Bitcoin Forum

Bitcoin => Electrum => Topic started by: YabaDabaDoo on January 07, 2018, 03:54:09 PM



Title: Electrum popup + current vulnerability coincedence?
Post by: YabaDabaDoo on January 07, 2018, 03:54:09 PM
Hi guys,

I installed Electrum 2.9.0 on 07/31/2017 (right before the fork) and moved my measly BTC balance there.  Yesterday I restored my wallet (to remove 2FA) and created a new one.  I've transferred the entire balance to an exchange and as soon as it was done my browser received a popup (right as I received app popup from Electrum with transaction id).  I know web popup is a fake ad trying to scare people into calling fake support number.

I know some apps show web popup ads (PPV) and was curious if Electrum is one of them. Is it just a coincidence or is it someone trying to force people to visit that website, execute JS code and use Electrum later.

http://i67.tinypic.com/2mzf5l5.jpg


Title: Re: Electrum popup + current vulnerability coincedence?
Post by: keyboard warrior on January 07, 2018, 08:03:19 PM
What exchange did you send to? Was it a well known one or a small one. Your browser window appears to show there's only one tab open. Did your browser redirect from your exchange page to that scam page?

Electrum has never shown me web popup ads.

Where did you download your electrum wallet from, and did you pgp verify it was the authentic wallet installer and not a fake?

If you still have the installer try scanning it using this website to check if it's clean.

https://www.virustotal.com/



Title: Re: Electrum popup + current vulnerability coincedence?
Post by: TryNinja on January 07, 2018, 09:49:39 PM
Electrum doesn't show any ads/popups. That's probably what happened:

1. Visited a website that has this kind of popups.
2. Your PC is infected with an adware.

And I would say that this popup doesn't do anything with Electrum. As you said, it's probably just one of those fake "alert messages" trying to make you call their support number. Even if it's always possible, the Electrum vulnerability with Js was only discovered recently and so far I have never seen any virus trying to exploit those vulnerabilities.

Anways, it's better if you just reinstall Windows and move your coins to a new wallet.


Title: Re: Electrum popup + current vulnerability coincedence?
Post by: BitMaxz on January 07, 2018, 10:04:18 PM
Are you using any antivirus?
Since my electrum wallet is old version 2.7 below the version of your electrum wallet  i still not experienced any suspicious to my laptop just monitoring my wallet and open it for 12 hours.
Check your extension in your chrome sometimes its in chrome extension that always popup in your browser and remove them use the trial version of kaspersky and scan your whole pc and maybe you are infected by malware or adware..
Use the latest version of electrum wallet like theymos said for safety purposes.


Title: Re: Electrum popup + current vulnerability coincedence?
Post by: dagustin on January 07, 2018, 10:18:50 PM
tudo normal devido segurança


Title: Re: Electrum popup + current vulnerability coincedence?
Post by: Abdussamad on January 07, 2018, 10:20:02 PM
That sounds like a scam site where they scare you into paying them for PC cleaning services. You should close that.


Title: Re: Electrum popup + current vulnerability coincedence?
Post by: Abdussamad on January 07, 2018, 10:20:31 PM
Are you using any antivirus?
Since my electrum wallet is old version 2.7 below the version of your electrum wallet  i still not experienced any suspicious to my laptop just monitoring my wallet and open it for 12 hours.
Check your extension in your chrome sometimes its in chrome extension that always popup in your browser and remove them use the trial version of kaspersky and scan your whole pc and maybe you are infected by malware or adware..
Use the latest version of electrum wallet like theymos said for safety purposes.

You should upgrade to 3.0.4.