author": "ultratech",
      "weight": 10000,
      "permlink": "re-satoshifpv-re-acidyo-re-satoshifpv-re-acidyo-re-satoshifpv-lol-one-coin-vs-ethereum-this-is-the-funniest-meme-of-the-week-20160828t055029714z"
    }
  ],
  "block": 4476820,
  "trx_id": "d4e969c469cd1ecc4422aca0f7729e2149013713",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T14:15:03",
  "virtual_op": false,
  "trx_in_block": 1
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ultratech",
      "author": "jonathanyoung",
      "weight": 0,
      "rshares": 114644385,
      "permlink": "what-is-cryptocurrency",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 0
    }
  ],
  "block": 4467169,
  "trx_id": "07062ffd0ca720163d642797402bdceb4b8f99f9",
  "op_in_trx": 1,
  "timestamp": "2016-08-28T06:11:06",
  "virtual_op": true,
  "trx_in_block": 3
}

{
  "op": [
    "vote",
    {
      "voter": "ultratech",
      "author": "jonathanyoung",
      "weight": 10000,
      "permlink": "what-is-cryptocurrency"
    }
  ],
  "block": 4467169,
  "trx_id": "07062ffd0ca720163d642797402bdceb4b8f99f9",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T06:11:06",
  "virtual_op": false,
  "trx_in_block": 3
}

{
  "op": [
    "comment",
    {
      "body": "In my opinion onecoin - the quintessence of the consumer society. A bunch of crooks cheated a huge number of mentally retarded sheep from different countries. How could this happen? After a deep analysis of the problem, I came to the conclusion that the problem is not in the financial pyramid, not in the justice system. This stunningly low levels of education. Human stupidity , like the universe - is constantly expanding. The education system works in favor of corporations. Corporations do not need qualified specialists. They need a \" qualified consumers \".",
      "title": "",
      "author": "ultratech",
      "permlink": "re-jonathanyoung-what-is-cryptocurrency-20160828t061043475z",
      "json_metadata": "{\"tags\":[\"cryptocurrency\"]}",
      "parent_author": "jonathanyoung",
      "parent_permlink": "what-is-cryptocurrency"
    }
  ],
  "block": 4467163,
  "trx_id": "f265eac3753c0a1cc760fa948db6b7715de26dab",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T06:10:48",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "delete_comment",
    {
      "author": "ultratech",
      "permlink": "re-lennon15-re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160828t053311861z"
    }
  ],
  "block": 4466847,
  "trx_id": "60f87b75470f00790950e853dd2e4a0c6fc0edb9",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:54:57",
  "virtual_op": false,
  "trx_in_block": 2
}

{
  "op": [
    "comment",
    {
      "body": "When viewing the video I vomited blood, is this normal?",
      "title": "",
      "author": "ultratech",
      "permlink": "re-satoshifpv-re-acidyo-re-satoshifpv-lol-one-coin-vs-ethereum-this-is-the-funniest-meme-of-the-week-20160828t055217003z",
      "json_metadata": "{\"tags\":[\"funny\"]}",
      "parent_author": "satoshifpv",
      "parent_permlink": "re-acidyo-re-satoshifpv-lol-one-coin-vs-ethereum-this-is-the-funniest-meme-of-the-week-20160730t002752672z"
    }
  ],
  "block": 4466795,
  "trx_id": "0db81c1f6ac26bdc1dfd85bae46d9c594b89e144",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:52:21",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment",
    {
      "body": "When viewing the video I vomited blood, is this normal?",
      "title": "",
      "author": "ultratech",
      "permlink": "re-satoshifpv-re-acidyo-re-satoshifpv-re-acidyo-re-satoshifpv-lol-one-coin-vs-ethereum-this-is-the-funniest-meme-of-the-week-20160828t055029714z",
      "json_metadata": "{\"tags\":[\"funny\"]}",
      "parent_author": "satoshifpv",
      "parent_permlink": "re-acidyo-re-satoshifpv-re-acidyo-re-satoshifpv-lol-one-coin-vs-ethereum-this-is-the-funniest-meme-of-the-week-20160730t003309318z"
    }
  ],
  "block": 4466759,
  "trx_id": "696cd741809621f78988655cbc79dd6cdfa459d5",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:50:33",
  "virtual_op": false,
  "trx_in_block": 2
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ultratech",
      "author": "wpalczynski",
      "weight": 0,
      "rshares": 116937273,
      "permlink": "truth-about-the-onecoin-scam-exposed-with-supporting-documents-please-read-and-share-this-information-too-many-people-have-been",
      "pending_payout": "0.012 HBD",
      "total_vote_weight": 0
    }
  ],
  "block": 4466499,
  "trx_id": "364fd6ce506d9f35cfadbd6b44707c7691a70730",
  "op_in_trx": 1,
  "timestamp": "2016-08-28T05:37:27",
  "virtual_op": true,
  "trx_in_block": 2
}

{
  "op": [
    "vote",
    {
      "voter": "ultratech",
      "author": "wpalczynski",
      "weight": 10000,
      "permlink": "truth-about-the-onecoin-scam-exposed-with-supporting-documents-please-read-and-share-this-information-too-many-people-have-been"
    }
  ],
  "block": 4466499,
  "trx_id": "364fd6ce506d9f35cfadbd6b44707c7691a70730",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:37:27",
  "virtual_op": false,
  "trx_in_block": 2
}

{
  "op": [
    "comment",
    {
      "body": "I can confidently say that onecoin project - scam. Onecoin - not cryptocurrency. Evidence: It is not a peer-to-peer network, operations are available only in an electronic personal account on the company website, full control over the database is in the issuing company, OneCoin was originally designed as a strictly centralized system, OneCoin does not publish the source code and does not announce the details of the technical system ( the size of blocks in blockchain, frequency of change complexity, how carried the proof of work, which algorithm of mining, what equipment is used for mining). Onecoin is kept afloat thanks to three factors: 1. The large time lag between the input and output of money, which is achieved by artificial restrictions on the internal Exchange ( in terms of withdrawal of funds for the period of time). 2. On the inside of the stock exchange price onecoin overstated , due to which the demand for onecoin - not while offer - great, making it more difficult to sell it. 3. An aggressive advertising campaign , PR- action for a set of neophytes do not know anything about cryptocurrency and no minimum financial knowledge.\nMy conclusion: onecoin - pyramid scheme of new generation. By law, a company is difficult to prosecute , but it is possible - nowhere on the website does not say that the person who bought the only starter package is not able to recover their money back, without additional financial investments and extra time.",
      "title": "",
      "author": "ultratech",
      "permlink": "re-wpalczynski-truth-about-the-onecoin-scam-exposed-with-supporting-documents-please-read-and-share-this-information-too-many-people-have-been-20160828t053602139z",
      "json_metadata": "{\"tags\":[\"onecoin\"]}",
      "parent_author": "wpalczynski",
      "parent_permlink": "truth-about-the-onecoin-scam-exposed-with-supporting-documents-please-read-and-share-this-information-too-many-people-have-been"
    }
  ],
  "block": 4466472,
  "trx_id": "71a6ae1ad83e92c5e1215b645f3f3f4b9b2652b4",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:36:06",
  "virtual_op": false,
  "trx_in_block": 3
}

{
  "op": [
    "comment",
    {
      "body": "Hello, {google translate detected...} :) I have studied the project in detail and I can confidently say that onecoin project - scam. Onecoin - not cryptocurrency. Evidence: It is not a peer-to-peer network, operations are available only in an electronic personal account on the company website, full control over the database is in the issuing company, OneCoin was originally designed as a strictly centralized system, OneCoin does not publish the source code and does not announce the details of the technical system ( the size of blocks in blockchain, frequency of change complexity, how carried the proof of work, which algorithm of mining, what equipment is used for mining). Onecoin is kept afloat thanks to three factors: 1. The large time lag between the input and output of money, which is achieved by artificial restrictions on the internal Exchange ( in terms of withdrawal of funds for the period of time). 2. On the inside of the stock exchange price onecoin overstated , due to which the demand for onecoin - not while offer - great, making it more difficult to sell it. 3. An aggressive advertising campaign , PR- action for a set of neophytes do not know anything about cryptocurrency and no minimum financial knowledge.\nMy conclusion: onecoin - pyramid scheme of new generation. By law, a company is difficult to prosecute , but it is possible - nowhere on the website does not say that the person who bought the only starter package is not able to recover their money back, without additional financial investments and extra time.",
      "title": "",
      "author": "ultratech",
      "permlink": "re-lennon15-re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160828t053311861z",
      "json_metadata": "{\"tags\":[\"onecoin\"]}",
      "parent_author": "lennon15",
      "parent_permlink": "re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160826t131957511z"
    }
  ],
  "block": 4466416,
  "trx_id": "f061e430cd0eac0224be41f8efdb1b6b3175cdd4",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:33:15",
  "virtual_op": false,
  "trx_in_block": 1
}

{
  "op": [
    "comment",
    {
      "body": "@@ -1190,16 +1190,22 @@\n nything \n+about \n cryptocu\n",
      "title": "",
      "author": "ultratech",
      "permlink": "re-lennon15-re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160828t051807960z",
      "json_metadata": "{\"tags\":[\"onecoin\"]}",
      "parent_author": "lennon15",
      "parent_permlink": "re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160826t131957511z"
    }
  ],
  "block": 4466384,
  "trx_id": "2a09fdc73c7cb16f8a3d04ce46c1f3a3dc506ecb",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:31:39",
  "virtual_op": false,
  "trx_in_block": 2
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ericbotticelli",
      "author": "ultratech",
      "weight": "16908828689580263",
      "rshares": 3670195458,
      "permlink": "the-researchers-used-a-mitm-attack-against-operators-encryptor-alma",
      "pending_payout": "0.001 HBD",
      "total_vote_weight": "17697018984424988"
    }
  ],
  "block": 4466226,
  "trx_id": "ac98a05a80e2fa242c7127413e0c33d1e2085f7f",
  "op_in_trx": 1,
  "timestamp": "2016-08-28T05:23:45",
  "virtual_op": true,
  "trx_in_block": 3
}

{
  "op": [
    "vote",
    {
      "voter": "ericbotticelli",
      "author": "ultratech",
      "weight": 10000,
      "permlink": "the-researchers-used-a-mitm-attack-against-operators-encryptor-alma"
    }
  ],
  "block": 4466226,
  "trx_id": "ac98a05a80e2fa242c7127413e0c33d1e2085f7f",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:23:45",
  "virtual_op": false,
  "trx_in_block": 3
}

{
  "op": [
    "comment",
    {
      "body": "@@ -1,8 +1,21 @@\n+to lennon15:%0A\n Hello, %7B\n",
      "title": "",
      "author": "ultratech",
      "permlink": "re-lennon15-re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160828t051807960z",
      "json_metadata": "{\"tags\":[\"onecoin\"]}",
      "parent_author": "lennon15",
      "parent_permlink": "re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160826t131957511z"
    }
  ],
  "block": 4466131,
  "trx_id": "db32218556027f28c70590b7803f5241635bacf2",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:19:00",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment",
    {
      "body": "Hello, {google translate detected...} :) I have studied the project in detail and I can confidently say that onecoin project - scam.  Onecoin - not cryptocurrency.  Evidence: It is not a peer-to-peer network, operations are available only in an electronic personal account on the company website, full control over the database is in the issuing company,  OneCoin was originally designed as a strictly centralized system, OneCoin does not publish the source code and does not announce the details of the technical system ( the size of blocks in blockchain, frequency of change complexity, how carried the proof of work, which algorithm of mining, what equipment is used for mining).  Onecoin is kept afloat thanks to three factors: 1. The large time lag between the input and output of money, which is achieved by artificial restrictions on the internal Exchange ( in terms of withdrawal of funds for the period of time). 2. On the inside of the stock exchange price onecoin overstated , due to which the demand for onecoin - not while offer - great, making it more difficult to sell it. 3.  An aggressive advertising campaign , PR- action for a set of neophytes do not know anything cryptocurrency and no minimum financial knowledge.\nMy conclusion: onecoin - pyramid scheme of new generation. By law, a company is difficult to prosecute , but it is possible - nowhere on the website does not say that the person who bought the only starter package is not able to recover their money back, without additional financial investments and extra time.",
      "title": "",
      "author": "ultratech",
      "permlink": "re-lennon15-re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160828t051807960z",
      "json_metadata": "{\"tags\":[\"onecoin\"]}",
      "parent_author": "lennon15",
      "parent_permlink": "re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160826t131957511z"
    }
  ],
  "block": 4466115,
  "trx_id": "90bc3d4b0a2c5e1cc7c90ec3de3d7833a9476947",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T05:18:12",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ultratech",
      "author": "paketkita.net",
      "weight": 0,
      "rshares": 114644385,
      "permlink": "re-lennon15-re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160826t132746747z",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 0
    }
  ],
  "block": 4464574,
  "trx_id": "c97d79cd138f51428edc325e809a9b2bb12cb6c3",
  "op_in_trx": 1,
  "timestamp": "2016-08-28T04:00:54",
  "virtual_op": true,
  "trx_in_block": 1
}

{
  "op": [
    "vote",
    {
      "voter": "ultratech",
      "author": "paketkita.net",
      "weight": 10000,
      "permlink": "re-lennon15-re-paketkitanet-onecoin-review-ponzi-scheme-of-mmm-warning-scam-20160826t132746747z"
    }
  ],
  "block": 4464574,
  "trx_id": "c97d79cd138f51428edc325e809a9b2bb12cb6c3",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T04:00:54",
  "virtual_op": false,
  "trx_in_block": 1
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "tychebe",
      "author": "ultratech",
      "weight": 6638081943493,
      "rshares": 53981556,
      "permlink": "the-researchers-used-a-mitm-attack-against-operators-encryptor-alma",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 788190294844725
    }
  ],
  "block": 4464324,
  "trx_id": "df34f0a27442fea29ac6b33bd3941e2e88eeaaa8",
  "op_in_trx": 1,
  "timestamp": "2016-08-28T03:48:21",
  "virtual_op": true,
  "trx_in_block": 4
}

{
  "op": [
    "vote",
    {
      "voter": "tychebe",
      "author": "ultratech",
      "weight": 10000,
      "permlink": "the-researchers-used-a-mitm-attack-against-operators-encryptor-alma"
    }
  ],
  "block": 4464324,
  "trx_id": "df34f0a27442fea29ac6b33bd3941e2e88eeaaa8",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T03:48:21",
  "virtual_op": false,
  "trx_in_block": 4
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "ultratech",
      "author": "ultratech",
      "weight": 0,
      "rshares": 116937273,
      "permlink": "the-researchers-used-a-mitm-attack-against-operators-encryptor-alma",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 539262221963709
    }
  ],
  "block": 4464308,
  "trx_id": "91aad8be53c77643fbd0c4d295b80056e6add568",
  "op_in_trx": 2,
  "timestamp": "2016-08-28T03:47:33",
  "virtual_op": true,
  "trx_in_block": 4
}

{
  "op": [
    "vote",
    {
      "voter": "ultratech",
      "author": "ultratech",
      "weight": 10000,
      "permlink": "the-researchers-used-a-mitm-attack-against-operators-encryptor-alma"
    }
  ],
  "block": 4464308,
  "trx_id": "91aad8be53c77643fbd0c4d295b80056e6add568",
  "op_in_trx": 1,
  "timestamp": "2016-08-28T03:47:33",
  "virtual_op": false,
  "trx_in_block": 4
}

{
  "op": [
    "comment",
    {
      "body": "![](https://xakep.ru/wp-content/uploads/2016/08/Ransomware-1040x712.jpg)\n\nCompany experts presented PhishLabs free tool to decrypt the files affected by the attack malware Alma. Hack malware researchers were able, having carried out man-in-the-middle attack , which helped to understand how the \"official\" decryptor intruders.\n\n![](https://xakep.ru/wp-content/uploads/2016/08/Alma_Ransomware_Figure_6.png)\n\nNew extortionist Alma, appeared this month , [found](https://twitter.com/darienhuss/status/767809287301103617) Proofpoint experts and studied [BleepingComputer](http://www.bleepingcomputer.com/news/security/new-alma-locker-ransomware-being-distributed-via-the-rig-exploit-kit/) experts. Although the researchers came to the conclusion that the malware is still in its development stage, at the same time it became clear that even at this stage, Alma already poses a serious threat. At the time of studying the encryptor already massively distributed through an exploit RIG whale.\n\nInfiltrating the system, of Alma generates a random five-digit extension for files and starts encryption using AES- 128. Also, each victim is given a unique eight-digit ID, which is created based on the serial number of the disk C:\\ and the MAC-address of the first network interface in the list.\n\nMalware attacks a wide range of files, but does not touch the directory name that is present : $ recycle.bin, system volume information, program files, programdata, program files (x86), windows, internet explorer, Microsoft, Mozilla, chrome, appdata, local settings, recycler, msocache and Unlock_files_.\n\nSince the malware developers protect their \"product\" , the experts had to break their heads over which side is better to approach the Alma. Fortunately, experts PhishLabs noticed a weak point in the malware. During file encryption  Alma breaks down the process into two phases. First, start the encryption process and then extortionist associated with the management server and forwards via HTTP AES key in plaintext. Since AES is a symmetric cipher , the key can be used for file encryption and for decryption. However, after completion of the encryption process, the key the user is not available, unless he keeps logs network traffic.\n\nWhen encryption is finished files, of Alma displays a message demanding ransom by sending the victim to the site in .onion area, where you can download a tool to decrypt the data created by the intruders. Only after downloading decryptor, the user receives further instructions: bitcoin wallet-address and information on the amount of ransom , which is 1 Bitcoin (about 585 dollars), and learns that to pay for it has 120 hours. \n\n!{}(https://xakep.ru/wp-content/uploads/2016/08/Alma_Ransomware_Figure_9.png)\n\nResearchers PhishLabs managed to extract the source code of decryptor, which was not protected by obfuscation, using Red Gate .NET Reflector and understand that the tool vulnerable to attacks such as man-in-the-middle. To understand the mechanisms of the tool to decrypt, experts used Fiddler to forge answers to the management server. As a result, experts have created PhishLabs C-Sharp file, with which data can be restored for free.\n\n![](https://xakep.ru/wp-content/uploads/2016/08/Alma_Ransomware_Figure_16.png)\n\nWith all the details of the work done by the experts can be found [in the company's blog](https://info.phishlabs.com/blog/alma-ransomware-analysis-of-a-new-ransomware-threat-and-a-decrypter).",
      "title": "The researchers used a MITM-attack against operators encryptor ALMA",
      "author": "ultratech",
      "permlink": "the-researchers-used-a-mitm-attack-against-operators-encryptor-alma",
      "json_metadata": "{\"tags\":[\"news\",\"crypto-news\",\"technolgy\",\"hack\"],\"image\":[\"https://xakep.ru/wp-content/uploads/2016/08/Ransomware-1040x712.jpg\"]}",
      "parent_author": "",
      "parent_permlink": "news"
    }
  ],
  "block": 4464308,
  "trx_id": "91aad8be53c77643fbd0c4d295b80056e6add568",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T03:47:33",
  "virtual_op": false,
  "trx_in_block": 4
}

{
  "op": [
    "comment",
    {
      "body": "![](https://enshop.bitmain.com/products/public/images/R4/gallery/img-gallery-01.png)\n\nManufacturer of equipment for mining Bitmain Technologies has announced the start of sales Antminer R4 - the newest model miner, which is convinced of the company, \"mining will return back to the user\".\n\nThe new equipment will produce approximately 0.00994837 BTC per day , excluding energy costs .\n\nAccording to Bitmain, equipped with 16nm chips Antminer R4 will be the most effective solution in the consumer market . One of the main advantages of the new model is called low power consumption ( 845 W) , and the users can rely on heshreyt of $ 8.6 TH / s.\n\nTo achieve this level hashrate users are also encouraged to purchase the complete newly released APW5 power supply 2600 watts . Exceptionally quiet in operation, it ensures the noise level does not exceed 52 decibels, which is comparable with the volume of the conversation in the room.\n\n«Antminer R4 is designed with the utmost care to ensure the lowest sound of a maximum hashrate. Inspired by silent air conditioners, it will replace the traditional miner with a rotary blade system. The fan speed is controlled automatically, so the noise level will never exceed the specified values​​. Design Antminer R4 enable convenient place it on a bookshelf or a computer table,\"- said in a statement the head of international marketing Bitmain Technologies Nishanta Sharma.\n\nThe company stressed that the recent mining Bitcoins at home has become too unaffordable luxury, but with the appearance on the market Antminer R4 individual users will again be able to deal effectively with cryptocurrency prey.\n\nThe price of Antminer R4 in Bitmain Technologies is not called, however, according to the screenshots, intercepted edition Bitcoin News Magazine, the cost of the device will be $ 1,000 . The additional $ 300 cost APW5 power supply.\n\n![](http://forklog.com/wp-content/uploads/bitmainr4.png)\n\nHome sales is [scheduled](https://enshop.bitmain.com/products/antminer-r4-silent-bitcoin-miner.html) for 23:00 (GMT + 8) Monday, August 29\n\nBitmain Technologies was founded in 2013 and is one of the most well-known manufacturers of equipment for mining. The company's headquarters is located in Beijing, additional offices in San Francisco , Tel Aviv , Hong Kong, Chengdu and Shenzhen . The company also owns a miningpool Antpool. In July Bitmain Technology acquired Bitcoin start-up Blocktrail, through which expects to breathe new life into analytical project BTC.com.\n\n\nultratech",
      "title": "Bitmain Technologies announced the start of sales Antminer R4.",
      "author": "ultratech",
      "permlink": "bitmain-technologies-announced-the-start-of-sales-antminer-r4",
      "json_metadata": "{\"tags\":[\"bitcoin\",\"mining\",\"cryptocurrency\",\"crypto-news\",\"news\"],\"image\":[\"https://enshop.bitmain.com/products/public/images/R4/gallery/img-gallery-01.png\"]}",
      "parent_author": "",
      "parent_permlink": "bitcoin"
    }
  ],
  "block": 4463671,
  "trx_id": "82f5535f8a3fee224b958d49039eba5fa766b5e7",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T03:15:30",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment",
    {
      "body": "What gives us a google on request \"Russian leaders go underground in preparation for world war 3\" for  August 25-28 2016:\nPutin-led Russia building nuclear bunkers for war arsenal | World ...\nwww.express.co.uk › News › World 19 aug. 2016 y. - Russia building underground nuclear bunkers as it beefs up arsenal ready for war ..\nPutin Prepares For Nuclear War - Russia Building Dozens Of Nuclear ...\nallnewspipeline.com/Putin_Prepares_For_Nuclear_War.php\n15 aug. 2016 y. - Russia has never stopped preparing for nuclear war. ..\nRussia Preparing For Massive War By Building Dozens Of ...\nbeforeitsnews.com/global.../russia-preparing-for-massive-wa...\n15 aug. 2016 y. - Russia is building large numbers of underground nuclear command bunkers ... “\n\nThat's all.\nNo pictures , no evidence , nothing. unproven information stuffing, focused on the British audience.",
      "title": "",
      "author": "ultratech",
      "permlink": "re-thompsonj-2vz5lu-imfo-news-20160828t024229056z",
      "json_metadata": "{\"tags\":[\"news\"]}",
      "parent_author": "thompsonj",
      "parent_permlink": "2vz5lu-imfo-news"
    }
  ],
  "block": 4463014,
  "trx_id": "8c04993ab6ef2ae08ab800e43d0a80d525a69b35",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T02:42:33",
  "virtual_op": false,
  "trx_in_block": 2
}

{
  "op": [
    "comment",
    {
      "body": "What gives us a google on request \"Russia puts 40,000 troops on the border of Ukraine causing fear of all out war.\" for August 17-18 2016:\n\nhttps://www.thesun.co.uk/.../fears-of-all-out-conflict-in-ukrai...\nwww.dailymail.co.uk/.../Fears-fresh-Ukraine-invasion-Putin-... -  17 aug. 2016\nwww.express.co.uk › News › World \nwww.theweek.co.uk › Ukraine\nwww.dw.com/en/ukraine-russia-flex...ahead.../a-19492527\nwww.cbc.ca/news/world/ukraine-russia-tension-1.3724892 - ...\n\nThe rest - a variety of blogs and local media. Mainly from the United Kingdom and the British Commonwealth. No satellite images or pictures , nothing.\n\nAnother , unproven information stuffing, focused on the British audience.",
      "title": "",
      "author": "ultratech",
      "permlink": "re-thompsonj-ir8qh-imfo-news-20160828t022024193z",
      "json_metadata": "{\"tags\":[\"news\"],\"links\":[\"https://www.thesun.co.uk/.../fears-of-all-out-conflict-in-ukrai...\"]}",
      "parent_author": "thompsonj",
      "parent_permlink": "ir8qh-imfo-news"
    }
  ],
  "block": 4462573,
  "trx_id": "ffbc78748e5a201d5ad4d353120c8036b9870441",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T02:20:27",
  "virtual_op": false,
  "trx_in_block": 1
}

{
  "op": [
    "effective_comment_vote",
    {
      "voter": "fernan",
      "author": "ultratech",
      "weight": 2068521815003028,
      "rshares": 448627156,
      "permlink": "whatsapp-going-to-share-with-facebook-phone-users",
      "pending_payout": "0.000 HBD",
      "total_vote_weight": 2843251720431642
    }
  ],
  "block": 4461901,
  "trx_id": "30f5242eddb41bb60c46d1f0d54119192f6e74d1",
  "op_in_trx": 1,
  "timestamp": "2016-08-28T01:46:45",
  "virtual_op": true,
  "trx_in_block": 3
}

{
  "op": [
    "vote",
    {
      "voter": "fernan",
      "author": "ultratech",
      "weight": 10000,
      "permlink": "whatsapp-going-to-share-with-facebook-phone-users"
    }
  ],
  "block": 4461901,
  "trx_id": "30f5242eddb41bb60c46d1f0d54119192f6e74d1",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T01:46:45",
  "virtual_op": false,
  "trx_in_block": 3
}

{
  "op": [
    "comment",
    {
      "body": "faked info",
      "title": "",
      "author": "ultratech",
      "permlink": "re-thompsonj-ir8qh-imfo-news-20160828t014303841z",
      "json_metadata": "{\"tags\":[\"news\"]}",
      "parent_author": "thompsonj",
      "parent_permlink": "ir8qh-imfo-news"
    }
  ],
  "block": 4461829,
  "trx_id": "4f090d75bbbe649d1c694a8f60f2c84c0ed17a59",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T01:43:09",
  "virtual_op": false,
  "trx_in_block": 0
}

{
  "op": [
    "comment",
    {
      "body": "Proof link?",
      "title": "",
      "author": "ultratech",
      "permlink": "re-thompsonj-2vz5lu-imfo-news-20160828t012403198z",
      "json_metadata": "{\"tags\":[\"news\"]}",
      "parent_author": "thompsonj",
      "parent_permlink": "2vz5lu-imfo-news"
    }
  ],
  "block": 4461450,
  "trx_id": "a8775b4de8ce1949e4705311beaa82133e0b9c77",
  "op_in_trx": 0,
  "timestamp": "2016-08-28T01:24:06",
  "virtual_op": false,
  "trx_in_block": 4
}