Scammer Đặng Thanh Tùng (also shown as Tungtata / Đặng Thanh Tùng)
Theft and Malware Distribution via SamFW
Overview On June 23, 2026, we experienced a significant loss of funds ($3,000,000 USD in Monero/XMR) following the installation of the “SamFW Tool” (version 5.4). Shortly after the software was executed, the victim’s local data was purged, and the funds were siphoned from their Feather Wallet. The developers subsequently removed the compromised version and replaced it with an updated build.
Scammer Name: Đặng Thanh Tùng (also known as “Tungtata”) Short Description This report documents a severe security incident involving the distribution of malicious software through the “SamFW Tool” website. Following the installation of version 5.4, a user suffered the theft of 10,000 XMR and complete data loss. We have compiled comprehensive evidence, including business entities, personal identifiers, and digital footprints, to assist the Vietnamese cybercrime authorities in investigating Đặng Thanh Tùng (Tungtata) for organized financial fraud and malware distribution.
Đặng Thanh Tùng, Tungtata, SamFW scam, cryptocurrency theft, Monero theft, cybercrime investigation, malware distribution, SamFW malware, Vi
Keywords Đặng Thanh Tùng, Tungtata, SamFW scam, cryptocurrency theft, Monero theft, cybercrime investigation, malware distribution, SamFW malware, Vietnam cyber police, Quynh Chi Investment, financial fraud, computer security breach, illegal software, SamFW tool exploit










