Caution - Large scale phishing attempt (targeting blockchain.info wallets)

[Tirapon]

http://www.reddit.com/r/Bitcoin/comments/2i5gzg/largescale_phishing_attack_via_satoshi_spam/

[medUSA]

Seems to be a genuine phishing attack. Read OP's link above. ^^^

Typing in a valid Blockchain Identifier brings you to "https://bbckchain.info". Obviously, do not click this link.

[TrailingComet]

Thanks for the cautionary post,I have 2FA enabled so should hopefully be safe if I take the usual precautions

[Tirapon]

https://blockchain.info/address/15QwSkSFLGEaENDzRHBDAhQeTzjUT36ESL?offset=2100&filter=0

The address started sending out dust transactions to multiple addresses yesterday. Fortunately it looks like the link (New Message - bitmsqr.com) has been removed (by blockchain.info staff?)

[H.W.Z]

Go to blockchain wallet and always type by ourself, make sure the address is blockchain.info

[Q7]

I just reposted this on my local bitcoin community forum. Hopefully nobody fell for it

[Onestopbrokers Directory]

Thanks for posting about this.

[bitllionaire]

but how do they try to get your data? I can't see it

[Tirapon]

but how do they try to get your data? I can't see it

https://blockchain.info/address/15QwSkSFLGEaENDzRHBDAhQeTzjUT36ESL?offset=2100&filter=0

The address started sending out dust transactions to multiple addresses yesterday. Fortunately it looks like the link (New Message - bitmsqr.com) has been removed (by blockchain.info staff?)

[a447513372]

https://blockchain.info/address/15QwSkSFLGEaENDzRHBDAhQeTzjUT36ESL?offset=2100&filter=0

The address started sending out dust transactions to multiple addresses yesterday. Fortunately it looks like the link (New Message - bitmsqr.com) has been removed (by blockchain.info staff?)

This is a real weakness of the 'tagging' system of blockchain.info as they let you tag your address as anything you wish in an automated fashion.

I would say this is a prime example as to why you should only log into any site after you have personally typed in the address into your address bar

[twister]

Seems to be a genuine phishing attack. Read OP's link above. ^^^

Typing in a valid Blockchain Identifier brings you to "https://bbckchain.info". Obviously, do not click this link.

Wait, I don't understand this part.  

If I copy paste my identifier, the one which is provided when you make a blockchain wallet, it can't take u to bbockchain mentioned above, can it?

I mean copy pasting the entire link into the address bar, blockchain.info/wallet/ --identifier--

[pabpete]

Thanks for the heads up!

[chanz]

I don't even have a blockchain.info wallet but i got my 0.0001 BTC anyways

They are getting addresses from incoming transactions on blockchain no matter which wallet you have.
if it happens to be a transactions going on from your wallet you got one.

I got got one yesterday too but now the tagged link "bitmsqr.com" and the message have been removed by blockchain
and it's confirmed too now. So, just be careful what you click at.

[BTCmoons]

Seems to be a genuine phishing attack. Read OP's link above. ^^^

Typing in a valid Blockchain Identifier brings you to "https://bbckchain.info". Obviously, do not click this link.

Wait, I don't understand this part.  

If I copy paste my identifier, the one which is provided when you make a blockchain wallet, it can't take u to bbockchain mentioned above, can it?

I mean copy pasting the entire link into the address bar, blockchain.info/wallet/ --identifier--

When you log into your blockchain.info wallet you should manually type in the address into your browser (I would not even use bookmarks) and if your identifier is not prefilled (because of the lack of cookies) then you should copy/paste your identifier into the identifier field to login.

[TradeSmart]

Received this as well. Hopefully no one will fall for this.

[ofortuna]

Seems to be a genuine phishing attack. Read OP's link above. ^^^

Typing in a valid Blockchain Identifier brings you to "https://bbckchain.info". Obviously, do not click this link.

Wait, I don't understand this part.  

If I copy paste my identifier, the one which is provided when you make a blockchain wallet, it can't take u to bbockchain mentioned above, can it?

I mean copy pasting the entire link into the address bar, blockchain.info/wallet/ --identifier--

When you log into your blockchain.info wallet you should manually type in the address into your browser (I would not even use bookmarks) and if your identifier is not prefilled (because of the lack of cookies) then you should copy/paste your identifier into the identifier field to login.

Excellent tips

[mnmShadyBTC]

I don't even have a blockchain.info wallet but i got my 0.0001 BTC anyways

They are getting addresses from incoming transactions on blockchain no matter which wallet you have.
if it happens to be a transactions going on from your wallet you got one.

I got got one yesterday too but now the tagged link "bitmsqr.com" and the message have been removed by blockchain
and it's confirmed too now. So, just be careful what you click at.

blockchain.info is one of (if not the) most widely used wallet service used. I don't think they were doing this but it is possible to look at individual transactions and see that a TX was first relayed via blockchain.info and infer that the blockchain.info wallet is being used

[twister]

Seems to be a genuine phishing attack. Read OP's link above. ^^^

Typing in a valid Blockchain Identifier brings you to "https://bbckchain.info". Obviously, do not click this link.

Wait, I don't understand this part.  

If I copy paste my identifier, the one which is provided when you make a blockchain wallet, it can't take u to bbockchain mentioned above, can it?

I mean copy pasting the entire link into the address bar, blockchain.info/wallet/ --identifier--

When you log into your blockchain.info wallet you should manually type in the address into your browser (I would not even use bookmarks) and if your identifier is not prefilled (because of the lack of cookies) then you should copy/paste your identifier into the identifier field to login.

Yes, I do just that, I type the website name in the address bar and copy-paste my identifier into the sub-field, I assumed it was the safest way. Thanks for clearing that for me.