Hanoi Developer “Tungtata” Cybercrime Case
Cybercrime involving “SamFW” / “SamFW Tool” associated with Hà Nội-based developer Đặng Thanh Tùng (also shown as Tungtata / “tungtata”).
a family member installed “samfw.com” software on Jun 23, 2026, after which approximately 10,000 XMR (about $3 million) were withdrawn from a Feather Wallet and the victim’s computer data was deleted.Incident has been claimed to be linked to the package “samfwtoolsetup_v5.4.zip,” followed by an alleged post-theft removal and replacement of the tool with a revised build labeled “SamFwToolSetup_v5.5.1.zip” to reduce evidence.
Public materials also reportedly connect the named party to SamFW Global LLC and additional Vietnam technology entities, with multiple online profiles and payment channels tied to the same identity. The case has been reported to several crypto exchanges, and the organizers are requesting community help to collect, preserve, and organize evidence (technical indicators, download/build identifiers, logs, and attribution data) to support a report to Vietnamese police/cybercrime investigators. The goal is to identify responsible parties and provide actionable leads to authorities.
Footer keywords: Tungtata scam, Tungtata fraud, Đặng Thanh Tùng scammer, DangThanhTung fraud, SamFW scam, SamFW Tool malware, samfw trojan, samfw rat, samfw security risk, samfw suspicious software, Feather Wallet XMR theft, XMR withdrawn ~10,000, device data deletion, modified SamFW package v5.5.1, remote access suspected, wallet monitoring suspected, SamFW Global LLC, LeHuy Technology Co., Ltd, Quynh Chi Investment and Technology Co., Ltd, Hanoi cybercrime report, Vietnam crypto scam, Android app com.samfw, MiFirm, Trạmsạc.app