Blockchain.info PHISHING ATTACK | Bitcointalksearch.org

richardsNY

legendary

Activity: 1232

Merit: 1091

Quote from: Kprawn on October 26, 2017, 10:27:21 AM

type your own URLs to the sites you use regularly.

Spot on. I am extremely paranoid when it comes to everything related to the internet, and for that reason I type the URL I am about to visit, check it 3 times to see if it's really correct, and then proceed. The thing is that people only learn when something has actually happened, and from there their paranoid towards everything internet related will only grow. Important is also the fact to use a different mail address for each and every site. I remember having signed up with my mail address in an app that allows you to play a game and earn Bitcoin. A month or two later I started receiving mails from various exchanges that my password was expired, and that while I wasn't even registered there. Very like the result of a database hack.

khufuking

sr. member

Activity: 840

Merit: 266

Thanks for warning others , There is one very important yet very simple rule all should follow , Never ever open your wallet from a link you received threw (mail , DM , chat etc ) , Only open your wallet , exchange etc .. from bookmark or by write it by yourself , And even after doing that always check for the https .

supine

full member

Activity: 1036

Merit: 109

Quote from: Yovas on September 25, 2017, 06:47:48 PM

Hi guys.
I just wanted to let the public know that there's currently a phishing attack going on targeting blockchain.info.
I just got an email supposedly from blockchain.info stating that my wallet was credited with 0.54798743 BTC. So I quickly noticed that email address was not under blockchain.info domain. However, the email template layout was very similar to that of blockchain.info.
Also, when I clicked on the link, to check my wallet, the site I was redirected, had the same layout as blockchian.info.
Check it out.

If you look carefully, even though it looks very legit, their domain is https://blockchfain.info
There's that one letter 'F' that is hard to notice. Also, they seem to have all the other pages hosted by the actual blockchain.info.

Just keep an eye out for that and be careful before logging in if you get a similar email to this.
Also, another easy flag to identifying the REAL blockchain should be their SSL certificate. The real blockchain SLL certificate looks like the following

Good luck

Thanks for the information, I received an email too and there's a lot of phishing attack. There was a message that there was an excess ethereum to be distributed to those who are holding ethereum in their MEW, there was a MEW link attached, however, there was no indication that the site is MEW and it looked similar to MEW. Just be aware guys.

Kprawn

legendary

Activity: 1904

Merit: 1074

Rule #1 in Bitcoin - DO NOT click on links in emails. Rule #2 --> type your own URLs to the sites you use regularly. It is that

simple... if you follow these two rules, you will not get Phished. A lot of people are just too lazy to type and they click on BS

links like that. Also, DO NOT click on AUTO COMPLETED links.... some hackers have exploited that too... type the WHOLE link.

mistanama

sr. member

Activity: 327

Merit: 250

During this time the hackers and evil spirits were spreading. Due to the high cost of Altcoins and especially the Bitcoins. So we are careful because hackers will do everything to steal our hard-earned money. Always check the spelling of the wallet site we are going to. Just like I've seen recently.

BIockchain.info B (I) ockchain.info An out-of-print letter is a (Ii). Many have been victimized because of the overwhelming majority of the Big letters i in the Small Letters L

LFC_Bitcoin

legendary

Activity: 3556

Merit: 9709

#1 VIP Crypto Casino

Quote from: ?? on ??

Always check for https and be very slow and cautious when anyone emails you about money. Type the site in yourself and check the site for notice.

These kind of phishing attempts will always exist, it’s just like you get emails from somebody in Africa telling you you’ve won money.

Nobody should ever fall for this shit - Like you said just keep your head screwed on people, be vigilant.

mycryptobiz

newbie

Activity: 15

Merit: 0

Quote from: Yovas on September 25, 2017, 06:47:48 PM

Hi guys.
I just wanted to let the public know that there's currently a phishing attack going on targeting blockchain.info.
I just got an email supposedly from blockchain.info stating that my wallet was credited with 0.54798743 BTC. So I quickly noticed that email address was not under blockchain.info domain. However, the email template layout was very similar to that of blockchain.info.
Also, when I clicked on the link, to check my wallet, the site I was redirected, had the same layout as blockchian.info.
Check it out.https://i.imgur.com/zHGg7xw.png

If you look carefully, even though it looks very legit, their domain is https://blockchfain.info
There's that one letter 'F' that is hard to notice. Also, they seem to have all the other pages hosted by the actual blockchain.info.

Just keep an eye out for that and be careful before logging in if you get a similar email to this.
Also, another easy flag to identifying the REAL blockchain should be their SSL certificate. The real blockchain SLL certificate looks like the following
https://i.imgur.com/hDQHBfZ.png

Good luck

Glad that you give this info to alert others in this forum,Yes but this kind of phising attacks are going over the internet over many many days.
Their are basically 3 types of phishing attacks in bitcoin.
1.They will invite you by email and want to steal your bitcoin by some Sammy links just as you mentioned.
2.they try to be in your computer and and access your wallet .even if you have 2fa enabled they will make popups in your computer and ask you to turn off the 2fa.
Never ever turn off 2fa i repeat never turn off 2fa.

Svelto

sr. member

Activity: 686

Merit: 257

Thank you for the information. This type of phishing emails really catch people off handed. Being excited, many will click on the link to check the wallet.

Better be safe and never click on link from email. Always use bookmark.

salihno71

sr. member

Activity: 420

Merit: 250

Whenever you receive a mail that you have received a payment you did not expect, that's already a huge red flag screaming scammers. Thank you for the heads-up.

akamit

hero member

Activity: 1498

Merit: 596

Thanks for the news.
It will really help blockchain users to become more alert during login.
I am also using blockchain, but I have never received such mails in my inbox. But I will be more careful from now on.

paolo099

full member

Activity: 224

Merit: 101

i can tell you one quick method to screw with them (i know a lot of mail-link-clicker even from bank where they do not own an account....):
if you clicked the link and you are entering your credential, do yourself a favour, do a mistake in the account and password.. yes, a couple of wrong letter/numbers.
Many times the website will log you in regardless, at that point, they've registered your credential but it will not work, so keep your eyes wide open, if by magic you are getting logged into a phishing site with inexistent credential you are safe (better be safe than sorry anyway).

Kolokoy

member

Activity: 196

Merit: 50

OMNI TOKEN PLATFORM FOR PAYMENTS

These phishing attacks were everywhere since Mozilla Firefox came from the wild. I used to create such a kind when friendster.com was kicking in the late 2000s.
But now antivirus are too intelligent to warn each page opened as if that a phishing then notifications will pop out. Use good antivirus if you can't think better AV I suggest Avast Free version.
Otherwise, if you do manual check then you must check the site before doing anything messy.

salihno71

sr. member

Activity: 420

Merit: 250

Same here. Lucky for me, i do not have an account on blockchain.info so i was suspicious right away what is this all about. It looks legit but you can notice additional letter f in the url. Also got the similar mails from coinbase.

pekingcoepo

full member

Activity: 448

Merit: 100

Quote from: Yovas on September 25, 2017, 06:47:48 PM

Hi guys.
I just wanted to let the public know that there's currently a phishing attack going on targeting blockchain.info.
I just got an email supposedly from blockchain.info stating that my wallet was credited with 0.54798743 BTC. So I quickly noticed that email address was not under blockchain.info domain. However, the email template layout was very similar to that of blockchain.info.
Also, when I clicked on the link, to check my wallet, the site I was redirected, had the same layout as blockchian.info.
Check it out.

If you look carefully, even though it looks very legit, their domain is https://blockchfain.info
There's that one letter 'F' that is hard to notice. Also, they seem to have all the other pages hosted by the actual blockchain.info.

Just keep an eye out for that and be careful before logging in if you get a similar email to this.
Also, another easy flag to identifying the REAL blockchain should be their SSL certificate. The real blockchain SLL certificate looks like the following

Good luck

Info is very helpful for all of us, now we must be more careful in opening a web address let alone our wallets let alone addressed to our email because Blockchain.info rarely send email to us. We recommend that our address bookmarks be completely valid so we avoid phishing activity.

Ucy

sr. member

Activity: 2674

Merit: 403

Compare rates on different exchanges & swap.

Got similar emails from Coinbase but never bothered clicking further because I know have never given out my coinbase address nor expecting Bitcoin from coinbase. I easily assumed it was phishing attacks and moved on.

Guess having 2FA enabled saves a lots of people from being successfully attacked.

claudiotiego

full member

Activity: 630

Merit: 154

Corl - Growth Capital on the Blockchain

This days we are seeing a lot of phishing sites and most of them trying to fake web wallets sites. We need to pay attention when we going to fill our passwords and private keys. It's recommended to bookmark the wallets sites and only access them through these links.

Snaic

full member

Activity: 658

Merit: 102

Scammers will always invent different ways to attack our savings in digital wallets. Therefore, before you enter the sites that store wallets, you really need to always make sure of its original name. Such warnings are very useful, because they help to recognize fraud and not succumb to their tricks.

criz2fer

full member

Activity: 672

Merit: 127

This is too alarming. Just like myetherwallet, there are lot of fake site that are out there today. Becarefull on every site that you are entering to secure mostly of your assets.

The One

legendary

Activity: 924

Merit: 1000

No one should click on any email links at all. Always type in the address yourself.

jokerlu

full member

Activity: 518

Merit: 102

phishing will always be a means of attack to take advantage of the system.

Topic: Blockchain.info PHISHING ATTACK (Read 779 times)