Bitcoin Forum

And we all know that E-Toro has a platform that includes crypto trading. And there are news that someone is selling E-Toro accounts in hackers forum.

https://i.imgur.com/HnuWfFW.png

So just to be in the safe side, better change your password now.


https://www.bleepingcomputer.com/news/security/etoro-accounts-peddled-by-the-thousands-on-cybercrime-forums/

What's up? It is not new in life.

Don't buy any account on any platform (the forum, P2P marketplaces, exchanges, emails, PayPal, etc.) if you don't want to get annoying troubles, sometimes with financial loses or jail punishments. Who knows?

From the start, people choose to do this (buying accounts) because they want to do something shady and they believe or hope that there will be nothing bad knocks their doors. Such a life, sometimes their doors will be knocked without invitations.

Thanks op for great information, account privacy and security Ian important factor to consider, not only changing password but setting up 2FA, SMS, Email and other security factors are mandatory now. Buying accounts is not new in the crypto space and i will never advise any users to develop such act of purchasing account because penalties and other form of punishment may be attached in future. You might not know.

Thanks OP for sharing such a great information.

It's not only about warning people how much it's risky to buy stolen accounts. An auction for 62,000 accounts belonging to E-toro users is a horrible news. This leads me to think on how all those accounts have been stolen, and that someone reading this may must have his account compromised. This is why op adviced users to change their login info.

Most people who understand this business will never buy account knowing the risk that they might be compromised.

This is indeed a catching news with that huge numbers of compromised accounts that are involved from this hacking news.

If you are using this platform the first that comes in your mind is the chance that you are one from those huge list.

Alarming every users of E-Toro will help them to check out and secure their account by changing password and dding security measures.

The auction date starts on July 6, so it has been around a week without the platform announcing that it has been hacked or that something has happened.
It will be a moral failure for them if they do not know about hacking, and it will be worse if they know.

It is a good idea to change the password, but if there any hack reported in the coming days, stop using it because they are either lazy or liars.

What is the credibility of the above-mentioned hacker forum?

I think you misunderstood what the intentions of the OP in sharing this. It's not about buying an account in any platform. It is simply to make aware that if you are an E-Toro customers or you have an account with them, most likely it has been compromise already and your account are being sold in dark web or dark market so as a preventive measures, you must change your password now.

I'm not sure if E-Toro already recognised this hacked or supposedly hacked. But based on the article the hackers have started to make a name for himself and even getting hired by other group of hackers to get him onboard because he has been hacking a lot and being successful.

And E-Toro I would say is getting some noise in the last couple of years, specially with their copy-trading. So maybe there are crypto traders here who have an account with them and they could be a potential victims if this hacking is real.

Even google is promoting their copy trading advertisement on various platform so yes there will be lot of new people entered into the site for trading activities.But how such amount of accounts can be stolen, is the database got leaked or they used to hack individuals.

Well, if they paid for it then I guess it's expected.

Regardless of whether this hack is true or not, companies should improve their security such as moving from old plain-text databases or simple encryption. Implementing 2FA should be mandatory with an IP check. Assuming their users are doing good security practice, this is at least what they can do to prevent another attack whithin a short time frame.

Usually this cyber threat investigators knows what hacker forums to look at, so I have no doubt that the source forum could really be legit source.

It's a job for most of this criminals, the hackers could really be making a name in the hacking world and this is his way to be known to his fellow criminals, his career his starting only and it is very scary.

This has nothing to do with Google, if they are getting paid handsomely, they will promote it in their platform even in Youtube.

---

The best way to combat this one is to update and change your password immediately and then withdraw your money from it.

Having login guard for unauthorized IP addresses could save most of the people from getting hacked even if their account credentials got leaked, 2FA will add one more layer of security to the account but most of the crypto-related sites having poor security encryptions.But they are paying huge amount for advertisement purposes alone. :o

For updates, there is already investigation for this data leaking event. It may inflict a bad reputation for E-toro since the privacy and security have been risked. They should make a step on how to detect the user who posted in the said hacking forum.

I do not have yet an account in E-toro and I am currently planning to make a new account. Well, this event might cease me in pursuing to trade in E-toro unless otherwise there is no threat or potential threat in accounts.

For those who will change their passwords:

 [GUIDE] How to Create a Strong/Secure Password (https://bitcointalk.org/index.php?topic=5132378.0)

This one may help you to create a strong/secure password. Just be vigilant guys and always update your passwords.

reference: https://www.securitynewspaper.com/2020/07/10/data-leaking-hackers-are-selling-62000-accounts-from-etoro-the-online-trading-platform/ (https://www.securitynewspaper.com/2020/07/10/data-leaking-hackers-are-selling-62000-accounts-from-etoro-the-online-trading-platform/)

From the previous months, I'm planning about using the E-toro because this is popular into the world of copy trading which is a good thing to me that someone will make a trade but now I roughly doubt about the things shared by OP because why there are auctions of an account right here and how about the security of their users when they are trying to buy this account there is a KYC right there and how about the information they will use on it.


It looks like the E-toro does not have a good database management system because there is a leak that came from the other users and spreading all of that information and selling right there. I think they must need to take down this kind of process and make an action immediately.

Thanks for sharing these news. I don't use E-Toro, but it's popular trading platform and I think that many people here use it. And looking at all things in general - reputation of this user in hackers forum, history of other his hacks, it doesn't looks like fake thing.
So, if you're using this platform, changing your passeord is must do thing. Better safe than sorry. And it would be best to set up 2FA if you're not using it already.

I think crypto trading platforms can only do that much in terms of their security. Because hackers are just two steps on the game right now and the thought that you have an account there that you don't know have been leaked already is really scary. Services that has been attacked are either denying it or acknowledging that there was really a breach. I do hope that E-Toro is the latter and doing some root cause analysis and get someone to strengthen their security, not just their system but the people involved their employees because hackers can target them in a phishing attack as well.

Maybe you need to wait it out before registering on E-Toro mate.

Oh great, saw this earlier on my Twitter feed.

Are Google users affected? By which I mean those using Google to sign in.

When using Google to sign-in to a third-party site, the site does not gain access to your password, but rather Google validates your credentials, and sends a token to the site to manage. Google may also send:
https://support.google.com/accounts/answer/112802?co=GENIE.Platform%3DDesktop&hl=en

With the above, eToro (or any other third-party site allowing you to log-in using your Google credentials) may have stored your email, but not your password. I’d use 2FA with my Google account if it were the case.

Thanks, my Google account has 2FA enabled. But unfortunately many sites still haven't integrated Google Sign In so if they get compromised, we're pretty much screwed.

friendly reminder to keep security practices on all exchanges:
use 2FA
use different passwords (and strong ones)
use different emails for each crypto service (creating a protonmail takes only 2 minutes)
and don't keep money on exchanges without knowing it could be lost or stolen.

e-toro as per my understanding is a forex trading platform, when did they integrate crypto trading on to their platform?

I am not sure why anyone will use them to trade cryptocurrency? There are tons of cryptocurrency exchange providing the same service and are much better than them.

It is better to avoid such platforms.

IINM, it was since 2014.

Mainly because eToro doesn't allow you to buy or sell; you only bet on the price movements. In other words, you don't own any crypto or Bitcoin on their platform.

There are two things eToro offer that most don't; social media and copy traders.

Actually there are already a handful of exchange-integrated third-party copy trading platforms out there - subscription-based, fund-based, token-based.

yes, aluna.social is a starting project that also offers copy trading
just like 1broker did in the past.

Do you have some examples? I'll have a look since the last time I checked, the copying concept was still fairly new (not eToro).