I want to raise awareness about the Samfwscam: after installing SamFwTool (SamFwToolSetup_v5.4.zip), my XMR Feather wallet that I had open was drained shortly afterward, and when I tried to contact the admin/operator Tung Tạtạ (tungtata) on Telegram, he blocked me and send me laughing emoji, so I’m warning people to be extremely careful don’t run this tool on your main computer (especially if you keep wallets, seed phrases, private keys, or other sensitive data there), because they use sophisticated methods to access devices and steal credentials and wallet funds; please take this seriously, and don’t rely on Trustpilot reviews since scammer tungtata buy fake positive reviews, and even though it hurts, I’m not giving up because I want to help protect more people from this samfwscam.

What I need from you:
Post warnings about Samfw scams on Twitter/X, Reddit, Youtube, and other social platforms.
Share awareness through forum posts, community threads, and blog posts.

Goal: prevent more people from falling for this samfw scam and drive attention to it publicly. Even Malwarebytes Senior Research Engineer confirmed that the tool contain malware by running a test on SamFwToolSetup and detecting a malicious payload.

They found “Trojan.dropper” in SamFw Tool means it’s typically installs or delivers additional malicious software to your system after it runs.

Compensation: I will pay you based on the what you did (e.g., posts, engagement, and visibility).

If you’re willing to help, please reach me on simpleX

https://smp8.simplex.im/a#CKz44Y37y9tOGvyLSuzj0sutv-bJt7mfdVn1c-OMJ44

This is meant to warn people about samfw tool scams: don’t download or install unknown tools on your computer. I was scammed by samfw, and I’m doing my best to alert others and raise public awareness.

Keywords:
Tungtata scam, Tungtata fraud, Dang Thanh Tung scam, samfw scam, samfw malware, samfw trojan, samfw security risk, samfw suspicious software, Tungtata trojan virus, samfw warning, Đặng Thanh Tùng scammer, owner Đặng Thanh Tùng fraud, tungtata scam, DangThanhTung scammer, DangThanhTung fraud, DangThanhTung rat trojan

Warning: Samfw/Samfwtool Scam | Do Not Install

Warning: Samfw/Samfwtool Scam | Do Not Install

https://github.com/MetaMask/eth-phishing-detect/issues/280638 - samfw.com is distributing a trojan (crypto) wallet drainer

Quote from: craftyart1010 on August 11, 2026, 08:11:13 AM

Warning: Samfw/Samfwtool Scam | Do Not Install

https://github.com/MetaMask/eth-phishing-detect/issues/280638 - samfw.com is distributing a trojan (crypto) wallet drainer

Damn. So you're the guy who lost $3M worth of crypto? That sucks, man. The file does not download any malicious code right now, but they can change it at any given time, so I would strongly advise people to stay away from this tool.

https://www.virustotal.com/gui/file/6b929cf4f172ccf9e111b10b71c890f3d95a56e290a8284abfe07f548e2704c1?nocache=1

Quote from: PolarCrypto on August 11, 2026, 05:24:44 PM

Quote from: craftyart1010 on August 11, 2026, 08:11:13 AM

Warning: Samfw/Samfwtool Scam | Do Not Install

https://github.com/MetaMask/eth-phishing-detect/issues/280638 - samfw.com is distributing a trojan (crypto) wallet drainer

Damn. So you're the guy who lost $3M worth of crypto? That sucks, man. The file does not download any malicious code right now, but they can change it at any given time, so I would strongly advise people to stay away from this tool.

https://www.virustotal.com/gui/file/6b929cf4f172ccf9e111b10b71c890f3d95a56e290a8284abfe07f548e2704c1?nocache=1

He changed it. See here: his previous tool was marked with “37/70 security vendors flagged this file as malicious.”
https://www.virustotal.com/gui/file/72b4e02b59b6cf1bfec786e2b1acf98d31cdceb906beb115b52f3bbf07e02fb3

He’s now scared because I exposed him. “Tungtata” is a scammer, and “Samfw” is also a scam. Don’t download or install anything. There’s a new victim who came out today, and I believe there are more users.

Quote

Hello, I had this same issue with samfw. I was skeptical all through when attempting to use the software and I decided to run it a sandbox when it was too late! I had the very little solana I had in a dormant wallet stolen, my facebook account had repeated attempts of a hack, even my reddit account got infiltrated and posts about softwares (i assume also contain the same malware) were posted via my reddit account. It would take me some time to provide this all into one coherent post with proof of my ordeal with samfw because as of October 2025, I was the only one with this issue when I looked it up on the internet. As you correctly mentioned, everyone else kept on tagging the software as 'safe'

https://github.com/samfwnotsafe/samfw-malware/issues/1#issuecomment-5240273148

I’ve been scammed by Samfw, and I’m doing everything I can to warn others not to fall for this Vietnamese scammer. They are using sophisticated methods to connect to your device and steal credentials, accounts, and wallet funds. Please take this seriously and protect yourselves. Also do not believe Trustpilot reviews. Scammer tungtata buys them to fake it.

After I submitted my request, Malwarebytes Senior Research Engineer ran a test on SamFwToolSetup and found a malicious payload.
“Trojan.dropper” in SamFw Tool means it’s typically installs or delivers additional malicious software to your system after it runs.

Samfwscam was also posted on RipoffReport.

https://www.ripoffreport.com/report/samfw-frp-tool/hanoi-internet-scam-com-csc-i-1542449

I’ve been scammed by Samfw, and I’m doing everything I can to warn others not to fall for this Vietnamese scammer. They are using sophisticated methods to connect to your device and steal credentials, accounts, and wallet funds. I won’t leave this behind. One day justice will come I’ll wait for that day. When the scammer, Tunggata, goes to prison, that will be my justice.

Scammer name is Đặng Thanh Tùng (also shown as Tungtata / main developer of “SamFW” and MiFirm.net ) Based in Hanoi Capital of Vietnam

Quote from: craftyart1010 on August 15, 2026, 09:04:11 AM

Samfwscam was also posted on RipoffReport.

https://www.ripoffreport.com/report/samfw-frp-tool/hanoi-internet-scam-com-csc-i-1542449

I’ve been scammed by Samfw, and I’m doing everything I can to warn others not to fall for this Vietnamese scammer. They are using sophisticated methods to connect to your device and steal credentials, accounts, and wallet funds. I won’t leave this behind. One day justice will come I’ll wait for that day. When the scammer, Tunggata, goes to prison, that will be my justice.

Scammer name is Đặng Thanh Tùng (also shown as Tungtata / main developer of “SamFW” and MiFirm.net ) Based in Hanoi Capital of Vietnam

Let me know if I can be of help translating anything to Norwegian or Swedish for the local boards. Very sorry to hear about your story. I hope justice is served one day!

Quote from: AnonymtNorskNr on August 15, 2026, 11:44:14 PM

Quote from: craftyart1010 on August 15, 2026, 09:04:11 AM

Samfwscam was also posted on RipoffReport.

https://www.ripoffreport.com/report/samfw-frp-tool/hanoi-internet-scam-com-csc-i-1542449

I’ve been scammed by Samfw, and I’m doing everything I can to warn others not to fall for this Vietnamese scammer. They are using sophisticated methods to connect to your device and steal credentials, accounts, and wallet funds. I won’t leave this behind. One day justice will come I’ll wait for that day. When the scammer, Tunggata, goes to prison, that will be my justice.

Scammer name is Đặng Thanh Tùng (also shown as Tungtata / main developer of “SamFW” and MiFirm.net ) Based in Hanoi Capital of Vietnam

Let me know if I can be of help translating anything to Norwegian or Swedish for the local boards. Very sorry to hear about your story. I hope justice is served one day!

Thank you.

I will not stop updating this thread about the SamFW scam and the scammer Tungtata. The scammer's name is Đặng Thanh Tùng (also known as Tungtata, the main developer of SamFW and MiFirm.net), based in Hanoi, Vietnam. I have been scammed by SamFW, and I am doing everything I can to warn others so they don't fall victim to this person. They use sophisticated methods to connect to your device and steal credentials, accounts, and wallet funds. I will not let this go. I will wait for the day justice is served and Tungtata is put in prison.

Published at:
https://github.com/9623813/tungtata_scammer
https://96238132834.wixsite.com/samfwscam
https://www.tumblr.com/samfwtoolscam
https://github.com/tungtata/SamFw-Tool-Update/issues/1
https://www.trustpilot.com/reviews/6a3e2e1f7bded8c96b894260
http://tungtatascam.com/do-not-download-or-use-any-tools-from-samfw-com/
https://www.samfwscam.com/2026/06/27/d%E1%BA%B7ng-thanh-tung-tungtata-is-a-confirmed-scammer-and-malware-distributor/
https://github.com/tungtatascam
https://www.tumblr.com/tungtatascam
https://hackmd.io/@SamfwScam
https://archive.org/details/scammer_tungtata_pic2
https://archive.org/details/@samfwscam
https://github.com/samfwtoolscam
https://matomba.substack.com/p/one-zip-file-one-empty-wallet-why
https://bitcointalk.org/index.php?topic=5589494.msg66981449
https://hackmd.io/@samfwtoolscam
https://hackmd.io/@samfwfrpscam
https://forums.malwarebytes.com/topic/337471-undected-malware/
https://bitcointalk.org/index.php?topic=5586649.0
https://www.ripoffreport.com/report/samfw-frp-tool/hanoi-internet-scam-com-csc-i-1542449
https://www.linkedin.com/posts/albonbtc_samfw-scam-exposed-credential-wallet-theft-activity-7488967178763874304-33hc
https://medium.com/@albon/samfw-scam-exposed-credential-wallet-theft-warning-ab45b6884ce9
https://xmrbazaar.com/listing/Jsrd/

Quote from: craftyart1010 on August 19, 2026, 07:55:24 PM

Quote from: AnonymtNorskNr on August 15, 2026, 11:44:14 PM

Quote from: craftyart1010 on August 15, 2026, 09:04:11 AM

Samfwscam was also posted on RipoffReport.

https://www.ripoffreport.com/report/samfw-frp-tool/hanoi-internet-scam-com-csc-i-1542449

I’ve been scammed by Samfw, and I’m doing everything I can to warn others not to fall for this Vietnamese scammer. They are using sophisticated methods to connect to your device and steal credentials, accounts, and wallet funds. I won’t leave this behind. One day justice will come I’ll wait for that day. When the scammer, Tunggata, goes to prison, that will be my justice.

Scammer name is Đặng Thanh Tùng (also shown as Tungtata / main developer of “SamFW” and MiFirm.net ) Based in Hanoi Capital of Vietnam

Let me know if I can be of help translating anything to Norwegian or Swedish for the local boards. Very sorry to hear about your story. I hope justice is served one day!

Thank you.

I will not stop updating this thread about the SamFW scam and the scammer Tungtata. The scammer's name is Đặng Thanh Tùng (also known as Tungtata, the main developer of SamFW and MiFirm.net), based in Hanoi, Vietnam. I have been scammed by SamFW, and I am doing everything I can to warn others so they don't fall victim to this person. They use sophisticated methods to connect to your device and steal credentials, accounts, and wallet funds. I will not let this go. I will wait for the day justice is served and Tungtata is put in prison.

Published at:
https://github.com/9623813/tungtata_scammer
https://96238132834.wixsite.com/samfwscam
https://www.tumblr.com/samfwtoolscam
https://github.com/tungtata/SamFw-Tool-Update/issues/1
https://www.trustpilot.com/reviews/6a3e2e1f7bded8c96b894260
http://tungtatascam.com/do-not-download-or-use-any-tools-from-samfw-com/
https://www.samfwscam.com/2026/06/27/d%E1%BA%B7ng-thanh-tung-tungtata-is-a-confirmed-scammer-and-malware-distributor/
https://github.com/tungtatascam
https://www.tumblr.com/tungtatascam
https://hackmd.io/@SamfwScam
https://archive.org/details/scammer_tungtata_pic2
https://archive.org/details/@samfwscam
https://github.com/samfwtoolscam
https://matomba.substack.com/p/one-zip-file-one-empty-wallet-why
https://bitcointalk.org/index.php?topic=5589494.msg66981449
https://hackmd.io/@samfwtoolscam
https://hackmd.io/@samfwfrpscam
https://forums.malwarebytes.com/topic/337471-undected-malware/
https://bitcointalk.org/index.php?topic=5586649.0
https://www.ripoffreport.com/report/samfw-frp-tool/hanoi-internet-scam-com-csc-i-1542449
https://www.linkedin.com/posts/albonbtc_samfw-scam-exposed-credential-wallet-theft-activity-7488967178763874304-33hc
https://medium.com/@albon/samfw-scam-exposed-credential-wallet-theft-warning-ab45b6884ce9
https://xmrbazaar.com/listing/Jsrd/

Days are still passing quickly, but this case remains unresolved. Đặng Thanh Tùng, also known as Tungtata, is based in Hanoi, Vietnam, and is still walking free.

He scammed me, took money intended for my children’s future, and stole my investment funds. That money was everything I had, and the loss has deeply affected my family.

I will not abandon this case, and I will not forget what happened. I will continue pursuing every legitimate option available to me and sharing information about the SamFW scam online so that others can protect themselves.

He may try to prove that he is not guilty, but that is a common response from people accused of scamming others. I will continue seeking justice and warning others about my experience.

https://www.complaintsboard.com/samfwcom-samfwtool-scam-c2019785
https://archive.org/details/scammer_tungtata_pic2_202608
https://hackmd.io/@samfwvirus
https://www.pissedconsumer.com/samfw/RT-F.html#reviews