Bitcoin Forum
March 28, 2024, 11:24:45 AM *
News: Latest Bitcoin Core release: 26.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 4 »  All
  Print  
Author Topic: MyEtherWallet hack  (Read 484 times)
aardvark15 (OP)
Hero Member
*****
Offline Offline

Activity: 994
Merit: 510


View Profile
April 25, 2018, 04:18:40 PM
 #1

It seems that someone has successfully hacked MyEtherWallet and has stolen some people’s tokens. Mine seem to be fine for now.

Has anyone lost any Etherium or tokens and does anyone know how the hack was perpetrated?

This is potentially a major security risk because we all know that keeping coins on an exchange is a high risk. Now using MyEtherWallet may also be risky.
1711625085
Hero Member
*
Offline Offline

Posts: 1711625085

View Profile Personal Message (Offline)

Ignore
1711625085
Reply with quote  #2

1711625085
Report to moderator
1711625085
Hero Member
*
Offline Offline

Posts: 1711625085

View Profile Personal Message (Offline)

Ignore
1711625085
Reply with quote  #2

1711625085
Report to moderator
1711625085
Hero Member
*
Offline Offline

Posts: 1711625085

View Profile Personal Message (Offline)

Ignore
1711625085
Reply with quote  #2

1711625085
Report to moderator
Unlike traditional banking where clients have only a few account numbers, with Bitcoin people can create an unlimited number of accounts (addresses). This can be used to easily track payments, and it improves anonymity.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1711625085
Hero Member
*
Offline Offline

Posts: 1711625085

View Profile Personal Message (Offline)

Ignore
1711625085
Reply with quote  #2

1711625085
Report to moderator
1711625085
Hero Member
*
Offline Offline

Posts: 1711625085

View Profile Personal Message (Offline)

Ignore
1711625085
Reply with quote  #2

1711625085
Report to moderator
1711625085
Hero Member
*
Offline Offline

Posts: 1711625085

View Profile Personal Message (Offline)

Ignore
1711625085
Reply with quote  #2

1711625085
Report to moderator
lumeire
Legendary
*
Offline Offline

Activity: 1848
Merit: 1009


Next-Gen Trade Racing Metaverse


View Profile
April 25, 2018, 04:27:20 PM
Merited by aardvark15 (1)
 #2

It seems that someone has successfully hacked MyEtherWallet and has stolen some people’s tokens. Mine seem to be fine for now.

Has anyone lost any Etherium or tokens and does anyone know how the hack was perpetrated?

This is potentially a major security risk because we all know that keeping coins on an exchange is a high risk. Now using MyEtherWallet may also be risky.

It was related to MEW's DNS being highjacked. So if you used MEW during the time with that hacked DNS then you're screwed. Otherwise, you're fine.

https://www.reddit.com/r/ethereum/comments/8ek86t/warning_myetherwalletcom_highjacked_on_google/

        ▄▄████████▄▄           ▄▄████████▄▄
    ▄▄████████████████▄▄   ▄▄████████████████▄▄
  ▄███████▀▀▀▀▀▀▀▀█████  ▄███████▀▀▀▀▀▀▀▀███████▄
 ▄█████▀            ▀█  ▄█████▀            ▀█████▄
▄█████▀                ▄█████▀    ▄▄        ▀█████▄
█████▌                 █████▌     ████▄▄     ▐█████
█████▌                 █████▌     ████▀▀     ▐█████
▀█████▄      ▄▄▄      █████▀      ▀▀        ▄█████▀
 ▀█████▄▄   █████    █████▀  █▄            ▄█████▀
  ▀██████████████ ██████▀▀  █████▄▄▄▄▄▄▄▄███████▀
    ▀▀███████████ ████▀    ▀▀████████████████▀▀
        ▀▀███████ ▀▀           ▀▀████████▀▀
            ▀███▀
|
..NEXT-GEN TRADE RACING METAVERSE..
|   WEBSITE   |   TELEGRAM   |   TWITTER   |   MEDIUM   |
►►  Powered by
BOUNTY
DETECTIVE
angrybird3591
Jr. Member
*
Offline Offline

Activity: 224
Merit: 1


View Profile
April 25, 2018, 04:34:51 PM
 #3

This is a important problem, don't save you asset on 1 place!Save it at some place and offline on trazor,I can't imagine newday and all asset is lost
chokomenia
Member
**
Offline Offline

Activity: 364
Merit: 10

take & Vote or Become a IoTeX Delegate!


View Profile
April 25, 2018, 04:59:39 PM
 #4

Yeah I read about the news and I hope it wont affect any of our dear community member, I want to use mew when i heard the news, I didn't proceed with it, and i think it is better and safer to use metamask for now in my own opinion.

serjent05
Legendary
*
Offline Offline

Activity: 2800
Merit: 1243


Metawin.com 🔹 The First Web3 Casino


View Profile
April 25, 2018, 05:01:41 PM
 #5

I read about this news but was pretty much worried since I used it a day before the announcement of the DNS hijack.  Though I got a couple of question here just like my friend, is it possible that a bookmarked site can be redirected to the phishing site once opened?  I hope it won't though.

▄▄███████▄▄
▄██████████████▄
▄██████████████████▄
▄████▀▀▀▀███▀▀▀▀█████▄
▄█████████████▄█▀████▄
███████████▄███████████
██████████▄█▀███████████
██████████▀████████████
▀█████▄█▀█████████████▀
▀████▄▄▄▄███▄▄▄▄████▀
▀██████████████████▀
▀███████████████▀
▀▀███████▀▀
.
 MΞTAWIN  THE FIRST WEB3 CASINO   
.
.. PLAY NOW ..
eurobend6
Jr. Member
*
Offline Offline

Activity: 77
Merit: 1


View Profile
April 25, 2018, 05:02:20 PM
 #6

Is it possible to enter the MEW safely now?
Crypto_lion
Member
**
Offline Offline

Activity: 630
Merit: 11

NEW MEDICINE:Faster, Safer, Smarter


View Profile
April 25, 2018, 05:03:39 PM
 #7

I know it wasn't a hack per se but is there any way to identify  the DNS redirection so that we can stop logging in? It would be nice if someone points out how to find out

❱_    ClinTex     ▬▬▬▬▬▬▬▬▬     NEW MEDICINE:   Faster,   Safer,   Smarter
   ❪  TELEGRAM  ❫                 ❪  TWITTER  ❫                 ❪  LINKEDIN  ❫   
██████████████████████   J O I N   ██████████████████████
valnd
Member
**
Offline Offline

Activity: 406
Merit: 11

Until the end of time


View Profile
April 25, 2018, 05:09:07 PM
 #8

It is really unfortunate how hackers keep finding means to steal people hard earn tokens and coin. I am so sad about it and wished there is something I could do to prevent all these things from happening. It's really painful when you are been hit by a hacker.
ThachSanhTp
Jr. Member
*
Offline Offline

Activity: 364
Merit: 4


View Profile
April 25, 2018, 05:36:06 PM
 #9

I use Ethereum wallet to keep, send and receive ETH but it does not support ERC20 token. If it supports ERC20 token, I think there is no reason for me to use MyEtherwallet anymore. input or password and private key into a website (for any reason) is not safe!
sunno330
Full Member
***
Offline Offline

Activity: 406
Merit: 100


homt.net


View Profile
April 25, 2018, 05:45:35 PM
 #10

yes, Myetherwallet DNS hijacked from a malicious attack.
Now MEW wallet is safe. They published it on their official twitter page. Check this: https://twitter.com/myetherwallet/status/988836522974572544

► HOMT ◄ ♦ World’s First Crypto Based Students Rental Platform ♦ ► HOMT ◄
───●●───●●───●●───●●───●●─[   Bounty Detective   ]─●●───●●───●●───●●───●●───
Website|Twitter|Medium|Telegram|Facebook|LinkedIn
Cloudstrife25
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
April 25, 2018, 05:47:25 PM
 #11

Sorry guys. I am a MEW user and using private keys only. What is this DNS you are talking about? How can hackers get access to my account? I just checked my MEW and my coins seem to be intact.
Sidzukana
Member
**
Offline Offline

Activity: 280
Merit: 10


View Profile
April 25, 2018, 05:54:01 PM
 #12

Sorry guys. I am a MEW user and using private keys only. What is this DNS you are talking about? How can hackers get access to my account? I just checked my MEW and my coins seem to be intact.

Please check these two articles, they sum up everything

https://doublepulsar.com/hijack-of-amazons-internet-domain-service-used-to-reroute-web-traffic-for-two-hours-unnoticed-3a6f0dda6a6f

https://blog.cloudflare.com/bgp-leaks-and-crypto-currencies/

TL;DR - always check certificate of website before logging in. Even if it bookmarked - always double-check Smiley
xOdiumNostrumx
Full Member
***
Offline Offline

Activity: 1064
Merit: 101



View Profile
April 25, 2018, 06:07:41 PM
 #13

Fortunately not, I use my local DNS so I was not in danger even if I would access MEW when it was still vulnerable. Be sure that the certificate in your URL is green and not changed, also avoid accessing the site if there are any warnings about suspicious activity when accessing MEW. The best solution is of course using it offline.
RoftheN
Full Member
***
Offline Offline

Activity: 546
Merit: 100



View Profile
April 25, 2018, 06:14:21 PM
 #14

Thats why its never advised to use web wallets, but MEW was the only easy to use wallet in the Ethereum community. Also it was quite popular and widely used wallet. I hope not many people lost their coins or tokens due to this hack and that this vulnerability has been fixed by now.
Artjk13
Newbie
*
Offline Offline

Activity: 81
Merit: 0


View Profile
April 25, 2018, 06:19:19 PM
 #15

no god no please god no Grin Grin
BetadiNe
Newbie
*
Offline Offline

Activity: 196
Merit: 0


View Profile
April 25, 2018, 06:20:49 PM
 #16

It seems that someone has successfully hacked MyEtherWallet and has stolen some people’s tokens. Mine seem to be fine for now.

Has anyone lost any Etherium or tokens and does anyone know how the hack was perpetrated?

This is potentially a major security risk because we all know that keeping coins on an exchange is a high risk. Now using MyEtherWallet may also be risky.
I think this is very important news, initially I do not believe in this news but many people are busy talking about it, I think we should menyimpanya not in one wallet only.
Faruque312
Member
**
Offline Offline

Activity: 490
Merit: 10

Life is full of struggle


View Profile WWW
April 25, 2018, 06:23:51 PM
 #17

i am still safe, why they always attack in dns server?? why admin didnt take high security, if they always prepare then hacker never attack in server.

copyfile
Sr. Member
****
Offline Offline

Activity: 602
Merit: 251



View Profile
April 25, 2018, 06:28:33 PM
 #18

In my practice there was a case when I stole the coins from the purse myetherwallet. As it turned out later, I went to a phishing site and entered my private key, after which all the coins disappeared. After that I seriously started thinking about protecting their money and bought a hardware wallet ledger nano's. The purse is very much, small comfortable and very reliable. Recommend!
AgentZero23
Member
**
Offline Offline

Activity: 644
Merit: 10


View Profile WWW
April 25, 2018, 06:37:44 PM
 #19

I'm kinda worried yesterday when the news come out. And i checked my mew wallet by typing my public address in etherscan. And my tokens are still intact. So the people who access their mew wallet that time when mew dns got hacked could lost their tokens. And fell bad for them.
Xelpherpolis
Sr. Member
****
Offline Offline

Activity: 476
Merit: 250



View Profile
April 25, 2018, 06:47:01 PM
 #20

Their official Twitter account says:

Quote
It seeds that everything is now back to normal, BUT PLEASE STAY SAFE and read/share this guide: https://myetherwallet.github.io/knowledge-base/security/myetherwallet-protips-how-not-to-get-scammed-during-ico.html
I recommend reading this article.
Pages: [1] 2 3 4 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!