Bitcoin Forum
June 15, 2024, 05:07:35 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: WATCH OUT MALICIOUS PAGE CLAIMS TO BE BLOCKCHAIN.INFO WALLET PAGE!!  (Read 519 times)
Avirunes
Legendary
*
Offline Offline

Activity: 3094
Merit: 1468


View Profile WWW
April 17, 2019, 08:29:31 AM
 #21

-snip-

Well initially that kind of page doesn't shows until google receives report that the site ahead is instead a phishing site. Just think again: how would google know that a site is actually  a phishing site. They don't come to know unless someone like us reports about it.
wwzsocki (OP)
Legendary
*
Offline Offline

Activity: 2786
Merit: 1710


First 100% Liquid Stablecoin Backed by Gold


View Profile WWW
April 17, 2019, 04:59:41 PM
Last edit: April 19, 2019, 07:03:46 PM by wwzsocki
 #22

...I don't know why people keep intentionally visit, and log in on phising site by ignoring the security message, like this:


Maybe because this message is/was not visible for them?

When I found this malicious Blockchain.info wallet page this message was not shown and only thanks to my browser I realized that something is wrong.
My password was not filled in automatically. That was for me the first sign that the link I have used is malicious because has to be different from the bookmarked one which is saved in my browser that is why password feature doesn't fill the password when the site is fully loaded.

I was only one step away from sharing my password but luckily I use strong and suggested by the app passwords which I don't remember and have to look for if not filled automatically.
Of course in such circumstances, I check everything twice. The best way to avoid such a malicious page is to bookmark your links and use strong passwords together with apps like Lastpass or 1Password

wwzsocki (OP)
Legendary
*
Offline Offline

Activity: 2786
Merit: 1710


First 100% Liquid Stablecoin Backed by Gold


View Profile WWW
April 19, 2019, 07:11:00 PM
Last edit: April 20, 2019, 12:09:04 PM by wwzsocki
 #23

...They don't come to know unless someone like us reports about it.

Finally, this malicious page is down but took almost a month and multiple reports from random people for Google to take the action.

This is not how to report feature should work and I recommend to use AdBlocker (uBlock Origin) add-on or app of any kind to filter these ads.

This is the first step to protect yourself from malicious web sites.

I have just published a [GUIDE]Beginners Protect Yourself from Ransomware!!!, Please check it if you want to know what I do to stay safe online.

Fortify
Legendary
*
Offline Offline

Activity: 2702
Merit: 1192



View Profile
April 19, 2019, 07:43:26 PM
 #24

Well spotted - Google really should be better at catching these things by now, but they are clearly more interested in earning money than protecting search users. The thing with these scams is they work on volume, so if they were able to fool just one big whale out of 10,000 people who click it - that is a major result for them. I have a feeling that advertiser actually got their account hacked and will be facing a rather large bill.

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT|
4,000+ GAMES
███████████████████
██████████▀▄▀▀▀████
████████▀▄▀██░░░███
██████▀▄███▄▀█▄▄▄██
███▀▀▀▀▀▀█▀▀▀▀▀▀███
██░░░░░░░░█░░░░░░██
██▄░░░░░░░█░░░░░▄██
███▄░░░░▄█▄▄▄▄▄████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█████████
▀████████
░░▀██████
░░░░▀████
░░░░░░███
▄░░░░░███
▀█▄▄▄████
░░▀▀█████
▀▀▀▀▀▀▀▀▀
█████████
░░░▀▀████
██▄▄▀░███
█░░█▄░░██
░████▀▀██
█░░█▀░░██
██▀▀▄░███
░░░▄▄████
▀▀▀▀▀▀▀▀▀
|
██░░░░░░░░░░░░░░░░░░░░░░██
▀█▄░▄▄░░░░░░░░░░░░▄▄░▄█▀
▄▄███░░░░░░░░░░░░░░███▄▄
▀░▀▄▀▄░░░░░▄▄░░░░░▄▀▄▀░▀
▄▄▄▄▄▀▀▄▄▀▀▄▄▄▄▄
█░▄▄▄██████▄▄▄░█
█░▀▀████████▀▀░█
█░█▀▄▄▄▄▄▄▄▄██░█
█░█▀████████░█
█░█░██████░█
▀▄▀▄███▀▄▀
▄▀▄
▀▄▄▄▄▀▄▀▄
██▀░░░░░░░░▀██
||.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
░▀▄░▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄░▄▀
███▀▄▀█████████████████▀▄▀
█████▀▄░▄▄▄▄▄███░▄▄▄▄▄▄▀
███████▀▄▀██████░█▄▄▄▄▄▄▄▄
█████████▀▄▄░███▄▄▄▄▄▄░▄▀
███████████░███████▀▄▀
███████████░██▀▄▄▄▄▀
███████████░▀▄▀
████████████▄▀
███████████
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
OFFICIAL PARTNERSHIP
FAZE CLAN
SSC NAPOLI
|
wwzsocki (OP)
Legendary
*
Offline Offline

Activity: 2786
Merit: 1710


First 100% Liquid Stablecoin Backed by Gold


View Profile WWW
April 20, 2019, 12:15:34 PM
 #25

...Google really should be better at catching these things by now, but they are clearly more interested in earning money than protecting search users...

This is exactly what I thought when sent the report and after 2 weeks I have seen this page as still advertised in Google search at first place on the top of the screen.

I can only guess but I assume that scammers were able to generate a lot of clicks to this malicious website.

I couldn't believe that after my report this is still advertised but as you said the money is most important for Google, not the users.


wwzsocki (OP)
Legendary
*
Offline Offline

Activity: 2786
Merit: 1710


First 100% Liquid Stablecoin Backed by Gold


View Profile WWW
May 22, 2019, 04:01:03 PM
 #26

Watch out this malicious web page is back online again. This time on Google Search pages with different languages like Polish and Czech.

I was able to find this malicious page as always on the first place of Google search displayed as advertising.

The best way to be safe from this type of scam is to use an Ad Blocker add-on in browsers. They remove these ads and we don't see them anymore.

Is quite powerful because I am using Ublock Origin for quite some time and haven't seen any of these ads.

Lately downloaded a new version of Firefox and launched with no AdBlocker. After the first search for Blockchain info wallet, I have found this malicious page again.

Another way to protect yourself is to bookmark all important pages.

bitbollo
Legendary
*
Offline Offline

Activity: 3290
Merit: 3558


Nec Recisa Recedit


View Profile
May 22, 2019, 06:39:46 PM
 #27

Old url:
Code:
blóckcháin.com

It seems they are using a new url for their scam.

Code:
https://login-bblockchain.com/




███████████████████████████
███████▄████████████▄██████
████████▄████████▄████████
███▀█████▀▄███▄▀█████▀███
█████▀█▀▄██▀▀▀██▄▀█▀█████
███████▄███████████▄███████
███████████████████████████
███████▀███████████▀███████
████▄██▄▀██▄▄▄██▀▄██▄████
████▄████▄▀███▀▄████▄████
██▄███▀▀█▀██████▀█▀███▄███
██▀█▀████████████████▀█▀███
███████████████████████████
.
.Duelbits.
..........UNLEASH..........
THE ULTIMATE
GAMING EXPERIENCE
DUELBITS
FANTASY
SPORTS
████▄▄█████▄▄
░▄████
███████████▄
▐███
███████████████▄
███
████████████████
███
████████████████▌
███
██████████████████
████████████████▀▀▀
███████████████▌
███████████████▌
████████████████
████████████████
████████████████
████▀▀███████▀▀
.
▬▬
VS
▬▬
████▄▄▄█████▄▄▄
░▄████████████████▄
▐██████████████████▄
████████████████████
████████████████████▌
█████████████████████
███████████████████
███████████████▌
███████████████▌
████████████████
████████████████
████████████████
████▀▀███████▀▀
/// PLAY FOR  FREE  ///
WIN FOR REAL
..PLAY NOW..
wwzsocki (OP)
Legendary
*
Offline Offline

Activity: 2786
Merit: 1710


First 100% Liquid Stablecoin Backed by Gold


View Profile WWW
June 07, 2019, 07:02:06 PM
 #28

...It seems they are using a new url for their scam...

Thanks for the update. I think they are protecting themselves from the Google bots and change already reported links.

it is obvious that they use multiple links for this scam and from what I see they target foreign languages.

The best way to be safe is AdBlocker or Brave browser with all these privacy tools built in.

I would never spot this scam but I was using a fresh install of Firefox and there were no add-ons installed.

This is just insane that Google let them advertise these links until they are not reported multiple times.

Last time it took a few long weeks to take this site down. I think is too long especially when I have reported and informed Google correctly about this multiple times and I know that other members did this same.

Is just a conflict of interest and Google will act like until now because this is a lot of money for them.

I think advertising is the main profit maker for this moloch giant business.  

Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!