Are you an E-Toro customers? You need to read this

UserU

hero member

Activity: 2240

Merit: 537

FREE passive income eBook @ tinyurl.com/PIA10

Quote from: andreibi on July 13, 2020, 10:03:39 AM

Actually there are already a handful of exchange-integrated third-party copy trading platforms out there - subscription-based, fund-based, token-based.

Do you have some examples? I'll have a look since the last time I checked, the copying concept was still fairly new (not eToro).

Lucasgabd

legendary

Activity: 2506

Merit: 1113

There's no need to be upset

Quote from: andreibi on July 13, 2020, 10:03:39 AM

Quote from: UserU on July 13, 2020, 06:50:32 AM

There are two things eToro offer that most don't; social media and copy traders.

Actually there are already a handful of exchange-integrated third-party copy trading platforms out there - subscription-based, fund-based, token-based.

yes, aluna.social is a starting project that also offers copy trading
just like 1broker did in the past.

andreibi

legendary

Activity: 1647

Merit: 1012

Practising Hebrew before visiting Israel

Quote from: UserU on July 13, 2020, 06:50:32 AM

There are two things eToro offer that most don't; social media and copy traders.

Actually there are already a handful of exchange-integrated third-party copy trading platforms out there - subscription-based, fund-based, token-based.

UserU

hero member

Activity: 2240

Merit: 537

FREE passive income eBook @ tinyurl.com/PIA10

Quote from: pakhitheboss on July 13, 2020, 06:42:42 AM

e-toro as per my understanding is a forex trading platform, when did they integrate crypto trading on to their platform?

I am not sure why anyone will use them to trade cryptocurrency? There are tons of cryptocurrency exchange providing the same service and are much better than them.

It is better to avoid such platforms.

IINM, it was since 2014.

Quote from: https://www.coindesk.com/company/etoro

In 2014, eToro introduced bitcoin trading through contracts for difference (CFD) for some of its users, and classified it as a stock to help users familiarize themselves with the asset

Mainly because eToro doesn't allow you to buy or sell; you only bet on the price movements. In other words, you don't own any crypto or Bitcoin on their platform.

There are two things eToro offer that most don't; social media and copy traders.

pakhitheboss

hero member

Activity: 2156

Merit: 803

Top Crypto Casino

e-toro as per my understanding is a forex trading platform, when did they integrate crypto trading on to their platform?

I am not sure why anyone will use them to trade cryptocurrency? There are tons of cryptocurrency exchange providing the same service and are much better than them.

It is better to avoid such platforms.

Lucasgabd

legendary

Activity: 2506

Merit: 1113

There's no need to be upset

friendly reminder to keep security practices on all exchanges:
use 2FA
use different passwords (and strong ones)
use different emails for each crypto service (creating a protonmail takes only 2 minutes)
and don't keep money on exchanges without knowing it could be lost or stolen.

UserU

hero member

Activity: 2240

Merit: 537

FREE passive income eBook @ tinyurl.com/PIA10

Quote from: DdmrDdmr on July 13, 2020, 02:30:33 AM

Quote from: UserU on July 13, 2020, 01:03:56 AM

<...>

When using Google to sign-in to a third-party site, the site does not gain access to your password, but rather Google validates your credentials, and sends a token to the site to manage. Google may also send:

Quote

<…> These third-party sites or apps can request the name, email address, and profile picture associated with your account. <…>

https://support.google.com/accounts/answer/112802?co=GENIE.Platform%3DDesktop&hl=en

With the above, eToro (or any other third-party site allowing you to log-in using your Google credentials) may have stored your email, but not your password. I’d use 2FA with my Google account if it were the case.

Thanks, my Google account has 2FA enabled. But unfortunately many sites still haven't integrated Google Sign In so if they get compromised, we're pretty much screwed.

DdmrDdmr

legendary

Activity: 2338

Merit: 10802

There are lies, damned lies and statistics. MTwain

Quote from: UserU on July 13, 2020, 01:03:56 AM

<...>

When using Google to sign-in to a third-party site, the site does not gain access to your password, but rather Google validates your credentials, and sends a token to the site to manage. Google may also send:

Quote

<…> These third-party sites or apps can request the name, email address, and profile picture associated with your account. <…>

https://support.google.com/accounts/answer/112802?co=GENIE.Platform%3DDesktop&hl=en

With the above, eToro (or any other third-party site allowing you to log-in using your Google credentials) may have stored your email, but not your password. I’d use 2FA with my Google account if it were the case.

UserU

hero member

Activity: 2240

Merit: 537

FREE passive income eBook @ tinyurl.com/PIA10

Oh great, saw this earlier on my Twitter feed.

Are Google users affected? By which I mean those using Google to sign in.

btc_angela

hero member

Activity: 2660

Merit: 551

Quote from: Assface16678 on July 12, 2020, 09:33:10 AM

It looks like the E-toro does not have a good database management system because there is a leak that came from the other users and spreading all of that information and selling right there. I think they must need to take down this kind of process and make an action immediately.

I think crypto trading platforms can only do that much in terms of their security. Because hackers are just two steps on the game right now and the thought that you have an account there that you don't know have been leaked already is really scary. Services that has been attacked are either denying it or acknowledging that there was really a breach. I do hope that E-Toro is the latter and doing some root cause analysis and get someone to strengthen their security, not just their system but the people involved their employees because hackers can target them in a phishing attack as well.

Maybe you need to wait it out before registering on E-Toro mate.

LTU_btc

legendary

Activity: 3234

Merit: 1375

Slava Ukraini!

Thanks for sharing these news. I don't use E-Toro, but it's popular trading platform and I think that many people here use it. And looking at all things in general - reputation of this user in hackers forum, history of other his hacks, it doesn't looks like fake thing.
So, if you're using this platform, changing your passeord is must do thing. Better safe than sorry. And it would be best to set up 2FA if you're not using it already.

Assface16678

full member

Activity: 1484

Merit: 136

★Bitvest.io★ Play Plinko or Invest!

From the previous months, I'm planning about using the E-toro because this is popular into the world of copy trading which is a good thing to me that someone will make a trade but now I roughly doubt about the things shared by OP because why there are auctions of an account right here and how about the security of their users when they are trying to buy this account there is a KYC right there and how about the information they will use on it.

Quote from: Findingnemo on July 11, 2020, 10:21:57 PM

Quote from: TravelMug on July 11, 2020, 06:47:50 PM

I'm not sure if E-Toro already recognised this hacked or supposedly hacked. But based on the article the hackers have started to make a name for himself and even getting hired by other group of hackers to get him onboard because he has been hacking a lot and being successful.

And E-Toro I would say is getting some noise in the last couple of years, specially with their copy-trading. So maybe there are crypto traders here who have an account with them and they could be a potential victims if this hacking is real.

Even google is promoting their copy trading advertisement on various platform so yes there will be lot of new people entered into the site for trading activities.But how such amount of accounts can be stolen, is the database got leaked or they used to hack individuals.

It looks like the E-toro does not have a good database management system because there is a leak that came from the other users and spreading all of that information and selling right there. I think they must need to take down this kind of process and make an action immediately.

Nellayar

full member

Activity: 868

Merit: 185

Roobet supporter and player!

Quote from: www.securitynewspaper.com

The incident is already being investigated by those responsible for the platform, although experts in secure data erasure recommend potentially affected users to reset their passwords as an additional security measure while resolving this issue.

Those responsible for the attack operate on the deep web, which has become the ideal refuge for cybercrime groups. For years, authorities in dozens of countries have invested considerable efforts in combating clandestine hacking forums housed in this area of the Internet, although it is virtually impossible to stop their advance.

For further reports on vulnerabilities, exploits, malware variants and computer security risks, it is recommended to enter the website of the International Institute of Cyber Security (IICS), as well as the official platforms of technology companies.

For updates, there is already investigation for this data leaking event. It may inflict a bad reputation for E-toro since the privacy and security have been risked. They should make a step on how to detect the user who posted in the said hacking forum.

I do not have yet an account in E-toro and I am currently planning to make a new account. Well, this event might cease me in pursuing to trade in E-toro unless otherwise there is no threat or potential threat in accounts.

For those who will change their passwords:

[GUIDE] How to Create a Strong/Secure Password

This one may help you to create a strong/secure password. Just be vigilant guys and always update your passwords.

reference: https://www.securitynewspaper.com/2020/07/10/data-leaking-hackers-are-selling-62000-accounts-from-etoro-the-online-trading-platform/

Findingnemo

hero member

Activity: 2366

Merit: 793

Bitcoin = Financial freedom

Quote from: joniboini on July 12, 2020, 01:19:48 AM

Quote from: Findingnemo on July 11, 2020, 10:21:57 PM

Even google is promoting their copy trading advertisement on various platform so yes there will be lot of new people entered into the site for trading activities.

Well, if they paid for it then I guess it's expected.

Regardless of whether this hack is true or not, companies should improve their security such as moving from old plain-text databases or simple encryption. Implementing 2FA should be mandatory with an IP check. Assuming their users are doing good security practice, this is at least what they can do to prevent another attack whithin a short time frame.

Having login guard for unauthorized IP addresses could save most of the people from getting hacked even if their account credentials got leaked, 2FA will add one more layer of security to the account but most of the crypto-related sites having poor security encryptions.But they are paying huge amount for advertisement purposes alone. Shocked

cryptomaniac_xxx

hero member

Activity: 1344

Merit: 540

Quote from: hugeblack on July 11, 2020, 04:08:07 PM

What is the credibility of the above-mentioned hacker forum?

Usually this cyber threat investigators knows what hacker forums to look at, so I have no doubt that the source forum could really be legit source.

Quote from: TravelMug on July 11, 2020, 06:47:50 PM

I'm not sure if E-Toro already recognised this hacked or supposedly hacked. But based on the article the hackers have started to make a name for himself and even getting hired by other group of hackers to get him onboard because he has been hacking a lot and being successful.

It's a job for most of this criminals, the hackers could really be making a name in the hacking world and this is his way to be known to his fellow criminals, his career his starting only and it is very scary.

Quote from: Findingnemo on July 11, 2020, 10:21:57 PM

Even google is promoting their copy trading advertisement on various platform so yes there will be lot of new people entered into the site for trading activities.But how such amount of accounts can be stolen, is the database got leaked or they used to hack individuals.

This has nothing to do with Google, if they are getting paid handsomely, they will promote it in their platform even in Youtube.

The best way to combat this one is to update and change your password immediately and then withdraw your money from it.

joniboini

legendary

Activity: 2170

Merit: 1789

Quote from: Findingnemo on July 11, 2020, 10:21:57 PM

Even google is promoting their copy trading advertisement on various platform so yes there will be lot of new people entered into the site for trading activities.

Well, if they paid for it then I guess it's expected.

Regardless of whether this hack is true or not, companies should improve their security such as moving from old plain-text databases or simple encryption. Implementing 2FA should be mandatory with an IP check. Assuming their users are doing good security practice, this is at least what they can do to prevent another attack whithin a short time frame.

Findingnemo

hero member

Activity: 2366

Merit: 793

Bitcoin = Financial freedom

Quote from: TravelMug on July 11, 2020, 06:47:50 PM

I'm not sure if E-Toro already recognised this hacked or supposedly hacked. But based on the article the hackers have started to make a name for himself and even getting hired by other group of hackers to get him onboard because he has been hacking a lot and being successful.

And E-Toro I would say is getting some noise in the last couple of years, specially with their copy-trading. So maybe there are crypto traders here who have an account with them and they could be a potential victims if this hacking is real.

Even google is promoting their copy trading advertisement on various platform so yes there will be lot of new people entered into the site for trading activities.But how such amount of accounts can be stolen, is the database got leaked or they used to hack individuals.

TravelMug

hero member

Activity: 2632

Merit: 833

I'm not sure if E-Toro already recognised this hacked or supposedly hacked. But based on the article the hackers have started to make a name for himself and even getting hired by other group of hackers to get him onboard because he has been hacking a lot and being successful.

And E-Toro I would say is getting some noise in the last couple of years, specially with their copy-trading. So maybe there are crypto traders here who have an account with them and they could be a potential victims if this hacking is real.

btc_angela

hero member

Activity: 2660

Merit: 551

Quote from: OcTradism on July 11, 2020, 09:37:23 AM

What's up? It is not new in life.

Don't buy any account on any platform (the forum, P2P marketplaces, exchanges, emails, PayPal, etc.) if you don't want to get annoying troubles, sometimes with financial loses or jail punishments. Who knows?

From the start, people choose to do this (buying accounts) because they want to do something shady and they believe or hope that there will be nothing bad knocks their doors. Such a life, sometimes their doors will be knocked without invitations.

I think you misunderstood what the intentions of the OP in sharing this. It's not about buying an account in any platform. It is simply to make aware that if you are an E-Toro customers or you have an account with them, most likely it has been compromise already and your account are being sold in dark web or dark market so as a preventive measures, you must change your password now.

hugeblack

legendary

Activity: 2702

Merit: 4002

The auction date starts on July 6, so it has been around a week without the platform announcing that it has been hacked or that something has happened.
It will be a moral failure for them if they do not know about hacking, and it will be worse if they know.

It is a good idea to change the password, but if there any hack reported in the coming days, stop using it because they are either lazy or liars.

What is the credibility of the above-mentioned hacker forum?

Topic: Are you an E-Toro customers? You need to read this (Read 325 times)