Bitcoin Forum
April 07, 2020, 07:20:15 AM *
News: Latest Bitcoin Core release: 0.19.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 [3] 4 5 »  All
  Print  
Author Topic: New way of phishing?  (Read 391 times)
Wnlz16
Newbie
*
Offline Offline

Activity: 87
Merit: 0


View Profile
March 14, 2018, 03:42:55 PM
 #41

My MEW got hacked and my tokens were stolen. I am very careful when putting my address on each bounty campaign and never sign up online which require any private key. I don't really know how I get phish or how hacker accessed my MEW. I learned my lesson and will never use private key again. Do you have any idea how I get phish? I got one in mind that a fake mew site does exist?

Can you provide us the screenshot of the MEW website you logged in? like what BigBoy89 said there are many MEW phishing sites. If the URL is the same with MEW's address then there's something wrong https://www.myetherwallet.com/

Bookmarking the MEW website and using metamask adds security you better use that and stops typing the site manually.

This is my problem, I checked everywhere. Bounty campaign I joined previously, airdrops that I joined in even checking  the history of sites especially for MEW but none of them is positive. I already moved on what happen to my tokens but I am just curious how I get phished and wanted to prevent it next time.
1586244015
Hero Member
*
Offline Offline

Posts: 1586244015

View Profile Personal Message (Offline)

Ignore
1586244015
Reply with quote  #2

1586244015
Report to moderator
1586244015
Hero Member
*
Offline Offline

Posts: 1586244015

View Profile Personal Message (Offline)

Ignore
1586244015
Reply with quote  #2

1586244015
Report to moderator
AWARD-WINNING
CRYPTO CASINO
ASKGAMBLERS
PLAYERS CHOICE 2019
PROUD
PARTNER OF
1500+
GAMES
2 MIN
CASH-OUTS
24/7
SUPPORT
100s OF
FREE SPINS
PLAY NOW
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1586244015
Hero Member
*
Offline Offline

Posts: 1586244015

View Profile Personal Message (Offline)

Ignore
1586244015
Reply with quote  #2

1586244015
Report to moderator
1586244015
Hero Member
*
Offline Offline

Posts: 1586244015

View Profile Personal Message (Offline)

Ignore
1586244015
Reply with quote  #2

1586244015
Report to moderator
1586244015
Hero Member
*
Offline Offline

Posts: 1586244015

View Profile Personal Message (Offline)

Ignore
1586244015
Reply with quote  #2

1586244015
Report to moderator
JeffBrad12
Hero Member
*****
Offline Offline

Activity: 1386
Merit: 508



View Profile
March 14, 2018, 04:44:59 PM
 #42

My MEW got hacked and my tokens were stolen. I am very careful when putting my address on each bounty campaign and never sign up online which require any private key. I don't really know how I get phish or how hacker accessed my MEW. I learned my lesson and will never use private key again. Do you have any idea how I get phish? I got one in mind that a fake mew site does exist?

Can you provide us the screenshot of the MEW website you logged in? like what BigBoy89 said there are many MEW phishing sites. If the URL is the same with MEW's address then there's something wrong https://www.myetherwallet.com/

Bookmarking the MEW website and using metamask adds security you better use that and stops typing the site manually.

This is my problem, I checked everywhere. Bounty campaign I joined previously, airdrops that I joined in even checking  the history of sites especially for MEW but none of them is positive. I already moved on what happen to my tokens but I am just curious how I get phished and wanted to prevent it next time.
Have you checked your computer? I meant if there is malware in your computer that steals your privatekey or something like that. It looks like you get phished by fake mew site. But i guess you are not aware of that. Many scammers are trying to make a very similar site with mew. Remember always try to check the certificate of the site itself. If that says green and it will be safe to be used.

inure 
 

█████
██
██
██
██
██
██
██
██
██
██
██
█████
█████
██
██
██
██
██
██
██
██
██
██
██
█████

███  ANN
BOUNTIES
▄████████████████████████▄
████████████████████████████
████████████████████████████
█████████████████▀▀  ███████
█████████████▀▀      ███████
█████████▀▀   ▄▄     ███████
█████▀▀    ▄█▀▀     ████████
█████████ █▀        ████████
█████████ █ ▄███▄   ████████
██████████████████▄▄████████
████████████████████████████
████████████████████████████
▀████████████████████████▀
▄████████████████████████▄
████████████████████████████
████████████████████████████
████████████████▀▀▀█████████
██████ ▀██████▀      ▄██████
██████▄   ▀▀▀        ███████
██████▄             ▄███████
███████▄           ▄████████
██████▀▀▀        ▄██████████
███████▄▄     ▄▄████████████
████████████████████████████
████████████████████████████
▀████████████████████████▀
▄████████████████████████▄
████████████████████████████
████████████████████████████
█████████████▀    ▐█████████
████████████    ▄▄██████████
███████████▀    ▀▀██████████
██████████▌       ██████████
████████████    ████████████
████████████    ████████████
████████████    ████████████
████████████▄  ▄████████████
████████████████████████████
▀████████████████████████▀
7Pro
Member
**
Offline Offline

Activity: 181
Merit: 10


View Profile
March 14, 2018, 04:57:47 PM
 #43

There are plenty of MEW-like phishing sites and this is the most common way to steal your private key. If you open the Service Discussion section you will see that every second topic is about this.

If you don't check the URL every time you are using MEW, hitting on phishing MEW-copy is the most likely reason for your loss.

Start using Metamask and be more careful.

If you think you always forget to check the website every time you visit the website, bookmark the real website link to your computer and try to access only in your computer ( not other computer ) and also klik the link only from bookmark. Never type again or klik link from other source. I think it would be helping.
kom1231
Newbie
*
Offline Offline

Activity: 126
Merit: 0


View Profile
March 14, 2018, 06:23:06 PM
 #44

Yes, there is also not one, constantly what that new invent
demenBTC
Sr. Member
****
Offline Offline

Activity: 742
Merit: 251


PRIVATE FEDERATED BLOCKCHAIN


View Profile
March 14, 2018, 06:40:10 PM
 #45

There are plenty of MEW-like phishing sites and this is the most common way to steal your private key. If you open the Service Discussion section you will see that every second topic is about this.

If you don't check the URL every time you are using MEW, hitting on phishing MEW-copy is the most likely reason for your loss.

Start using Metamask and be more careful.

If you think you always forget to check the website every time you visit the website, bookmark the real website link to your computer and try to access only in your computer ( not other computer ) and also klik the link only from bookmark. Never type again or klik link from other source. I think it would be helping.
yes, that's one way to overcome MEW phishing, but the loss of token in MEW also often happens because the computer is exposed to virus, so paswood or private key is easy to track other people, especially hacker


██████████▀▀▄▄▄▄▄▄▄▄▀▀██████████
████████▀░▄██████████▄░▀████████
██████▀░████████▀▀▀█████░▀██████
█████░░███████▀░░░░██████░░█████
████░░██████▀░░▄██░███████░░████
███░░█████▀░░▄███░▄████████░░███
████████▀░░▄████░░██████████▀▀██
█░░░░██░░▄█████░░█████▀░░██░░░░█
██████████████░░████▀░░▄████▄▄██
███░░████████▀░███▀░░▄█████░░███
████░░███████░██▀░░▄██████░░████
█████░░██████░░░░▄███████░░█████
██████▄░█████▄▄▄████████░▄██████
████████▄░▀██████████▀░▄████████
██████████▄▄▀▀▀▀▀▀▀▀▄▄██████████

     ZROCOR    
  PRIVATE FEDERATED NETWORK 
CREATING THE MOST ACCESSIBLE PLATFORM
                 FOR SELF-ACTUALIZATION               
FACEBOOK  ♦  TWITTER   ♦   WHITEPAPER   ♦   ZAPPS   ♦   GITHUB
     ZROCOR    
  PRIVATE FEDERATED NETWORK 

██████████▀▀▄▄▄▄▄▄▄▄▀▀██████████
████████▀░▄██████████▄░▀████████
██████▀░████████▀▀▀█████░▀██████
█████░░███████▀░░░░██████░░█████
████░░██████▀░░▄██░███████░░████
███░░█████▀░░▄███░▄████████░░███
████████▀░░▄████░░██████████▀▀██
█░░░░██░░▄█████░░█████▀░░██░░░░█
██████████████░░████▀░░▄████▄▄██
███░░████████▀░███▀░░▄█████░░███
████░░███████░██▀░░▄██████░░████
█████░░██████░░░░▄███████░░█████
██████▄░█████▄▄▄████████░▄██████
████████▄░▀██████████▀░▄████████
██████████▄▄▀▀▀▀▀▀▀▀▄▄██████████

alexv10av
Member
**
Offline Offline

Activity: 504
Merit: 10


View Profile
March 15, 2018, 12:03:18 PM
 #46

The best option in this case is to use Metamack, which notifies you about phishing sites. You can also make a separate purse for bounty companies and the main wallet is nowhere to use, this minimizes the risks.
BettingTips
Full Member
***
Offline Offline

Activity: 238
Merit: 102


OPEN GAMING PLATFORM


View Profile
March 15, 2018, 10:17:54 PM
 #47

Yep. You're right, the only way that you lost your token is you logged in your wallet with a fake MEW website. I think you should bookmark the real MEW website so you'll never making this mistake again. You're not the only one made that mistake and lost all token in MEW wallet Smiley. Try to be careful next time.

johnsaributua
Full Member
***
Offline Offline

Activity: 336
Merit: 100


View Profile
March 15, 2018, 11:26:35 PM
 #48

maybe you often click on links that are not clear from various sources, especially those who lure big prizes, usually like that phishing work.
Darkstare
Member
**
Offline Offline

Activity: 62
Merit: 11


View Profile
March 16, 2018, 01:38:45 AM
 #49

Don't open your mew if you want to see only your token. Open it if necessary. Many people can do anything to steal, and you are unlucky because they choose your mew account. Better be safe and secure next time. You can earn too what they've stole in you.
lenj
Full Member
***
Offline Offline

Activity: 182
Merit: 100



View Profile
March 16, 2018, 01:51:41 AM
 #50

Same thing happened to my friend, he used a fake myetherwallet website.  ALWAYS check the domain.  Its safer to do offline transactions if you are capable of doing that.  MEW should still be fine if your on the official site.  Hope you didn't lose too much

This online world is very wild and can make people cry then poor directly if we get hack.
We need to knowledgelable about this because got hack is very sad.
Try not to visit any website from untrusted source like email or other source. Try to type by yourself.
bohr
Sr. Member
****
Offline Offline

Activity: 994
Merit: 257


View Profile
March 16, 2018, 04:39:50 AM
 #51

My MEW got hacked and my tokens were stolen. I am very careful when putting my address on each bounty campaign and never sign up online which require any private key. I don't really know how I get phish or how hacker accessed my MEW. I learned my lesson and will never use private key again. Do you have any idea how I get phish? I got one in mind that a fake mew site does exist?
There is nothing really new in what you are describing to us, you used your private key as a login to my ether wallet so the most likely option is that you entered your private key in a phishing site and then the hacker took advantage of it and stole your coins, be more careful next time, I know it is an expensive lesson to learn but people need to be more careful when storing our coins.
armarsterling7
Member
**
Offline Offline

Activity: 420
Merit: 10


View Profile
March 16, 2018, 04:48:18 AM
 #52

My MEW got hacked and my tokens were stolen. I am very careful when putting my address on each bounty campaign and never sign up online which require any private key. I don't really know how I get phish or how hacker accessed my MEW. I learned my lesson and will never use private key again. Do you have any idea how I get phish? I got one in mind that a fake mew site does exist?
There are many MEW websites that are faked to scam people. Those who are not careful when visiting MEW will be stolen whole property. The interface of the fake MEW sites is 99% identical to the real MEW web pages and you need to check carefully before logging on to your wallet.

MINTER - WE MINT COINS AND CREATE THE INTERNET OF MONEY
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
Telegram  |  Bip Wallet  |  Twitter
Minor Miner
Legendary
*
Offline Offline

Activity: 1274
Merit: 1000



View Profile
March 17, 2018, 05:18:53 PM
 #53

I'm sorry to all the people who are in the situation like your. We must be very careful in the world of crypto. Scammers come up with more and more sophisticated methods. Use a hardware wallet and sleep well Wink


.
                                    ▄███▄
                                    █████▄
            ▄███▄                  ▄████▀██▄▄
            █████▄                ██▀      ▀██▄
            ▀███▀██▄▄            ██▀         ▀██▄████▄                 ▄███▄
                   ▀▀██▄▄       ██▀            ▀██████▄               ▄█████
                       ▀▀██▄▄█████▄             ▀████▀██▄▄          ▄██▀███▀
                           ▀███████               ██   ▀▀███▄    ▄██▀▀
                           ▄███████▄              ██       ▀███▄██▀
▄███▄                    ▄██▀▀███▀▀██▄▄           ██          ▀██▄
██████▄▄              ▄▄██▀          ▀██▄         ██            ▀██▄
▀███▀ ▀▀██▄▄   ▄▄████████              ▀▀██▄      ██              ▀█▄
          ▀▀██▄█████████▌                 ▀██▄▄   ██               ▀██
             ▐██████████                    ▀████████▄               ██▄
              ██████████▄                     ▐███████▄               ████▄
             ▄█████████▀██▄▄ ▄▄▄▄      ▄▄▄▄████████████               █████
            ▄██▀ ▀▀▀▀    ▀▀███████▄████▀▀▀▀▀    ████████▄              ▀▀▀
           ▄██              ██████▀               ▀▀▀▀ ▀██▄
        ▄████               ▀████▀                       ▀████▄
        █████                                              ████
         ▀▀▀                                                ▀▀
.
ShareMeAll
●    A ONE-STOP    ―――――――――――――――   ●  ●  ●  ●
OMarketplace For Sharing EverythingO
.
.
▄▄████████▄▄
▄████████████████▄
▄████████████████████▄
███████████████▀▀  █████
████████████▀▀      ██████
▐████████▀▀   ▄▄     ██████▌
▐████▀▀    ▄█▀▀     ███████▌
▐████████ █▀        ███████▌
████████ █ ▄███▄   ███████
████████████████▄▄██████
▀████████████████████▀
▀████████████████▀
▀▀████████▀▀
coinsontheroad
Full Member
***
Offline Offline

Activity: 336
Merit: 100



View Profile
March 17, 2018, 05:34:57 PM
 #54

Even if you use keystore file encrypted version of private key instead of private key, the website can steal your file and also the password you entered. You should get a hardware wallet  Sad

I'm pretty sure having a hardware wallet is what saved me from an MEW phishing attack.

I opened a link to MEW in an article that I thought was from Coindesk. So I thought it was legit. It was for an airdrop. It didn't ask for my private key or anything. Just had me create a transaction to send 0 ETH. I had to press a couple confirm buttons on the Trezor.

This freaked me out, but my funds are still there. I am thinking this can be the only thing that saved me.

bohr
Sr. Member
****
Offline Offline

Activity: 994
Merit: 257


View Profile
March 22, 2018, 02:36:50 AM
 #55

A good rule of thumb against all phishing attacks is to bookmark your page (myetherwallet) and always access it only trough your bookmark. I have read and written that statement at least 50 times in last few months. Using metamask or similar also helps Smiley 

Don't know about the OP situation and I am sorry that he lost his money. On the other hand I can't even feel sorry for the people who receive an Email with the link to the myetherwallet and click on it. Then immediately enter their private keys. This falls under natural selection. There will always be predators around to thin the herd of weak specimens. Sorry if that comes out a bit harsh but we all have to do our part to at least make it hard for hackers to get to our funds. One of the biggest points of crypto currencies is that everyone is responsible for his own money, and that entitles responsibility for some security precautions as well.
You are not being too harsh you are telling it like it is, when we use cryptocurrencies we need to be aware that we are completely responsible for the security of our coins no one is going to save us in case something goes wrong and that is a lesson that we need to understand, sometimes the lesson is very expensive like losing our coins, but it is a lesson that we all must learn.
kimtaek
Jr. Member
*
Offline Offline

Activity: 340
Merit: 1


View Profile
March 22, 2018, 03:42:08 AM
 #56

same here my ETH was hacked... I just linked my account in forkdelta. Is there a possibility that my password in MEW can be opened if you have the MEW address?
marcbitcoins
Full Member
***
Offline Offline

Activity: 770
Merit: 108


"HAWK NETWORK"


View Profile WWW
March 22, 2018, 04:11:05 AM
Last edit: March 22, 2018, 09:16:43 AM by marcbitcoins
 #57

My MEW got hacked and my tokens were stolen. I am very careful when putting my address on each bounty campaign and never sign up online which require any private key. I don't really know how I get phish or how hacker accessed my MEW. I learned my lesson and will never use private key again. Do you have any idea how I get phish? I got one in mind that a fake mew site does exist?

Most probably that you have entered an MyEtherWallet fake site without checking your browser URL in which wrong spelling of MEW was mistakenly entered. Phishing sites are very easy to avoid now as long as you have an updated anti virus and malware protection in your computer so therefore a fake MEW will be possible. To ensure of the safety of MEW wallet better to use keystore file in which it will require your password not the private keys or Nano ledger but expensive.

Suslived
Member
**
Offline Offline

Activity: 252
Merit: 13

CryptoTalk.Org - Get Paid for every Post!


View Profile
March 22, 2018, 04:33:56 AM
 #58

Sharing my experience, i got hacked even if i checked the website URL everytime. Why? Even if you don't go to the wrong website to get phished, you could still be hacked by malware/viruses. Some malware do a copy paste hack which pastes their own address whenever your paste it in a recipient's address. Make sure you have antivirus active and working!

Also, probably wrong sub forum.

 
                                . ██████████.
                              .████████████████.
                           .██████████████████████.
                        -█████████████████████████████
                     .██████████████████████████████████.
                  -█████████████████████████████████████████
               -███████████████████████████████████████████████
           .-█████████████████████████████████████████████████████.
        .████████████████████████████████████████████████████████████
       .██████████████████████████████████████████████████████████████.
       .██████████████████████████████████████████████████████████████.
       ..████████████████████████████████████████████████████████████..
       .   .██████████████████████████████████████████████████████.
       .      .████████████████████████████████████████████████.
       .       .██████████████████████████████████████████████
       .    ██████████████████████████████████████████████████████
       .█████████████████████████████████████████████████████████████.
        .███████████████████████████████████████████████████████████
           .█████████████████████████████████████████████████████
              .████████████████████████████████████████████████
                   ████████████████████████████████████████
                      ██████████████████████████████████
                          ██████████████████████████
                             ████████████████████
                               ████████████████
                                   █████████
CryptoTalk.org| 
MAKE POSTS AND EARN BTC!
🏆
jefbigbob70
Newbie
*
Offline Offline

Activity: 65
Merit: 0


View Profile
March 22, 2018, 05:03:23 AM
 #59

You have to be careful with search engines. Advertising paid ads are shown at the top of the page.
Kizaki
Sr. Member
****
Offline Offline

Activity: 415
Merit: 250

CryptoTalk.Org - Get Paid for every Post!


View Profile
March 22, 2018, 07:22:05 AM
 #60

My MEW got hacked and my tokens were stolen. I am very careful when putting my address on each bounty campaign and never sign up online which require any private key. I don't really know how I get phish or how hacker accessed my MEW. I learned my lesson and will never use private key again. Do you have any idea how I get phish? I got one in mind that a fake mew site does exist?

That is why you should check yhe website carefully before importing yung private key or key store. You can actually check whether it is a fake site or not by checking the website certificate or by using metamask.

 
                                . ██████████.
                              .████████████████.
                           .██████████████████████.
                        -█████████████████████████████
                     .██████████████████████████████████.
                  -█████████████████████████████████████████
               -███████████████████████████████████████████████
           .-█████████████████████████████████████████████████████.
        .████████████████████████████████████████████████████████████
       .██████████████████████████████████████████████████████████████.
       .██████████████████████████████████████████████████████████████.
       ..████████████████████████████████████████████████████████████..
       .   .██████████████████████████████████████████████████████.
       .      .████████████████████████████████████████████████.

       .       .██████████████████████████████████████████████
       .    ██████████████████████████████████████████████████████
       .█████████████████████████████████████████████████████████████.
        .███████████████████████████████████████████████████████████
           .█████████████████████████████████████████████████████
              .████████████████████████████████████████████████
                   ████████████████████████████████████████
                      ██████████████████████████████████
                          ██████████████████████████
                             ████████████████████
                               ████████████████
                                   █████████
CryptoTalk.org| 
MAKE POSTS AND EARN BTC!
🏆
Pages: « 1 2 [3] 4 5 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!