WARNING: phishing attempt using bitcointlak.my-board.org

[dacoinminster]

Somebody just tried to steal my bitcointalk login credentials using a disguised link which looked like a bitcoin talk forum thread, but actually redirected to: "bitcointlak.my-board.org/Login.htm"

I of course reported this to the mods. I just wanted to warn everybody that this is happening. If someone did manage to steal my account credentials, they would probably come here and pretend to be me selling Mastercoins. I may have been one of the early targets because of this, but I won't be surprised if other people start getting these links.

[1713541533]

1713541533

[1713541533]

1713541533

[1713541533]

1713541533

[SaltySpitoon]

Yeah, they have been targeting the moderators too. We all got that pm, and have been banning people left and right. Tis a bit annoying.

[icicle]

Me too, despite clicking on no phishing urls before my account got hacked.

At least one phishing PM was sent out from my account to a member called 'Warsawbit'.

While my account was in its hacked state a long PM sent to me mentioning Patrick Strateman (Intersango / Bitcoinica) vanished!  

It was sent by someone called LordMaura (something like that anyway - the last bit was a place in north India). He had signed up just that day, his time zone was about right for the UK and his message was full of stuff I already know, pointing me to a thread I had already posted in.

That PM, which seems to be the sole reason for him signing up, then vanished like the morning mist, and my email had been changed to a mailinator one. Did that happen to anyone else?

I have my chief suspects. You will never guess where I had originally used the password I reused when signing up here.

So I'm sorry, but this hack might have been sort of my fault.

[Lethn]

Something that has been saving me from these phishing links is only using bookmarks to the legit site first to see if what they claim is true, usually they're trying to hijack a website already in operation, otherwise it's really obvious to spot and you just need to look at where the URL is going, you can't get caught out if you don't click.