Phishing Attempts to be aware of

[Tittiez]

(I'm posting about the invoice jars in this thread because it's the only thread on bitcointalk that mentions it)

It's not just cloudhashing.com, it seems as though somebody got into the mailing servers (or at least spoofed them, but it looks legit) of various large/largish bitcoin websites, i got one from btc-e.

I got an email from both btc-e.com and cloudhashing.com with this invoice_772.jar

Actually, cloudhashing.com was invoice_773.jar

BTC-E:



Cloudhashing:



If somebody would like me to upload these jars somewhere so you can take a look at them, PM me and I'll send you a link.

[1714984817]

1714984817

[1714984817]

1714984817

[1714984817]

1714984817

[williamj2543]

Guys do you want to make an official phishing topic, to notify others? I can move this (I don't know what is a good subcategory for this).

[xcapator]

Guys do you want to make an official phishing topic, to notify others? I can move this (I don't know what is a good subcategory for this).

I think this thread should go to Beginners & Help section since there too many newbies unaware (or even dont know) about this stuff.

[williamj2543]

Guys do you want to make an official phishing topic, to notify others? I can move this (I don't know what is a good subcategory for this).

I think this thread should go to Beginners & Help section since there too many newbies unaware (or even dont know) about this stuff.

Allright I think I will move it there and rename it something like "active phishing attempts" or something.

[Dannie]

Really ? blockchain.info is scam ? or blockchain.imfo ??
I need to careful about it .

blockchain.info is the legit one.
You should bookmark the site, and never use a seemingly correct link you find in email to log in your account.

[Dannie]

Please post any phishing scams that you have seen related to bitcoin. I first started this thread to notify people of a blockchain.info phishing attempt, and the original post is below, and after other people started posting other phishing emails I decided to move it to beginners and help to help others to not fall victim to these scams. Always be careful, general tips are to check the original email sender, and whenever you click a link, check the URL at the top. Usually people say to check if there is a green lock, but I hate this rule. Anyone can buy a green lock for about 2$, so you have to click on the green look and make sure it is the website you are looking for.

That is a good idea.
For those interested, you can also check https://blog.blockchain.com/security-alerts/ to find some more historical examples of phishing attempts.

[catena5260]

Wouldn't it be easy for someone to figure out who owned that url and charge him with conspiracy to hacking and stealing?

Not that easy if the server is hosted abroad. It is hard make some countries cooperate with your justice.


Plus I guess the url was registered using fake data

[nobunaga]

hey guys, yesterday i clicked that jar file ( yes I am an Idiot). Good thing I have last line of defenses (2-Factor Authentication, encryption) on every coins related programs and websites. I deleted the file right away, but I am still worried something hidden program is still there on my pc. could you guys please help me how to scan and remove it? i ran anti-virus programs like malware bytes and AVG and they showed that file is "clean".  I am confused now. please help.

[Milkcookie]

the best is that you run as well some registry cleaner to be sure !

[williamj2543]

Always keep an antivirus (I use avg) on a PC holding or transferring bitcoins. If you lose your bitcoins, your loss, whereas with a bank they usually refund any fraudulent transactions. ESPECIALLY if you are actually holding the bitcoin wallet on your harddrive, like bitcoin-qt. Never open any suspicious emails, and use common sense.

[ksoza]

got that too funny stuff

[PangPang]

hey guys, yesterday i clicked that jar file ( yes I am an Idiot). Good thing I have last line of defenses (2-Factor Authentication, encryption) on every coins related programs and websites. I deleted the file right away, but I am still worried something hidden program is still there on my pc. could you guys please help me how to scan and remove it? i ran anti-virus programs like malware bytes and AVG and they showed that file is "clean".  I am confused now. please help.

I am paranoid, and I suggest you to format the hard disk after backing up the important files.

For anti-virus programs, they can't catch 100% of the malware.
But still it is good to have a good anti-virus program as they can probably catch 90% of the malware.

[oceans]

Thank you for posting this. We can all have those moments were we lose concentration for a few seconds and can accidentally click on something not realising but seeing posts like this is a stark reminder of just how bad things can be if we did and what do look out for.

[williamj2543]

Set a second password on your blockchain wallet. If a hacker gets your credentials they need this second password t actually get any money out.

[ofirbeigel]

I also got a Coindesk phishing attempt and later on a CryptoCoinsNews phishing attempt.

[williamj2543]

I also got a Coindesk phishing attempt and later on a CryptoCoinsNews phishing attempt.

Thanks for the info. The more the better, we gave to spread the word of all these scams.

[feryjhie]

i already got an email from blockchain after i open the link its look phising website

and i close that link

[williamj2543]

i already got an email from blockchain after i open the link its look phising website

and i close that link

You should be fine. I don't think its possible for a website to directly infect you without downloading anything. Even if it looks like a phishing website I still open it so that I know how it looks. 

[feryjhie]

i already got an email from blockchain after i open the link its look phising website

and i close that link

You should be fine. I don't think its possible for a website to directly infect you without downloading anything. Even if it looks like a phishing website I still open it so that I know how it looks. 

yeah i still open for 5 minutes to see how it looks
and the i close that link and delete the email from my email

[Nawaytes]

i already got an email from blockchain after i open the link its look phising website

and i close that link

You should be fine. I don't think its possible for a website to directly infect you without downloading anything. Even if it looks like a phishing website I still open it so that I know how it looks. 

yeah i still open for 5 minutes to see how it looks
and the i close that link and delete the email from my email

haha me too, sometimes we want to know how the phising looks like 
there are many types of phishing that used by the bad guys