Bitcoin Forum

Alternate cryptocurrencies => Service Discussion (Altcoins) => Topic started by: spov on October 05, 2017, 09:53:03 AM



Title: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: spov on October 05, 2017, 09:53:03 AM
I got this scam message on slack:

Quote
=== MYETHERWALLET UPGRADE REQUIRED ===

*HARD FORK FINAL NOTICE*

This message was shared to all Slack users in the hope of reaching as many Ethereum Wallet holders as possible.
Due to the Hard Fork that will be happening in the following days, all ethereum wallets require to be manually upgraded immediately, otherwise they risk being unprotected and your funds may be lost during the fork process.

Please visit https://www.myetherwallet.com/?upgrade#view-wallet-info to upgrade your wallet to latest security settings.

We decided to implement a number of changes and improvements, including higher levels of anonymous transactions, easier programming and smart contracts, and additional security in the form of masking, which will help protect users against hacking.

We are taking these measures to protect both you and our network from phishing and malicious attacks.

Thank you for your cooperation and understanding!
MyEtherWallet, LLC”.


This is a SCAM. The myetherwallet url which looks valid, links to this website (https://www.xn--myetherwaet-15ba.com/?upgrade#view-wallet-info). The UI of this phishing website is the same as that of myetherwallet.

Original website: https://imgur.com/a/ibvee
Fake website: https://imgur.com/a/W4kpk

Always check for "MYETHERWALLET LLC [US]" cetificate (marked as 1 in the original screenshot). This certificate detail is missing in the fake website.
Don't click any links you get on channels like slack etc.
Be very careful when uploading/entering your private key/wallet backup on any third party services.



Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: erikalui on October 05, 2017, 09:54:29 AM
It has been months now that these messages are being sent from all the slack channels.


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: ocminer on October 05, 2017, 09:55:34 AM
they also use my.etherwallet.com.de and a few others.. i get about 50+ notifications per day on slack, it's really getting ridiculous


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: erv on October 05, 2017, 09:58:26 AM
they also use my.etherwallet.com.de and a few others.. i get about 50+ notifications per day on slack, it's really getting ridiculous

its like a plague.. even email is flooded with e-mails notifying slack  :-\


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: Highspeed123 on October 05, 2017, 10:02:16 AM
I have been getting this too, for a coin I mined some time ago. Very annoying. Thanks for the heads up.


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: alex_rada on October 05, 2017, 10:10:25 AM
I even tried to contact the developers of Slack and asked them to come up with a solution to allow us to block certain users. I hope they find one soon cause all these messages are making victims on a daily basis.


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: safariwave on October 05, 2017, 10:12:51 AM
they also use my.etherwallet.com.de and a few others.. i get about 50+ notifications per day on slack, it's really getting ridiculous

the same for me, it's incredible how Slack is not doing something to block this!



Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: Larrycool on October 05, 2017, 10:54:47 AM
thank you for the Information


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: Beachguy on October 05, 2017, 12:24:49 PM
It's been going on for sometime now.
It seems to run in waves......from many a day to just a few on the various channels I'm on.
Saw a note from a crypto media writer that was getting over 60 a day since he is a member of so mant slack groups.

Slack just seems to not care.


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: safariwave on October 05, 2017, 01:06:21 PM
It's been going on for sometime now.
It seems to run in waves......from many a day to just a few on the various channels I'm on.
Saw a note from a crypto media writer that was getting over 60 a day since he is a member of so mant slack groups.

Slack just seems to not care.

I got 45 messages today. Incredible. Gmail app is starting to mark them as phishing. I'm not surprised if they will mark Slack messages as spam...


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: Diced90 on October 05, 2017, 05:36:58 PM
after seeing the view-wallet-info string this got me thinking...your wallet only gets cleaned dry if you have some eth to supplement the transaction? Because I dont see the hacker sending in extra fees to move the tokens ::)


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: hosseinimr93 on October 05, 2017, 10:02:16 PM
I receive a lot of emails from slack every day. It is really disgusting. I marked slack messages as spam. Now I lose real emails too. But I think this way is better.


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: Slowth on October 06, 2017, 05:00:34 AM
Well I was one of the noobs that got phished from this. Deleted the app immediately.

1.12 ETH. Guess I should be glad I didn’t have more.  :-[


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: momopi on October 06, 2017, 05:56:20 AM
After trying different applications mainly for communications. I would say that Slack is the BEST compare to Telegeram, WeChat, etc. However, this issue is very rampant especially if the project is gaining popularity. I'm also curious, how can someone control "slackbot"? Does is limit the function to channel admin and to slack team itself or ANYONE can control this slack bot?


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: HertzCoin on October 06, 2017, 07:29:25 AM
thanks a lot for your warning abt scams
I personally use several wallets registered in my ether wallet
a lot of info is transmitted through my slack group


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: spov on October 08, 2017, 02:42:20 PM
thank you for the Information
you are welcome :)


Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: max2000irc on October 09, 2017, 06:04:36 AM
In the last 2-3 days I have over 300 notifications ...annoying



Title: Re: Phishing attempt on your Ether wallet via Slack and other communication channels
Post by: avp2306 on October 09, 2017, 06:10:30 AM
I got this scam message on slack:

Quote
=== MYETHERWALLET UPGRADE REQUIRED ===

*HARD FORK FINAL NOTICE*

This message was shared to all Slack users in the hope of reaching as many Ethereum Wallet holders as possible.
Due to the Hard Fork that will be happening in the following days, all ethereum wallets require to be manually upgraded immediately, otherwise they risk being unprotected and your funds may be lost during the fork process.

Please visit https://www.myetherwallet.com/?upgrade#view-wallet-info to upgrade your wallet to latest security settings.

We decided to implement a number of changes and improvements, including higher levels of anonymous transactions, easier programming and smart contracts, and additional security in the form of masking, which will help protect users against hacking.

We are taking these measures to protect both you and our network from phishing and malicious attacks.

Thank you for your cooperation and understanding!
MyEtherWallet, LLC”.


This is a SCAM. The myetherwallet url which looks valid, links to this website (https://www.xn--myetherwaet-15ba.com/?upgrade#view-wallet-info). The UI of this phishing website is the same as that of myetherwallet.

Original website: https://imgur.com/a/ibvee
Fake website: https://imgur.com/a/W4kpk

Always check for "MYETHERWALLET LLC [US]" cetificate (marked as 1 in the original screenshot). This certificate detail is missing in the fake website.
Don't click any links you get on channels like slack etc.
Be very careful when uploading/entering your private key/wallet backup on any third party services.



This kind of attack is so popular on SLACK and many people got caught on this phising attempts and also some other of this phising site is searchable on google so we must be carefull and always check the url of the site where we use to go to, And use the official site of MEW since there url is clear and they give fair warning about this kind of modus so people would be more aware that MEW wallet phising is existing.