Phishing Attempts to be aware of

[williamj2543]

MOVED THREAD, could someone please sticky this for newbies and anyone else to be aware of?

Please post any phishing scams that you have seen related to bitcoin. I first started this thread to notify people of a blockchain.info phishing attempt, and the original post is below, and after other people started posting other phishing emails I decided to move it to beginners and help to help others to not fall victim to these scams. Always be careful, general tips are to check the original email sender, and whenever you click a link, check the URL at the top. Usually people say to check if there is a green lock, but I hate this rule. Anyone can buy a green lock for about 2$, so you have to click on the green look and make sure it is the website you are looking for.

ORIGINAL POST:

Today I received an email from "blockchain" saying my wallet will be locked, and I need to verify my account to unlock it. The email looks very similar to an email from blockchain.info, but I had NEVER got an email from blockchain like this so I instantly knew it wasn't from blockchain. I checked who its from, and the email was sent from: contact@blackchain.fo
I think theres a bot crawling these forums for email addresses.
This is what the email looks like:

If you click on the link, you are directed to a website that looks exactly like the blockchain.info wallet sign in page, but the URL is a lot different, and is easily noticeable. The URL was: http://www.blockchain.0800co.co.uk/en/wallet/login/62608fc635ceb5435bc2f7d51445ec89c8ba72da9a64bce2b398170e907a841200a28aee6c5e25d388a01a4c04c91f31/login.php?page=Login?token=7777772e626c6f636b636861696e2e30383030636f2e636f2e756bb9ef8a71b399cfafd89524da6fb5524f
Don't click on it please, and be VERY careful with emails from blockchain.info. I would reccomend adding contact@blackchain.fo to a blacklist or a spam list if your email provider has something like that.

[1714975888]

1714975888

[1714975888]

1714975888

[1714975888]

1714975888

[1714975888]

1714975888

[1714975888]

1714975888

[1714975888]

1714975888

[Sindelar1938]

Thanks for posting
A needed reminder that a single moment of inattention can cost us all dear!

[williamj2543]

Thanks for posting
A needed reminder that a single moment of inattention can cost us all dear!

No problem. I'll post again if I get another phishing attempt on my email. I also had one from  cavirtex.com, but that was a long time ago.

[Perseus353]

In the past week I've gotten identical "Invoice Payment Confirmation" emails from "Cloudhashing" and "Cointerra".

No text in the email -- just an attachment with a file called "invoice_772.jar"

Seems a phishing attempt too.

[ProtoAES256]

Same here, just received.
http://www.blockchain.0800co.co.uk/
ima gonna report dat site.

[fdiini]

Wouldn't it be easy for someone to figure out who owned that url and charge him with conspiracy to hacking and stealing?

[The Haxxor]

thanks for the information mate.

[Sunderland]

yes i received mail from blockchain.IMFO
not .INFO

damn almost got scam because of that ...info / imfo

[Coinhunter32]

Anyone into their senses and not drunk can notice the .co.uk

We can't even click on Home button

[williamj2543]

Someone get the registrar and report this. This should be stopped, many people will lose btc.

[marcotheminer]

ALSO we very wary of blockchain.imfo... They started not long ago too...

[ikank268]

Really ? blockchain.info is scam ? or blockchain.imfo ??
I need to careful about it .

[CrackedLogic]

I also got this,  I posted a thread about it in the trading discussion board.

[pikabit]

I always double triple quadruple check. Paranoia crew.

[BTCevo]

Easy way to prevent phishing attacks like this is to hide your email address on your bitcointalk.org profile guy's

[aerobatic]

In the past week I've gotten identical "Invoice Payment Confirmation" emails from "Cloudhashing" and "Cointerra".

No text in the email -- just an attachment with a file called "invoice_772.jar"

Seems a phishing attempt too.

I too received fake invoice .JAR files from those two companies, but im a customer of both of those companies.  Are you ALSO a customer of those companies as well?  Or are they just random 'bitcoin related' companies being used to spoof the emails to try and get you to click the .jar files.

its annoying that my antivirus didnt pickup a threat in the .JAR file when there clearly is.  No doubt its something to assist in extracting bitcoins or private keys or something.

[evanito]

These people are cold as ice to scam in the name of such a backbone bitcoin website.

[snappa4ever]

This is really much too common. You should always use common sense when clicking on links, regardless if you are involved in bitcoin or not.

[williamj2543]

Also guys a tip for the future, always be careful of the capital I in emails and links, it looks the exact same as a lowercase L and is almost impossible to spot if you don't check it.

[ProtoAES256]

Someone get the registrar and report this. This should be stopped, many people will lose btc.

I've reported to the registrar(123-reg.co.uk) but they refer me to the actual host, that is webfusion.com. Now I'm still waiting for reply. Feel free to spam them at abuse@webfusion.com