Bitcoin Forum
January 26, 2020, 01:05:00 PM *
News: Latest Bitcoin Core release: 0.19.0.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 4 »  All
  Print  
Author Topic: MyEtherWallet hack  (Read 282 times)
aardvark15
Hero Member
*****
Offline Offline

Activity: 966
Merit: 510


CryptoTalk.Org - Get Paid for every Post!


View Profile
April 25, 2018, 04:18:40 PM
 #1

It seems that someone has successfully hacked MyEtherWallet and has stolen some people’s tokens. Mine seem to be fine for now.

Has anyone lost any Etherium or tokens and does anyone know how the hack was perpetrated?

This is potentially a major security risk because we all know that keeping coins on an exchange is a high risk. Now using MyEtherWallet may also be risky.

 
                                . ██████████.
                              .████████████████.
                           .██████████████████████.
                        -█████████████████████████████
                     .██████████████████████████████████.
                  -█████████████████████████████████████████
               -███████████████████████████████████████████████
           .-█████████████████████████████████████████████████████.
        .████████████████████████████████████████████████████████████
       .██████████████████████████████████████████████████████████████.
       .██████████████████████████████████████████████████████████████.
       ..████████████████████████████████████████████████████████████..
       .   .██████████████████████████████████████████████████████.
       .      .████████████████████████████████████████████████.

       .       .██████████████████████████████████████████████
       .    ██████████████████████████████████████████████████████
       .█████████████████████████████████████████████████████████████.
        .███████████████████████████████████████████████████████████
           .█████████████████████████████████████████████████████
              .████████████████████████████████████████████████
                   ████████████████████████████████████████
                      ██████████████████████████████████
                          ██████████████████████████
                             ████████████████████
                               ████████████████
                                   █████████
.YoBit AirDrop $.|.Get 700 YoDollars for Free!.🏆
1580043900
Hero Member
*
Offline Offline

Posts: 1580043900

View Profile Personal Message (Offline)

Ignore
1580043900
Reply with quote  #2

1580043900
Report to moderator
1580043900
Hero Member
*
Offline Offline

Posts: 1580043900

View Profile Personal Message (Offline)

Ignore
1580043900
Reply with quote  #2

1580043900
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1580043900
Hero Member
*
Offline Offline

Posts: 1580043900

View Profile Personal Message (Offline)

Ignore
1580043900
Reply with quote  #2

1580043900
Report to moderator
1580043900
Hero Member
*
Offline Offline

Posts: 1580043900

View Profile Personal Message (Offline)

Ignore
1580043900
Reply with quote  #2

1580043900
Report to moderator
1580043900
Hero Member
*
Offline Offline

Posts: 1580043900

View Profile Personal Message (Offline)

Ignore
1580043900
Reply with quote  #2

1580043900
Report to moderator
lumeire
Legendary
*
Offline Offline

Activity: 1540
Merit: 1002

CryptoTalk.Org - Get Paid for every Post!


View Profile
April 25, 2018, 04:27:20 PM
Merited by aardvark15 (1)
 #2

It seems that someone has successfully hacked MyEtherWallet and has stolen some people’s tokens. Mine seem to be fine for now.

Has anyone lost any Etherium or tokens and does anyone know how the hack was perpetrated?

This is potentially a major security risk because we all know that keeping coins on an exchange is a high risk. Now using MyEtherWallet may also be risky.

It was related to MEW's DNS being highjacked. So if you used MEW during the time with that hacked DNS then you're screwed. Otherwise, you're fine.

https://www.reddit.com/r/ethereum/comments/8ek86t/warning_myetherwalletcom_highjacked_on_google/

 
                                . ██████████.
                              .████████████████.
                           .██████████████████████.
                        -█████████████████████████████
                     .██████████████████████████████████.
                  -█████████████████████████████████████████
               -███████████████████████████████████████████████
           .-█████████████████████████████████████████████████████.
        .████████████████████████████████████████████████████████████
       .██████████████████████████████████████████████████████████████.
       .██████████████████████████████████████████████████████████████.
       ..████████████████████████████████████████████████████████████..
       .   .██████████████████████████████████████████████████████.
       .      .████████████████████████████████████████████████.

       .       .██████████████████████████████████████████████
       .    ██████████████████████████████████████████████████████
       .█████████████████████████████████████████████████████████████.
        .███████████████████████████████████████████████████████████
           .█████████████████████████████████████████████████████
              .████████████████████████████████████████████████
                   ████████████████████████████████████████
                      ██████████████████████████████████
                          ██████████████████████████
                             ████████████████████
                               ████████████████
                                   █████████
.CryptoTalk.org.|.MAKE POSTS AND EARN BTC!.🏆
angrybird3591
Jr. Member
*
Offline Offline

Activity: 215
Merit: 1


View Profile
April 25, 2018, 04:34:51 PM
 #3

This is a important problem, don't save you asset on 1 place!Save it at some place and offline on trazor,I can't imagine newday and all asset is lost

Bcnex - The Ultimate Blockchain Trading Platform | $1M Raised
▸ Public Sale starts on May 03 2019◂
chokomenia
Member
**
Offline Offline

Activity: 364
Merit: 10

take & Vote or Become a IoTeX Delegate!


View Profile
April 25, 2018, 04:59:39 PM
 #4

Yeah I read about the news and I hope it wont affect any of our dear community member, I want to use mew when i heard the news, I didn't proceed with it, and i think it is better and safer to use metamask for now in my own opinion.

serjent05
Legendary
*
Offline Offline

Activity: 1498
Merit: 1069

CryptoTalk.Org - Get Paid for every Post!


View Profile
April 25, 2018, 05:01:41 PM
 #5

I read about this news but was pretty much worried since I used it a day before the announcement of the DNS hijack.  Though I got a couple of question here just like my friend, is it possible that a bookmarked site can be redirected to the phishing site once opened?  I hope it won't though.

 
                                . ██████████.
                              .████████████████.
                           .██████████████████████.
                        -█████████████████████████████
                     .██████████████████████████████████.
                  -█████████████████████████████████████████
               -███████████████████████████████████████████████
           .-█████████████████████████████████████████████████████.
        .████████████████████████████████████████████████████████████
       .██████████████████████████████████████████████████████████████.
       .██████████████████████████████████████████████████████████████.
       ..████████████████████████████████████████████████████████████..
       .   .██████████████████████████████████████████████████████.
       .      .████████████████████████████████████████████████.

       .       .██████████████████████████████████████████████
       .    ██████████████████████████████████████████████████████
       .█████████████████████████████████████████████████████████████.
        .███████████████████████████████████████████████████████████
           .█████████████████████████████████████████████████████
              .████████████████████████████████████████████████
                   ████████████████████████████████████████
                      ██████████████████████████████████
                          ██████████████████████████
                             ████████████████████
                               ████████████████
                                   █████████
.YoBit AirDrop $.|.Get 700 YoDollars for Free!.🏆
eurobend6
Jr. Member
*
Offline Offline

Activity: 78
Merit: 1


View Profile
April 25, 2018, 05:02:20 PM
 #6

Is it possible to enter the MEW safely now?
Crypto_lion
Member
**
Offline Offline

Activity: 406
Merit: 11

I-CHAIN - The Revolution of Digital Advertising


View Profile
April 25, 2018, 05:03:39 PM
 #7

I know it wasn't a hack per se but is there any way to identify  the DNS redirection so that we can stop logging in? It would be nice if someone points out how to find out

valnd
Member
**
Offline Offline

Activity: 406
Merit: 11

Stake & Vote or Become a IoTeX Delegate!


View Profile
April 25, 2018, 05:09:07 PM
 #8

It is really unfortunate how hackers keep finding means to steal people hard earn tokens and coin. I am so sad about it and wished there is something I could do to prevent all these things from happening. It's really painful when you are been hit by a hacker.

ThachSanhTp
Jr. Member
*
Offline Offline

Activity: 364
Merit: 4


View Profile
April 25, 2018, 05:36:06 PM
 #9

I use Ethereum wallet to keep, send and receive ETH but it does not support ERC20 token. If it supports ERC20 token, I think there is no reason for me to use MyEtherwallet anymore. input or password and private key into a website (for any reason) is not safe!
sunno330
Full Member
***
Offline Offline

Activity: 398
Merit: 100


View Profile
April 25, 2018, 05:45:35 PM
 #10

yes, Myetherwallet DNS hijacked from a malicious attack.
Now MEW wallet is safe. They published it on their official twitter page. Check this: https://twitter.com/myetherwallet/status/988836522974572544

I  Love Bitcointalk
Cloudstrife25
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
April 25, 2018, 05:47:25 PM
 #11

Sorry guys. I am a MEW user and using private keys only. What is this DNS you are talking about? How can hackers get access to my account? I just checked my MEW and my coins seem to be intact.
Sidzukana
Member
**
Offline Offline

Activity: 280
Merit: 10


View Profile
April 25, 2018, 05:54:01 PM
 #12

Sorry guys. I am a MEW user and using private keys only. What is this DNS you are talking about? How can hackers get access to my account? I just checked my MEW and my coins seem to be intact.

Please check these two articles, they sum up everything

https://doublepulsar.com/hijack-of-amazons-internet-domain-service-used-to-reroute-web-traffic-for-two-hours-unnoticed-3a6f0dda6a6f

https://blog.cloudflare.com/bgp-leaks-and-crypto-currencies/

TL;DR - always check certificate of website before logging in. Even if it bookmarked - always double-check Smiley
xOdiumNostrumx
Full Member
***
Offline Offline

Activity: 896
Merit: 100



View Profile
April 25, 2018, 06:07:41 PM
 #13

Fortunately not, I use my local DNS so I was not in danger even if I would access MEW when it was still vulnerable. Be sure that the certificate in your URL is green and not changed, also avoid accessing the site if there are any warnings about suspicious activity when accessing MEW. The best solution is of course using it offline.
RoftheN
Full Member
***
Offline Offline

Activity: 546
Merit: 100



View Profile
April 25, 2018, 06:14:21 PM
 #14

Thats why its never advised to use web wallets, but MEW was the only easy to use wallet in the Ethereum community. Also it was quite popular and widely used wallet. I hope not many people lost their coins or tokens due to this hack and that this vulnerability has been fixed by now.
Artjk13
Newbie
*
Offline Offline

Activity: 81
Merit: 0


View Profile
April 25, 2018, 06:19:19 PM
 #15

no god no please god no Grin Grin
BetadiNe
Newbie
*
Offline Offline

Activity: 196
Merit: 0


View Profile
April 25, 2018, 06:20:49 PM
 #16

It seems that someone has successfully hacked MyEtherWallet and has stolen some people’s tokens. Mine seem to be fine for now.

Has anyone lost any Etherium or tokens and does anyone know how the hack was perpetrated?

This is potentially a major security risk because we all know that keeping coins on an exchange is a high risk. Now using MyEtherWallet may also be risky.
I think this is very important news, initially I do not believe in this news but many people are busy talking about it, I think we should menyimpanya not in one wallet only.
Faruque312
Member
**
Offline Offline

Activity: 490
Merit: 10

Life is full of struggle


View Profile WWW
April 25, 2018, 06:23:51 PM
 #17

i am still safe, why they always attack in dns server?? why admin didnt take high security, if they always prepare then hacker never attack in server.

copyfile
Sr. Member
****
Offline Offline

Activity: 602
Merit: 251



View Profile
April 25, 2018, 06:28:33 PM
 #18

In my practice there was a case when I stole the coins from the purse myetherwallet. As it turned out later, I went to a phishing site and entered my private key, after which all the coins disappeared. After that I seriously started thinking about protecting their money and bought a hardware wallet ledger nano's. The purse is very much, small comfortable and very reliable. Recommend!
AgentZero23
Member
**
Offline Offline

Activity: 644
Merit: 10


View Profile WWW
April 25, 2018, 06:37:44 PM
 #19

I'm kinda worried yesterday when the news come out. And i checked my mew wallet by typing my public address in etherscan. And my tokens are still intact. So the people who access their mew wallet that time when mew dns got hacked could lost their tokens. And fell bad for them.
Xelpherpolis
Sr. Member
****
Offline Offline

Activity: 476
Merit: 250



View Profile
April 25, 2018, 06:47:01 PM
 #20

Their official Twitter account says:

Quote
It seeds that everything is now back to normal, BUT PLEASE STAY SAFE and read/share this guide: https://myetherwallet.github.io/knowledge-base/security/myetherwallet-protips-how-not-to-get-scammed-during-ico.html
I recommend reading this article.
Pages: [1] 2 3 4 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!