Bitcoin Forum

Economy => Scam Accusations => Topic started by: flyguy on December 04, 2013, 02:52:03 AM



Title: Coinbase spoof site alert!
Post by: flyguy on December 04, 2013, 02:52:03 AM
I nearly fell for this 'man in the middle' spoof this morning if it weren't for my Firefox browser telling me to get the hell out after I clicked to submit my 2FA.  I suspect had Firefox not warned me the attackers would have run a script within seconds to empty my Coinbase account to another BTC address.

This is the spoof

http://coindase.com/singin/

http://coindase.com/singin/login.htm

Somehow I must have typed a 'd' instead of 'b'.  I use Authy 2FA and had input the token and clicked submit when Firefox alerted me.   I immediately changed my coinbase email address and password.  All is well and my coins are safe.

I sent Coinbase whitehat an email alerting them.


Title: Re: Coinbase spoof site alert!
Post by: BitchicksHusband on December 04, 2013, 03:58:26 AM
Thanks for the heads-up.


Title: Re: Coinbase spoof site alert!
Post by: AmericanBit on December 04, 2013, 06:33:38 AM
I nearly fell for this 'man in the middle' spoof this morning if it weren't for my Firefox browser telling me to get the hell out after I clicked to submit my 2FA.  I suspect had Firefox not warned me the attackers would have run a script within seconds to empty my Coinbase account to another BTC address.

This is the spoof

http://coindase.com/singin/

http://coindase.com/singin/login.htm

Somehow I must have typed a 'd' instead of 'b'.  I use Authy 2FA and had input the token and clicked submit when Firefox alerted me.   I immediately changed my coinbase email address and password.  All is well and my coins are safe.

I sent Coinbase whitehat an email alerting them.


Always report all Phishing sites here  http://www.google.com/safebrowsing/report_phish/


Title: Re: Coinbase spoof site alert!
Post by: pbody on December 16, 2013, 05:42:19 PM
Coinbase ignores all emails. They are in over their heads.