[NEW SITE SENDING PHISHING MAILS] - Newbies sending new phishing scams

[owlcatz]

There is a new wave of phishing scams in the past 24 hours - a few users have already been burnt over .3 btc -



Then the url looks just like bitcointalk and wants you to login... so this is new, ongoing - not good!!! I reported one yesterday as well and gave it red trust -

https://bitcointalk.org/index.php?action=profile;u=986625

Thanks, and be careful out there - bitcointalk.org links will be green when you hover over them, not blue!!!  

[1713906722]

1713906722

[Chris!]

Thanks, and be careful out there - bitcointalk.org links will be green when you hover over them, not blue!!!  

If you're on a smartphone I would suggest doing a long press and see the real link you're about to open. That's what I've become accustomed to  ever since I saw a link like this posted publicly. The only reason Ientire it is because it's very hard to hover on a smartphone .

I use an Android phone btw so the address is laid out at the top of the pop up window. I'm assuming other OSs must have something similar.

[owlcatz]

Thanks, and be careful out there - bitcointalk.org links will be green when you hover over them, not blue!!!  

If you're on a smartphone I would suggest doing a long press and see the real link you're about to open. That's what I've become accustomed to  ever since I saw a link like this posted publicly. The only reason Ientire it is because it's very hard to hover on a smartphone .

I use an Android phone btw so the address is laid out at the top of the pop up window. I'm assuming other OSs must have something similar.

Good advice - bumping this since more have arrived today...

[HI-TEC99]

If you are using Windows Defender be extra cautious, and make sure you install the fix Microsoft released for a newly discovered vulnerability if you aren't using the default Defender configuration. Attackers can use the vulnerability to take control of your computer by sending emails to you, and you don't even need to open an attachment to get compromised.

https://technet.microsoft.com/en-us/library/security/4022344.aspx

Google says the vulnerability is the most severe possible in Windows.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5

On workstations, attackers can access mpengine by sending emails to users (reading the email or opening attachments is not necessary), visiting links in a web browser, instant messaging and so on.

Vulnerabilities in MsMpEng are among the most severe possible in Windows, due to the privilege, accessibility, and ubiquity of the service.

https://www.ghacks.net/2017/05/09/windows-defender-vulnerability-discovered-and-fixed/