Bitcoin Forum

http://www.reddit.com/r/Bitcoin/comments/2i5gzg/largescale_phishing_attack_via_satoshi_spam/

Seems to be a genuine phishing attack. Read OP's link above. ^^^

Thanks for the cautionary post,I have 2FA enabled so should hopefully be safe if I take the usual precautions

https://blockchain.info/address/15QwSkSFLGEaENDzRHBDAhQeTzjUT36ESL?offset=2100&filter=0

The address started sending out dust transactions to multiple addresses yesterday. Fortunately it looks like the link (New Message - bitmsqr.com) has been removed (by blockchain.info staff?)

Go to blockchain wallet and always type by ourself, make sure the address is blockchain.info

I just reposted this on my local bitcoin community forum. Hopefully nobody fell for it

Thanks for posting about this.

but how do they try to get your data? I can't see it

This is a real weakness of the 'tagging' system of blockchain.info as they let you tag your address as anything you wish in an automated fashion.

I would say this is a prime example as to why you should only log into any site after you have personally typed in the address into your address bar

Wait, I don't understand this part.  ???

If I copy paste my identifier, the one which is provided when you make a blockchain wallet, it can't take u to bbockchain mentioned above, can it?

I mean copy pasting the entire link into the address bar, blockchain.info/wallet/ --identifier--

Thanks for the heads up! ;D

They are getting addresses from incoming transactions on blockchain no matter which wallet you have.
if it happens to be a transactions going on from your wallet you got one.

I got got one yesterday too but now the tagged link "bitmsqr.com" and the message have been removed by blockchain
and it's confirmed too now. So, just be careful what you click at.

When you log into your blockchain.info wallet you should manually type in the address into your browser (I would not even use bookmarks) and if your identifier is not prefilled (because of the lack of cookies) then you should copy/paste your identifier into the identifier field to login.

Received this as well. Hopefully no one will fall for this.

Excellent tips

blockchain.info is one of (if not the) most widely used wallet service used. I don't think they were doing this but it is possible to look at individual transactions and see that a TX was first relayed via blockchain.info and infer that the blockchain.info wallet is being used

Yes, I do just that, I type the website name in the address bar and copy-paste my identifier into the sub-field, I assumed it was the safest way. Thanks for clearing that for me.