Exposed: How SamFW Developer Đặng Thanh Tùng Used Malicious Software to Drain 10,000 XMR

Đặng Thanh Tùng, Tungtata, SamFW scam, cryptocurrency theft, Monero theft, cybercrime investigation, malware distribution, SamFW malware, Vietnam cyber police, Quynh Chi Investment, financial fraud, computer security breach, illegal software, SamFW tool exploit

The SamFW Theft
On June 23, 2026, my family fell victim to a calculated, malicious theft orchestrated by Đặng Thanh Tùng (also known as “Tungtata”), the founder of SamFW. After downloading what we believed to be a legitimate utility, “SamFW Tool” (v5.4), our system was immediately compromised. Within moments of execution, our local data was wiped, and 10,000 XMR valued at approximately $3 million was systematically drained from our Feather Wallet.
The Evidence of Malice This was not an accident; it was a targeted exploit. Immediately after the theft, the developer moved to cover his tracks. The compromised installer (v5.4) was scrubbed from the official website and replaced with an “updated” version (v5.5.1) to destroy evidence of the malicious payload. When confronted, Đặng Thanh Tùng did not deny his involvement; he openly mocked us, told us to “report it to the police,” and immediately blocked all communication.
Subject Responsibility Đặng Thanh Tùng operates out of Hanoi, Vietnam, under the entity Quynh Chi Investment and Technology Co., Ltd. (Tax ID: 0110492308) . He utilizes his public profile as a developer to gain the trust of the tech community, only to weaponize his software to target the private assets of his users. His behavior confirms he is the primary actor behind this crime.
Call to Action We have documented his digital footprint, including his personal addresses, bank accounts, and corporate registrations, and have already submitted this information to Vietnamese crypto exchanges. We are now escalating this to the Vietnamese Ministry of Public Security (A05) to ensure he is held accountable for this life-altering theft.

This report documents a severe security incident involving the distribution of malicious software through the “SamFW Tool” website. Following the installation of version 5.4, a user suffered the theft of 10,000 XMR and complete data loss. We have compiled comprehensive evidence, including business entities, personal identifiers, and digital footprints, to assist the Vietnamese cybercrime authorities in investigating Đặng Thanh Tùng (Tungtata) for organized financial fraud and malware distribution.
### Keywords
Đặng Thanh Tùng, Tungtata, SamFW scam, cryptocurrency theft, Monero theft, cybercrime investigation, malware distribution, SamFW malware, Vietnam cyber police, Quynh Chi Investment, financial fraud, computer security breach, illegal software, SamFW tool exploit
If you have experienced similar losses or possess further evidence regarding the activities of Đặng Thanh Tùng, please reach out to us at 96238132834@proton.me . We are committed to seeing this through to justice and are offering a reward for any assistance that leads to the recovery of funds or the prosecution of this individual.
