Bitcoin Forum
December 10, 2016, 12:44:42 PM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: MT. GOX PHISH SITE REPORTED: ltgox.com  (Read 1215 times)
ErgoOne
Full Member
***
Offline Offline

Activity: 126


View Profile
January 14, 2012, 05:48:08 PM
 #1

There is a live Mt. Gox phish site at the domain ltgox dot com.  I just saw this on Twitter:

   @mikko: Bitcoin users, note that "ltgox ․ com" hosts a live Mt.Gox phishing site. Stores
               stolen logins to "/home/ddancom/". Oh, hello there @ddancom

I have a tool for investigating malware and phish sites, so I opened the URL.  It is live as of 17:46 UTC (9:46 AM on the U.S. west coast.)  Do NOT be fooled.

By the way, @mikko is Mikko Hypponen, who works for Finnish company F-Secure and is one of the top malware and security experts in the world.  @ddancom is presumably the phisher. Wink
1481373882
Hero Member
*
Offline Offline

Posts: 1481373882

View Profile Personal Message (Offline)

Ignore
1481373882
Reply with quote  #2

1481373882
Report to moderator
1481373882
Hero Member
*
Offline Offline

Posts: 1481373882

View Profile Personal Message (Offline)

Ignore
1481373882
Reply with quote  #2

1481373882
Report to moderator
1481373882
Hero Member
*
Offline Offline

Posts: 1481373882

View Profile Personal Message (Offline)

Ignore
1481373882
Reply with quote  #2

1481373882
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
rjk
Sr. Member
****
Offline Offline

Activity: 420


1ngldh


View Profile
January 14, 2012, 06:00:33 PM
 #2

How lame. It uses the old site template, and doesn't even redirect to the real site once credentials are entered.

P.S., spam this guys database with fake credentials.

Mining Rig Extraordinaire - the Trenton BPX6806 18-slot PCIe backplane [PICS] Dead project is dead, all hail the coming of the mighty ASIC!
ErgoOne
Full Member
***
Offline Offline

Activity: 126


View Profile
January 14, 2012, 06:13:49 PM
 #3

It's probably a waste of time to spam the fake credentials.  Even on a Saturday, with Mikko Hypponen on the case, it'll be down soon.  Also, Spamhaus just listed the IP that hosts the site.

But if it makes you feel good.... Wink
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!