Beware of phishing scammers using your bitcointalk email address

[eXOBeX]

I received this to an email address used solely to sign up with bitcointalk earlier today. Keep those bitcoins safe from these scamming bastards, folks!

Return-path: <igcc@www1225.sakura.ne.jp>
Envelope-to: bitcointalk@*****.*****.com (my email address)
Received: from www1225.sakura.ne.jp ([219.94.162.35])
From: =?utf-8?B?QmxvY2tjaGFpbg==?= <xxu@www.insightgc.com>
Reply-To: xxu@www.insightgc.com
Subject: Unrecognized Activity

For the protection of your wallet, our advanced anti-fraud protection system has noticed  suspicious activity and your Blockchain account has been temporarily suspended from any further access. Your account password was entered incorrectly 8 times from an unrecognized device at this

IP: 24.67.286.334

In order to remove this restriction, please login to your account and complete our verification procedure. All information is securely encrypted ensuring that your credentials remain safe.
CONFIRM YOUR WALLET (<- this points at http://newafricaresources.com/pages/RgO8lCmE/WZ9vKDird which in turn redirects to https://blockchainel.info/wallet/#login)
Use your unique ID to log into your wallet.

Blockchain   Download on the App Store  GET IT ON Google Play   Twitter  Facebook
© 2017 Blockchain Luxembourg All rights reserved.
Click here to Unsubscribe

[1714662626]

1714662626

[1714662626]

1714662626

[1714662626]

1714662626

[hownowbrowncow]

Any email address is a potential avenue for fraud and phishing scams in general. Best is to never click on any link in your emails that require you to login, or direct you to a website you are unsure of as it could open you up to cross scripting attack. Also best to never click on url shortened links, or links with php extensions, etc.

[Opquar]

Wow, that's pretty scary. Do you have any idea how they were able to get your email address?

[vrana]

It is very scary, we have to be very careful about such phishing mails. If someone click on links given in mail, accidentally or unknowingly, he may lost all of his funds. It is much better & safe to sore bitcoins/altcoins on a hardware wallet.

[nitinmohite]

Can they get our mail address even if its hidden? Or did you hide it now?

[goyal.dkg]

just checked your profile link , your email is showing hidden , then how scammers got your email id from bitcointalk ?? are you saying is there any other way to check mail ids of members ??

[eXOBeX2]

The email address as always been hidden and was only used for this forum (I have the whole domain to play with so I use different addresses for different sites which allows me to identify where spammers got my address from).

From haveibeenpwned.com:-

Bitcoin Talk: In May 2015, the Bitcoin forum Bitcoin Talk was hacked and over 500k unique email addresses were exposed. The attack led to the exposure of a raft of personal data including usernames, email and IP addresses, genders, birth dates, security questions and MD5 hashes of their answers plus hashes of the passwords themselves.

Compromised data: Dates of birth, Email addresses, Genders, IP addresses, Passwords, Security questions and answers, Usernames, Website activity

Hack was taken a step further on the weekend, where my account was logged into, the password changed then the email address changed to sergun1646@yandex.ru. The email notification of this change included a link to lock the account, so at least the hacker shouldn't be able to use it now. I've also reported the email account to yandex.ru and their IP address (with date and time stamps) to their mobile ISP.