Bitcoin Forum

Economy => Service Discussion => Topic started by: vite on March 03, 2015, 07:42:49 PM



Title: Security Alert
Post by: vite on March 03, 2015, 07:42:49 PM
I got a phishing email, seems to try to emulate OKPAY
As shown below the link will prompt you to download a zip file.
I did not download anything and it's beyond my expertise to analyze the contents.
So I am posting this as an alert and so the right people know whats going on.

--------------------------------------------------------------
WARNING DO NOT OPEN LINKS IF YOU DON'T KNOW WHAT YOUR DOING
--------------------------------------------------------------

from:   noreply <service@support.serviceteam.com>
to:   *******@gmail.com
date:   Tue, Mar 3, 2015 at 1:58 PM
subject:   BitCoin wallet has been successfully completed.
---------------------------------------------------------------


BitCoin wallet is completed

    
    
Hello,
Your BitCoin wallet has been successfully completed.

Payment
 
    
Amount
154.1523 BTC
 
    
Payment System
BitCoin
 
    
Receiver Account
1MxdtLhMJ3bD3tJXwtbBtCcbDr8Jn1oWV8
 
    
Transaction ID
3489878
 
    
Download the wallet:
https://www.okpay.com/en/account/wallet/3289878/

 
       
If you have any additional questions please refer to the Support Service.

 
 
 
    
Yours sincerely
OKPAY Team
https://www.okpay.com

 
Please do not reply to this email. This mailbox is not monitored and we are unable to respond to inquiries sent to this address.
For assistance please visit our Support Service page.

Copyright © 2007-2014 OKPAY. All rights reserved.


Title: Re: Security Alert
Post by: vite on March 03, 2015, 07:50:12 PM
Decided to sign it.
https://blockchain.info/address/1BxzA3KCoynGMAmxobcFcUH7GGnqz1Eewe
https://bitcointalk.org/index.php?topic=975254

HMCfKexgvFdREb4gYV2MnboLuqDgCZvU+6e2VhluGdt9Le3LYv4q7zXGpCda6JNGYVSbo243Sycr64/WynbdL/k=


Title: Re: Security Alert
Post by: ManiacMiner1966 on March 03, 2015, 09:18:56 PM
Well spotted, Thank You


Title: Re: Security Alert
Post by: dserrano5 on March 03, 2015, 09:33:35 PM
I got a similar one. The sender address is totally different ("From: okpay <info@okpay.com>", "Return-Path: <nobody@host.ozanimart.com>") and it came to the email address I used when signing up to inputs.io back in the day.


Title: Re: Security Alert
Post by: spooderman on March 04, 2015, 12:41:30 AM
Yep, I got one too and I don't think I've heard of, or signed up to OKpay before.

Perhaps it's the database of one of the old pools getting leaked?


Title: Re: Security Alert
Post by: fildza on March 04, 2015, 04:11:02 AM
Lol. I got 1 too and not click aniything there because I never register any new wallet in this week


Title: Re: Security Alert
Post by: freedomno1 on March 05, 2015, 01:18:40 AM
Also confirming that this is in the wild
It went into my spam filter but the exact same message was recieved even the wallet address
Did a blockchain lookup no checksum of course :)