Bitcoin Forum

be careful  electrum.net is a phishing website .
I have lost 1 bitcoin installing the fake application...
 :'(
here transaction ID : https://blockstream.info/tx/825bf2963e3b88777fd8a323eeaf300a69676b7cc24929625c53c4d5ffec28f3
I want to die today...

That's unfortunate. Do you mind telling us how you fell for the phishing site? Was it through a Google ad?

The site seems down now though.

Chin up mate. It's just money. It may be hard depending on what your income is, but money can be made back; whereas you only have one life.

Man, I'm sorry, it's really sad, but don´t you research first to see https://electrum.org is the original site?
Here in Bitcointalk people emphasize a lot that the only original source is https://electrum.org

I type on google "electrum" and google propose me "electrum.net" before validation , I click  on this proposition and I didn't see anything suspect.
it's just money of course , I will report this website at the French Police , I can believe  the website ,its still online and new people can be stolen again and again...

So it definitely looks like it was through a Google ad.. Next time make sure to not click ads, and to think twice ALWAYS when clicking links regardless where. Also, if you'd buy the same amount of BTC in the future, please. Grab a hardware wallet.

Anyway, expensive mistake. Best of luck moving forward.

The best thing to do, is to look here on forum first, and have some information about
It looks like their website is down or something with the servers, let's keep looking for information, you are the first to come here, but I suspect a lot of people will lose BTC

Please be more understanding. OP lost the money in a time where for a lot people this is more than they would be able to safe or make in a decade. Obviously, it's not a reason to feel like that, but it's not entirely uncommon.

The pizza story was at a time where Bitcoin was worth peanuts, and more importantly, the coins weren't lost but spent on pizzas. I'm actually not sure why you think these situations compare....

I am really sorry to read this. It's such a shame that scammers without a second thought ruin people's lives for their own selfish interests. OP, I really hope that you will try your best to start saving up satoshis from scratch even though you aren't thinking about that right now. :-\

Thank you for info :)
It's only ~11k$, average American earns 70$/year so don't kill yourself, you will waste all your life :D

I really feel sorry for you man, when you are dealing with that amount of money you should really be sure and check not twice but multiple time that everything is alright, but i think that somethings are really hard to avoid, and sometimes you need to get a wake up call to start checking and being careful , but your wake up call had a really high price.

Thanks for all your messages !
this is a mistake from me and I was feeling so alone , nowhere to complain, no-one to contact...this is really hard.
anyway, scammers will pay for that.
electrum.net is still online... official site electrum.org should do something. this is not normal.
I open this discussion to warn people and hope that will avoid an other expensive mistake.

The official site can't do anything but to warn, they have warning on their website already.


It has been displayed on their website all of the time and google is known for putting those phishing links at the top because they can't classify if it's a scam or not. Sorry for your loss mate.

I am sure this is not very helpful for you, but I got the same today with my 0.75BTC (my entire wallet)
Exactly the same, but from electrumsky.com
Hard lession!
We could go for a beer... just not to feel too idiot

Best

A

electrum.net is already offline

However the electrumsky domain is still up and running. I've reported it to Google SafeBrowsing (https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en) and have also filed an "abuse" complaint with the domain registrar here: https://publicdomainregistry.com/report-abuse-complain/

I am sorry for that. and I can really understand you ...
Electrum.net is offline now ( server not respond).
yesterday I have report a complain to French Police, this is the only thing I can do.
i have also report the website to google.
i have contact let's encrypt ( ssl provider) and ask to disable this phishing website , here the crazy reply:

"Thanks for the report. Our current policy does not allow us to revoke certificates for sites suspected of engaging in phishing, distribution of malware, or other forms of fraud".

they don't revoke any frauds website !!!! thats completely crazy!
without ssl certificate I will be suspicious and maybe avoid this mistake.
For me they encourage phishing, malware... and they are participating in this fraud!

An SSL certificate has nothing to do with scams or fraud or trustworthiness of a website... Although it's a common sign of a scam website to make a big deal about the fact that they do have an SSL certificate ::)

All an SSL cert does is allow them to offer https:// connectivity so that the connection to/from the website is encrypted.

Exactly, it only means that the connection between the user and the web server is encrypted. SSL certificates are cheap nowadays. I saw ads as low as $8 a year. Phishers and hackers will buy such cheap certificates solely for the reason that people think they are a sign of security.

You can get them for free.
Let'sEncrypt offers free TLS certificates (https://letsencrypt.org/). They don't even need to pay for it anymore.

But still, a lot of scams don't even bother get a certificate  ::)
Anything which doesn't have a TLS certificate should be accessed with caution. Do not download software via http. At least not if you can't or won't verify the signature of the file.

 

Anything in connection with financial information should not be entered on sites that don't have SSL certificates. In my everyday work I often come across sites used by my company that are not encrypted and use simple http, even in connection with login details. It is not the best practice but that is their problem and their hasn't been any security breaches that I am aware of.

But overall I agree that a non encrypted connection between you and the server should be avoided unless you absolutely trust the other party.

If you transmit sensitive information via the internet, you already have to trust the other party.

Encryption does not protect you from the other party, you are basically encrypting for them to decrypt since you share the same key.

Encryption is necessary because everyone in between (every router, server, basically anyone who wants to listen to that) can read and modify the information.
You are protecting your data from a 3rd party, not from the server you are communicating with.

I understand but unfortunately in my line of work I am sometimes forced to do that.
What I do in private is a different thing, especially with Bitcoin, wallets, etc. But my company provides us with several sites that uses shared login details between several partners and some of the sites are unfortunately not encrypted.

Are those internal sites only?
Or accessed via the internet? I could not understand such a situation.

Is there no IT administration or similar ? I can't imagine they approve that.

TLS certificates are for free. There is not a single reason to not use them, especially when handling sensitive information.

I have updated elctrum (was a pop up wijting electrum to upgrade...i did that...and then i transfer my bak for bitcoins.
I recieven the bitcoins...then i want to move my bitcoins to Exodus...I did fill in the recieve adres   but the ecoins are not delevired! And its now 2 days now....am i being hacked?

What version did you update to? and where did you download it from?

If it was a version 4... you have definitely downloaded a fake version of Electrum and your coins have most likely been stolen.
If you downloaded from anywhere other than https://www.electrum.org/#download (check your browser history), then you have most likely downloaded a fake version of Electrum and your coins have most likely been stolen.

Sorry for you loss.Its already down.
http://i64.tinypic.com/5kex3d.png

Just wondering on how you do end up on electrum.net?Google search? This is a common mistake for most people.

Hi guys. If it is less painful to someone that he is not the only one, then I will write that I was also robbed after installing the update from electrum.net. Stole 1.4 BTC. It is a pity that this money was intended for the treatment of a child. Let the criminals be punished for it.

They can be accessed via the Internet. I can use them at home as well as from the office. Once we log in we are redirected to a https site BUT the site where the login details are entered is not encrypted.

To be honest I am not sure why their IT team allows it to be done in that way.

cube42&Dizzona, I'm sorry for your losses, you are victims are fake wallet which can still be downloaded if you use outdated version of official Electrum. Or if you search for Electrum by using Google search engine without adblocker and click at the top of search results where Google show paid advertisements.

I know how easy is to be tricked to download / update wallet when you see pop-up in official app, but this is just exploit hackers use even today. Unfortunately the lessons of the manner in which it should be handled with cryptocurrency costs too much.

If this message is read by Hackers, please return the money to the original wallet, the child needs treatment !!!
1ME9AwwAXVoZjbhgEpCBvBe5zShhzPcK7m