Title: robbed using metamaske wallet Post by: yanoaziz on August 13, 2018, 05:56:46 PM i lose my ethereum in my metamask wallet i know that my pv key and seed was in a safe place, but how can scammer do that; the first thing that i think was the way is the signin msg of metamask in a exchage.
any idea friends Title: Re: robbed using metamaske wallet Post by: butka on August 13, 2018, 09:13:58 PM Sorry to hear about this. Could it be that you've been targeted by a phishing attack?
Metamask is known to be vulnerable to phishing in case your computer has been compromised. Were there any other tabs opened in your browser? For example, a phishing may occur when other tabs are active during the transaction that you are trying to make. The attacker may use a tab to get access to your ETH address. With this knowledge, the attacker can retrieve the entire transaction you are currently making (this is a public record on the blockchain), and use this information against the you in various phishing schemes. Did you notice any pop-ups, failed transaction notifications, or similar out of the ordinary events? Title: Re: robbed using metamaske wallet Post by: yanoaziz on August 13, 2018, 10:40:27 PM Sorry to hear about this. Could it be that you've been targeted by a phishing attack? 1st thanks for your answer.Metamask is known to be vulnerable to phishing in case your computer has been compromised. Were there any other tabs opened in your browser? For example, a phishing may occur when other tabs are active during the transaction that you are trying to make. The attacker may use a tab to get access to your ETH address. With this knowledge, the attacker can retrieve the entire transaction you are currently making (this is a public record on the blockchain), and use this information against the you in various phishing schemes. Did you notice any pop-ups, failed transaction notifications, or similar out of the ordinary events? i think that i was opening a scam website maybe my metamask was open but i didnt make any transaction . Title: Re: robbed using metamaske wallet Post by: Joel_Jantsen on August 13, 2018, 10:49:10 PM Sorry to hear about this. Could it be that you've been targeted by a phishing attack? 1st thanks for your answer.Metamask is known to be vulnerable to phishing in case your computer has been compromised. Were there any other tabs opened in your browser? For example, a phishing may occur when other tabs are active during the transaction that you are trying to make. The attacker may use a tab to get access to your ETH address. With this knowledge, the attacker can retrieve the entire transaction you are currently making (this is a public record on the blockchain), and use this information against the you in various phishing schemes. Did you notice any pop-ups, failed transaction notifications, or similar out of the ordinary events? i think that i was opening a scam website maybe my metamask was open but i didnt make any transaction . If possible, keep a back-up of your browser history of the day and day before the hack happened. Title: Re: robbed using metamaske wallet Post by: FlamingFingers on August 13, 2018, 11:06:48 PM I think I have the same issue? I haven't used MetaMask for two months, however, I had all of my Private Keys and Seeds stored in a safe place (I used at least 5 wallets). I logged in 2 days ago, updated the add–on, and retrieved my Ethereum wallet using my Private Key and Address, but the balance was absolutely zero. I couldn't care less since I only had around 0.002ETH in that wallet. The problem is, I am not sure whether the wallet I retrieved is the one I was using back then or not.
Title: Re: robbed using metamaske wallet Post by: yanoaziz on August 14, 2018, 01:00:34 PM Quote Usually, meta-mask doesn't let you visit websites that are unsafe for your wallet. Do you remember avoiding such warnings? You don't have to make any transaction your private keys are compromised. Can you give us your ETH address to see where the coins go? Also, how many ETH are we talking about here? not so much but if i cant find how scammer robbed me i will lose more thats why im asking here.If possible, keep a back-up of your browser history of the day and day before the hack happened. about the address this is my https://etherscan.io/address/0xea11ebbdbfb6690237f0694bbd8ea85a56a55f74 scammer https://etherscan.io/address/0x256cb901ab2f33ac53155cbececeddd4da7d1af2 i think he rodded 2 good token from one other victim Title: Re: robbed using metamaske wallet Post by: atmanagari on August 14, 2018, 01:53:44 PM can I ask, sir ?
Let's say, if there are many data and caches stored on my browser, and I don't open any tab, can the phisher (scammer) steal these data/caches ? thanks before Title: Re: robbed using metamaske wallet Post by: Joel_Jantsen on August 14, 2018, 10:32:20 PM can I ask, sir ? Caching works in the following ways Let's say, if there are many data and caches stored on my browser, and I don't open any tab, can the phisher (scammer) steal these data/caches ? thanks before 1. Browser Level caching - Different browsers cache data on different websites to provide repeatedly asked content without downloading it again from the server. 2. Cookies - Injected by the developers on their websites to track either user-activities or keep a check on re-visiting users. The data available in the cookies is accessible for the developers who implemented them. Browser level caching resides in your browser's localStorage/indexdb. To answer your question: It all depends on what type of data is cached in your browser/cookies! This type of data usually includes recently requested images/form data/other text. A scammer wouldn't access sensitive data such as your private keys from the wallet using caches. It's a safe practice to clear caches every two weeks for so as that also makes your browser a bit faster. If you're using chrome, CTRL +SHIFT+ R does clear basic website level caches. |