⚠️ How Scammer tried to Hack my Bitcointalk and how to Protect yourself?⚠️

[dkbit98]

another way to secure your profile is to Stake your Bitcoin address

This step is only helpful to secure forum accounts, not to secure bitcoin.  
Hackers can hack your computers, steal your account, and steal your money.
You can use signed message to get your account back, while your bitcoin will be stolen forever. There is no backwards trip for your bitcoin from hackers to you.

But you can always use empty BTC address with no Bitcoins to stake your address 

[1714030403]

1714030403

[1714030403]

1714030403

[1714030403]

1714030403

[hd49728]

Correct, what I mean is devices should be secured as much as possible, and should be the first priority of anyone who want to enter crypto world. Without devices security, they will lose money sooner or later.

[Velkro]

Correct, what I mean is devices should be secured as much as possible, and should be the first priority of anyone who want to enter crypto world. Without devices security, they will lose money sooner or later.

Which is very wide knowledge to learn. Its about knowing what you doing in computer world, knowing whats possible for hackers (almost everything) and whats not possible. Where you should focus your efforts to stay secure (crypto world).
This knowledge need often branches of more specialized computer knowledge to understand them.

Example from friend of friend, easiest to learn for him is by practice so he tried to write trojan horse, and he saw what is needed (from common shared knowledge) to avoid detection from Anti Virus software and now he knew that AV software is no good and you cant feel secure with it.

[dkbit98]

Correct, what I mean is devices should be secured as much as possible, and should be the first priority of anyone who want to enter crypto world. Without devices security, they will lose money sooner or later.

I agree with you.
Scammers are smart and they always invent new ways to scam people,
so we have to update our devices on regular basis, and keep them protected as much as possible.

There is no perfect 100% protection ... sadly 

[Velicfan]

Thanks for taking your time to do this especially for the newbies like us in the forum, I have just been scrolling and getting used to this forum, infact this is my first post so far. Thanks for the lesson.

[coolcoinz]

Correct, what I mean is devices should be secured as much as possible, and should be the first priority of anyone who want to enter crypto world. Without devices security, they will lose money sooner or later.

I agree with you.
Scammers are smart and they always invent new ways to scam people,
so we have to update our devices on regular basis, and keep them protected as much as possible.

There is no perfect 100% protection ... sadly 

Make sure the updates are legit. Many programs gained new vulnerabilities after being updated. For instance, some versions of wallets like Electrum had vulnerabilities.
I always say that the safest way is to keep your money offline on a separate device and have another PC to use for torrents, opening emails, forums and chats, and so on.
Also, don't click on any links you receive via pm or email unless you really know the sender.

[dkbit98]

Correct, what I mean is devices should be secured as much as possible, and should be the first priority of anyone who want to enter crypto world. Without devices security, they will lose money sooner or later.

I agree with you.
Scammers are smart and they always invent new ways to scam people,
so we have to update our devices on regular basis, and keep them protected as much as possible.

There is no perfect 100% protection ... sadly 

Make sure the updates are legit. Many programs gained new vulnerabilities after being updated. For instance, some versions of wallets like Electrum had vulnerabilities.
I always say that the safest way is to keep your money offline on a separate device and have another PC to use for torrents, opening emails, forums and chats, and so on.
Also, don't click on any links you receive via pm or email unless you really know the sender.

All good advises, and we should all know them,
but sadly many newbies don't, so we have to remind them all the time.
And even experts can become victims if they are not super careful

[bob123]

For instance, some versions of wallets like Electrum had vulnerabilities.

Just like any other wallet.

Each wallet had vulnerabilities in the past. There is not a single one which didn't.
And some do even still have vulnerabilities which will never be fixed (e.g. jaxx).

Also, don't click on any links you receive via pm or email unless you really know the sender.

Even if you know the sender you shouldn't click on links without verifying it.
If the original sender is compromised, malware could send emails to all contacts. While you'd believe the sender is a well known friend, in reality it is just some attacker who compromised the system of your friend.

Do not trust, verify.

[Cloudx]

thanks 
its reall helpfull for me to avoid any scam 

[LoyceV]

Scammers are smart

Lol, who to believe?

scammers are often pretty stupid

[dkbit98]

Scammers are smart

Lol, who to believe?

scammers are often pretty stupid

Trust no one. VERIFY

Modern viruses and trojans are not made by stupid, but rather evil individuals

[bob123]

Scammers are smart

Lol, who to believe?

scammers are often pretty stupid

It is not about who is smarter, but who is more retarded (the target or the scammer).

IMO most scams around here are so blatantly obvious and no one would fall for it if they at least applied basic knowledge regarding securing their coins and common sense.
But unfortunately greed > common sense.

[dkbit98]

It is not about who is smarter, but who is more retarded (the target or the scammer).

IMO most scams around here are so blatantly obvious and no one would fall for it if they at least applied basic knowledge regarding securing their coins and common sense.
But unfortunately greed > common sense.

I agree with you.
Retarded greed wins most of the time when combined with hurry speed, lack of attention and get rich quick mentality.
Sadly if I may say 

[seoincorporation]

Great tutorial dkbit98, This phishing attack failed, but sadly some times the hacker has good luck and get access to the accounts... People are thinking, who is stupid enough to lose his account by this way, but we could be distracted and when we realize it was a fake page it's too late.

This was a phishing attack, just one of those multiples attacks we can see on this forum, so, we should walk carefully in this mined field. Thanks again for the tutorial, i will leave a merit on the main post

[bomj]

These scammers did a bad job.
I always look in the browser line.
And if I saw this nonsense, I would laugh.))

But there are trickier ways!
To do this, you need to register a domain using similar letters:
ì - í - ï - ı - i / ό - ὂ - ὄ - ὅ - ö - o .............
And the "bitcointalk" site might look like this:
bıtcoıntalk.org
bitcόintalk.org
bìtcoìntalk.org
bitcointȧlk.org
...............

An example of such a site is http://lokıdn.com/blog.php
And mail -  info@lokıdn.com

I tried to register a site with such letters(bıtcόìntȧlk).
Try it yourself - https://godaddy.com
And here's what happened:

https://uk.godaddy.com/domainsearch/find?checkAvail=1&domainToCheck=bıtcόìntȧlk


Therefore, we must be careful.

https://pentest.com.tr/blog/Lapse-of-Keyboard-at-Internationalized-Domain-Name-EN.html
https://en.wikipedia.org/wiki/Í
https://en.wikipedia.org/wiki/Acute_accent
https://en.wikipedia.org/wiki/Latin_script_in_Unicode

[bustedsynx]

I think everyone should think about personal security as a standard operating procedure. Gone are the days that simple and similar  passwords across all web properties are enough. Everything is getting on the Internet, even your finances. That's why every link should be thought as suspect.

[dkbit98]

...

Yeah... I know all about this.
If someone wants to be evil he can always invent new ways to scam people.
One more thing he can do is to buy any bitcointalk alternative domains
https://www.namecheap.com/domains/registration/results.aspx?domain=bitcointalk


That is why I advice people to play anti-phishing quizzes
and learn protection in fun way:
https://bitcointalk.org/index.php?topic=5178375

[JohnBitCo]

...

Yeah... I know all about this.
If someone wants to be evil he can always invent new ways to scam people.
One more thing he can do is to buy any bitcointalk alternative domains
https://www.namecheap.com/domains/registration/results.aspx?domain=bitcointalk


That is why I advice people to play anti-phishing quizzes
and learn protection in fun way:
https://bitcointalk.org/index.php?topic=5178375

Being in an internet world, everyone should know what is phishing and what are the common ways by which scammers can scam you by impersonating the fake site as a real one. Since people do not listen and pay attention to these details, many have lost their accounts (social media & others) and even lost money from their bank accounts etc.

[cizatext]

The rate at which scammers are trying to take over bitcointalk account this days is on the rise so one need to be careful as long as we all know what phishing sites are all about.

[yazher]

This Phishing strategy became popular in this community with a different style of fraud. If you manage to avoid their first attempt of phishing they will think for another way and so on so forth.

In this case, everyone should continue not tired reading some advice from our fellow forum members, because there will be a time that we will fall to their trap and the last thing we could do is to regret that we didn't pay attention to the warning of the concern members.

Thanks for this awareness it may look like a simple thing to do but the way you let us see the actual photo of phishing will help us a lot to be aware when this kind of message will be sent to us especially those members who are not fluent in English including myself.