Bitcoin Forum
May 04, 2024, 08:15:51 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: PHISHING ALERT: Metamask users on hacked websites asked to enter seed phrases!  (Read 108 times)
denis-z12 (OP)
Full Member
***
Offline Offline

Activity: 294
Merit: 103



View Profile
June 22, 2018, 10:16:04 AM
 #1

I just read about this new phishing attempt of MetaMask users, here it is...
source > https://www.bitcoinforbeginners.io/discussions/threads/phishing-alert-metamask-users-on-hacked-websites-asked-to-enter-seed-phrases.246/


Multiple websites have been hacked and more might be hacked where they seem to be using a security vulnerability of Cloudflare (if those websites are using Coudflare services). Visitors of websites are getting redirected to the phisher's site and at some point this pop up will appear where users are asked to enter their seed phrase to update their Metamask. The pop up obviously looks very native to Metamask's design.




Please do not fall for this trap; DO NOT ENTER YOUR SEED PHRASE AND CLOSE THE WEBSITE IMMEDIATELY, because the seed phrase will be sent to the hacker's server and will then be able to install your account and remove all your funds! Also report to Metamask. The only legit way where you should ever enter your seed phrase is when you personally click on the Metamask extension logo (the fox image) in your browser in case you need to restore your wallet. Personally I also recommend not to store more money on Metamask than you need for making small payments; do not store more on Metamask than you can afford to lose.

Also read this Medium article by Metamask for more details on this issue: https://medium.com/metamask/new-phishing-strategy-becoming-common-1b1123837168
1714810551
Hero Member
*
Offline Offline

Posts: 1714810551

View Profile Personal Message (Offline)

Ignore
1714810551
Reply with quote  #2

1714810551
Report to moderator
1714810551
Hero Member
*
Offline Offline

Posts: 1714810551

View Profile Personal Message (Offline)

Ignore
1714810551
Reply with quote  #2

1714810551
Report to moderator
1714810551
Hero Member
*
Offline Offline

Posts: 1714810551

View Profile Personal Message (Offline)

Ignore
1714810551
Reply with quote  #2

1714810551
Report to moderator
Bitcoin addresses contain a checksum, so it is very unlikely that mistyping an address will cause you to lose money.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714810551
Hero Member
*
Offline Offline

Posts: 1714810551

View Profile Personal Message (Offline)

Ignore
1714810551
Reply with quote  #2

1714810551
Report to moderator
1714810551
Hero Member
*
Offline Offline

Posts: 1714810551

View Profile Personal Message (Offline)

Ignore
1714810551
Reply with quote  #2

1714810551
Report to moderator
1714810551
Hero Member
*
Offline Offline

Posts: 1714810551

View Profile Personal Message (Offline)

Ignore
1714810551
Reply with quote  #2

1714810551
Report to moderator
Avalonist
Jr. Member
*
Offline Offline

Activity: 112
Merit: 2


View Profile
June 22, 2018, 12:49:39 PM
 #2

Had same issue today. Didnt enter any phrase cause it seemed to be suspicious.
Thanks for sharing the news, cause i could've lost some tokens
denis-z12 (OP)
Full Member
***
Offline Offline

Activity: 294
Merit: 103



View Profile
June 22, 2018, 02:04:54 PM
 #3

Had same issue today. Didnt enter any phrase cause it seemed to be suspicious.
Thanks for sharing the news, cause i could've lost some tokens
Really, where did you see it? what site?
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!