Electrum 3.3.4

[jerry0]

When i check my computer, i see this is the version i have when i look at remove/add programs on my windows 10 computer.  I want to open it to see my previous btc transaction history.


I don't have any btc there at the moment.  I haven't opened electrum in a while already. 


I just want to confirm... when i open electrum, there should be no update message of any sort... unless if i were to send btc then maybe i get that phising message right... can anyone here confirm this?

[1715149597]

1715149597

[Rath_]

I just want to confirm... when i open electrum, there should be no update message of any sort... unless if i were to send btc then maybe i get that phising message right... can anyone here confirm this?

Versions older than 3.3.4 are vulnerable to the phising method you mentioned, so you should be safe. You might get a notification about the update if you enabled it in the settings earlier. Update Electrum by downloading it manually from the official website. Don't forget to verify the signature.

[harizen]

When i check my computer, i see this is the version i have when i look at remove/add programs on my windows 10 computer.  I want to open it to see my previous btc transaction history.


I don't have any btc there at the moment.  I haven't opened electrum in a while already.  


I just want to confirm... when i open electrum, there should be no update message of any sort... unless if i were to send btc then maybe i get that phising message right... can anyone here confirm this?

I thought you already uninstalled your Electrum on your PC. It's been almost a month now.

Anyways, on whatever scenarios that an upgrade message popped out of nowhere, just ignored it. The upgrade should always be done via downloading the latest/safe version here. You can still check your transaction history.

[TryNinja]

In any case, just ignore any message and go directly to Electrum.org to see if there is any new update there. You shouldn't receive any fake message, but even if you did, knowing what to do is enough to make any attack useless.

[Baofeng]

When i check my computer, i see this is the version i have when i look at remove/add programs on my windows 10 computer.  I want to open it to see my previous btc transaction history.


I don't have any btc there at the moment.  I haven't opened electrum in a while already. 


I just want to confirm... when i open electrum, there should be no update message of any sort... unless if i were to send btc then maybe i get that phising message right... can anyone here confirm this?

You may want to check the message here,

http://electrum-malware.surge.sh

The message should be something similar, so if you see those, get out and just download the latest version on their official link.

[HCP]

I just want to confirm... when i open electrum, there should be no update message of any sort... unless if i were to send btc then maybe i get that phising message right... can anyone here confirm this?

The answer is that it depends... the new update notification was added in 3.3.3:

# Release 3.3.3 - (January 25, 2019)

 * Do not expose users to server error messages (#4968)
* Notify users of new releases. Release announcements must be signed,
   and they are verified byElectrum using a hardcoded Bitcoin address.
 * Hardware wallet fixes (#4991, #4993, #5006)
 * Display only QR code in QRcode Window
 * Fixed code signing on MacOS
 * Randomise locktime of transactions

Given you have 3.3.4, if you "opted-in" to this feature when you installed 3.3.3 or 3.3.4 then you would see a message displayed at the bottom of the Electrum window like this:



If you click that message, you will get a popup that looks like this:



However, you will not see this update notification if you did not "opt-in" to the new update notification feature and/or you disabled the setting in "Preferences -> General":


In that instance, you will only see a (fake) popup notification IF you are connected to a malicious server AND you attempt to send funds. If that happens, you can simply ignore the popup and your funds will still be safe.

[pooya87]

remember that it doesn't matter if it is the real message or a fake message or even if you download the wallet binaries from the "official" website (electrum.org) or somewhere else. the ONLY things that matter are whether you trust the developer and if you verified the downloaded file with his actual public key.

[Lucius]

I thought you already uninstalled your Electrum on your PC. It's been almost a month now.

jerry0 is move all his coins to Nano S some time ago, so it is difficult to understand why he is still concerned about his empty Electrum wallet. There is no danger in opening of empty wallet and checking old transactions, even if that wallet is fake - what a hacker would steal, transaction history maybe?

He should have learned by now that fake pop-up message is just bait, user need to click on link that is shown in that message, download fake wallet , install that wallet and send transaction from that wallet for the attack to be successful.

[bob123]

There is no danger in opening of empty wallet and checking old transactions, even if that wallet is fake - what a hacker would steal, transaction history maybe?

In addition to that, it should be clear that every electrum server one is connecting to is able to gather the transaction history too.

I don't know whether electrum saves the last connected server and connects to the same after closing / restarting the application, but i can very well imagine you connect to quite a lot server when using electrum regularly.


@OP:
Just don't freakin install a wallet without properly checking the source of it and without verifying its signature.

Why would you care about a fake phishing message popping up in a fixed version (yes, this has been fixed, and there are countless threads and other sources regarding this topic), if you don't even have any funds on electrum but on your hardware wallet ?

[jerry0]

Hi there.  I going to open my electrum 3.3.4 soon on my computer.  I haven't used it in a while but i need to open it for accounting purposes.  But i should have no issue opening it up right?  I basically am going to look at my btc transaction history and then shut it off.


Or should i go download the newest electrum version on the site instead?

[Rath_]

Or should i go download the newest electrum version on the site instead?

You will be fine. This version is not vulnerable to phishing. Anyway, you wouldn't fall for it since you know about it and it only appears when sending a transaction while being connected to a malicious server. In case you decided to update Electrum, download it from the official website and verify the installer.

[harizen]

Hi there.  I going to open my electrum 3.3.4 soon on my computer.  I haven't used it in a while but i need to open it for accounting purposes.  But i should have no issue opening it up right?  I basically am going to look at my btc transaction history and then shut it off.


Or should i go download the newest electrum version on the site instead?

After all this time, that was still a question for you?

No offense but I don't know if you are really reading responses from the threads you have created regarding Electrum  -_-

[Red-Apple]

Or should i go download the newest electrum version on the site instead?

You will be fine. This version is not vulnerable to phishing. Anyway, you wouldn't fall for it since you know about it and it only appears when sending a transaction while being connected to a malicious server. In case you decided to update Electrum, download it from the official website and verify the installer.

if i may add, new bugs are always being found in all the wallets and new ways of exploiting them are found from time to time. the best solution is always going to be to keep coins offline in a cold storage and only using the connected wallet for small amounts covering the day to day costs.
for instance this could have protected them from that phishing attack.

[Lucius]

After all this time, that was still a question for you?

Unfortunately it seems so, for some reason he refuses to understand some basic things. He is using Ledger Nano S, he send his coins to this wallet and he is worried about opening an empty wallet, which is by the way safe version from any phisning (3.3.4 can't show pop message with fake wallet link).

[jerry0]

I logged into electrum now and its fine, no message.


But i should still update it to the current one in case in the future?  But its been mentioned that message does not appear for electrum 3.3.4 version and above.  So would that mean a bit later on, its possible that electrum can still have these attacks if you only have 3.3.4 and not say 3.3.8?


I know i mention i no longer keep btc in electrum anymore as its empty but i do need to look at it and check the records and history for tax purposes etc.

[TryNinja]

Stop asking things we already answered... MULTIPLE TIMES.

Can't you just open your wallet, ignore everything, get your history for tax purposes and leave? You are not using it anymore anyways and all this did was show a message when sending a transaction (like we already said), which you won't do because you don't use it anymore. I thought you would know that by now.

And no. Again... like we already said countless times, 3.3.4 is safe from this and will remain safe.

I know you like to ask a lot, but making redundant questions all the time is annoying. People like to help, but they don't like to waste their time answering the same things over and over to the same person.