Bitcoin Forum
September 25, 2018, 12:29:59 PM *
News: ♦♦ New info! Bitcoin Core users absolutely must upgrade to previously-announced 0.16.3 [Torrent]. All Bitcoin users should temporarily trust confirmations slightly less. More info.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: PHISHING ALERT: Metamask users on hacked websites asked to enter seed phrases!  (Read 34 times)
denis-z12
Full Member
***
Offline Offline

Activity: 280
Merit: 102


🤖UBEX.COM 🤖


View Profile
June 22, 2018, 10:16:04 AM
 #1

I just read about this new phishing attempt of MetaMask users, here it is...
source > https://www.bitcoinforbeginners.io/discussions/threads/phishing-alert-metamask-users-on-hacked-websites-asked-to-enter-seed-phrases.246/


Multiple websites have been hacked and more might be hacked where they seem to be using a security vulnerability of Cloudflare (if those websites are using Coudflare services). Visitors of websites are getting redirected to the phisher's site and at some point this pop up will appear where users are asked to enter their seed phrase to update their Metamask. The pop up obviously looks very native to Metamask's design.




Please do not fall for this trap; DO NOT ENTER YOUR SEED PHRASE AND CLOSE THE WEBSITE IMMEDIATELY, because the seed phrase will be sent to the hacker's server and will then be able to install your account and remove all your funds! Also report to Metamask. The only legit way where you should ever enter your seed phrase is when you personally click on the Metamask extension logo (the fox image) in your browser in case you need to restore your wallet. Personally I also recommend not to store more money on Metamask than you need for making small payments; do not store more on Metamask than you can afford to lose.

Also read this Medium article by Metamask for more details on this issue: https://medium.com/metamask/new-phishing-strategy-becoming-common-1b1123837168

1537878599
Hero Member
*
Offline Offline

Posts: 1537878599

View Profile Personal Message (Offline)

Ignore
1537878599
Reply with quote  #2

1537878599
Report to moderator
1537878599
Hero Member
*
Offline Offline

Posts: 1537878599

View Profile Personal Message (Offline)

Ignore
1537878599
Reply with quote  #2

1537878599
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1537878599
Hero Member
*
Offline Offline

Posts: 1537878599

View Profile Personal Message (Offline)

Ignore
1537878599
Reply with quote  #2

1537878599
Report to moderator
1537878599
Hero Member
*
Offline Offline

Posts: 1537878599

View Profile Personal Message (Offline)

Ignore
1537878599
Reply with quote  #2

1537878599
Report to moderator
1537878599
Hero Member
*
Offline Offline

Posts: 1537878599

View Profile Personal Message (Offline)

Ignore
1537878599
Reply with quote  #2

1537878599
Report to moderator
Avalonist
Jr. Member
*
Offline Offline

Activity: 140
Merit: 2


View Profile
June 22, 2018, 12:49:39 PM
 #2

Had same issue today. Didnt enter any phrase cause it seemed to be suspicious.
Thanks for sharing the news, cause i could've lost some tokens
denis-z12
Full Member
***
Offline Offline

Activity: 280
Merit: 102


🤖UBEX.COM 🤖


View Profile
June 22, 2018, 02:04:54 PM
 #3

Had same issue today. Didnt enter any phrase cause it seemed to be suspicious.
Thanks for sharing the news, cause i could've lost some tokens
Really, where did you see it? what site?

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!