Bitcoin Forum

Other => Beginners & Help => Topic started by: chuckypalumbo on June 20, 2011, 03:42:00 AM



Title: Phishing scam received via email
Post by: chuckypalumbo on June 20, 2011, 03:42:00 AM
Quote
Dear Mt.Gox user,

Our database has been compromised, how you already know.

To protect your account in the future, please download the Certificate (self-extracting archive) from Attachment and install it.

If you were using the same password on Mt.Gox and other places (email, mybitcoin.com, etc),
you should change this password as soon as possible.

Please accept our apologies for the troubles caused, and be certain we will do
everything we can to keep the funds entrusted with us as secure as possible.


Any unauthorized access done to any account you own (email, mtgox, etc) should
be reported to the appropriate authorities in your country.



Thanks,
The Mt.Gox team

I received this email about an hour ago, it also has an attachment to download which I did not download. Beware, scams are flying all over the place now that our user info has been compromised.


Title: Re: Phishing scam received via email
Post by: Grant on June 20, 2011, 03:49:16 AM
I can only imagine what kind of crap we all are gonna receive now in our emails.  >:(

Time to change email address.


Title: Re: Phishing scam received via email
Post by: chuckypalumbo on June 20, 2011, 03:59:12 AM
I'm not happy about this, I've been using my email address for 15 years, and now I'm going to be receiving emails trying to scam me on a regular basis?  >:( Not happy Mt. Gox


Title: Re: Phishing scam received via email
Post by: madmax420 on June 20, 2011, 04:00:57 AM
Yep and I received this one:

Helo Bitcoin Firend,
 
A few hours ago the Bitcoin trading website Mt Gox has been hacked. Malicious individuals have been able to obtain a database containing usernames, email address and encrypted passwords. This information has been posted publicly on the internet.
 
As a Bitcoin supporter I'm now sending a message to every email address contained in the hacked database. This is to warn you that your username, email address and password have been leaked. I therefore strongly advice you to change your passwords. If you have used the same password on different websites it's highly recommended to change your password on all of your accounts!
 
For a more secure alternative to Mt Gox, the community appears to be moving to TradeHill. So this is no reason to lose faith in Bitcoin itself. It must be seen as a warning that not every website can be trusted with your data however! Their link is http://www.tradehill.com/?r=TH-R15977.
 
Sincerely,
A Bitcoin supporter
1ENwoR6KAfAiuH57fqLxX2iCfEANYDdCtd
 
PS: We do offer undetected multiplayer cheats for Call of Duty and other games!

notice they could not spell "hello" or "friend" correctly I mean if your gonna scam/spam at least spell it correctly!


Title: Re: Phishing scam received via email
Post by: chuckypalumbo on June 20, 2011, 04:05:08 AM
Madmax,

I got that one as well, and I'm sure there will be a host of others coming. Does anyone know what time Mt. Gox is supposed to be back online tomorrow morning so we can change our passwords? I'm worried the hacker is going to get in before I do, I wish we had access right now, this is nuts.


Title: Re: Phishing scam received via email
Post by: madmax420 on June 20, 2011, 04:11:13 AM
They said sometime after 1pm..not sure what time zone they are in though, however they also said it may be longer depending on their investigation.


Title: Re: Phishing scam received via email
Post by: madmax420 on June 20, 2011, 04:21:07 AM
I'm not happy about this, I've been using my email address for 15 years, and now I'm going to be receiving emails trying to scam me on a regular basis?  >:( Not happy Mt. Gox


Just stick them in your spam folder and delete them, they will eventually stop. Doesnt really bother me, being a WoW player I get phishing emails all the time. You can always tell they are phishing emails, they usually come from illiterates who cant spell or use proper English. I have had my email for over 15 years also and have no plans on changing it now. I did see in another post they recommend you report the spam to spamcop.net


Title: Re: Phishing scam received via email
Post by: noahFecks on June 20, 2011, 05:08:12 AM
ok, i cant be the first to think this

did tradehill take down mtgox?
the recent emails that have been floating around, pointing all those who want/need to convert to cash or buy btc with cash in their direction

with that being said i also cannot avoid the possibility that the hacker is trying to cover their tracks by pointing the finger at tradehill

however, tradehill has made very public statements about the email and how they condemn it.
again, my paranoid self is thinking how i would do exactly that if i had taken down mtgox and sent all its users unsolicited/illegal emails.

I guess it just sucks not knowing who exactly was behind it because no im having trouble finding an exchange to trust.  Even with that said, im still continuing my mining efforts and investments in better mining equipment.  yea, my email was in there, yea it sucks changing all my passwords and locking everything down, yea i got the email, i read it on my phone to avoid having to open it on a computer, but i wouldnt advise opening or following any links in any email from mtgox, tradehill, or <Random douchebag internet fag here> unless you are in a sandbox or VM and you are at least using a good proxy or vpn

I would honestly like to see some of the exchanges/pools establish bug bounties paid in BTC
that would encourage people who find weaknesses in security to
 report them for compensation instead of exploiting them


Title: Re: Phishing scam received via email
Post by: bitcoin.monger on June 20, 2011, 05:17:04 AM
There will be more scams in the future, and hopefuly more secure exchanges. Such is life...


Title: Re: Phishing scam received via email
Post by: chuckypalumbo on June 20, 2011, 05:24:08 AM
They said sometime after 1pm..not sure what time zone they are in though, however they also said it may be longer depending on their investigation.

Thanks, I'm not sure if I should bail out and sell my 22+ coins looking to buy at lower prices or if I should just ride it out. My last purchase was at the $18 level, I was going to sell back at a similar level last night but decided not to, I'd have a decent little chunk of cash in my account if I had done that, but now I'm stuck with the coins at a much lower market price than they would have been at had this not happened. Tomorrow morning will be interesting to say the least. Massive sell off could be in the works.


Title: Re: Phishing scam received via email
Post by: bitcoin.monger on June 20, 2011, 05:25:30 AM
Getting emotional about your investments is not healthy  :)


Title: Re: Phishing scam received via email
Post by: madmax420 on June 20, 2011, 07:05:42 AM
They said sometime after 1pm..not sure what time zone they are in though, however they also said it may be longer depending on their investigation.

Thanks, I'm not sure if I should bail out and sell my 22+ coins looking to buy at lower prices or if I should just ride it out. My last purchase was at the $18 level, I was going to sell back at a similar level last night but decided not to, I'd have a decent little chunk of cash in my account if I had done that, but now I'm stuck with the coins at a much lower market price than they would have been at had this not happened. Tomorrow morning will be interesting to say the least. Massive sell off could be in the works.

Just checked mt gox they said they will reopen around 2am gmt. The price at other exchanges is pretty stable at the moment hovering right around 17.50 usd. I use this site to check the prices: http://bitcoincharts.com/markets/ it has pretty much all the trade markets listed. Of course atm not all are listed because ofthis fiasco with mt gox but they will be listed again as soon as they come back online.As far as bailing on what you have I really cant predict whats going to happen. Personally I think they may shoot up in price as soon as MT Gox reopens seeing how they are pretty well connected with a certain blackmarket that alot of people are using , but again just my opinion.


Title: Re: Phishing scam received via email
Post by: epg on June 20, 2011, 08:40:25 AM
Lame, got a handful of those scammy emails, too. Note to self: don't use my main email for this stuff -_-


Title: Re: Phishing scam received via email
Post by: sergio on June 20, 2011, 09:14:36 AM
It would be a good idea to investigate what role has the windows os been playing with all the recent security problems with bitcoins.

It would be a good start when dealing with bitcoins to use Linux a much more secure operating system than windows, there are other OS that are also very secure such as OpenBSD, FreeBSD, etc.

Mcfee announce recently the first virus to steal wallets, but it only runs on windows, so In general Linux is a lot more secure.

It is very common to see a so called security expert use a windows computer, online security it is important, and such tools that provide that security should be used.

Windows itself is very insecure.
Linux is much more secure, and can be made more secure by the admin.

The ratio of virus in the windows world vs the linux world is huge, linux has less than 1% of total viruses that exists.

Hopefully the mtgox problem gets resolved soon.




Title: Re: Phishing scam received via email
Post by: Michael on June 20, 2011, 09:15:24 AM
Buy (sorry, "rent") a domain name (about $10 a year or less), and setup a catch all on it. Then use a different email for every online service. Alternatively, some free web mail providers (e.g. Yahoo, at least for me, maybe not for you) let you have multiple email addresses as well. For Yahoo, you could have a stem such as "mymail-" and then all the different emails you create would then be of the form "mymail-mtgox@yahoo.com". YMMV.


Title: Re: Phishing scam received via email
Post by: btc-bob on June 20, 2011, 04:54:22 PM
Buy (sorry, "rent") a domain name (about $10 a year or less), and setup a catch all on it. Then use a different email for every online service. Alternatively, some free web mail providers (e.g. Yahoo, at least for me, maybe not for you) let you have multiple email addresses as well. For Yahoo, you could have a stem such as "mymail-" and then all the different emails you create would then be of the form "mymail-mtgox@yahoo.com". YMMV.
In my opinion yahoo have the best spam-mail service. U can also have different folders for every addy.