Bitcoin Forum
May 02, 2024, 09:16:28 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Phishing attack on btctalk users  (Read 1433 times)
IKnowWhatYouDid (OP)
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
November 19, 2014, 06:25:32 PM
 #1

Just wanted to report that some scumbag is attacking btctalk users that have a public email sending this email.
The link redirects to www.petcaretv.com

--------------------------------------------------------------------------------------------------------------------

Dear Users,

This mail was sent because you need install New Update for your browsers (Mozilla Firefox ,Internet Explorer,Chrome,...) for News updates on [Suspicious link removed] set Java Software for your Browsers click the following link:
https://bitcointalk.org

Regards,
The Bitcoin Forum Team.

----------------------------------
You are receiving this message because you are a member of the
Bitcoin Forum. If you do not want to receive further messages, you
can change your notification preferences here:
https://bitcointalk.org/index.php?action=profile;sa=notification
https://bitcointalk.org/index.php?action=profile;sa=pmprefs

If you have forgotten your password, you can reset it here:
https://bitcointalk.org/index.php?action=reminder
This is an automated email - Please do not replay.
1714684588
Hero Member
*
Offline Offline

Posts: 1714684588

View Profile Personal Message (Offline)

Ignore
1714684588
Reply with quote  #2

1714684588
Report to moderator
Once a transaction has 6 confirmations, it is extremely unlikely that an attacker without at least 50% of the network's computation power would be able to reverse it.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714684588
Hero Member
*
Offline Offline

Posts: 1714684588

View Profile Personal Message (Offline)

Ignore
1714684588
Reply with quote  #2

1714684588
Report to moderator
1714684588
Hero Member
*
Offline Offline

Posts: 1714684588

View Profile Personal Message (Offline)

Ignore
1714684588
Reply with quote  #2

1714684588
Report to moderator
IKnowWhatYouDid (OP)
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
November 21, 2014, 05:28:49 PM
 #2

I analyzed the header of the email and this appears to be the source of the spam attack:

https://cdn.anonfiles.com/1416590866573.png
jc01480
Hero Member
*****
Offline Offline

Activity: 854
Merit: 500


Nope..


View Profile
November 23, 2014, 02:51:19 PM
 #3

I received an email several weeks ago from a scammer I'd been corresponding with that he'd hacked the forum's data and retrieved all the email addresses from every user.  I reported it to a certain someone who clearly didn't do a damn thing about it.  This site is apparently as leaky as the US Government.  Better to withhold confidential information throughout.  May or may not be related to this post.
BITCOINDENMARK
Sr. Member
****
Offline Offline

Activity: 280
Merit: 250



View Profile
November 24, 2014, 08:32:13 PM
 #4

I analyzed the header of the email and this appears to be the source of the spam attack:




How did you get that ip ?   I got this from the header; 205.186.168.158
IKnowWhatYouDid (OP)
Newbie
*
Offline Offline

Activity: 8
Merit: 0


View Profile
November 25, 2014, 11:03:43 AM
 #5

Analyzed the header with whatismyipaddress.com
Great tool by the way.

I don't think this site is compromised. Some people make their emails public and this makes them easy preys for phishing attacks.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!